An overview of Jetspeed-2 security architecture is available here .
Jetspeed-2 provides a LoginModule implementation that leverage the security SPI model to interact with multiple authentication mechanisms.
Jetspeed authentication configuration is managed by the security-spi-atn.xml located in the portal application assembly directory. Jetspeed-2 supports authentication against:
Jetspeed-2 provides a relational database backed JAAS policy implementation.
Jetspeed-2 authorization implementation relies on a SPI model as well and is configured through security-spi-atz.xml.
Configuration details are available here.