[SourceID SSO-dev] JAAS Interface to sourceid

I'd like to purpose the question:  How hard would it be to us the JAAS 
interface for authentication?  I'm more interested in federating the 
identity of a user across an intranet where JAAS is the user interface and 
the user id and artifacts (if I understand how artifacts are meant to be 
used) are presented as java.security.Principal instances contained within 
a Subject.

After a brief run through of the Liberty Alliance Protocol docs, it seems 
this scenario fits the LECP Profile scenario  This would require having 
identity providers and service provider interfaces that are decoupled from 
the web presentation layer (the JSP layer).  The servlets would have to 
morph to the LECP profile as well as the HTTP-Artifact (as I understand is 
the current implementation).

The User Client role and the Service Provider role would be in the same VM 
if JAAS is the interface.  A callback handler would need to be put into 
place for each of the security profiles. 

With this in consideration, where would be a good place to start?  The 
LECP user agent seems to be the most logical because it doesn't exist. How 
much work would it take to get the SP and IDP to understand the LECP 
protocol?

TIA,
Noah