What security-related information about an authenticated client is available from inside the web service endpoint implementation class?
Which interface should you implement when re-factoring your beans to successfully deploy in a cluster supporting session fail-over?