There is also some information on using the Application Server to secure applications in the Java EE Tutorial (http://docs.sun.com/app/docs/doc/819-3669), Chapters 28-30.
Please let us know if there is specific information you are looking for but unable to find so that we can consider adding to our docs in the next release.
[Message sent by forum member 'carson' (carson)]