Fediz configuration for Spring Security 2.0 ------------------------------------------- The Servlet Container installation doesn't have to be updated before a Web Application can be deployed. It's recommended to use HTTPS to avoid sending tokens/cookies in clear text on the network. Please check your Servlet Container documentation how to set it up. Please check the Spring Security 2 example to get more information how to deploy a web application using Spring Security. The following wiki page explains how to configure the Fediz Spring plugin in your application: http://cxf.apache.org/fediz-spring-2.html The following wiki page explains the fediz configuration which is Container independent: http://cxf.apache.org/fediz-configuration.html Note: The Fediz Spring plugin is packaged with your application. Thus it's recommended to package it with the application using Apache Maven.