JAAS is the Java Authentication and Authorization Service found in the JRE (1.4+).
The Java Authentication and Authorization Service (JAAS) is a Java security framework for user-centric security to augment the java code-based security. Since JRE 1.4, JAAS has been integrated with the jre - previously JAAS was supplied as an extension library by Sun.
The main goal of JAAS is to separate the concerns of user authentication so that they may be managed independently. While the former authentication mechanism contained information about where the code originated from and who signed that code, JAAS adds a marker about who runs the code.
By extending the verification vectors JAAS extends the security architecture for Java applications that require authentication and authorization modules.
Useful Links:
