From www.jspwiki.org See : ActiveDirectoryIntegration Try this in the server.xml with your ldap-settings : <Realm className=”org.apache.catalina.realm.JNDIRealm” debug=”99″ connectionURL=”ldap://youradsserver:389″ alternateURL=”ldap://youradsserver:389″ userRoleName=”member” userBase=”cn=Users,dc=yourdomain” userPattern=”cn={0},cn=Users,dc=yourdomain” roleBase=”cn=Users,dc=yourdomain” roleName=”cn” roleSearch=”(member={0})” roleSubtree=”false” userSubtree=”true”/> And define the role in the tomcat-users.xml and the web.xml of your application Edit webapp_root/WEB_INF/Web.xml file as follows: <security-constraint> <display-name>your web app display name</display-name> <web-resource-collection> <web-resource-name>Protected Area</web-resource-name> <url-pattern>*.jsp</url-pattern> … Read more