I agree that
you should have a SD for the "Create Profile" usecase,
but the login could be done by the web-container if you have
JAAS configured with e.g. form based authentication.
In this case I see no necessity for having a sd for the login
usecase because the container is doing it by specification.
what do you mean?
regards
Alireza