Hi Scott,
It's a big question. Here is the very good link for the nice article from O'Reilly,
http://www.onjava.com/pub/a/onjava/2001/08/06/webform.html I have found 'Form based' authentication (aka container authentication) is very useful in single sign-on, where you can access all the applications installed on the container with one user id.
Thanks