As a follow up, I have a Java webapp where users have to log in. I'm hoping to use JForum as an add on to this, but I don't want users to have to log in twice. I could use the JForum "users" table as the master users table (ie. migrate my existing users table), but what do I need to set in the session to fool JForum into thinking that the user has also logged into JForum? What attributes does your "UserSession" have? Is that the best way of doing this, or do you have any other suggestions?