Просто тест (кривонький) с JAAS аутентификацией для сферы.

ComplexServiceImplTest.java

@Test
    public void testBaseCalls() throws Exception {

        LoginContext lc = null;
        try {
                lc = new LoginContext("WSLogin", new WSCallbackHandlerImpl("gcd_admin", "o9p0[-]="));
        } catch (LoginException le) {
            Assert.fail("Cannot create LoginContext. " + le.getMessage());
        } catch (SecurityException se) {
            Assert.fail("Cannot create LoginContext." + se.getMessage());
        }
        try {
            lc.login();
            Subject subject = lc.getSubject();
            WSSubject.setRunAsSubject(subject);
            InitialContext context = new InitialContext();
            complexServiceLocal = (ComplexServiceLocal) context.lookup("ejblocal:test_complexService/test.jar/ComplexServiceImpl#ru.brbpm.lecm.server.samples.ComplexServiceLocal");

            String actual = complexServiceLocal.helloService();
            Assert.assertEquals("ComplexServiceImpl", actual);
            Assert.assertEquals("InnerServiceImpl", complexServiceLocal.helloInnerService());

            String userPrincipal = complexServiceLocal.getUserPrincipal();
            Assert.assertNotSame("null", userPrincipal);

            String innerServiceUserPrincipal = complexServiceLocal.getInnerServiceUserPrincipal();
            Assert.assertNotSame("null", innerServiceUserPrincipal);

            String ceUserPrincipal = complexServiceLocal.getInnerServiceCeUserPrincipal();
            Assert.assertNotSame("null", ceUserPrincipal);

            complexServiceLocal.runInnerServiceStuffMethod();


        } catch (LoginException le) {
            Assert.fail("Fails to create Subject. " + le.getMessage());
        } finally {
            lc.logout();
        }