I don't believe the realms are really related to the jdbc. I believe its an app server or web server layer thing. I also think the passwords are stored in XML files in the OS when using tomcat or more app servers. -------------- Original message -------------- > All- > > I am trying to figure how the JDBC Realm works in Tomcat and if Oracle > App Server does something similar. I want to use Tomcat first to > understand the authentication process and then move to the Oracle App > Server. > > Correct me if I am wrong, how I understand it the JDBC Realm is just an > environment where the usernames, passwords, and roles are kept in