For the curious, I've had the recent misfortune of working with JBOSS at work; this sounds identical to how it provides form-based authentication.

For the curious: http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureAWebApplicati...