In web.xml, specify the settings for Web container-based authentication. The table below shows the definitions used in DD files.

Table 6-3 Definitions used in DD files for Web container-based authentication

Specified tag	Setting
<security-constraint> tag	Specifies the security restrictions.
<login-config>-<auth-method> tag	Specifies the method for Web container-based authentication.

You can use web.xml to configure the settings for a Web application before deploying the application on the J2EE server. You can use an attributes file to configure the same settings for a Web application already deployed on the J2EE server. For details about the settings in attributes files, see 6.2.3 Setup in an execution environment (J2EE application setup).