You can set up SSO with JasperServer. Have a look at the wiki http://jasperforge.org/plugins/mwiki/index.php/Jasperserver/AuthenticationConfiguration (Acegi security became Spring Security with JasperServer 3.7) and the Authentication Cookbook http://www.jaspersoft.com/jaspersoft-authentication-cookbook-jasperserver. if you authenticate against an external database or service, a user will automatically be created and maintained in JasperServer, so its roles and permissions can be managed. Are the users in your Oracle database? Have a look at the Spring Security DaoAuthenticationProvider, which uses a database connection and query you provide. http://static.springsource.org/spring-security/site/docs/2.0.x/apidocs/org/springframework/security/providers/dao/DaoAuthenticationProvider.html Sherman Jaspersoft