Hi,
I refered to
http://cwiki.apache.org/WICKET/spring-security-and-wicket-auth-roles.htmland
wicket-spring example web application and it works.
Now my company has a single-sign on web page already, like
https:///login.cgi.
This SSO web page will set cookies and return a token after login.
I'
Looks like more of a spring-security question that a Wicket one : try
the spring-security forums. I suggest you have a look at this :
http://forum.springsource.org/showthread.php?t=52377
And this nice example up to date (but it's for wicket-swarn) :
http://out-println.blogspot.com/2009/02/wicket