How to implement multiple user Login using sessions in JSF

I am new to JSF, I am working on web project.

1. I want to implement Login system, where multiple users can Login. Just like Facebook or any other website where you give username and password and access you account.

2. The other thing I want is, if a user is not logged in and he wants to access a (restricted) url he must be redirected to Login page.

I do not even know where to start, however I know how to do 'session tracking' in Servlet.

can anyone suggest me good example or help me by a sample code.

As far as I know JSF has no special authentication function.

• write your own authentication. Only suitable for very simple scenarios (no role based authorization, etc.)
  1. Write a Filter to control page access (check your session. If the user isn't logged in, redirect him to login page)
  2. Build a login page, check users credentials and set the login flag
  3. Build a logout method to erase the flag inside the users session
• use container manged security Java EE 5 Tutorial
• use third party library like Apache Shiro or Spring Security