 <p>Having previously worked with Spring's HTTP invoker remoting, I can say that there's built-in support for passing Spring security tokens. I would assume that Spring's RMI solution also has this feature, but you'd need to dig around in Spring's RMI classes/javadoc to confirm this.</p> <p>On the client side, you'll need the <code>ContextPropagatingRemoteInvocationFactory</code> class, which will automatically include a Spring security context on the remote invocation.</p>