I have created a custom security provider but am having trouble with it finding and using 3rd party jars. My custom security provider uses the commons-httpclient.jar to make HTTPS servlet calls to an existing J2EE application for authentication/authorization. I am not sure where to place the commons-httpclient.jar and the other necessary jars so that the security provider jar can use them. I am out of ideas. Please help...Thanks.