The book does compare J2EE "Declarative" and "Programmatic" security options and also their limitations. The book discusses exclusively on Single sign-on and associated standards such as SAML and Liberty in "Identity Management Standards & Technologies" (Chapter 7).