My web application also interacts with and iPad client.
I have written programmatic authentication for iPad client and regular web interaction use Form based authentication.
For iPad client, i m returning jsessionid token, when they successfully authenticate. My problem is how do i remember the iPad user like regular web user for next subsequent request? iPad user has jsession token with them.

LoginStatus loginStatus = springSecurityLoginService.login(username, password);
HttpSession session = request.getSession();
String sessionId = session.getId();

Map<String, String> oMap = new HashMap<String, String>();
oMap.put("jsessionid", sessionId);
mDv.addObject("oMap", sessionId);

Above is code snippet from my app.

springSecurityLoginService.login(username, password); will create Spring security context.

-Kindly help!!