Tomcat is an servlets container. With tomcatspnego, users working on a Windows client OS and IE or Firefox, can be silently authenticated to a Tomcat running on a Windows server.
You can define autorizations to tomcat's applications with domain's groups.