JSR-000058 Java TM 2 Platform, Enterprise Edition 1.3 Specification

3.3.11.2 Application Client
Application clients (described in detail in Chapter 9) are client programs that
may directly (i.e., without the help of a web browser and without traversing a
web server) interact with enterprise beans. Of course, application clients may
also access web resources.
Application clients, like the other J2EE application component types, execute in
a managed environment that is provided by an appropriate container.
Application clients are expected to have access to a graphical display and input
device and can expect to communicate with a human user.
Application clients are used to authenticate the end user to the J2EE platform,
for instance when accessing protected web resources or enterprise beans.
3.3.11.3 Lazy Authentication
There is a cost associated with authentication. For example, an authentication
process may require exchanging multiple messages across the network.
Therefore, it is desirable to perform authentication only when necessary (i.e.,
lazy authentication). With lazy authentication, an end user is not required to
authenticate until the user tries to access a protected resource.
Lazy authentication can be used by first tier clients (applets, application clients)
when they access protected resources that require authentication. When a user
tries to access such a resource, the user can be asked to provide the needed
authentication data. If a user is successfully authenticated, the user is allowed to
access the resource.
3-14 Java 2 Platform Enterprise Edition, v1.3 Proposed Final Draft (Sun Microsystems, Inc.)