Acegi Security is a powerful, flexible security solution for enterprise software, with a particular emphasis on applications that use Spring. Using Acegi Security provides your applications with comprehensive authentication, authorization, instance-based access control, channel security and human user detection capabilities.
I downloaded acegi version 1.0.6 from http://www.acegisecurity.org/downloads.html
Extract the zip to a temp directory -
Extract the acegi-security-samples-tutorial-1.0.6.war to a temp directory
Copy this directory structure to OC4J e.g. to d:\oc4j
Update OC4J default-web-site.xml
Update OC4J application.xml
More info - http://www.acegisecurity.org/