This script is called implicitly by catalina.bat/sh and might look like this for UNIX :.
The STS endpoint has to be configured to use the JAAS LoginModule which is accomplished by the JAASUsernameTokenValidator.