Apache Shiro "with JSF 2.0" ! How does it go?
Deluan Quintão has provided a good solution for Shiro and JSF that has been received well by the Shiro community:
http://techbeats.deluan.com/apache-shiro-tags-for-jsffacelets
Also note that Shiro can use Cassandra as a back-end to enable Servlet container-independent session clustering (You will need to write a CassandraSessionDAO and plug it in to Shiro's configuration). See http://shiro.apache.org/session-management.html for more.