From the InstallConfigGuideCS.pdf of the Autovue documentation, it does not state Glassfish as a supported server. Can Oracle supply a best practices as to IIS/Glassfish integration to maintain authorization between servers. It mentions using ISAPI extensions. Are they referencing the AJP13 ISAPI module for Tomcat or do they provide a custom one for Glassfish.
You will definitively get more help by asking the glassfish guys directly
But from what I know, and this is by no means a recommendation
you are better with IIS7 and using ARR (Application Request Routing) see http://www.iis.net/download/ApplicationRequestRouting
Cookies should be forwarded intact (of course make sure you disable the caching for it otherwise you will get obsolete JSESSIONID)