Hi, in the scope of GateIn 3.7 we want to introduce a new feature that is related to the organization service. It will be implemented partly in Core and also in PicketLink organization service implementation. The current behavior and changes we want to implement are documented here : https://community.jboss.org/wiki/SupportForWildcardMembershipType We can discuss here any concern about this feature. cheers Julien