Currently JBoss Cache used for Picketlink IDM is not aware of JTA. This could mean for example, that rollback of JTA transaction won't rollback JBoss Cache records, added during this JTA transaction.

Example steps to reproduce:

• Configure EPP for JTA according to instructions https://community.jboss.org/wiki/JTAIntegrationWithGateIn
• Login as john, Go to OrganizationManagementPortlet and try to add new group. Type some name of new group (for example "newgroup") and click "Save". Now what is done is:
  • New JTA transaction is started
  • New group is created into Picketlink IDM database
  • Picketlink IDM sends query for obtain new list of groups. New group "mynewgroup" is included in the query result. And result groups are saved into Picketlink IDM cache.
  • Now let's say that JTA transaction is rolled-back because of timeout. All changes related to "mynewgroup" are cleaned from DB, but items in PL IDM JBoss cache are not rolled-back but they are still here. So there is still record about the group "mynewgroup".