PicketBox has a powerful mapping framework as highlighted in here.
Particularly, the role mapping functionality is very important for access control decisions.
We have a select set of providers available.
I think it is very useful to extend the mapping providers we have with various combinations for databases and ldap servers.