I haven't put much thought into that. The idea of the map was to include the login modules (and other modules such as authorization, mapping, et cetera) that we provide as part of AS. Other login modules (customer's modules for instance) would be mapped using FQCN but before this can work we need to figure out how to load those classes with the new module classloader since LoginContext (part of JRE) will try and load the class using the TCCL.