jBPM should handle just and ID. In theory you already have all the user information in a different storage: LDAP, Service Directory, your own database. Unless you start a project from the scratch and the company don't have a user identity storage you can create your own tables and handle them there. jBPM will just persist an ID in order to delegate the identity management.
Greetings.