We need to have one unified api for identity (the portal identity api is a good start) for JEMS projects. Please forget about identity stores and other implementation details. The API should take into account aspects such as identity, roles (nested), groups etc. Now how this API maps to the domain of other application servers/containers is an implementation/integration aspect. This is IMHO. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4098408#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...