anonymous wrote : "Provisioning" shall take place as "pull service" at the portal side, which periodically requests the entitlement changes and updates the portals data. | Therefore the portals database can/shall be used (in order to have just one server/service). I'm not sure if I understand. You want to stay with using DB for user/role data storage but have the posibility to provision it with users using LDAP as a source time to time? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3981635#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...