Fady, Locally I already have an ldap based identity management system (user, group, mail, role). Quite configurable. The jBPM core needs some changes tough I think where user/group/identity service should become interfaces in the core. This has some influence on the user/group hibernate configs so it is a little more work before I can demonstrate. But deriving from the portal would be even better. Maybe I have a quick look at this next week. I would not like to have to include the full portal, just for this. Maybe they (portal) or JBoss can split something off. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4136215#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...