Darran, ping me directly if you need any kind of assistance for this from the portal side. We are more than open to add tweaks you need into portal codebase. From what you say it seems we need to have separate version of IdentityLoginModule that extends LDAPExtUserModuleImpl to perform auth against MSAD. I think it is fine to have such version but as it will be maintained by us we'll need to have a way to test it. Do you have any kind of automation tests for JBoss Negotiation that we could reuse? Even if not I will need to cach up on setting up JBoss Negotiation so we can make it part of our QA in the future. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4231797#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...