You need to create/configure login module that will authenticate you towards jBPM data base or any other authentication store of your choice. If you select option two, you should provide custom identity service implementation too to inform jBPM runtime how to fetch user and group information.
HTH