You have two best ways to create a process instance: once is embedd jBPM inside the portlet.. so you will not do a remote call, and the other possible solution is to do a REST call to the process server and create an instance from there. As far as I know you don't requires authentication for that service, but if you require authenticantion that can be easily implemented.
Cheers