Hi Stain,
I'm also working on migration, weblogic to JBoss 5 and struggling with the same issue on how to migrate my user/group map to security role, which happens to be WEB-SECURITY-ROLE.
I'm eagr to know if you have found a way.
In weblogic internally it use ldap to map user/groups to Security Role.
Looking forward for your response\.
Ashutosh