I have a theory that it could be done with a custom JCA LoginModule but I haven't looked into it more closely (and it's for the JCA forum)
Reply to this message by going to Community
Start a new discussion in Datasource Configuration at Community