We are currently working on a callback interface which will allow you to use to write your own implementations (for example LDAP) to resolve users groups and their relationships. You can always contact me via IRC channel #jbpm (irc.codehaus.org). My irc handle is tsurdilo.