I found something in the configuration.
You can use <application-mananged-security/> within the *-ds.xml (see generic-ds.xml) docs/examples/jca.
You are able to use getConnectio(use,psw) within the application. I'm not sure whether this is practicable with JPA ;-)