Hi, I'm kind of new to the JBoss / JBPM world. I successfully managed to set up the Getting Started version. I also managed to set up authentication with Active Directory. Here's my config: <application-policy name = "jbpm"> | <authentication> | <login-module code="org.jboss.security.auth.spi.LdapLoginModule" flag="required"> | <module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option> | <module-option name="java.naming.provider.url">ldap://chbasvvm703/</module-option> | <module-option name="java.naming.security.authentication">simple</module-option> | <module-option name="principalDNPrefix"></module-option> | <module-option name="uidAttributeID">sAMAccountName</module-option> | <module-option name=&quot;principalDNSuffix&quot;&gt;(a)hapimag.local&lt;/module-option&gt; | <module-option name="baseCtxDN">OU=HAPIMAG,DC=hapimag,DC=local</module-option> | <module-option name="rolesCtxDN">OU=HAPIMAG,DC=hapimag,DC=local</module-option> | <module-option name="roleAttributeID">memberOf</module-option> | <module-option name="roleNameAttributeID">cn</module-option> | <module-option name="roleAttributeIsDN">true</module-option> | <module-option name="roleRecursion">-1</module-option> | <module-option name="searchTimeLimit">5000</module-option> | <module-option name="searchScope">SUBTREE_SCOPE</module-option> | </login-module> | </authentication> | </application-policy> I now want to create a process. I did just like I was told in the "Getting started" guide and created the process states, transitions and swimlanes, then creating tasks, add the required properties and fields, etc. The guide tells me to use something like "user(bert)" as assignment expression for the swimlane. Unfortunately, even if bert is a user in my Active Directory and has the appropriate roles, JBpm tells me: "Couldn't resolve assignment expression 'user(bert)'." I read the chapter "11.3 Assignement" from the manual (http://docs.jboss.com/jbpm/v3/userguide/taskmanagement.html) but I did not get it. Do I have to code my own identity module or what are my next steps? What I thought about when I started was that I could use something like "role(it-people)" and that jBpm would read from Active Directory and do the assignment. Could anyone please point me into the right direction! Thanks in advance Belthazor View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4050038#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...