Yep, this is exactely the answer to your question how to rip it out. It does not answer the probably next question on how to implement your own... Relying on the appserver for logging in etc... is indeed simple. The identity component does a little more. It is used in the default assignment expressions. So if you delete it, you have to build assignment handlers if things are needed OR implement your own identity component with the same api as the jbpm identity component and activate it in some way (I have no idea how to) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3961128#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...