It happens to everyone time to time :) I updated blog post like you suggested. I think that you shouldn't have many problems with MSAD. The one I'm aware of is the password change (can be done by portal users). As far as I know MSAD requires you to use SSL connection to let you update related attribute. I haven't tested user/roles membership management with MSAD so it would be nice if you try. But as far as you don't use portal to assign roles, but rely on LDAP server tools it should be fine. If you succeed could you create a wiki page describing your configuration? This would be a good contribution. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4063417#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...