Okay, I was able to make it work. There is one thing not mentionned anywhere and it's crucial to do it before it can work. You have to activate the SynchronizingLoginModule in login-config.xml. <login-module code="org.jboss.portal.identity.auth.SynchronizingLoginModule" flag="optional"> | <module-option name="synchronizeIdentity">true</module-option> | <module-option name="synchronizeRoles">true</module-option> | <module-option name="additionalRole">Authenticated</module-option> | <module-option name="defaultAssignedRole">User</module-option> | <module-option name="userModuleJNDIName">java:/portal/UserModule</module-option> | <module-option name="roleModuleJNDIName">java:/portal/RoleModule</module-option> | <module-option name="membershipModuleJNDIName">java:/portal/MembershipModule</module-option> | <module-option name="userProfileModuleJNDIName">java:/portal/UserProfileModule</module-option> | </login-module> View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068847#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...