I am not good at this, but the link that i mentioned in my earlier posts mentions that you can specify additional modules properties which includes the rolesCtxDN (i guess, that's what you are looking for). Here's an extract from the same: anonymous wrote : | rolesCtxDN : The fixed distinguished name to the context to search for user roles. Consider that this is not the Distinguished Name of where the actual roles are; rather, this is the DN of where the objects containing the user roles are (e.g. for active directory, this is the DN where the user account is) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992209#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...