That's great bdaw!! I would like to carry over roles from the LDAP, but since the Portal may have new roles I was going with the use-case of moving all the roles to the portal-oriented-DB. With that last option for the SynchronizingLdapLoginModule: - authenticate against LDAP + synchronize ldap user into portal DB + assign such user to specified portal role + try to synchronize all the roles obtained for such user from LDAP into portal DB That is perfect for my use case, and probably other people with similar scenarios. I look forward to checking out the Beta release (pending the date), or may grab from SVN if I have an opportunity. Do you have a direct-sample related to the last option for the login-config.xml and related portal identity-* configs (tieing the two-to-three configs together is part of the challenge)? p.s. I really like the idea of re-using my existing login modules instead of re-setting it up in the portal identity files, thank you :-) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4018925#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...