There is one for LDAP using Apache DS, by default.

https://github.com/jboss-developer/jboss-picketlink-quickstarts/tree/master/picketlink-authorization-idm-ldap

Change to MSAD is just a matter of looking the docs. Users are already doing that.