It is done by replacing the identity service in the config by one of your own. This is not yet documented. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4253415#4253415 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4253415