Just saw that today, might be interesting to include into the list of projects making use of PicketLink. http://errai-blog.blogspot.ch/2013/05/security.html - abstractj