The way JBoss does users is the same as Tomcat... a users.properties file. If you look on the JBoss site for the tutorial on how to secure your JBoss installation, you will get a pretty good feel for how to set up users.
--Dale--
Watchya got in that poodle gun? Anything for me? Or this tiny ad?
a bit of art, as a gift, the permaculture playing cards