is the identity management component for jBPM.
The main classes can be found in package org.jbpm.identity which form a domain model for organisational information like users, groups and permissions.
Additional packages take care of persistence, JAAS integration and java assignment.