The way JBoss does users is the same as Tomcat... a users.properties file. If you look on the JBoss site for the tutorial on how to secure your JBoss installation, you will get a pretty good feel for how to set up users.
--Dale--
Seriously? That's what you're going with? I prefer this tiny ad:
