The way JBoss does users is the same as Tomcat... a users.properties file. If you look on the JBoss site for the tutorial on how to secure your JBoss installation, you will get a pretty good feel for how to set up users.
--Dale--
And then the entire population worshiped me like unto a god. Well, me and this tiny ad: