You can API such as   taskSession.addUser(user) and taskSession.addGroup(group)  to add users or you can modify the tables such as ORGANIZATIONALENTITY if you want.

https://hudson.jboss.org/jenkins/job/jBPM5/lastSuccessfulBuild/artifact/jbpm-distribution/target/jbpm-5.1-SNAPSHOT-docs-build/jbpm-docs/html_single/index.html

I think it would be supported in next version, and it is currently in master. It is a callback interface where you can integrate with your Identity Management System. I did not try it yet:

https://issues.jboss.org/browse/JBPM-3276

When I had to make it, I used the methods that bpmn2user suggested to make mantain human task tables and my identity management tables in sync.

The users and passwords you saw I think they are from jbpm console. But in Human Tasks tables, you don't store passwords, only users and groups ids.

Regards,

Demian

Hi Nat, as Demian mentioned, we added a user/group callback interface that users can implement and hook to their  identity management (LDAP, Database, etc). The interface is very simple:

package org.jbpm.task.service;

import java.util.List;

public interface UserGroupCallback {

    boolean existsUser(String userId);

    boolean existsGroup(String groupId);

    List<String> getGroupsForUser(String userId);

}

(https://github.com/droolsjbpm/jbpm/blob/master/jbpm-human-task/src/main/java/org/jbpm/task/service/UserGroupCallback.java)

The task service then contacts this user/group callback service whenever necessary. Since this has been added fairly recently we are still working on creating examples and updating the docs. Should be done with that really soon.

Hope this helps.