I see this in my JBoss log and would like to understand the difference. The second case is simple. There is a group called "PortalPrincipal" and there is 1 member in that group called "jonathan". However, what does the first case mean (where this is a square bracket). This seems to cause an issue as one of my users doesn't have the first line and authorization fails for them.