I have taken a look at the Seam Identity API and need to have a look at the portal identity API yet. I have fair idea of how the API will look like.

One area that I need to focus on is the representation of roles and groups.

To get the context of this thread, please look at:
http://www.jboss.com/index.html?module=bb&op=viewtopic&t=121030