Hmm, I'm now thinking I may just need to implement an Enroler that will retrieve the GrantedAuthorities, iterate over them and create a Role for every GrantedAuthority...
------------------------------------------------------ http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=3060174