Active Directory users can not sign into BPM Workspace

Or you get a 'user not authenticated' in the logs, with a valid AD user, create an organization as the administrator and assign all the AD users to it.

A user have to belong to a role, or an organization before access to Workspace is granted to a user.

Also don't forget to add the virtualize true in the security properties to allow SOA/BPM Suite to search across multiple security providers. This configuration can added in the /config/fmwconfig/jps-config.xml

<serviceInstance name="idstore.ldap"
  provider="idstore.ldap.provider">
   ............................
   <property name="virtualize" value="true"/>
   ..............................
</serviceInstance>