How to assign a prefedifined role to a user after SPNEGO auth in JBoss EAP ?

Issue

• Need to use authorization to assign roles from a properties file
• Need to assign a "default" role to all users that have been authenticated with SPNEGO and map it to multiple roles assigned to a given user
• Is there a login module which can assign and map a predefined, default/constant role for all users?