Index: oak-core/src/main/java/org/apache/jackrabbit/oak/spi/security/authentication/OpenAuthenticationConfiguration.java
===================================================================
--- oak-core/src/main/java/org/apache/jackrabbit/oak/spi/security/authentication/OpenAuthenticationConfiguration.java	(revision 1521224)
+++ oak-core/src/main/java/org/apache/jackrabbit/oak/spi/security/authentication/OpenAuthenticationConfiguration.java	(working copy)
@@ -16,10 +16,16 @@
  */
 package org.apache.jackrabbit.oak.spi.security.authentication;
 
+import java.security.Principal;
+import java.util.HashSet;
+import java.util.Set;
+
 import javax.annotation.Nonnull;
 import javax.jcr.Credentials;
+import javax.jcr.SimpleCredentials;
 import javax.security.auth.Subject;
 
+import org.apache.jackrabbit.oak.api.AuthInfo;
 import org.apache.jackrabbit.oak.api.ContentRepository;
 import org.apache.jackrabbit.oak.api.Root;
 import org.apache.jackrabbit.oak.spi.security.SecurityConfiguration;
@@ -45,6 +51,13 @@
                         Subject subject = new Subject();
                         if (credentials != null) {
                             subject.getPrivateCredentials().add(credentials);
+                            final Set<Principal> principals = new HashSet<Principal>();
+                            String userId = OpenAuthenticationConfiguration.class.getSimpleName() + "User";
+                            if(credentials instanceof SimpleCredentials) {
+                                userId = ((SimpleCredentials)credentials).getUserID();
+                            }
+                            final AuthInfo authInfo = new AuthInfoImpl(userId, null, principals);
+                            subject.getPublicCredentials().add(authInfo);
                         }
                         subject.setReadOnly();
                         return subject;