Index: oak-core/src/main/java/org/apache/jackrabbit/oak/core/ContentRepositoryImpl.java
===================================================================
--- oak-core/src/main/java/org/apache/jackrabbit/oak/core/ContentRepositoryImpl.java	(revision 1545591)
+++ oak-core/src/main/java/org/apache/jackrabbit/oak/core/ContentRepositoryImpl.java	(revision )
@@ -18,8 +18,8 @@
 
 import java.io.IOException;
 import java.io.InputStream;
+import java.util.Map;
 import java.util.Properties;
-
 import javax.annotation.Nonnull;
 import javax.annotation.Nullable;
 import javax.jcr.Credentials;
@@ -30,6 +30,8 @@
 import javax.jcr.ValueFactory;
 import javax.security.auth.login.LoginException;
 
+import com.google.common.collect.Maps;
+import org.apache.jackrabbit.api.JackrabbitRepository;
 import org.apache.jackrabbit.commons.SimpleValueFactory;
 import org.apache.jackrabbit.oak.api.ContentRepository;
 import org.apache.jackrabbit.oak.api.ContentSession;
@@ -38,10 +40,14 @@
 import org.apache.jackrabbit.oak.spi.commit.CommitHook;
 import org.apache.jackrabbit.oak.spi.query.CompositeQueryIndexProvider;
 import org.apache.jackrabbit.oak.spi.query.QueryIndexProvider;
+import org.apache.jackrabbit.oak.spi.security.SecurityConfiguration;
 import org.apache.jackrabbit.oak.spi.security.SecurityProvider;
 import org.apache.jackrabbit.oak.spi.security.authentication.AuthenticationConfiguration;
 import org.apache.jackrabbit.oak.spi.security.authentication.LoginContext;
 import org.apache.jackrabbit.oak.spi.security.authentication.LoginContextProvider;
+import org.apache.jackrabbit.oak.spi.security.principal.PrincipalConfiguration;
+import org.apache.jackrabbit.oak.spi.security.privilege.PrivilegeConfiguration;
+import org.apache.jackrabbit.oak.spi.security.user.UserConfiguration;
 import org.apache.jackrabbit.oak.spi.state.NodeStore;
 import org.apache.jackrabbit.oak.util.GenericDescriptors;
 
@@ -174,7 +180,8 @@
         final ValueFactory valueFactory = new SimpleValueFactory();
         final Value trueValue = valueFactory.createValue(true);
         final Value falseValue = valueFactory.createValue(false);
-        return new GenericDescriptors()
+
+        GenericDescriptors gd = new GenericDescriptors()
                 .put(IDENTIFIER_STABILITY, valueFactory.createValue(Repository.IDENTIFIER_STABILITY_METHOD_DURATION), true, true)
                 .put(LEVEL_1_SUPPORTED, trueValue, true, true)
                 .put(LEVEL_2_SUPPORTED, trueValue, true, true)
@@ -245,7 +252,23 @@
                 .put(SPEC_NAME_DESC, valueFactory.createValue("Content Repository for Java Technology API"), true, true)
                 .put(SPEC_VERSION_DESC, valueFactory.createValue("2.0"), true, true)
                 .put(WRITE_SUPPORTED, trueValue, true, true);
+        // jackrabbit API specific descriptors
+        Map<String, Value> jrDescriptors = Maps.newHashMap();
+        gd.put(JackrabbitRepository.OPTION_USER_MANAGEMENT_SUPPORTED, falseValue, true, false);
+        gd.put(JackrabbitRepository.OPTION_PRINCIPAL_MANAGEMENT_SUPPORTED, falseValue, true, false);
+        gd.put(JackrabbitRepository.OPTION_PRIVILEGE_MANAGEMENT_SUPPORTED, falseValue, true, false);
+        for (SecurityConfiguration sc : securityProvider.getConfigurations()) {
+            String name = sc.getName();
+            if (UserConfiguration.NAME.equals(name)) {
+                gd.put(JackrabbitRepository.OPTION_USER_MANAGEMENT_SUPPORTED, trueValue, true, false);
+            } else if (PrincipalConfiguration.NAME.equals(name)) {
+                gd.put(JackrabbitRepository.OPTION_PRINCIPAL_MANAGEMENT_SUPPORTED, trueValue, true, false);
+            } else if (PrivilegeConfiguration.NAME.equals(name)) {
+                gd.put(JackrabbitRepository.OPTION_PRIVILEGE_MANAGEMENT_SUPPORTED, trueValue, true, false);
-    }
+            }
+        }
+        return gd;
+    }
 
     /**
      * Checks if this repository supports same name node and properties. currently this is tied to the underlying
Index: oak-parent/pom.xml
===================================================================
--- oak-parent/pom.xml	(revision 1545591)
+++ oak-parent/pom.xml	(revision )
@@ -40,7 +40,7 @@
     <project.reporting.outputEncoding>
       ${project.build.sourceEncoding}
     </project.reporting.outputEncoding>
-    <jackrabbit.version>2.7.2</jackrabbit.version>
+    <jackrabbit.version>2.8-SNAPSHOT</jackrabbit.version>
     <mongo.host>127.0.0.1</mongo.host>
     <mongo.port>27017</mongo.port>
     <mongo.db>MongoMKDB</mongo.db>