When using components such as PrimeFaces' autocomplete form, it is necessary to run a query based on an incomplete String. The query "SELECT U FROM CustomUserEntity U WHERE U.loginName LIKE :loginName%" would return a list of users whose loginName match the current (most likely incomplete) query String for use in recommending the final user. Currently, PicketLink only has the ability to query based on a complete String. There should be a way to create queries with partial Strings that can be used to search through PicketLink's identityTypes.