WildFly and Java EE security configuration with Elytron

  1. You need to configure the basic type of authentication in the server configuration but not in web.xml
  2. The name of realm is not important. It is just displayed in the browser when you get the 401 Unauthorized (the WWW-Authenticate header). If the ream name is configured in web.xml it is used, otherwise the one from the server config is used.