16.3. Security Realms

ManagementRealm stores authentication information for the Management API, which provides the functionality for the Management CLI and web-based Management Console. It provides an authentication system for managing JBoss EAP 6 itself. You could also use the ManagementRealm if your application needed to authenticate with the same business rules you use for the Management API.

ApplicationRealm stores user, password, and role information for Web Applications and EJBs.

REALM-users.properties stores usernames and hashed passwords.

REALM-roles.properties stores user-to-role mappings.

mgmt-groups.properties stores user-to-group mapping file for ManagementRealm. Only used when Role-based Access Control (RBAC) is enabled.