Chapter 10. The Security Subsystem

See Section 10.3.2.1, “About Deep Copy Subject Mode” for details about deep copy subject mode.

A security domain is a set of Java Authentication and Authorization Service (JAAS) declarative security configurations which one or more applications use to control authentication, authorization, auditing, and mapping. Three security domains are included by default: jboss-ejb-policy, jboss-web-policy, and other. You can create as many security domains as you need to accommodate your application requirements.