1. add the following line in standalone.xml <security-domain name= "jaspi" cache-type= " default " > <authentication-jaspi> <login-module-stack name= "dummy" > <login-module code= "org.jboss.security.auth.spi.SimpleServerLoginModule" flag= "optional" /> </login-module-stack> <auth-module code= "org.wildfly.extension.undertow.security.jaspi.modules.HTTPSchemeServerAuthModule" /> </authentication-jaspi> </security-domain> 2. start EAP 3. deploy attached test.war 4. attach debugger and set break point default task-3[1] break org.jboss.security.auth.message.config.JBossServerAuthConfig:176 Replaced existing "org.jboss.security.auth.message.config.JBossServerAuthConfig:176" with "org.jboss.security.auth.message.config.JBossServerAuthConfig:176" default task-3[1] 5. access http://localhost:8080/test Breakpoint hit: "thread= default task-3" , org.jboss.security.auth.message.config.JBossServerAuthConfig.getAuthContext(), line=176 bci=404 default task-3[1] next > Step completed: "thread= default task-3" , org.jboss.security.auth.message.config.JBossServerAuthConfig.getAuthContext(), line=177 bci=422 default task-3[1] next > Step completed: "thread= default task-3" , org.jboss.security.auth.message.config.JBossServerAuthConfig.getAuthContext(), line=178 bci=435 default task-3[1] next > Step completed: "thread= default task-3" , org.jboss.security.auth.message.config.JBossServerAuthConfig.getAuthContext(), line=187 bci=501 default task-3[1] print e.printStackTrace() e.printStackTrace() = <void value> then, you get the following stacktrace: 6:45:21,319 ERROR [stderr] ( default task-3) java.lang.NoSuchMethodException: org.wildfly.extension.undertow.security.jaspi.modules.HTTPSchemeServerAuthModule. <init>() 16:45:21,320 ERROR [stderr] ( default task-3) at java.lang. Class .getConstructor0( Class .java:3082) 16:45:21,322 ERROR [stderr] ( default task-3) at java.lang. Class .getConstructor( Class .java:1825) 16:45:21,322 ERROR [stderr] ( default task-3) at org.jboss.security.auth.message.config.JBossServerAuthConfig.createSAM(JBossServerAuthConfig.java:244) 16:45:21,323 ERROR [stderr] ( default task-3) at org.jboss.security.auth.message.config.JBossServerAuthConfig.getAuthContext(JBossServerAuthConfig.java:178) 16:45:21,323 ERROR [stderr] ( default task-3) at org.jboss.security.plugins.auth.JASPIServerAuthenticationManager.isValid(JASPIServerAuthenticationManager.ja va:99) 16:45:21,323 ERROR [stderr] ( default task-3) at org.wildfly.extension.undertow.security.jaspi.JASPICAuthenticationMechanism.authenticate(JASPICAuthenticatio nMechanism.java:123) 16:45:21,324 ERROR [stderr] ( default task-3) at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:245) 16:45:21,324 ERROR [stderr] ( default task-3) at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:231) 16:45:21,324 ERROR [stderr] ( default task-3) at io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:125) 16:45:21,325 ERROR [stderr] ( default task-3) at io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:99) 16:45:21,326 ERROR [stderr] ( default task-3) at io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:92) 16:45:21,326 ERROR [stderr] ( default task-3) at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCa llHandler.java:55) 6. finally you get the following error and access failed 17:45:20,496 ERROR [org.jboss.security] ( default task-3) PBOX00374: Error getting ServerAuthContext for authContextId default -host /test and security domain ja spi: javax.security.auth.message.AuthException: org.wildfly.extension.undertow.security.jaspi.modules.HTTPSchemeServerAuthModule.<init>() at org.jboss.security.auth.message.config.JBossServerAuthConfig.getAuthContext(JBossServerAuthConfig.java:187) at org.jboss.security.plugins.auth.JASPIServerAuthenticationManager.isValid(JASPIServerAuthenticationManager.java:99) at org.wildfly.extension.undertow.security.jaspi.JASPICAuthenticationMechanism.authenticate(JASPICAuthenticationMechanism.java:123) at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:245) at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:231) at io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:125) at io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:99) at io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:92) at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55) at io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53) at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59)