/subsystem=elytron/authentication-configuration=forward-identity:add(security-domain=ApplicationDomain)
/subsystem=elytron/authentication-context=default-context:add(match-rules=[{match-protocol=iiop, authentication-configuration=forward-identity}])
/subsystem=elytron:write-attribute(name=default-authentication-context, value=default-context)

<subsystem xmlns="urn:wildfly:elytron:15.0" default-authentication-context="default-context" ... >

            <authentication-client>
                <authentication-configuration name="forward-identity" security-domain="ApplicationDomain"/>
                <authentication-context name="default-context">
                    <match-rule match-protocol="iiop" authentication-configuration="forward-identity"/>
                </authentication-context>
            </authentication-client>