@WebContext overrides realm in web.xml

  <login-config>
    <auth-method>BASIC</auth-method>
    <realm-name>Shop</realm-name>
  </login-config>

@WebService(name = "KundeSOAP",
            targetNamespace = "urn:shop:soap:kunde",
            serviceName = "KundeSOAPService")
@SOAPBinding
@WebContext(authMethod = "BASIC",
            transportGuarantee = "CONFIDENTIAL",
            secureWSDLAccess = true)
@Stateless
@Interceptors(ConstraintViolationInterceptor.class)
@RolesAllowed({ "...", "..." })
@SecurityDomain("...")
public class KundeSOAP {...}