Start EAP Prepare resources Add dir-context: /subsystem=elytron/dir-context=foo:add(url=foobar) Add ldap-realm: /subsystem=elytron/ldap-realm=foo:add(dir-context=foo, identity-mapping={attribute-mapping=[{from=foo, to=bar}],rdn-identifier=foobar}) Navigate to LDAP security realm in Elytron subsystem -> Security Realms / Authentication and switch to LDAP Realm Try to remove foo realm. Nothing happens after confirmation is done and resource remain in UI and in model too.