Use https://github.com/jmartisk/mock-artifacts/tree/master/ejbclient/eap7.1-httpclient and its steps in README with some modifications: 1) Omit step 3. Instead of it run: /subsystem=undertow/server= default -server/host= default -host/setting=http-invoker:remove() reload /subsystem=undertow/server= default -server/host= default -host/setting=http-invoker:add(http-authentication-factory=application-http-authentication) /subsystem=security/security-domain=other/authentication=classic/login-module=RealmDirect:write-attribute(name=module-options,value={password-stacking=useFirstPass,realm=ManagementRealm}) reload 2) Deploy application and try to run client side - it will failed because it tries to authorize through legacy ManagementRealm 3) Call CLI command /subsystem=ejb3/application-security-domain=other:add(security-domain=ApplicationDomain) (and do NOT reload server) and try to run client side again - it will still fail because it still uses legacy ManagementRealm 4) reload server and run client side again - it will pass because it starts to use Elytron ApplicationDomain