This is a follow up JIRA for the rejected JBEAP-11880 (related comment)

Provide the documentation (example would be great), how to use Elytron API to switch identities in server-to-server EJB calls.

Example scenario was described in the original JIRA.

EJB Client -> secured bean on Server1 -> secured bean on Server2

The part which has to be explained in Documentation is mainly how to implement the bean on Server1 - usage of Elytron AuthenticationConfiguration API together with transactions - to correctly switch identity for call of the secured bean on Server2.