In the release notes, the "Script to Enable Elytron in Applicable Subsystems and Management Interfaces" section points to the Security Architecture guide.

The link text should say "7.1" in it, instead of just "7": "How Red Hat JBoss Enterprise Application Platform 7.1 Handles Security out of the Box"