It looks like in CR1 the authorization stops working on EAP6. Seems like the policies are not evaluated correctly. There are failing adapter tests: https://keycloak-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/view/RH-SSO/job/rh-sso-adapters-os-jvm-rhel-matrix/287/adapter_jdk=mw_oraclejdk8,adapter_module=eap6,jdk=mw_oraclejdk8,label_exp=rhel6/testReport/ . It is failing also locally, I ran the AbstractPhotozExampleAdapterTest#testAdminOnlyFromSpecificAddress and it works correctly on EAP7 but fails on EAP6. I attached both app server server.log. eap-server.log correct. eap6-server.log failing.