As part of fix JBEAP-12933 there was added attribute mapping-mode="first" into "default-permission-mapper" simple-permission-mapper in default configuration. Value first is default value of simple-permission-mapper.mapping-mode which means that this attribute disappears after first change in server configuration. It can be confusing since Elytron subsystem configuration in XML is changed even if there was no request for changing that configuration. Attribute mapping-mode="first" should be removed from default configuration.