AuditProvider mentions "[Success]" even if username/password is invalid

1. Change ManagementRealm:- <security-realm name= "ManagementRealm" > <authentication> <local default-user= "$local" /> <jaas name= "jaasSecurityDomain" /> </authentication> 2. add the log category:- <logger category= "org.jboss.security.audit" > <level name= "TRACE" /> </logger> 3. add the security-domain:- <security-domain name= "jaasSecurityDomain" cache-type= "default" > <authentication> <login-module code= "Simple" flag= "required" /> </authentication> <audit/> </security-domain> then, web console requires authentication against security-domain instead of mgmt-users.properties file. 4. start EAP then access web console with a wrong username/password, for example, admin/wrongpass.