Use attached reproducer - it originally comes from AS TS ServletRunAsTestCase class. Deploy and run the server, then call curl http: //localhost:8080/servlet-runas/RunAsAdminServlet If the default server configuration is used ( standalone.xml with legacy security), then the expected response comes: init method passed.Hello! doGet method passed.Hello! When Elytron configuration is used ( standalone-elytron.xml , then @RunAs annotation doesn't work in the servlet and response is: init method did not pass. doGet method did not pass.