Web Server Configuration Update to Remove Constraints
For servlet-engine-based form-based authentication (such as form-base authentication build into JBoss), constrains should remain configured within web-orig.xml. For this type of configuration the following steps should be skipped.
Complete the following steps to remove all authentication constraints for thePTC Arbortext Content Delivery web application:
1. Edit <WT_HOME>/codebase.war /WEB-INF/web-orig.xml
2. Comment out security-constraint block that contains display-name: “Authenticated access constraint”
3. Edit security-constraint block that contains display-name: “Anonymously accessible resources”, and replace <url-pattern> blocks with: <url-pattern>/*</url-pattern>
* 
This will make PTC Arbortext Content Delivery resources available for anyone who has access to PTC Arbortext Content Delivery url. It is expected PTC Arbortext Content Delivery will be protected behind your single sign–on application and users will be authenticated before being able to access PTC Arbortext Content Delivery resources.
4. Edit <WT_HOME>/codebase.war/WEB-INF/jboss-web-orig.xml
5. Remove security-domain block