I tried with some hello world WAR and it works. So you're right.
myapp redirects to a sso server for authentication. still not working yet.
But one more question: the configuration I have in standalone.xml works but is there a better way of doing this? what is the best practise for enabling remote access. Any security issue?