Elytron is registering resource /core-service=management/access=identity on a HostController -------------------------------------------------------------------------------------------- Key: WFCORE-3121 URL: https://issues.jboss.org/browse/WFCORE-3121 Project: WildFly Core Issue Type: Bug Components: Domain Management, Security Reporter: Brian Stansberry Assignee: Brian Stansberry Priority: Blocker Fix For: 3.0.0.CR1 The Elytron integration added a resource registration for /core-service=management/access=identity on an HC. It should only be registered at /host=*/core-service=management/access=identity The domain-wide /core-service=management resource MUST NOT HAVE CHILDREN REGISTERED other than access-authorization. It is not the place to configure HC-specific behavior. I see use of this resource in enable-elytron.cli scripts used to configure the testsuite. At least in the one in WF full's testsuite/shared; I'm guessing elsewhere too. That must be changed. If use of this domain-wide resource has ended up in any docs those must be corrected. [~dlofthouse] FYI.