Default AuthenticationContext is a static with undefined behaviour ------------------------------------------------------------------ Key: WFCORE-4599 URL: https://issues.jboss.org/browse/WFCORE-4599 Project: WildFly Core Issue Type: Bug Components: Security Reporter: Stuart Douglas Assignee: Stuart Douglas Priority: Major Fix For: 10.0.0.Beta4 The default AuthenticationContext global supplier initializes a static based on wildfly-config..xml found in the current class loader. As this is initialised lazily the result of this will depend on which deployment is used to access this first. If there are multiple deployments other deployments can end up using the wrong configuration.