[ https://issues.jboss.org/browse/ELY-446?page=com.atlassian.jira.plugin.sy... ] David Lloyd commented on ELY-446: --------------------------------- Credential forwarding should cover the following scenarios: * Propagating a clear password (like old JAAS/PicketBox propagation), either from the stored identity or discovered during the mechanism execution (the latter will require a separate enhancement to provide an API by which mechanisms may share this information) * Propagating stored credentials for GSS mechanisms (e.g. Kerberos) * Propagating stored credentials for other mechanisms (e.g. tokens of various kinds) And the following requirements: * Stored credential propagation has to be accessible from an AuthenticationConfiguration to support outflow via PeerIdentity and other means * Stored credentials must only be accessible to suitably privileged code -- This message was sent by Atlassian JIRA (v6.4.11#64026)