Need to use principal-transformer in aggregate-realm in between authentication-realm and authorization-realm ------------------------------------------------------------------------------------------------------------ Key: ELY-1829 URL: https://issues.jboss.org/browse/ELY-1829 Project: WildFly Elytron Issue Type: Feature Request Reporter: Ashley Abdel-Sayed Assignee: Ashley Abdel-Sayed Priority: Major Fix For: 1.10.0.CR6 It is requirement to use principal-transformer in aggregate-realm in between authentication-realm and authorization-realm . -------------------------------------- <security-domain name="TestDomain" default-realm="TestAggRealm" permission-mapper="default-permission-mapper" pre-realm-principal-transformer="test-transformer" security-event-listener="local-audit"> <realm name="TestAggRealm" role-decoder="from-roles-attribute"/> </security-domain> . . <aggregate-realm name="TestAggRealm" authentication-realm="TestLdapRealm" authorization-realm="Test_Auth_LdapRealm"/> -------------------------------------- I think to achieve this there need to be something like "mid-realm-principal-transformer" in <aggregate-realm> only .