I have implemented support and an example of a self-bootstrapping bundled application with Keycloak Server. It is one war with an application and keycloak server all in one with the application secured by Keycloak too. Its very hacked because of Resteasy 2.3.7 limitations. See this URL for more details: https://github.com/keycloak/keycloak/tree/master/bundled-war-example Also, Keycloak Server now is Resteasy 2.3.7 compatible and runs within EAP 6.2's Resteasy implementation! -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com