[ https://issues.jboss.org/browse/RTGOV-567?page=com.atlassian.jira.plugin.... ] Michael Clay commented on RTGOV-567: ------------------------------------ the workaround here is to remove the hardwired 'clientAuthentication' policy from the component/service and enable it at runtime for the required binding within a ContextMapper i.e. Set<Policy> required = new HashSet<Policy>(); required.add(SecurityPolicy.CLIENT_AUTHENTICATION); context.setProperty(PolicyUtil.REQUIRED_PROPERTY, required, Scope.EXCHANGE).addLabels(BehaviorLabel.TRANSIENT.label()); -- This message was sent by Atlassian JIRA (v6.3.1#6329)