In cases where SSO is configured in the web tier, only the authentication data is made available to SwitchYard. None of the authorization (read: "roles") data is propagated down. Thus, SecurityPolicy.AUTHORIZATION fails.

There is an associated Bugzilla when using the RestEasy component, however this is an issue with the HttpComponent as well.