They don't, it has to be explicitly specified either via annotations or
via the jboss-ejb3.xml file.
This does not actually have anything to do with Undertow, this is all
part of the Wildfly code base.
Stuart
Bill Burke wrote:
Am I wrong stating that EJBs defined in WEB-INF/classes do not
inherit
the security domain of the servlet container?