A security realm comprises mechanisms for protecting resources in an application server. Each security realm consists of a set of configured security providers, users, groups, security roles, and security policies. A user must be defined in a security realm in order to access any resources belonging to that realm. When a user attempts to access a particular resource, the application server tries to authenticate and authorize the user by checking the security role assigned to the user in the relevant security realm and the security policy of the particular resource. In the standalone.xml file, we can see the default security realm configuration working with HTTPS:
<security-realm name="ApplicationRealm"> <server-identities> ...
