anchor.diff:  ----
   
   [[configure-an-eltyron-security-realm-for-assigning-roles.]]
  -==== Configure an Eltyron security realm for assigning roles.
  +==== Configure an Elytron security realm for assigning roles.
   
   The the client's Kerberos token will provide the principal, but you need
   a way to map that principal to a role for your application. There are
  
positive.code: 
  [source,options="nowrap"]
  ----
  /subsystem=elytron/filesystem-realm=exampleFsRealm/identity=fallbackUser1:add()
  /subsystem=elytron/filesystem-realm=exampleFsRealm/identity=fallbackUser1:set-password(clear={password="password123"})
  /subsystem=elytron/filesystem-realm=exampleFsRealm/identity=fallbackUser1:add-attribute(name=Roles, value=["Admin","Guest"])
  ----
  
  [[update-the-web.xml-for-form-fallback.]]
  
negative.code: [source,options="nowrap"]
  ----
  /subsystem=elytron/filesystem-realm=exampleFsRealm:add(path=fs-realm-users,relative-to=jboss.server.config.dir)
  /subsystem=elytron/filesystem-realm=exampleFsRealm:add-identity(identity=user1@REALM)
  /subsystem=elytron/filesystem-realm=exampleFsRealm:add-identity-attribute(identity=user1@REALM,name=Roles,value=["Admin","Guest"])
  ----
  
  [[add-a-simple-role-decoder.]]
  