title: unauthorized page configuration in web.xml
body: <p>Is there unauthorized page configuration in web.xml so that it can return a page instead of "Error 403--Forbidden".</p>
  
  <p>We know that in  web.xml, we can have  error.jsp like following to guide user to another page.</p>
  
  <pre><code>&lt;login-config&gt;
      &lt;auth-method&gt;FORM&lt;/auth-method&gt;
      &lt;form-login-config&gt;
          &lt;form-login-page&gt;login.jsp&lt;/form-login-page&gt;
          &lt;form-error-page&gt;error.jsp&lt;/form-error-page&gt;
      &lt;/form-login-config&gt;
  &lt;/login-config&gt;
  </code></pre>
  
  <p>Is there any similar things if a user is authenticated but not listed in the users which is used to protect current page by using security-constraint.</p>