In the IDE

After you run the Configure ADF Security wizard with the default ADF Authentication and Authorization option selected in the ADF Security page, you will have:

Enabled ADF authentication to prompt the user to log in and to allow page redirects
Enabled ADF permission checking so that only authorized users will have access to ADF resources

The Configure ADF Security wizard updates all security-related configuration files and secures all resources in your application. This means that before you run your application again you must define some users and allow them to access the application.

The web.xml file now specifies form-based authentication and identifies the location of the pages, adding the following code:

                               
<login-config>
  <auth-method>FORM</auth-method>
  <form-login-config>
    <form-login-page>/login.html</form-login-page>
    <form-error-page>/error.html</form-error-page>
  </form-login-config>
</login-config>

The security-related configuration files display in the Application Resources panel in the Application Navigator:

descriptors folder