If you for any reason find yourself in need of using jboss; don't. But if you have to, and using basic auth.

jboss-web.xml

<?xml version="1.0" encoding="UTF-8"?>
<jboss-web>
  <context-root>/some-context-path</context-root>
  <security-domain>ldap</security-domain>
  <valve>
    <class-name>org.apache.catalina.authenticator.BasicAuthenticator</class-name>
    <param>
      <param-name>disableProxyCaching</param-name>
      <param-value>false</param-value>
    </param>
  </valve>
</jboss-web>

Thank you!