 <p>You need to modify web.xml to use the special role ** as indicated here: <a href="http://www.eclipse.org/jetty/documentation/current/configuring-security-authentication.html#d0e5942" rel="nofollow">Authorization section for Jetty Authentication</a>:</p> <blockquote> <p>access granted to any user who is authenticated, regardless of roles. This is indicated by the special value of "**" for the &lt;role-name&gt; of a &lt;auth-constraint&gt; in the &lt;security-constraint&gt;</p> </blockquote> <p>So, this is what my security-constraint looks like:</p> <pre><code>&lt;security-constraint&gt; &lt;web-resource-collection&gt; &lt;web-resource-name&gt;Secured Solr Admin User Interface&lt;/web-resource-name&gt; &lt;url-pattern&gt;/*&lt;/url-pattern&gt; &lt;/web-resource-collection&gt; &lt;auth-constraint&gt; &lt;role-name&gt;**&lt;/role-name&gt; &lt;/auth-constraint&gt; &lt;/security-constraint&gt; </code></pre>