title: Preventing anonymous access to remote EJB access in WebLogic 12c
body: <p>I have a WAR containing EJB deployed in WebLogic 12c. I find that I can access EJB from a standalone client with no username/password specified in my InitialContext. Is there a way to prevent anonymous access to all EJB in a WAR?</p>
  
  <p>What puzzles me is that I need to provide the correct username/password to authenticate (a wrong password will fail authentication). But I can omit the username/password (in my InitialContext properties) and it lets me access the EJB. </p>
  
  <p>So I looking to configure Weblogic so that it always requires a username/password to access any EJB. And if I omit the username/password it should not let me access my EJB.</p>
  
  <p>I am looking for container support for this security rather than try to implement something on my own.</p>