title: What is the role-name of the default "authenticated role" in WebLogic? How do I reference it in my deployment descriptor?
body: <p>I'm attempting to implement an authentication mechanism in a web app, which I'm deploying on a WebLogic 12c instance. I want to restrict access to certain pages to only authenticated users.</p>
  
  <p>My problem is in figuring out how to define the auth-constraint of my security portion to do this. This is the security portion of my web.xml:</p>
  
  <pre><code>&lt;security-constraint&gt;
      &lt;web-resource-collection&gt;
          &lt;web-resource-name&gt;secure&lt;/web-resource-name&gt;
          &lt;url-pattern&gt;/secure/*&lt;/url-pattern&gt;
      &lt;/web-resource-collection&gt;
      &lt;auth-constraint&gt;
          &lt;role-name&gt;user&lt;/role-name&gt;
      &lt;/auth-constraint&gt;
  &lt;/security-constraint&gt;
  
  &lt;security-role&gt;
      &lt;description&gt;Any User&lt;/description&gt;
      &lt;role-name&gt;user&lt;/role-name&gt;
  &lt;/security-role&gt;
  
  
  &lt;login-config&gt;
      &lt;auth-method&gt;FORM&lt;/auth-method&gt;
      &lt;realm-name&gt;myrealm&lt;/realm-name&gt;
      &lt;form-login-config&gt;
          &lt;form-login-page&gt;/login.html&lt;/form-login-page&gt;
          &lt;form-error-page&gt;/auth_error.html&lt;/form-error-page&gt;
      &lt;/form-login-config&gt;
  &lt;/login-config&gt;
  </code></pre>
  
  <p>Right now, authentication works properly, but I get a 403 - Forbidden when I try to access any of the secure pages, and I'm fairly certain that this is because I don't have any users mapped to the "user" role. I've already tried specifying the wildcard (*) for role names, and that didn't work.</p>
  
  <p>I'd prefer to not have to configure any mappings on the WebLogic side. WebLogic documentation specifies that there is a special "Authenticated Role" that is automatically given to any user who authenticates (see <a href="http://docs.oracle.com/cd/E14571_01/core.1111/e10043/introroles.htm#CJAGGDCA" rel="nofollow">http://docs.oracle.com/cd/E14571_01/core.1111/e10043/introroles.htm#CJAGGDCA</a>)</p>
  
  <p>That documentation is for 11g - is the same role available in 12c? If so, can I reference it in my web.xml to grant access to any authenticated user? What would its role-name be?</p>