{
ap = SecurityConfiguration.getApplicationPolicy(defaultAppDomain);
}
if(ap == null)
throw new IllegalStateException("No Application Policy found");
BaseAuthenticationInfo bai = ap.getAuthenticationInfo();
if(bai == null)
throw new IllegalStateException("Authentication Info not set in security domain="+ secDomain
+ " or "+ defaultAppDomain);
if(bai instanceof AuthenticationInfo)