From your description, it sounds like you are deploying a CAF Web Application to an Application Server. If so, which App server are you deploying to? Additionally, what version of CAF are you using?
In 8.0.1, we’ve fixed some issues in the generation of the web.xml file. The default security settings needed some changes. However, it doesn’t sound like this is the problem since you are eventually able to authenticate.
FWIW: You might have a look at the 8.x CAF Designer help to review the security settings for CAF and other app servers.
Regards,
–mark
#webMethods#webMethods-BPMS#MWS-CAF-Task-Engine