Shiro Multi-Realm Handling changes with Release 1.12.4 and, in particular, the use of alternative Shiro authentication strategies for combined ini and LDAP realms is not documented.
Changes Required
Shiro Multi-Realm Handling should be added to the JOC Cockpit Authentication and Authorization articles.
A matrix should be provided showing behaviour (i.e. are Authentication and Authorization successful in a mult-irealm environment?) for the different Shiro authentication strategies and the SOSFirstSuccessAuthenticator.
Implicit & explicit realm ordering should also be documented.