Having Wildfly-8.1.0.Final and PicketLink 2.7.0.CR1 configured IdP and SP as described at WildFly Configuration - PicketLink.

Trying to provide unlimited access to some of SP resources defining security-constraint without auth-constraint. But have no success - always get redirect to IdP, be it auth constrained resource or not.

Is it a bug? How to resolve this problem? Are there any workarounds exist?