For detailed information about all the security aspects and configuration for GlassFish 5, check out https://javaee.github.io/glassfish/doc/5.0/security-guide.pdf.