code: private void verifyConfiguration() throws DeploymentException {
          Map<URL, ModuleMetaData> mmds = getModuleMetaDataMap();
          if (mmds != null) {
              for (Map.Entry<URL, ModuleMetaData> entry : mmds.entrySet()) {
                  ModuleMetaData mmd = entry.getValue();
                  if (mmd instanceof WebModuleMetaData) {
                      String j2eeModuleName = mmd.getJ2EEName().getModule();
                      Map<Class<?>, Properties> authMechs = getAuthMechs(j2eeModuleName);
                      if (authMechs != null && !authMechs.isEmpty()) {
                          // make sure that only one HAM.
                          if (authMechs.size() != 1) {
                              String appName = mmd.getJ2EEName().getApplication();
                              String authMechNames = getAuthMechNames(authMechs);
                              Tr.error(tc, "JAVAEESEC_CDI_ERROR_MULTIPLE_HTTPAUTHMECHS", j2eeModuleName, appName, authMechNames);
                              String msg = Tr.formatMessage(tc, "JAVAEESEC_CDI_ERROR_MULTIPLE_HTTPAUTHMECHS", j2eeModuleName, appName, authMechNames);
                              throw new DeploymentException(msg);
                          }
  
                          SecurityMetadata smd = (SecurityMetadata) ((WebModuleMetaData) mmd).getSecurityMetaData();
                          if (smd != null) {
                              LoginConfiguration lc = smd.getLoginConfiguration();
                              if (lc != null && !lc.isAuthenticationMethodDefaulted()) {
                                  String appName = mmd.getJ2EEName().getApplication();
                                  String msg = Tr.formatMessage(tc, "JAVAEESEC_CDI_ERROR_LOGIN_CONFIG_EXISTS", j2eeModuleName, appName);
                                  Tr.error(tc, "JAVAEESEC_CDI_ERROR_LOGIN_CONFIG_EXISTS", j2eeModuleName, appName);
                                  throw new DeploymentException(msg);
                              }
                          }
                      }
                  }
              }
          }
      }
docs: make sure that there is one HAM for each modules, and if there is a HAM in a module, make sure there is no login configuration in web.xml.