WEB-INF/web.xml file, configure the security settings, including which URIs to secure, which authentication method to use (BASIC, DIGEST, FORM, or CLIENT-CERT), and whether to always use HTTPS.

This configuration declares that the entire web app is meant to be HTTPS only, and the container should intercept HTTP requests for it and redirect those to the equivalent https:// URL <Connector ...