To control the behaviour during authentication and authorization WildFly Elytron supports the use of various transformers, mappers, and decoders - this blog post describes how they fit together in the different stages of authentication.
An early blog post describing how SSL configuration was being centrally defined within a new subsystem. Written early 2016 it is potentially due to be reviewed as exact commands may have evolved since it was written.