OIDC in Wildfly 26 does not propagate security context to EJB

Hi,
We are moving to Wildfly 26. I switched from keycloak adapter to OIDC following

After login in a servlet, I get org.wildfly.security.http.oidc.OidcSecurityContext as http request attribute and I can see an authenticated user name and the roles.

But when I inject @Resource SessionContext in Stateless bean, sessionContext.getCallerPrincipal() is returned as org.wildfly.security.auth.principal.AnonymousPrincipal. Keycloak adapter used to return a KeycloakPrincipal with full info.

Any other configuration needed to propagate security to EJB level?

Thanks