Using standard FORM for java web application authentication

Hi Expert,

I would like the user to be authencated first before accessing my java web application that running on SAP Portal 7.31. I have configured using the standard authentication "FORM" method in web.xml and web-j2ee-engine.xml, but it seems to be nothing happen and user still can access directly to the application without authentication. Please let me know if I miss out any step or there is any other approach for web application using standard authentication method. Thanks.

I can see the properties are generated in the NWA as below:

Best Regards,

SweeTiong Ng