Reg: How to secure jsp page if usingActiveDirectoryAuthenticator from weblogic

 Hi,

I have a simple application which has to display a main.jsp  page if authenticated using AD . My AD is setup correctly and showing users and groups . The problem I have is 

if I click on the  hostname:port (of the managed server where the application is deployed) it is opening the page without asking for authentication. But if I go to the login.jsp it is using AD authentication and after

authentication redirecting to main.jsp . How do I prevent the first redirection to main.jsp without authentication. 

I use Custom Roles and Polices . 

ActiveDirectory Authencation

and my web.xml is