How to configure weblogic for anonymous security role assignment

We have a .war that needs to run in both an SSO and Non-SSO environment.

The security-constraint in web.xml is defined as:

     <security-constraint>

        <web-resource-collection>

            <web-resource-name>General Authentication Requirement</web-resource-name>

                <url-pattern>/*</url-pattern>

            <http-method>GET</http-method>

                <http-method>POST</http-method>

        </web-resource-collection>

        <auth-constraint>

                <description>XYZ Application Role</description>

                <role-name>XYZApplicationRole</role-name>

        </auth-constraint>

        </security-constraint>

        <security-role>

                <description>Default Security Role to access the XYZ Application for use with some SSO frameworks</description>

                <role-name>XYZApplicationRole</role-name>

        </security-role>

What would I need to configure/map in weblogic.xml and/or in the WebLogic side to allow anonymous access configuration for the role?

I have tried in weblogic.xml