This property determines the behavior of a single sign-on LTPA Token2 login. The property com.ibm.ws.security.webChallengeIfCustomSubjectNotFound is set to false to ensure that web sessions can seamlessly transfer between two servers in a cluster (for example, in a fail over scenario) without being asked for security credentials.