diff --git a/distribution/adapters/shared-cli/adapter-elytron-install.cli b/distribution/adapters/shared-cli/adapter-elytron-install.cli
index 6ef26d01e5..edabdd16d3 100644
--- a/distribution/adapters/shared-cli/adapter-elytron-install.cli
+++ b/distribution/adapters/shared-cli/adapter-elytron-install.cli
@@ -54,4 +54,10 @@ if (outcome != success) of /subsystem=undertow/application-security-domain=other
     /subsystem=undertow/application-security-domain=other:add(http-authentication-factory=keycloak-http-authentication)
 else
     echo Undertow already configured with Keycloak
+end-if
+
+if (outcome != success) of /subsystem=ejb3/application-security-domain=other:read-resource
+    /subsystem=ejb3/application-security-domain=other:add(security-domain=KeycloakDomain)
+else
+    echo EJB already configured with Keycloak
 end-if
\ No newline at end of file