In 4.3.4.15. Use a Security Domain in Your Application and also 16.4. Use a Security Domain in Your Application (these part are duplicated) is Procedure for Configure Your Application to Use a Security Domain. In the first point of its there is "You can define the security domain either in the server's configuration file or the application's descriptor file." and then points A. and B. for two options for settings. However I think it's not right, because point A. is needed everytime - point A. sets Security Domain on server and then in point B. can enable configured Security Domain for application. For that reason, initial sentence "You can define the security domain either in the server's configuration file or the application's descriptor file." should be rewritten to something like "You need to define the security domain in the server's configuration file and then you can enable its for application in the application's descriptor file." Also I think in text in point B. Configure the security domain in the application's descriptor file is better to use some word like enables or set instead of word "configures".
Verified on stage: Revision 6.2.2-6 Revision 6.3.0-12