Hi Enrico !
Yes, confirmed in Web Application /ws/jarvis:
- AutheEnabled = 8192 (Delegated, Bit 13) 
- ZAUTHENTICATE compiled in %SYS with "Resource Required" 
- System-wide: "Allow Delegated authentication" + "Allow O/S auth with Delegated authorization" enabled 
But ^ZAUTHLOG remains empty — routine never called, even direct IRIS calls (no Kong) return 401.
Any other system-level prerequisite missing?