Cross-Domain security can be used instead of Global Trust when authentication is done in ces.ear (that is when authentication=cesejb in WebService.properties). To configure this, instead of changing the domain credentials to match, follow these steps: https://docs.oracle.com/en/middleware/fusion-middleware/weblogic-server/14.1.2/secmg/domain.html. Also, if switching from Global to Cross-Domain, change the credentials of one of the domains to a different value. In the console, go under Domain, Security, General, Advanced, Credential, and provide new private credentials.