Sonatype CLM Server - Installation And Configuration
By default the Sonatype CLM Server allows anonymous access when submitting applications for evaluation. If you would like to require users to authenticate their access with a username and password in all situations, add the following line to the config.yml:
anonymousClientAccessAllowed: false