diff --git a/jetty-security/src/test/java/org/eclipse/jetty/security/ConstraintTest.java b/jetty-security/src/test/java/org/eclipse/jetty/security/ConstraintTest.java
index d60c22afe51c..af91c6a0ab80 100644
--- a/jetty-security/src/test/java/org/eclipse/jetty/security/ConstraintTest.java
+++ b/jetty-security/src/test/java/org/eclipse/jetty/security/ConstraintTest.java
@@ -214,6 +214,9 @@ private List<ConstraintMapping> getConstraintMappings()
     @Test
     public void testConstraints() throws Exception
     {
+        //constraint mappings are not available until the server is started.
+        _server.start();
+        
         List<ConstraintMapping> mappings = new ArrayList<>(_security.getConstraintMappings());
 
         assertTrue(mappings.get(0).getConstraint().isForbidden());
@@ -698,7 +701,7 @@ public static Stream<Arguments> basicScenarios()
     @MethodSource("basicScenarios")
     public void testBasic(Scenario scenario) throws Exception
     {
-        List<ConstraintMapping> list = new ArrayList<>(_security.getConstraintMappings());
+        List<ConstraintMapping> list = new ArrayList<>(getConstraintMappings());
 
         Constraint constraint6 = new Constraint();
         constraint6.setAuthenticate(true);