From 768308ec74d363d82c4689e2e4463370112c28c8 Mon Sep 17 00:00:00 2001 From: Alexander Makarov Date: Mon, 24 Aug 2026 11:11:16 +0300 Subject: [PATCH] Document SAML2 back-off in WebFlux security documentation See gh-51421 Signed-off-by: Alexander Makarov --- .../antora/modules/reference/pages/web/spring-security.adoc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/documentation/spring-boot-docs/src/docs/antora/modules/reference/pages/web/spring-security.adoc b/documentation/spring-boot-docs/src/docs/antora/modules/reference/pages/web/spring-security.adoc index 5e4560be435..1b96867c9f9 100644 --- a/documentation/spring-boot-docs/src/docs/antora/modules/reference/pages/web/spring-security.adoc +++ b/documentation/spring-boot-docs/src/docs/antora/modules/reference/pages/web/spring-security.adoc @@ -67,10 +67,11 @@ javadoc:org.springframework.boot.security.autoconfigure.ReactiveUserDetailsServi To completely switch off the default web application security configuration, including Actuator security, add a bean of type javadoc:org.springframework.security.web.server.WebFilterChainProxy[] (doing so does not disable the javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] configuration). To also switch off the javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] configuration, add a bean of type javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] or javadoc:org.springframework.security.authentication.ReactiveAuthenticationManager[]. -The auto-configuration will also back off when any of the following Spring Security modules is on the classpath: +The auto-configuration of a javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] will also back off when any of the following Spring Security modules is on the classpath: - `spring-security-oauth2-client` - `spring-security-oauth2-resource-server` +- `spring-security-saml2-service-provider` To use javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] in addition to one or more of these dependencies, define your own javadoc:org.springframework.security.core.userdetails.MapReactiveUserDetailsService[] bean.