[security-dev] How to configure ServiceProviderAuthenticator to do this ?