[Grzegorz Rozniecki](https://jira.spring.io/secure/ViewProfile.jspa?name=grozniecki) (Migrated from [SEC-1970](https://jira.spring.io/browse/SEC-1970?redirect=false)) said: Reference manual on page "Request-Header Authentication (Siteminder)" - 18.2.1 in 3.1.x http://static.springsource.org/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#d0e6281 and 17.2.1 in 3.0.x http://static.springsource.org/spring-security/site/docs/3.0.x/reference/springsecurity-single.html#d0e5802 - mentions `custom-authentication-provider` element which, according to http://forum.springsource.org/showthread.php?76596-Spring-Security-3-0-0-M2-Released, is removed: > The use of <custom-authentication-provider> has been dropped. Use <authentication-provider ref='yourProviderBeanName'> as a child of the <authentication-manager> element.