This is wrong. It should be configured in the firewall config (when configuring the use of the provider) not on the app level (the bundle allows to use several providers of the same type, for instance in different firewalls)