Then http://symfony.com/doc/2.0/reference/configuration/security.html seems to be wrong... I am not 100% sure to be honest, I've always used YML for security config :)