Actually the remember-me is treated as a special case in the security component : the RememberMeServices instance must be injected to each AuthenticationProvider.