You'd add it in the configuration for the ServletContainerAuthenticationProvider instance in repo.xml.