@weierophinney I think that this code not belong into the `HttpAuthAdapter` factory, I saw this chunk of code as a kind of `HttpAuthAdapter` service post creation initialization-configuration, a thing that is very specific to the `DefaultAuthenticationListenerFactory`. The idea is: programmers can provide theirs own `HttpAuthAdapter` services, but they must know that its resolvers could be overwritten if the config of ZF\MvcAuth module said so. Anyway you are the boss ;) just tell me if you still want this chunk of code in the `HttpAuthAdapter` factory.