<security:http entry-point-ref="samlEntryPoint" use-expressions="false">
    <security:intercept-url pattern="/saml/logout/**" method="POST"  />
    <security:intercept-url pattern="/**" access="IS_AUTHENTICATED_FULLY"/>
    <security:custom-filter before="FIRST" ref="metadataGeneratorFilter"/>
    <security:custom-filter after="BASIC_AUTH_FILTER" ref="samlFilter"/>
</security:http>