Spring Security tests should use UserWebTestClientConfigurer See https://github.com/spring-projects/spring-framework/issues/35042 We should also add a link in our documentation to make this apparent to users