How do I remove the ROLE_ prefix from Spring Security with JavaConfig?
Starting from Spring 4.2, you can define the prefix with a single bean, as described here: https://github.com/spring-projects/spring-security/issues/4134 @Bean GrantedAuthorityDefaults grantedAuthorityDefaults() { return new GrantedAuthorityDefaults(“”); // Remove the ROLE_ prefix } XML version: <beans:bean id=”grantedAuthorityDefaults” class=”org.springframework.security.config.core.GrantedAuthorityDefaults”> <beans:constructor-arg value=”” /> </beans:bean>