In PAS for OpenEdge, you configure Spring Security by modifying the security properties file (oeablSecurity.properties), and the URL access control file oeablSecurity.csv) instead of changing bean constructor and property settings in multiple Spring Security XML files. These external properties files are designed to be release independent, to be open to external management, and to provide access to all of the security process functionality in the Spring Security framework.
Note: The Spring Security XML files are in the WEB-INF/spring directory on the server, but there is usually no need to edit them directly.