security.yaml

security:
    # https://symfony.com/doc/current/security.html#where-do-users-come-from-user-providers
    providers:
    ...
    
    firewalls:

        # This firewall is used to handle the actual login and is used as an endpoint for SSO-Proxy.
        authentication:
            pattern: ^/(auth|login|logout)
            anonymous: ~
            logout:
                path: app_logout
                target: app_login
                # where to redirect after logout
                # target: app_any_route
            provider: database
            guard:
                authenticators:
                    - App\Authentication\Login\LoginFormAuthenticator

    # IMPORTANT: auth has to be here, otherwise no user will be available
    access_control:
        - { path: ^/login/, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/auth/.*, roles: IS_AUTHENTICATED_REMEMBERED }