Checking the path for identtiy-zones/uaa in the xml config

multitenant-endpoints.xml

    <http name="identityZoneSecurity" pattern="/identity-zones/**" create-session="stateless" entry-point-ref="oauthAuthenticationEntryPoint"
        use-expressions="true" authentication-manager-ref="emptyAuthenticationManager" xmlns="http://www.springframework.org/schema/security">
        <intercept-url pattern="/**" access="#oauth2.hasScope('zones.create') and not request.requestURI.contains('/identity-zones/'+@uaaIdentityZone.id)" method="GET"/>
    </http>