<security:http entry-point-ref="samlEntryPoint" use-expressions="false">
<security:intercept-url pattern="/**" access="IS_AUTHENTICATED_FULLY"/>
<security:custom-filter before="FIRST" ref="metadataGeneratorFilter"/>
<security:custom-filter after="BASIC_AUTH_FILTER" ref="samlFilter"/>
</security:http>
竟然出現 Failed to evaluate expression ‘IS_AUTHENTICATED_FULLY’錯誤！
後來經過 拜Google大神後，才知道https://github.com/spring-projects/spring-security-oauth/issues/625，原來，Spring Security已經悄悄地將 IS_AUTHENTICATED_FULLY拿掉了，
如果還想使用，必須加上 use-expressions="false" 才可以！
不然就乖乖地使用 fullyAuthenticated代替原有的 IS_AUTHENTICATED_FULLY吧！
<security:http entry-point-ref="samlEntryPoint" >
<security:intercept-url pattern="/**" access="fullyAuthenticated"/>
<security:custom-filter before="FIRST" ref="metadataGeneratorFilter"/>
<security:custom-filter after="BASIC_AUTH_FILTER" ref="samlFilter"/>
</security:http>
