 <p>Waffle is drop in solution that can be used with springsecurity to achieve this: <a href="https://github.com/dblock/waffle" rel="nofollow">https://github.com/dblock/waffle</a></p> <p>I've used it myself with for example hybris. They have some examples. Beware of version 1.5 that uses jna3.5 which can cause problems at high load Also beware that you may need to extend negotiatesecurityfilter if our application needs to do authorization(I had to do that, may be fixed in 1.6.</p>