The issue is that SwitchUserProcessingFilter appears in FilterChainProxy before the FilterSecurityInterceptor. Move the SwitchUserProcessingFilter to AFTER the FilterSecurityInterceptor. Acegi...