The configuration is here https://github.com/flowable/flowable-engine/blob/master/modules/flowable-ui-modeler/flowable-ui-modeler-conf/src/main/java/org/flowable/app/conf/SecurityConfiguration.java : you can add a custom bean to the classpath with the same id/name that overrides the default one.