title: Exclude url from security constraint
body: <p>I have configured ADFS SAML on weblogic server and have added corresponding entry in web.xml.
  I want to exclude one url from authourization through ADFS SAML so i have added security constraint without auth-constraint  in web.xml.So Now I am expecting the url with /Sample/ should get excluded but still it is authourizing /Sample/ request
  Please find below web.xml
  
      
          Restricted
          /Sample/*
      
  </p>
  
  <pre><code>&lt;security-constraint&gt;
    &lt;display-name&gt;excluded&lt;/display-name&gt;
        &lt;web-resource-collection&gt;
        &lt;web-resource-name&gt;No Access&lt;/web-resource-name&gt;
        &lt;url-pattern&gt;*&lt;/url-pattern&gt;
         &lt;http-method&gt;PUT&lt;/http-method&gt;
         &lt;http-method&gt;DELETE&lt;/http-method&gt;
       &lt;/web-resource-collection&gt;
  
    &lt;web-resource-collection&gt;
          &lt;web-resource-name&gt;Restricted&lt;/web-resource-name&gt;
          &lt;url-pattern&gt;/Sample&lt;/url-pattern&gt;
          &lt;http-method&gt;GET&lt;/http-method&gt;
          &lt;http-method&gt;POST&lt;/http-method&gt;
    &lt;/web-resource-collection&gt;
  
  
    &lt;web-resource-collection&gt;
          &lt;web-resource-name&gt;SAML&lt;/web-resource-name&gt;
          &lt;url-pattern&gt;*&lt;/url-pattern&gt;
    &lt;/web-resource-collection&gt;
      &lt;auth-constraint&gt;
          &lt;role-name&gt;everyone&lt;/role-name&gt;
      &lt;/auth-constraint&gt;
   &lt;/security-constraint&gt; 
  </code></pre>