To see the full form login configuration reference, see SecurityBundle By default the form will redirect to the URL the user requested (i.e. the URL Now, when no URL is set in the session, users will be sent to the default_security_target .