diff --git a/openid-connect-server/src/main/webapp/WEB-INF/application-context.xml b/openid-connect-server/src/main/webapp/WEB-INF/application-context.xml
index 10465d1c0..71c3ab7a7 100644
--- a/openid-connect-server/src/main/webapp/WEB-INF/application-context.xml
+++ b/openid-connect-server/src/main/webapp/WEB-INF/application-context.xml
@@ -59,7 +59,11 @@
 	<!-- Allow open access to required endpoints -->
 	<security:http auto-config="true">
 		<security:intercept-url pattern="/jwk**" access="permitAll"/>
+	</security:http>
+	<security:http auto-config="true">
 		<security:intercept-url pattern="/.well-known**" access="permitAll"/>
+	</security:http>
+	<security:http auto-config="true">
 		<security:intercept-url pattern="/x509**" access="permitAll"/>	
 	</security:http>