I see this in my Spring MVC app\'s web.xml:
springSecurityFilterCh
You are right about 'glue' stuff. As written in JavaDocs of FilterChainProxy:
The FilterChainProxy is linked into the servlet container filter chain by adding a standard Spring DelegatingFilterProxy declaration in the application web.xml file.
Please see FIlterChainProxy section of blog Behind the Spring Security Namespace for an excellent explanation.