Where to apply security filters? (to enable third party 2 Factor Authentication)

[Henning BW]

A few versions ago the Confluence code was changed, and the WEB-INF/web.xml file no longer contains security filters. I've searched through the files and not found these moved.

We use Duo, and Duo did not know of any changes, and hadn't hear about any problems. Their guide still references web.xml and the filters there: https://duo.com/docs/confluence

Where is the Duo code supposed to be added?

Here is a small snippet of how the file used to look like. It used to be quite big.

Here is what the file looks like now. These are actually the only lines in the file.

[Henning BW · Accepted solution]

Resolved. Duo got back to me and confirmed the changes, so they have updated their guides.