In documentation  there is <auth-method> set to BASIC, however, it looks like that this value is not taken into account at all. We should investigate what value is correct and whether it is necessary to specify it. I tried to avoid <login-config> at all and it had no effect on our tests.
Proper investigation of what is necessary for configuration needs to be done. According to the result, documentation and tests should be modified.