diff --git a/cookbook/security/pre_authenticated.rst b/cookbook/security/pre_authenticated.rst
index 1bc74d7511b..fe77000422c 100644
--- a/cookbook/security/pre_authenticated.rst
+++ b/cookbook/security/pre_authenticated.rst
@@ -70,7 +70,10 @@ in the x509 firewall configuration respectively.
 
     An authentication provider will only inform the user provider of the username
     that made the request. You will need to create (or use) a "user provider" that
-    turns that username into a User object of your choice:
+    is referenced by the ``provider`` configuration parameter (``your_user_provider``
+    in the configuration example). This provider will turn the username into a User 
+    object of your choice. For more information on creating or configuring a user 
+    provider, see:
 
     * :doc:`/cookbook/security/custom_provider`
     * :doc:`/cookbook/security/entity_provider`
\ No newline at end of file