{{!
  Copyright 2016-2017 ForgeRock AS. All Rights Reserved
 
  Use of this code requires a commercial software license with ForgeRock AS.
  or with one of its affiliates. All use shall be exclusively subject
  to such license between the licensee and ForgeRock AS.
}}
<h3>{{t "templates.auth.modules.basicProperties"}}</h3>
<div class="well" id="basicForm">
    <div id="basicFields" class="form-horizontal">
        {{> form/_titaToggle
        property="enabled"
        label="templates.auth.modules.moduleEnabled"
        enabled=config.enabled}}

        {{> form/_basicSelect
        property="properties.queryOnResource"
        label="templates.auth.modules.routeToOpenAMUserDataStore"
        options=resources
        value=config.properties.queryOnResource}}

        {{> form/_basicInput
        value=config.properties.openamDeploymentUrl
        label="templates.auth.modules.openamDeploymentUrl"
        property="properties.openamDeploymentUrl"
        noValidation="true"
        default="https://openam.example.com/openam/"}}
    </div>

    {{> authentication/_propertyMapping
    hideUserCredential=true
    authenticationId="userName"
    userRoles="authzRoles"}}
</div>

<h3 class="advanced-toggle">
    <i class="advancedShowHide fa fa-caret-right"></i>
    {{t "templates.auth.modules.advancedProperties"}}
</h3>

<div class="form-horizontal well" id="advancedForm">
    <div id="advancedFields" class="form-horizontal">
            {{> form/_tagSelectize
            value=config.properties.defaultUserRoles
            label="templates.auth.modules.defaultUserRole"
            property="properties.defaultUserRoles"
            options=defaultUserRoles
            default="openidm-authorized"}}

            {{> form/_basicInput
            value=config.properties.openamSSOTokenCookieName
            label="templates.auth.modules.openamSSOTokenCookieName"
            property="properties.openamSSOTokenCookieName"
            noValidation="true"
            default="iPlanetDirectoryPro"}}

            {{> form/_basicInput
            value=config.properties.openamUserAttribute
            label="templates.auth.modules.openamUserAttribute"
            property="properties.openamUserAttribute"
            default="uid"
            hidden="true"
            noValidation="true"}}

            {{> form/_basicInput
            value=config.properties.groupComparisonMethod
            label="templates.auth.modules.groupComparisonMethod"
            property="properties.groupComparisonMethod"
            default="ldap"
            hidden="true"
            noValidation="true"}}

            {{> form/_basicInput
            value=config.properties.truststoreType
            default="&{openidm.truststore.type}"
            label="templates.auth.modules.truststoreType"
            property="properties.truststoreType"
            hidden="true"
            noValidation="true"}}

            {{> form/_basicInput
            value=config.properties.truststorePath
            default="&{openidm.truststore.location}"
            label="templates.auth.modules.truststorePath"
            property="properties.truststorePath"
            hidden="true"
            noValidation="true"}}

            {{> form/_basicInput
            value=config.properties.truststorePassword
            default="&{openidm.truststore.password}"
            label="templates.auth.modules.truststorePassword"
            property="properties.truststorePassword"
            hidden="true"
            noValidation="true"}}
    </div>

    {{> authentication/_customProperties}}
    {{> authentication/_augmentSecurityContext}}
</div>