<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "/opt/nevisproxy/dtd/web-app_2_3.dtd">
<web-app>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <context-param>
        <param-name>SectokenVerifierCert</param-name>
        <param-value>/var/opt/keys/trust/proxy-idm-v1-nevisidm-sectoken-truststore/truststore.pem</param-value>
    </context-param>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter>
        <filter-name>Authentication_SAML_SP_nevisidm_admin_Realm</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::auth::IdentityCreationFilter</filter-class>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>AuthenticationServlet</param-name>
            <param-value>Connector_SAML_SP_nevisidm_admin_Realm</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>EntryPointID</param-name>
            <param-value>admin.agov-w.azure.adnovum.net</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>InactiveInterval</param-name>
            <param-value>1800</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>InterceptionRedirect</param-name>
            <param-value>never</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>LoginRendererServlet</param-name>
            <param-value>LoginRenderer_nevisLogrend</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Realm</param-name>
            <param-value>SAML_SP_nevisidm_admin_Realm</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>RenewIdentification</param-name>
            <param-value>true</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>StateKey</param-name>
            <param-value>SAML_SP_nevisidm_admin_Realm</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>StoreInterceptedRequest</param-name>
            <param-value>false</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://4095d4e66ef51810f07a6ed3, pattern://4095d4e66ef51810f07a6ed3#nevisIDM -->
    <filter>
        <filter-name>CSRFRewrite_nevisIDM_Administration_GUI</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::rewrite::RewriteFilter</filter-class>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
        <init-param>
            <param-name>ResponseBody</param-name>
            <param-value>PCRE/(if\s?\(isValidDomain\(document.domain,).*$/:$1(function(h) { var i = h.indexOf("\:"); return h.substring(0, i != -1 ? i \: h.length) })("ENV\:HTTP_Host;"))) {:PT</param-value>
        </init-param>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
        <init-param>
            <param-name>ResponseBody.Mode</param-name>
            <param-value>replacement</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://58ece0328f5bf4d78e1a82d2, pattern://58ece0328f5bf4d78e1a82d2#filters -->
    <filter>
        <filter-name>DefaultErrorFilter</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::error::ErrorFilter</filter-class>
        <!-- source: pattern://58ece0328f5bf4d78e1a82d2#filters -->
        <init-param>
            <param-name>CheckAcceptHeader</param-name>
            <param-value>true</param-value>
        </init-param>
        <!-- source: pattern://58ece0328f5bf4d78e1a82d2#filters -->
        <init-param>
            <param-name>PlaceHolders</param-name>
            <param-value>
                TransferIdHolder:TRANSFER_ID
                TimestampHolder:TIMESTAMP
            </param-value>
        </init-param>
        <!-- source: pattern://58ece0328f5bf4d78e1a82d2#filters -->
        <init-param>
            <param-name>StatusCode</param-name>
            <param-value>
                400:file:/resources/errorPages/404.html:reset-header:reset-status-code
                403:file:/resources/errorPages/403.html:reset-header:reset-status-code
                404:file:/resources/errorPages/404.html:reset-header:reset-status-code
                500:file:/resources/errorPages/500.html:reset-header:reset-status-code
                502:file:/resources/errorPages/502.html:reset-header:reset-status-code
            </param-value>
        </init-param>
    </filter>
    <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
    <filter>
        <filter-name>ModSecurity_nevisIDM_Administration_GUI</filter-name>
        <filter-class>ch::nevis::nevisproxy::filter::modsecurity::ModsecurityFilter</filter-class>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
        <init-param>
            <param-name>ConfigFile</param-name>
            <param-value>/var/opt/nevisproxy/default/host-admin.agov-w.azure.adnovum.net/WEB-INF/security_nevisidm_administration_gui.conf</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <filter>
        <filter-name>Qos</filter-name>
        <filter-class>ch:nevis:navajo:apglue:httpd_2_4_x:servlet:ApacheConfigFilter</filter-class>
        <filter-lib>libApache2_4_Servlet.so.1</filter-lib>
        <!-- source: pattern://1200a58c76686d520c21edb0 -->
        <init-param>
            <param-name>ServerConfig</param-name>
            <param-value>
                QS_SrvMaxConnClose 85%
                QS_SrvMaxConnPerIP 75 500
                QS_SrvMinDataRate 120 1500 500
            </param-value>
        </init-param>
    </filter>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <filter>
        <filter-name>Redirect_Default</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::rewrite::RewriteFilter</filter-class>
        <!-- source: pattern://1200a58c76686d520c21edb0 -->
        <init-param>
            <param-name>RequestURI</param-name>
            <param-value>^/$:/nevisidm/admin/:R</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter>
        <filter-name>Requirement_NEVIS_SecToken_SAML_SP_nevisidm_admin_Realm</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::auth::SecurityRoleFilter</filter-class>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>AuthenticationServlet</param-name>
            <param-value>Connector_SAML_SP_nevisidm_admin_Realm</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>DynamicRoleAcquire</param-name>
            <param-value>true</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>DynamicRoleAcquire.CheckRoleRemoval</param-name>
            <param-value>true</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>InterceptionRedirect</param-name>
            <param-value>never</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>LoginRendererServlet</param-name>
            <param-value>LoginRenderer_nevisLogrend</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>RolesRequired</param-name>
            <param-value>token.NEVIS_SecToken</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>StoreInterceptedRequest</param-name>
            <param-value>false</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://9c6ad44795320a7adec1ccde -->
    <filter>
        <filter-name>ResponseHeader_Security_Response_Headers</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::delegation::HeaderDelegationFilter</filter-class>
        <!-- source: pattern://9c6ad44795320a7adec1ccde -->
        <init-param>
            <param-name>DelegateToFrontend</param-name>
            <param-value>
                Content-Security-Policy-Report-Only:default-src 'none'; script-src  'self' 'sha256-4r4l/2aahtvPIxQP0YmmqfftYXNwNqxxqOUaXVE0FjM=' 'sha256-3sconOU5uxdS6tVa5DhEli3N+/aY9IvYh873WqDptD0=' 'sha256-N3+RfLbnlpBc0lUnNy4soyLbX0tNDqQt5LPzkEsYOHo=' 'sha256-uOoE0nq21NJDv37YLUOxV9aCnNstJ0GK7BiXNMXQAcI='; img-src 'self'; style-src  'self' 'sha256-/yxYnm5QjS5hz1/KbfNQ/Deyfb9rK1xZefYJGNT9UmU=' 'sha256-2diQqrANllVP9IWjXj1A6fjjvlPtpN6NXlmTiRJneCU=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-DHdp+1g/LIFDKreGcezYZywjzyvqUEbmjv4fv+nEQeE=' 'sha256-DtJ0G5eArSV7tvvFUUeV7iyiWfBGflIkRW64/tmMWUk=' 'sha256-JhfXJ5URuB/EAqhZ9vqgEO6trOuCE0w2/ChmfrVzxFo=' 'sha256-MdFWcEIx4V82/ap9SUt01BxZMN4eFGEl8hNDFEGIzJU=' 'sha256-dnsMWK7eeuHUJm/wLL2CXCibJJV0lnUxjpqlu5fcUsg=' 'sha256-iKyiqXXi2KXxNcOUCr+VCUo09ipHFWuIkztLNvUXhd0=' 'sha256-ifPclQYYwRDXSPQgB9/6UgAgEICBpwegJBWNhOI8dOA='; form-action 'self' https://trustbroker.agov-d.azure.adnovum.net/adfs/ls; font-src 'self'; connect-src 'self';
                Cross-Origin-Embedder-Policy:require-corp
                Cross-Origin-Opener-Policy:same-origin
                Cross-Origin-Resource-Policy:same-site
                Permissions-Policy:geolocation=(), camera=(), microphone=(), interest-cohort=()
                Referrer-Policy:strict-origin-when-cross-origin
                Strict-Transport-Security:max-age=63072000; includeSubDomains;
                X-Content-Type-Options:nosniff
                X-Frame-Options:DENY
            </param-value>
        </init-param>
    </filter>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter>
        <filter-name>SAML_AllowCORS_SAML_SP_nevisidm_admin_Realm</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::lua::LuaFilter</filter-class>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Script</param-name>
            <param-value>
                function inputHeader(request, response)
                    if request:getHeader("Origin") == "https://trustbroker.agov-d.azure.adnovum.net" then
                        response:setHeader("Access-Control-Allow-Origin", "https://trustbroker.agov-d.azure.adnovum.net")
                    end
                    response:setHeader("Access-Control-Allow-Credentials", "true")
                    response:setHeader("Access-Control-Expose-Headers", "*")                           
                    if request:getMethod() == "OPTIONS" then
                        response:send(204)
                    end
                end
            </param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Script.InputHeaderFunctionName</param-name>
            <param-value>inputHeader</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter>
        <filter-name>SAML_SAML_SP_nevisidm_admin_Realm</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::auth::IdentityCreationFilter</filter-class>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>AuthenticationServlet</param-name>
            <param-value>Connector_SAML_SP_nevisidm_admin_Realm</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>BodyReadSize</param-name>
            <param-value>32768</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>EntryPointID</param-name>
            <param-value>admin.agov-w.azure.adnovum.net</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>InactiveInterval</param-name>
            <param-value>1800</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>InterceptionRedirect</param-name>
            <param-value>never</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>LoginRendererServlet</param-name>
            <param-value>LoginRenderer_nevisLogrend</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Realm</param-name>
            <param-value>SAML_SP_nevisidm_admin_Realm</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>RecheckAuthentication</param-name>
            <param-value>On</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>RenewIdentification</param-name>
            <param-value>true</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>StateKey</param-name>
            <param-value>SAML_SP_nevisidm_admin_Realm</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>StoreInterceptedRequest</param-name>
            <param-value>false</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter>
        <filter-name>SessionHandler_SAML_SP_nevisidm_admin_Realm</filter-name>
        <filter-class>ch::nevis::nevisproxy::filter::session::SessionManagementFilter</filter-class>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Cookie.ExtraAttributes</param-name>
            <param-value>SameSite=Strict</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Cookie.Name</param-name>
            <param-value>OP-ADMIN</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Cookie.Secure</param-name>
            <param-value>true</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Identification</param-name>
            <param-value>COOKIE</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>MaxInactiveInterval</param-name>
            <param-value>180</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>MaxLifetime</param-name>
            <param-value>14400</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Servlet</param-name>
            <param-value>LocalSessionStoreServlet</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>UpdateTimeStampMinInterval</param-name>
            <param-value>120</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter>
        <filter-name>Token_NEVIS_SecToken</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::delegation::DelegationFilter</filter-class>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>DelegateBasicAuth</param-name>
            <param-value>
                AUTH:user.auth.UserId
                AUTH:token.NEVIS_SecToken
            </param-value>
        </init-param>
    </filter>
    <!-- source: pattern://076ce5c5440843a23150b386 -->
    <filter>
        <filter-name>URLHandler_Virtual_Host_idmOperations-Loggedout</filter-name>
        <filter-class>ch::nevis::isiweb4::filter::rewrite::RewriteFilter</filter-class>
        <!-- source: pattern://076ce5c5440843a23150b386 -->
        <init-param>
            <param-name>ModifierFlags</param-name>
            <param-value>+RESET_PARAMS</param-value>
        </init-param>
        <!-- source: pattern://076ce5c5440843a23150b386 -->
        <init-param>
            <param-name>RequestURI</param-name>
            <param-value>
                ^/loggedout.*$:/resources/errorPages/Loggedout.html:PT
                ^/favicon.ico$:/resources/favicon.ico:PT
            </param-value>
        </init-param>
        <!-- source: pattern://076ce5c5440843a23150b386 -->
        <init-param>
            <param-name>UseQueryString</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <filter-mapping>
        <filter-name>Redirect_Default</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://58ece0328f5bf4d78e1a82d2 -->
    <filter-mapping>
        <filter-name>DefaultErrorFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://076ce5c5440843a23150b386 -->
    <filter-mapping>
        <filter-name>URLHandler_Virtual_Host_idmOperations-Loggedout</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://9c6ad44795320a7adec1ccde -->
    <filter-mapping>
        <filter-name>ResponseHeader_Security_Response_Headers</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>SessionHandler_SAML_SP_nevisidm_admin_Realm</filter-name>
        <url-pattern>/nevisidm/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>SessionHandler_SAML_SP_nevisidm_admin_Realm</filter-name>
        <url-pattern>/SAML2/ACS/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>SessionHandler_SAML_SP_nevisidm_admin_Realm</filter-name>
        <url-pattern>/SAML2/stepup/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>SAML_AllowCORS_SAML_SP_nevisidm_admin_Realm</filter-name>
        <url-pattern>/SAML2/ACS/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
    <filter-mapping>
        <filter-name>ModSecurity_nevisIDM_Administration_GUI</filter-name>
        <url-pattern>/nevisidm/admin/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>Authentication_SAML_SP_nevisidm_admin_Realm</filter-name>
        <url-pattern>/nevisidm/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>SAML_SAML_SP_nevisidm_admin_Realm</filter-name>
        <url-pattern>/SAML2/ACS/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>SAML_SAML_SP_nevisidm_admin_Realm</filter-name>
        <url-pattern>/SAML2/stepup/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>Requirement_NEVIS_SecToken_SAML_SP_nevisidm_admin_Realm</filter-name>
        <url-pattern>/nevisidm/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <filter-mapping>
        <filter-name>Token_NEVIS_SecToken</filter-name>
        <url-pattern>/nevisidm/*</url-pattern>
    </filter-mapping>
    <!-- source: pattern://4095d4e66ef51810f07a6ed3, pattern://4095d4e66ef51810f07a6ed3#nevisIDM -->
    <filter-mapping>
        <filter-name>CSRFRewrite_nevisIDM_Administration_GUI</filter-name>
        <url-pattern>/nevisidm/JavaScriptServlet</url-pattern>
    </filter-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <listener>
        <listener-class>ch::nevis::isiweb4::listener::SessionListener</listener-class>
    </listener>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <servlet>
        <servlet-name>Connector_SAML_SP_nevisidm_admin_Realm</servlet-name>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <servlet-class>ch::nevis::isiweb4::servlet::connector::soap::esauth4::Esauth4ConnectorServlet</servlet-class>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.DNSCache.ttl</param-name>
            <param-value>60</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.InetAddress</param-name>
            <param-value>auth-v1:8991</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.KeepAlive.LifeTime</param-name>
            <param-value>30</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.RequestTimeout</param-name>
            <param-value>90000</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.ResourceManager.RetryTimeout</param-name>
            <param-value>0</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.SSLCACertificateFile</param-name>
            <param-value>/var/opt/keys/trust/proxy-idm-v1-saml-sp-nevisidm-admin-realm-tls-trust/truststore.pem</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.SSLCheckPeerHostname</param-name>
            <param-value>false</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.SSLClientCertificateFile</param-name>
            <param-value>/var/opt/keys/own/proxy-idm-v1-saml-sp-nevisidm-admin-realm-identity/cert.pem</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>Transport.SSLClientKeyFile</param-name>
            <param-value>/var/opt/keys/own/proxy-idm-v1-saml-sp-nevisidm-admin-realm-identity/key.pem</param-value>
        </init-param>
    </servlet>
    <!-- source: pattern://4095d4e66ef51810f07a6ed3, pattern://4095d4e66ef51810f07a6ed3#allowedMethods, pattern://4095d4e66ef51810f07a6ed3#nevisIDM -->
    <servlet>
        <servlet-name>Connector_nevisIDM_Administration_GUI</servlet-name>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
        <servlet-class>ch::nevis::isiweb4::servlet::connector::http::HttpsConnectorServlet</servlet-class>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3#allowedMethods -->
        <init-param>
            <param-name>AllowedMethods</param-name>
            <param-value>GET,DELETE,PUT,PATCH,POST,HEAD,OPTIONS</param-value>
        </init-param>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
        <init-param>
            <param-name>AutoRewrite</param-name>
            <param-value>header</param-value>
        </init-param>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
        <init-param>
            <param-name>CookieManager</param-name>
            <param-value>retain:^.*$</param-value>
        </init-param>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3#nevisIDM -->
        <init-param>
            <param-name>InetAddress</param-name>
            <param-value>idm-v1-web:8989</param-value>
        </init-param>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3 -->
        <init-param>
            <param-name>ResourceManager.RetryTimeout</param-name>
            <param-value>0</param-value>
        </init-param>
        <!-- source: pattern://4095d4e66ef51810f07a6ed3#nevisIDM -->
        <init-param>
            <param-name>UseSSL</param-name>
            <param-value>true</param-value>
        </init-param>
    </servlet>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <servlet>
        <servlet-name>Hosting_Default</servlet-name>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <servlet-class>ch::nevis::isiweb4::servlet::defaults::DefaultServlet</servlet-class>
    </servlet>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <servlet>
        <servlet-name>LocalSessionStoreServlet</servlet-name>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <servlet-class>ch::nevis::nevisproxy::servlet::cache::local::LocalSessionStoreServlet</servlet-class>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>MaxInactiveInterval</param-name>
            <param-value>600</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>MaxLifetime</param-name>
            <param-value>28800</param-value>
        </init-param>
        <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
        <init-param>
            <param-name>MemorySize</param-name>
            <param-value>512000000</param-value>
        </init-param>
    </servlet>
    <!-- source: pattern://8401da6318c6915d689cdfc9 -->
    <servlet>
        <servlet-name>LoginRenderer_nevisLogrend</servlet-name>
        <!-- source: pattern://8401da6318c6915d689cdfc9 -->
        <servlet-class>ch::nevis::isiweb4::servlet::rendering::LoginRendererServlet</servlet-class>
        <!-- source: pattern://8401da6318c6915d689cdfc9 -->
        <init-param>
            <param-name>PropagateRemoteHeaders</param-name>
            <param-value>Set-Cookie</param-value>
        </init-param>
        <!-- source: pattern://8401da6318c6915d689cdfc9 -->
        <init-param>
            <param-name>RenderingProvider</param-name>
            <param-value>remote:NevisLogrendConnector_nevisLogrend:/nevislogrend/index.vm?logrendresourcepath=/nevislogrend</param-value>
        </init-param>
    </servlet>
    <!-- source: pattern://8401da6318c6915d689cdfc9 -->
    <servlet>
        <servlet-name>NevisLogrendConnector_nevisLogrend</servlet-name>
        <!-- source: pattern://8401da6318c6915d689cdfc9 -->
        <servlet-class>ch::nevis::isiweb4::servlet::connector::http::HttpConnectorServlet</servlet-class>
        <!-- source: pattern://8401da6318c6915d689cdfc9 -->
        <init-param>
            <param-name>InetAddress</param-name>
            <param-value>logrend-v1:8988</param-value>
        </init-param>
        <!-- source: pattern://8401da6318c6915d689cdfc9 -->
        <init-param>
            <param-name>MappingType</param-name>
            <param-value>pathinfo</param-value>
        </init-param>
        <!-- source: pattern://8401da6318c6915d689cdfc9 -->
        <init-param>
            <param-name>ResourceManager.RetryTimeout</param-name>
            <param-value>0</param-value>
        </init-param>
        <!-- source: pattern://8401da6318c6915d689cdfc9 -->
        <init-param>
            <param-name>URIPrefix</param-name>
            <param-value>/nevislogrend</param-value>
        </init-param>
    </servlet>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <servlet-mapping>
        <servlet-name>Hosting_Default</servlet-name>
        <url-pattern>/SAML2/ACS/*</url-pattern>
    </servlet-mapping>
    <!-- source: pattern://6f9c9f982dcc7ef59a34f1f7 -->
    <servlet-mapping>
        <servlet-name>Hosting_Default</servlet-name>
        <url-pattern>/SAML2/stepup/*</url-pattern>
    </servlet-mapping>
    <!-- source: pattern://4095d4e66ef51810f07a6ed3, pattern://4095d4e66ef51810f07a6ed3#nevisIDM -->
    <servlet-mapping>
        <servlet-name>Connector_nevisIDM_Administration_GUI</servlet-name>
        <url-pattern>/nevisidm/*</url-pattern>
        <exclude-url-regex>/nevisidm/services/.*|/nevisidm/api/.*|/nevisidm/selfadmin/.*</exclude-url-regex>
    </servlet-mapping>
    <!-- source: pattern://8401da6318c6915d689cdfc9 -->
    <servlet-mapping>
        <servlet-name>NevisLogrendConnector_nevisLogrend</servlet-name>
        <url-pattern>/nevislogrend/*</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Hosting_Default</servlet-name>
        <url-pattern>/*</url-pattern>
    </servlet-mapping>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <mime-mapping>
        <extension>txt</extension>
        <mime-type>text/plain</mime-type>
    </mime-mapping>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <mime-mapping>
        <extension>css</extension>
        <mime-type>text/css</mime-type>
    </mime-mapping>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <mime-mapping>
        <extension>ico</extension>
        <mime-type>image/x-icon</mime-type>
    </mime-mapping>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <mime-mapping>
        <extension>svg</extension>
        <mime-type>image/svg+xml</mime-type>
    </mime-mapping>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <mime-mapping>
        <extension>ttf</extension>
        <mime-type>application/x-font-ttf</mime-type>
    </mime-mapping>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <mime-mapping>
        <extension>js</extension>
        <mime-type>application/javascript</mime-type>
    </mime-mapping>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <mime-mapping>
        <extension>html</extension>
        <mime-type>text/html</mime-type>
    </mime-mapping>
    <!-- source: pattern://1200a58c76686d520c21edb0 -->
    <mime-mapping>
        <extension>woff2</extension>
        <mime-type>application/font-woff2</mime-type>
    </mime-mapping>
</web-app>
