<AuthState name="${state.entry}" class="ch.nevis.esauth.auth.states.saml.AssertionRequestState" final="false" resumeState="false">
	<ResultCond name="ok" next="${state.done}" authLevel="auth.strong"/>
	<ResultCond name="default"  next="${state.failed}"/>
	<Response value="AUTH_ERROR">
		<Gui name="NoGui"/>
	</Response>
	<!-- used for the key material -->
	<propertyRef name="SAML_SP_nevisidm_operations_Realm_SAML_IDP_op_Connector_Connector"/>

	<property name="idpURL" value="${param.op.atb.ssoUrl}"/>
	<property name="consumerURL" value="${param.op.onboarding.consumerURL}"/>

	<property name="out.binding" value="http-post"/>
        <property name="out.requestType" value="AuthnRequest"/>
	<property name="out.sign" value="AuthnRequest"/>
	<property name="out.signatureKeyInfo" value="Certificate"/>
	<property name="out.issuer" value="${param.op.onboarding.issuer}"/>
	<property name="request.RequestedAuthnContext.AuthnContextClassRef" value="${sess:agov.op.onboarding.ctxClass}"/>
	<property name="request.RequestedAuthnContext.Comparison" value="minimum"/>
        <property name="request.ttl" value="60"/>
        <property name="relayState" value=""/>
</AuthState>
