<AuthState name="${state.entry}" class="ch.nevis.esauth.auth.states.saml.ServiceProviderState" final="false" resumeState="false">
	<ResultCond name="ok" next="${state.done}" authLevel="auth.strong"/>
	<ResultCond name="status-Responder"  next="${state.failed}"/>
	<ResultCond name="status-Requester"  next="${state.failed}"/>
	<Response value="AUTH_ERROR">
		<Gui name="NoGui"/>
	</Response>
	<!-- used for the key material -->
	<propertyRef name="SAML_SP_nevisidm_operations_Realm_SAML_IDP_op_Connector_Connector"/>

	<property name="idpURL" value="${param.op.atb.ssoUrl}"/>
	<property name="consumerURL" value="${param.op.onboarding.consumerURL}"/>
	<property name="relayState" value=""/>

	<property name="out.binding" value="none"/>

	<property name="in.binding" value="auto"/>
        <property name="in.relayState" value=""/>
	<property name="in.audienceRegex" value="${param.op.onboarding.issuer}"/>
	<property name="in.audience.checkrequired" value="true"/>
        <property name="in.map_issuer_certificate" value="false"/>
	<property name="in.verify" value="Response Assertion"/>
	<!-- property name="in.keystoreref" value=""/>
	<property name="in.keyobjectref" value=""/ -->
</AuthState>
