<AuthState name="${state.entry}" class="ch.nevis.idm.authstate.IdmUserVerifyState" final="false" resumeState="false">
	<ResultCond name="prospect" next="${state.entry}_getProperties"/>
	<ResultCond name="default" next="${state.failed}"/>
    <ResultCond name="failed" next="${state.failed}"/>
	<ResultCond name="clientNotFound" next="${state.failed}"/>
	<Response value="AUTH_CONTINUE">
		<Gui name="internal_error">
			<GuiElem name="transferId" type="hidden" value="${request:traceId}" optional="true"/>
		</Gui>
	</Response>
	<propertyRef name="nevisIDM_Connector"/>
	<property name="userExtId" value="${session:agov.eid.linkedAccountExtId}"/>
	<property name="clientExtId" value="${var.eid.idm.rest.clientExtId}"/>
	<property name="presetNoteValues" value="false"/>
    <property name="detaillevel.user" value="HIGH"/>
	<property name="detaillevel.profile" value="HIGH"/>
	<property name="detaillevel.role" value="MEDIUM"/>
	<property name="detaillevel.authorization" value="HIGH"/>
	<property name="detaillevel.dataroom" value="LOW"/>
	<property name="detaillevel.credential" value="HIGH"/>
	<property name="detaillevel.property" value="HIGH"/>
	<property name="detaillevel.unit" value="LOW"/>
	<property name="detaillevel.default" value="EXCLUDE"/>
</AuthState>

<!-- NOTE/aca/2025/06/15 Use the same detail levels as the agov login, so that we can switch to EnsureAccountState afterwards -->

<!-- We could potentially also just reuse the States form the regular login for this with some switches  -->

<AuthState name="${state.entry}_getProperties" final="false" class="ch.nevis.idm.authstate.IdmGetPropertiesState" resumeState="false">
	<ResultCond name="ok" next="${state.done}"/>
	<ResultCond name="default" next="${state.failed}"/>
	<ResultCond name="clientNotFound" next="${state.failed}"/>
	<Response value="AUTH_CONTINUE">
		<Gui name="internal_error">
			<GuiElem name="transferId" type="hidden" value="${request:traceId}" optional="true"/>
		</Gui>
	</Response>
	<propertyRef name="nevisIDM_Connector"/>
	
	<property name="clientExtId" value="${var.eid.idm.rest.clientExtId}"/>
	<property name="user.attributes" value="loginId,extId,firstName,name,email,mobile,birthDate, gender, language, street, houseNumber, postalCode, city, country"/>
	<property name="user.properties" value="eIdNumber,nationality,placeOfBirth,svnr"/>
	<property name="chooseDefaultProfile" value="true"/>
	<property name="forceDataReload" value="false"/>
	<property name="userExtId" value="${session:agov.eid.linkedAccountExtId}"/>
	<property name="detaillevel.user" value="HIGH"/>
	<property name="detaillevel.profile" value="HIGH"/>
	<property name="detaillevel.role" value="HIGH"/>
	<property name="detaillevel.authorization" value="HIGH"/>
	<property name="detaillevel.dataroom" value="HIGH"/>
	<property name="detaillevel.credential" value="HIGH"/>
	<property name="detaillevel.property" value="HIGH"/>
	<property name="detaillevel.unit" value="LOW"/>
	<property name="detaillevel.default" value="EXCLUDE"/>
</AuthState>