<AuthState name="${state.entry}" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false" resumeState="false">
	<ResultCond name="done" next="${state.done}"/>
	<ResultCond name="reload" next="${state.entry}_Reload"/>
	<ResultCond name="failed" next="${state.failed}"/>
	<Response value="AUTH_CONTINUE"/>
	<property name="scriptTraceGroup" value="AGOV-ACCT"/>
	<property name="script" value="file:///var/opt/nevisauth/default/conf/ensureAccountState.groovy"/>
	<property name="parameter.idm.baseUrl" value="https://${var.idm-connection-fqdn}:8989/nevisidm/api"/>
	<property name="parameter.unitExtid" value="${param.agov.unitExtId}"/>
	<property name="parameter.level100.roleExtid" value="${param.agov.level100.roleExtid}"/>
	<property name="parameter.idm.httpclient.tls.trustStoreRef" value="Ensure_Account_State"/>
</AuthState>
<AuthState name="${state.entry}_Reload" final="false" class="ch.nevis.idm.authstate.IdmGetPropertiesState" resumeState="false">
	<ResultCond name="ok" next="${state.done}"/>
	<ResultCond name="default" next="${state.failed}"/>
	<Response value="AUTH_CONTINUE">
		<Gui name="internal_error">
			<GuiElem name="transferId" type="hidden" value="${request:traceId}" optional="true"/>
		</Gui>
	</Response>
	<propertyRef name="nevisIDM_Connector"/>
	<!-- Returned Attributes in SecToken -->
	<property name="client.name" value="${param.client.name}"/>
	<property name="user.attributes" value="${param.attributes}"/>
	<property name="user.properties" value="${param.properties}"/>
	<property name="user.cred.context_password1.state" value="true"/>
    <property name="user.cred.context_password1.context" value="true"/>
	<property name="chooseDefaultProfile" value="true"/>
	<property name="forceDataReload" value="true"/>
	<property name="detaillevel.user" value="HIGH"/>
	<property name="detaillevel.profile" value="HIGH"/>
	<property name="detaillevel.role" value="MEDIUM"/>
	<property name="detaillevel.authorization" value="HIGH"/>
	<property name="detaillevel.dataroom" value="LOW"/>
	<property name="detaillevel.credential" value="HIGH"/>
	<property name="detaillevel.property" value="HIGH"/>
	<property name="detaillevel.unit" value="LOW"/>
	<property name="detaillevel.default" value="EXCLUDE"/>
</AuthState>
