{
	"definitions": {
		"url": {
			"type": "string",
			"pattern": "^(https?|ftp|file)://[-a-zA-Z0-9+&@#/%?=~_|!:,.;]*[-a-zA-Z0-9+&@#/%=~_|]"
		},
		"class": {
			"type": "string",
			"enum": ["ActiveDirectory",
			"CustomJava",
			"LDAP",
			"LDAP_AD",
			"LDAP_IBM",
			"LDAP_SUNONE",
			"OIDC_ADFS",
			"OIDC_AzureAD",
			"OIDC_BlueID",
			"OIDC_Generic",
			"OIDC_Google",
			"OIDC_OKTA",
			"OIDC_Ping",
			"OIDC_SalesForce",
			"OIDC_SiteMinder",
			"OIDC_IBMCloudId",
			"OIDC_MSIdentity",
			"SAP",
			"Series7",
			"SiteMinder",
			"TSP_OIDC_ADFS",
			"TSP_OIDC_AzureAD",
			"TSP_OIDC_BlueID",
			"TSP_OIDC_Generic",
			"TSP_OIDC_Google",
			"TSP_OIDC_OKTA",
			"TSP_OIDC_Ping",
			"TSP_OIDC_SalesForce",
			"TSP_OIDC_SiteMinder",
			"TSP_OIDC_IBMCloudId",
			"TSP_OIDC_MSIdentity"]
		},
		"credential": {
			"type": "object",
			"properties": {
				"username": {
					"type": "string"
				},
				"password": {
					"type": "string"
				}
			}
		}
	},
	"$schema": "http://json-schema.org/draft-04/schema#",
	"type": "object",
	"title": "The Namespace Schema",
	"properties": {
		"id": {
			"type": "string",
			"pattern": "^[^:]+$"
		},
		"name": {
			"type": "string"
		},
		"identityProviderType": {
			"type": "string",
			"title": "The Provider Type",
			"default": "OIDC-Generic",
			"pattern": "^[a-zA-z0-9-_]+$"
		},
		"selectableForAuth": {
			"type": "boolean",
			"title": "",
			"default": true
		},
		"claimName": {
			"type": "string",
			"title": "",
			"default": "",
			"pattern": "^(.*)$"
		},
		"trustedEnvName": {
			"type": "string",
			"title": "",
			"default": "REMOTE_USER",
			"pattern": "^(.*)$"
		},
		"redirectNsID": {
			"type": "string",
			"title": "",
			"default": "",
			"pattern": "^(.*)$"
		},
		"useDiscoveryEndpoint": {
			"type": "boolean",
			"title": "",
			"default": true
		},
		"clientId": {
			"type": "string",
			"title": "",
			"default": "clientid",
			"pattern": "^(.*)$"
		},
		"returnUrl": {
			"$ref": "#/definitions/url"
		},
		"authScope": {
			"type": "string",
			"title": "",
			"default": "openid",
			"pattern": "^.*openid.*$"
		},
		"accountClaims": {
			"type": "string",
			"title": "",
			"default": "token",
			"enum": ["token",
			"userinfo"]
		},
		"tokenEndpointAuth": {
			"type": "string",
			"title": "",
			"default": "client_secret_post",
			"enum": ["client_secret_basic",
			"client_secret_post",
			"private_key_jwt"]
		},
		"clientSecret": {
			"type": "string"
		},
		"privateKeyFile": {
			"type": "string"
		},
		"privateKeyPassword": {
			"type": "string"
		},
		"privateKeyId": {
			"type": "string"
		},
		"keyLocation": {
			"type": "string",
			"title": "Key Location",
			"default": "jwks_uri",
			"enum": ["jwks_uri",
			"file"]
		},
		"idpCertificateFile": {
			"type": "string"
		},
		"jwksEndpint": {
			"$ref": "#/definitions/url"
		},
		"pgStrategy": {
			"type": "string",
			"title": "",
			"default": "idToken",
			"enum": ["idToken",
			"idTokenUserinfo",
			"unsupported",
			"userinfo"]
		},
		"pgInclScope": {
			"type": "boolean",
			"title": "",
			"default": true
		},
		"pgAddParams": {
			"type": "string",
			"pattern": "(^&.*)?"
		},
		"tcStrategy": {
			"type": "string",
			"title": "",
			"default": "credentials",
			"enum": ["credentials",
			"credentialsAndToken",
			"token",
			"refreshToken"]
		},
		"tcAccountClaims": {
			"type": "string",
			"title": "",
			"default": "id_token",
			"enum": ["id_token",
			"userinfo"]
		},
		"oidcDiscEndpoint": {
			"$ref": "#/definitions/url"
		},
		"issuer": {
			"type": "string"
		},
		"oidcTokenEndpoint": {
			"$ref": "#/definitions/url"
		},
		"oidcAuthEndpoint": {
			"$ref": "#/definitions/url"
		},
		"advancedProperties": {
			"type": "object"
		},
		"class": {
			"$ref": "#/definitions/class"
		},
		"connection": {
			"type": "string",
			"title": "The host and port",
			"default": "",
			"pattern": "^.*:[0-9]{1,5}"
		},
		"baseDN": {
			"type": "string"
		},
		"userLookup": {
			"type": "string"
		},
		"useExternalIdentity": {
			"type": "boolean",
			"default": false
		},
		"externalIdentityMapping": {
			"type": "string"
		},
		"bindCredentials": {
			"$ref": "#/definitions/credential"
		},
		"sizeLimit": {
			"type": "integer",
			"default": -1
		},
		"timeOut": {
			"type": "integer",
			"default": -1
		},
		"useBindCredentialsForSearch": {
			"type": "boolean",
			"default": false
		},
		"allowEmptyPswd": {
			"type": "boolean",
			"default": false
		},
		"camidAttribute": {
			"type": "string"
		},
		"dataEncoding": {
			"type": "string",
			"default": "UTF-8"
		},
		"sslCertificateDatabase": {
			"type": "string"
		},
		"tenantIdMapping": {
			"type": "object"
		},
		"tenantBoundingSetMapping": {
			"type": "object"
		},
		"folderObjectClass": {
			"type": "string",
			"default": "organizationalUnit"
		},
		"folderDescription": {
			"type": "string",
			"default": "description"
		},
		"folderName": {
			"type": "string",
			"default": "ou"
		},
		"groupObjectClass": {
			"type": "string",
			"default": "groupOfUniqueNames"
		},
		"groupDescription": {
			"type": "string",
			"default": "description"
		},
		"groupMembers": {
			"type": "string",
			"default": "uniqemember"
		},
		"groupName": {
			"type": "string",
			"default": "cn"
		},
		"accountObjectClass": {
			"type": "string",
			"default": "inetOrgPerson"
		},
		"accountBusinessPhone": {
			"type": "string",
			"default": "telephonenumber"
		},
		"accountContentLocale": {
			"type": "string",
			"default": "preferredlanguage"
		},
		"accountDescription": {
			"type": "string",
			"default": "description"
		},
		"accountEmail": {
			"type": "string",
			"default": "mail"
		},
		"accountFaxPhone": {
			"type": "string",
			"default": "facsimiletelephonenumber"
		},
		"accountGivenName": {
			"type": "string",
			"default": "givenname"
		},
		"accountHomePhone": {
			"type": "string",
			"default": "homephone"
		},
		"accountMobilePhone": {
			"type": "string",
			"default": "mobile"
		},
		"accountName": {
			"type": "string",
			"default": "cn"
		},
		"accountPagerPhone": {
			"type": "string",
			"default": "pager"
		},
		"accountPassword": {
			"type": "string",
			"default": "userPassword"
		},
		"accountPostalAddress": {
			"type": "string",
			"default": "postaladdress"
		},
		"accountProductLocale": {
			"type": "string",
			"default": "preferredlanguage"
		},
		"accountSurname": {
			"type": "string",
			"default": "sn"
		},
		"accountUserName": {
			"type": "string",
			"default": "uid"
		},
		"customProperties": {
			"type": "object"
		},
		"authModule": {
			"type": "string",
			"description": "Name of CJAP Java Class"
		}
	}
}