String metadataUrl = (String) buildDefaultUrlMethod.invoke(authenticator, "/sso/metadata");
            assertEquals("https://fess.example.com/sso/metadata", metadataUrl);

            // Test ACS endpoint
            String acsUrl = (String) buildDefaultUrlMethod.invoke(authenticator, "/sso/");
            assertEquals("https://fess.example.com/sso/", acsUrl);

            // Test SLO endpoint

        Exception cause = new IllegalArgumentException("Invalid SSO token");
        SsoLoginException exception = new SsoLoginException("SSO error", cause);

        Throwable retrievedCause = exception.getCause();
        assertNotNull(retrievedCause);
        assertSame(cause, retrievedCause);
        assertEquals("Invalid SSO token", retrievedCause.getMessage());
    }

    @Test

        Exception rootCause = new Exception("Network timeout");
        Exception middleCause = new Exception("SSO provider unreachable", rootCause);
        SsoProcessException topException = new SsoProcessException("SSO authentication failed", middleCause);

        assertEquals("SSO authentication failed", topException.getMessage());
        assertEquals(middleCause, topException.getCause());

        // Use legacy "aad" SSO type
        currentSsoType = "aad";
        ssoManager = new SsoManager() {
            @Override
            protected String getSsoType() {
                return currentSsoType;
            }
        };

        // Verify that "aad" SSO type resolves to "entraidAuthenticator"

 * saml.sp.entityid=https://your-fess-server.example.com/sso/metadata
 *
 * # Assertion Consumer Service URL
 * saml.sp.assertion_consumer_service.url=https://your-fess-server.example.com/sso/
 *
 * # Single Logout Service URL
 * saml.sp.single_logout_service.url=https://your-fess-server.example.com/sso/logout
 * </pre>
 *
 * <h2>Complete Configuration Example (Okta)</h2>
 * <pre>
 * sso.type=saml
 *

public class SsoMessageExceptionTest extends UnitFessTestCase {

    @Test
    public void test_constructor_withMessageCodeMessageAndCause() {
        // Setup
        final String message = "Test SSO error message";
        final Exception cause = new RuntimeException("Test cause");
        final VaMessenger<FessMessages> messageCode = messages -> messages.addErrorsSsoLoginError(UserMessages.GLOBAL_PROPERTY_KEY);

import org.codelibs.fess.exception.SsoLoginException;
import org.codelibs.fess.mylasta.action.FessUserBean;
import org.codelibs.fess.mylasta.direction.FessConfig;
import org.codelibs.fess.sso.SsoAuthenticator;
import org.codelibs.fess.sso.SsoResponseType;
import org.codelibs.fess.util.ComponentUtil;
import org.codelibs.spnego.SpnegoFilterConfig;
import org.codelibs.spnego.SpnegoHttpFilter;

     * @return The permission helper.
     */
    public static PermissionHelper getPermissionHelper() {
        return getComponent(PERMISSION_HELPER);
    }

    /**
     * Gets the SSO manager component.
     * @return The SSO manager.
     */
    public static SsoManager getSsoManager() {
        return getComponent(SSO_MANAGER);
    }

    /**
     * Gets the thumbnail manager component.

import org.codelibs.fess.app.web.base.login.OpenIdConnectCredential;
import org.codelibs.fess.crawler.Constants;
import org.codelibs.fess.mylasta.action.FessUserBean;
import org.codelibs.fess.sso.SsoAuthenticator;
import org.codelibs.fess.sso.SsoResponseType;
import org.codelibs.fess.util.ComponentUtil;
import org.dbflute.optional.OptionalEntity;
import org.lastaflute.web.login.credential.LoginCredential;

import org.codelibs.fess.mylasta.action.FessUserBean;
import org.codelibs.fess.mylasta.direction.FessConfig;
import org.codelibs.fess.opensearch.user.exbhv.UserBhv;
import org.codelibs.fess.sso.SsoAuthenticator;
import org.codelibs.fess.util.ComponentUtil;
import org.dbflute.optional.OptionalEntity;
import org.dbflute.optional.OptionalThing;
import org.lastaflute.core.magic.async.AsyncManager;