public static final String LABELS_LDAP_PROVIDER_URL = "{labels.ldapProviderUrl}";

    /** The key of the message: User DN */
    public static final String LABELS_LDAP_SECURITY_PRINCIPAL = "{labels.ldapSecurityPrincipal}";

    /** The key of the message: Bind DN */
    public static final String LABELS_LDAP_ADMIN_SECURITY_PRINCIPAL = "{labels.ldapAdminSecurityPrincipal}";

	// use the normalized form of the entityName (which will be an LDAP DN).
	userType := IAMUserType(mapping.UserType)
	isGroup := mapping.IsGroup
	entityName := mapping.UserOrGroup
	if globalIAMSys.GetUsersSysType() == LDAPUsersSysType && userType == stsUser {

		// Validate that the user or group exists in LDAP and use the normalized
		// form of the entityName (which will be an LDAP DN).
		var err error
		if isGroup {

// xn--pgbs0dh ("Tunisia", Arabic) : TN
// http://nic.tn
تونس

// xn--kpry57d ("Taiwan", Chinese, Traditional) : TW
// http://www.twnic.net/english/dn/dn_07a.htm
台灣

// xn--kprw13d ("Taiwan", Chinese, Simplified) : TW
// http://www.twnic.net/english/dn/dn_07a.htm
台湾

// xn--nnx388a ("Taiwan", Chinese, variant) : TW
臺灣

// xn--j1amh ("ukr", Cyrillic) : UA
укр

AiB4D,OAAS,EAAI7K,EAAAA,QAAEiH,IAAiB+B,cAAgB,EAC3EqL,QAASrU,EAAAA,QAAE2T,IAAkB9I,OAAS,EAAI7K,EAAAA,QAAE2T,IAAkB3N,SAAW,EACzEoO,eAAAA,GAGIE,EAAM5S,KAAK6S,KAAKzL,GAClBkC,EAAStJ,KAAKiG,QAAQkM,iBAEX,IAAX7I,IACFA,EAAS,GAGX,IAAMwJ,EAAmBxU,EAAAA,QA7DJ,qBA+DN,IAAXgL,IACEsJ,IAAQxL,EAAQsL,eAClBI,EAAiBzO,IAAIrE,KAAKiG,QAAQmM,oBAAsBQ,EAAMtJ,GACrDsJ,IAAQxL,EAAQN,OACzBgM,EAAiBzO,IAAIrE,KAAKiG,QAAQmM,oBAAsBQ,EAAMtJ,EAAUlC,EAAQC,OAASD,EAAQG,QAEjGuL,EAAiBzO,IAAIrE,KAAKiG,QAAQmM,oBAAsBQ,EAAMtJ,EAAUlC,EAAQC,QAG9Er...