* @return The Entra ID user instance.
     */
    public EntraIdUser getUser() {
        return new EntraIdUser(authResult);
    }

    /**
     * Entra ID user implementation providing user information and permissions.
     */
    public static class EntraIdUser implements FessUser {
        private static final long serialVersionUID = 1L;

import org.codelibs.curl.CurlResponse;
import org.codelibs.fess.app.web.base.login.ActionResponseCredential;
import org.codelibs.fess.app.web.base.login.EntraIdCredential;
import org.codelibs.fess.app.web.base.login.EntraIdCredential.EntraIdUser;
import org.codelibs.fess.app.web.base.login.FessLoginAssist.LoginCredentialResolver;
import org.codelibs.fess.crawler.Constants;
import org.codelibs.fess.exception.SsoLoginException;

        assertEquals(testAuthenticator, authenticator);
    }

    @Test
    public void test_getLoginCredential_withAadSsoType() {
        final LoginCredential expectedCredential = new TestLoginCredential("entraiduser");
        testAuthenticator.setLoginCredential(expectedCredential);

        // Register authenticator with entraid name
        ComponentUtil.register(testAuthenticator, "entraidAuthenticator");

        protected void scheduleParentGroupLookup(EntraIdUser user, List<String> initialGroups, List<String> initialRoles,
                List<String> groupIds) {
            scheduleParentGroupLookupCalled.set(true);
            // Don't call super to avoid actual scheduling in tests
        }

        @Override
        protected void processDirectMemberOf(EntraIdUser user, List<String> groupList, List<String> roleList,