* Handles OAuth2/OpenID Connect authentication flow with Entra ID.
 */
public class EntraIdAuthenticator implements SsoAuthenticator {

    private static final Logger logger = LogManager.getLogger(EntraIdAuthenticator.class);

    /**
     * Default constructor for EntraIdAuthenticator.
     */
    public EntraIdAuthenticator() {
        // Default constructor
    }

    // New configuration keys for Entra ID

        EntraIdAuthenticator authenticator = new EntraIdAuthenticator();

        List<String> groupList = new ArrayList<>();
        List<String> roleList = new ArrayList<>();
        List<String> groupIdsForParentLookup = new ArrayList<>();

        // Call with invalid URL - should handle gracefully

         */
        public EntraIdUser(final IAuthenticationResult authResult) {
            this.authResult = authResult;
            final EntraIdAuthenticator authenticator = ComponentUtil.getComponent(EntraIdAuthenticator.class);
            authenticator.updateMemberOf(this);
        }

        @Override
        public String getName() {
            return authResult.account().username();

        ComponentUtil.register(testAuthenticator, "entraidAuthenticator");

        // Use legacy "aad" SSO type
        currentSsoType = "aad";
        ssoManager = new SsoManager() {
            @Override
            protected String getSsoType() {
                return currentSsoType;
            }
        };

        // Verify that "aad" SSO type resolves to "entraidAuthenticator"

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE components PUBLIC "-//DBFLUTE//DTD LastaDi 1.0//EN"
	"http://dbflute.org/meta/lastadi10.dtd">
<components>
	<component name="entraidAuthenticator" class="org.codelibs.fess.sso.entraid.EntraIdAuthenticator">
	</component>
	<component name="oicAuthenticator" class="org.codelibs.fess.sso.oic.OpenIdConnectAuthenticator">
	</component>
	<component name="samlAuthenticator" class="org.codelibs.fess.sso.saml.SamlAuthenticator">