String metadataUrl = (String) buildDefaultUrlMethod.invoke(authenticator, "/sso/metadata");
            assertEquals("https://fess.example.com/sso/metadata", metadataUrl);

            // Test ACS endpoint
            String acsUrl = (String) buildDefaultUrlMethod.invoke(authenticator, "/sso/");
            assertEquals("https://fess.example.com/sso/", acsUrl);

            // Test SLO endpoint

        Exception cause = new IllegalArgumentException("Invalid SSO token");
        SsoLoginException exception = new SsoLoginException("SSO error", cause);

        Throwable retrievedCause = exception.getCause();
        assertNotNull(retrievedCause);
        assertSame(cause, retrievedCause);
        assertEquals("Invalid SSO token", retrievedCause.getMessage());
    }

    @Test

        Exception rootCause = new Exception("Network timeout");
        Exception middleCause = new Exception("SSO provider unreachable", rootCause);
        SsoProcessException topException = new SsoProcessException("SSO authentication failed", middleCause);

        assertEquals("SSO authentication failed", topException.getMessage());
        assertEquals(middleCause, topException.getCause());

├── helper/                    # Cross-cutting utilities (~40+ helpers)
├── crawler/                   # Crawling engine (processor, transformer, service)
├── sso/                       # SSO implementations (oic, saml, spnego, entraid)
├── auth/                      # Authentication management
├── ldap/                      # LDAP integration
├── filter/                    # Servlet filters

        // Use legacy "aad" SSO type
        currentSsoType = "aad";
        ssoManager = new SsoManager() {
            @Override
            protected String getSsoType() {
                return currentSsoType;
            }
        };

        // Verify that "aad" SSO type resolves to "entraidAuthenticator"

 * saml.sp.entityid=https://your-fess-server.example.com/sso/metadata
 *
 * # Assertion Consumer Service URL
 * saml.sp.assertion_consumer_service.url=https://your-fess-server.example.com/sso/
 *
 * # Single Logout Service URL
 * saml.sp.single_logout_service.url=https://your-fess-server.example.com/sso/logout
 * </pre>
 *
 * <h2>Complete Configuration Example (Okta)</h2>
 * <pre>
 * sso.type=saml
 *

public class SsoMessageExceptionTest extends UnitFessTestCase {

    @Test
    public void test_constructor_withMessageCodeMessageAndCause() {
        // Setup
        final String message = "Test SSO error message";
        final Exception cause = new RuntimeException("Test cause");
        final VaMessenger<FessMessages> messageCode = messages -> messages.addErrorsSsoLoginError(UserMessages.GLOBAL_PROPERTY_KEY);

import org.codelibs.fess.exception.SsoLoginException;
import org.codelibs.fess.mylasta.action.FessUserBean;
import org.codelibs.fess.mylasta.direction.FessConfig;
import org.codelibs.fess.sso.SsoAuthenticator;
import org.codelibs.fess.sso.SsoResponseType;
import org.codelibs.fess.util.ComponentUtil;
import org.codelibs.spnego.SpnegoFilterConfig;
import org.codelibs.spnego.SpnegoHttpFilter;

     * @return The permission helper.
     */
    public static PermissionHelper getPermissionHelper() {
        return getComponent(PERMISSION_HELPER);
    }

    /**
     * Gets the SSO manager component.
     * @return The SSO manager.
     */
    public static SsoManager getSsoManager() {
        return getComponent(SSO_MANAGER);
    }

    /**
     * Gets the thumbnail manager component.

# info.xxx = ...
# _/_/_/_/_/_/_/_/_/_/
# ========================================================================================
# Fess
# ======
errors.login_error = 使用者名稱或密碼不正確。
errors.sso_login_error=SSO登入處理失敗。
errors.could_not_find_log_file = 未找到 {0}。
errors.failed_to_start_crawl_process = 啟動爬網程序失敗。
errors.invalid_design_jsp_file_name = 無效的JSP檔案名稱。
errors.design_jsp_file_does_not_exist = JSP檔案不存在。