}

    @Test
    public void test_getAuthenticator_entraidDirectAccess() {
        // Register an authenticator with "entraid" name
        ComponentUtil.register(testAuthenticator, "entraidAuthenticator");

        // Use new "entraid" SSO type
        currentSsoType = "entraid";
        ssoManager = new SsoManager() {
            @Override
            protected String getSsoType() {

     */
    protected SsoAuthenticator getAuthenticator() {
        String ssoType = getSsoType();
        // Backward compatibility: map legacy "aad" (Azure AD) to "entraid" (Entra ID)
        if ("aad".equals(ssoType)) {
            ssoType = "entraid";
        }
        final String name = ssoType + "Authenticator";
        if (ComponentUtil.hasComponent(name)) {
            return ComponentUtil.getComponent(name);

├── helper/                    # Cross-cutting utilities (~40+ helpers)
├── crawler/                   # Crawling engine (processor, transformer, service)
├── sso/                       # SSO implementations (oic, saml, spnego, entraid)
├── auth/                      # Authentication management
├── ldap/                      # LDAP integration
├── filter/                    # Servlet filters
├── validation/                # Custom validators

    public String spnegoExcludeDirs;

    /** Entra ID application client ID. */
    @Size(max = 1000)
    public String entraidClientId;

    /** Entra ID application client secret. */
    @Size(max = 1000)
    public String entraidClientSecret;

    /** Entra ID tenant ID. */
    @Size(max = 1000)
    public String entraidTenant;

    /** Entra ID authority URL. */
    @Size(max = 1000)

                return systemPropMap.get(key);
            }
        };

        // Test with new entraid.use.ds key set to false
        systemPropMap.put("entraid.use.ds", "false");
        assertFalse(fessConfig.isEntraIdUseDomainServices());

        // Test with new entraid.use.ds key set to true
        systemPropMap.put("entraid.use.ds", "true");
        assertTrue(fessConfig.isEntraIdUseDomainServices());
    }

    @Test

    /** Configuration key for Entra ID client secret. */
    protected static final String ENTRAID_CLIENT_SECRET = "entraid.client.secret";

    /** Configuration key for Entra ID client ID. */
    protected static final String ENTRAID_CLIENT_ID = "entraid.client.id";

    /** Configuration key for Entra ID reply URL. */
    protected static final String ENTRAID_REPLY_URL = "entraid.reply.url";

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE components PUBLIC "-//DBFLUTE//DTD LastaDi 1.0//EN"
	"http://dbflute.org/meta/lastadi10.dtd">
<components>
	<component name="entraidAuthenticator" class="org.codelibs.fess.sso.entraid.EntraIdAuthenticator">
	</component>
	<component name="oicAuthenticator" class="org.codelibs.fess.sso.oic.OpenIdConnectAuthenticator">
	</component>
	<component name="samlAuthenticator" class="org.codelibs.fess.sso.saml.SamlAuthenticator">

 */
public class EntraIdCredential implements LoginCredential, FessCredential {

    private static final Logger logger = LogManager.getLogger(EntraIdCredential.class);

    private final IAuthenticationResult authResult;

    /**
     * Constructs an Entra ID credential with the authentication result.
     * @param authResult The authentication result from Entra ID.
     */

    }

    /**
     * Gets the permission fields for Entra ID authentication.
     * Uses new entraid.permission.fields key with fallback to legacy aad.permission.fields.
     * @return Array of permission field names.
     */
    default String[] getEntraIdPermissionFields() {
        String value = getSystemProperty("entraid.permission.fields", null);
        if (StringUtil.isBlank(value)) {

                                            <la:option value="spnego">SPNEGO</la:option>
                                            <la:option value="entraid">Entra ID</la:option>
                                        </la:select>
                                    </div>
                                </div>
                                    <%-- Crawler --%>