/**
     * LDAP base DN (Distinguished Name) for user searches.
     * Defines the root of the LDAP directory tree for user lookups.
     */
    @Size(max = 1000)
    public String ldapBaseDn;

    /**
     * LDAP filter for finding user accounts.
     * Defines the search filter used to locate user accounts in LDAP.
     */
    @Size(max = 1000)

import org.dbflute.optional.OptionalEntity;

/**
 * Character mapping file handler for managing character mapping dictionaries.
 * This class provides functionality to load, parse, and manage character mapping
 * rules that define how input characters should be transformed to output characters
 * during text analysis and search processing.
 *
 * Character mapping files contain mapping rules in the format:
 * input1,input2,... => output
 */

 * For production or when the IdP is configured with a different URL, you should
 * set one of the following:</p>
 *
 * <h3>Option 1: Set base URL (recommended for simplicity)</h3>
 * <pre>
 * # All SP URLs will be derived from this base URL
 * saml.sp.base.url=https://your-fess-server.example.com
 * </pre>
 *
 * <h3>Option 2: Set individual SP URLs</h3>
 * <pre>
 * # SP Entity ID (Audience URI in IdP)

     */
    String getRoleSearchRolePrefix();

    /**
     * Get the value for the key 'role.search.denied.prefix'. <br>
     * The value is, e.g. D <br>
     * comment: Prefix for denied roles in search.
     * @return The value of found property. (NotNull: if not found, exception but basically no way)
     */
    String getRoleSearchDeniedPrefix();