* saml.attribute.role.name=roles
 *
 * # Default groups/roles for authenticated users
 * saml.default.groups=user
 * saml.default.roles=user
 * </pre>
 *
 * <h2>Security Settings (Production)</h2>
 * <p>For production environments, consider enabling these security features:</p>
 * <pre>
 * saml.security.authnrequest_signed=true
 * saml.security.want_messages_signed=true
 * saml.security.want_assertions_signed=true

    #        ; rootFile = $$baseDir$$/main/resources/maihama_env.properties
    #        ; environmentMap = map:{
    #            ; integration = $$baseDir$$/integration/resources
    #            ; production = $$baseDir$$/production/resources
    #        }
    #        ; diffIgnoredKeyList = list:{} ; maskedKeyList = list:{} ; isEnvOnlyFloatLeft = false
    #        ; extendsPropRequest = null
    #        ; isCheckImplicitOverride = false

### 2. Infrastructure Requirements

Ensure your Fess environment meets these requirements:

- **Java**: JDK 17 or later
- **Memory**: Minimum 4GB RAM (8GB+ recommended for production)
- **Storage**: At least 2x your current index size
- **Network**: Access to crawl sources (web servers, file shares, databases)
- **Elasticsearch/OpenSearch**: Compatible version running

### 3. Backup Existing System

        assertEquals("8080", SystemUtil.maskSensitiveValue("PORT", "8080"));
        assertEquals("/var/log/fess", SystemUtil.maskSensitiveValue("LOG_DIR", "/var/log/fess"));
        assertEquals("production", SystemUtil.maskSensitiveValue("ENVIRONMENT", "production"));
        assertEquals("admin", SystemUtil.maskSensitiveValue("USER_NAME", "admin"));
        assertEquals("true", SystemUtil.maskSensitiveValue("DEBUG_MODE", "true"));
    }

    @Test

        }
    }
}

/**
 * Tasks that are called by the (currently separate) promotion build running on CI.
 */
tasks.register("promotionBuild") {
    description = "Build production distros, smoke test them and publish"
    group = "publishing"
    dependsOn(":packageBuild", "publish")

        assertEquals("-XX:+UseG1GC", execJob.jvmOptions.get(2));
    }

    // Test lastaEnv setter
    @Test
    public void test_lastaEnv() {
        String testEnv = "production";
        ExecJob result = execJob.lastaEnv(testEnv);
        assertEquals(testEnv, execJob.lastaEnv);
        assertSame(execJob, result);
    }

    // Test addSystemProperty method
    @Test

     * interval control rules, and then calls the parent implementation.
     * All operations are wrapped in exception handling to ensure robustness
     * in test and production environments.
     */
    @Override
    protected void delayForWaitingNewUrl() {
        try {
            ComponentUtil.getSystemHelper().calibrateCpuLoad();
        } catch (final Exception e) {

            }
            if (SpnegoHttpFilter.Constants.ALLOW_BASIC.equals(name)) {
                // SECURITY NOTE: Basic authentication is enabled by default for compatibility.
                // For production, consider setting spnego.allow.basic to false.
                return getProperty(SPNEGO_ALLOW_BASIC, "true");
            }
            if (SpnegoHttpFilter.Constants.ALLOW_UNSEC_BASIC.equals(name)) {

        direction.directLoggingTitle(fessConfig.getDomainTitle(), fessConfig.getEnvironmentTitle());

        // this configuration is on sea_env.properties because it has no influence to production
        // even if you set true manually and forget to set false back
        direction.directFrameworkDebug(fessConfig.isFrameworkDebug()); // basically false

            if (logger.isDebugEnabled()) {
                logger.debug("Using custom GCS endpoint: {}", endpoint);
            }
        } else {
            // Production: use credentials file or default credentials
            if (StringUtil.isNotBlank(credentialsPath)) {
                try (FileInputStream fis = new FileInputStream(credentialsPath)) {