# Frame
portalmenu=Portal Menu
configurationwizard=Configuration Wizard
postinstallconfigwizard=Post-Install Wizard

# Main Menu
MainMenuTasklet_UserMgmtState=You are required to change your password. Please enter your current password along with your desired password.

CertificateRotationTasklet_DSignRotationState=Define your rotation configuration for new certificates and key pairs.

# Connections
IdpConnectionsTasklet_ConnMgmtState=On this screen you can manage connections to your partner IdPs.
SpConnectionsTasklet_ConnMgmtState=On this screen you can manage connections to your partner SPs.
ConnMgmtState_Draft_non_serializable=An unexpected error occurred while saving this draft.  Please visit https://support.pingidentity.com/ for further guidance in resolving this issue.
ConnMgmtState_Draft_version_error=The version of the draft is incompatible with this version of the server.

# IdpBrowserSsoTasklet
IdpBrowserSsoTasklet_SelectSamlProfilesState=A SAML Profile defines what kind of messages may be exchanged between an Identity Provider (IdP) and a Service Provider (SP), and how the messages are transported (bindings). As an SP, you configure this information for your IdP connection.
IdpBrowserSsoTasklet_SelectSamlProfilesState_1x=SAML 1.x allows users to single sign-on to a Service Provider from an Identity Provider. This standard use case may be enhanced by supporting the nonstandard destination-first SSO profile (initiated from the SP).  If you wish to support this use case, check the box below.
IdpBrowserSsoTasklet_UserSessionCreationState=This task provides the configuration for creating user sessions to enable SSO access to resources at your site.
IdpBrowserSsoTasklet_IdpProtocolSettingsState=This task provides the configuration for specific endpoints and security considerations applicable to selected profiles. Click the button below to create or revise this configuration.
IdpBrowserSsoTasklet_SummaryCardState=Summary information for your Browser SSO configuration. Click a heading link to edit a configuration setting.

# IdpConnectionConfigTasklet
IdpConnectionConfigTasklet_ConnRoleAndProtocolState=As an SP, you are making a connection to a partner IdP. Select the type of connection needed for this IdP: Browser SSO Profiles (for Browser SSO), WS-Trust STS (for access to identity-enabled Web Services), OAuth Assertion Grant (for authenticating against the PingFederate Authorization Server), Inbound Provisioning (for integrating with SaaS partners) or all.
IdpConnectionConfigTasklet_ConnectionOptionsState=Please select options that apply to this connection.
IdpConnectionConfigTasklet_ImportMetadataState_newState=To populate many connection settings automatically, you can upload the partner's metadata file, or specify a URL where PingFederate can download it. To periodically reload the connection settings from the URL, select Enable Automatic Reloading.
IdpConnectionConfigTasklet_ImportMetadataState=To periodically update the connection settings from a URL, select Enable Automatic Reloading, and enter the URL below.
IdpConnectionConfigTasklet_ImportMetadataCertState=The metadata file is signed but does not contain a certificate with which to verify the signature. Select the file that contains your partner&#39;s signature verification certificate.
IdpConnectionConfigTasklet_MetadataSummaryState=Use the information below to evaluate the authenticity of the imported metadata.
IdpConnectionConfigTasklet_GeneralInfoState=This information identifies your partner&#39;s unique connection identifier (Connection ID). Connection Name represents the plain-language identifier for this connection. Optionally, you can specify multiple virtual server IDs for your own server to use when communicating with this partner. If set, these virtual server IDs will be used in place of the unique protocol identifier configured for your server in Server Settings. The Base URL may be used to simplify configuration of partner endpoints.
IdpConnectionConfigTasklet_GeneralInfoState_Oidc=This information identifies your partner&#39;s unique connection identifier (Issuer). Connection Name represents the plain-language identifier for this connection. The OpenID Provider Metadata can be loaded from the issuer discovery endpoint. The Base URL may be used to simplify configuration of partner endpoints.
IdpConnectionConfigTasklet_ExtendedPropertyManagementState=Manage the extended properties for this connection.
IdpConnectionConfigTasklet_AdditionalIssuersState=Configure additional issuers to be allowed when validating the ID token, or configure to accept all issuers.
IdpConnectionConfigTasklet_IdpBrowserSsoState=This task provides connection-endpoint and other configuration information enabling secure browser-based SSO, to resources at your site. Click the button below to create or revise this configuration.
IdpConnectionConfigTasklet_WsTrustIdpState=Configure settings for the PingFederate WS-Trust Security Token Service.
IdpConnectionConfigTasklet_UserProvisioningState=Specify how and when to provision user accounts.
IdpConnectionConfigTasklet_AttributeAuthorityState=The Attribute Query Profile supports local applications in requesting user attributes from an Attribute Authority.  Click the button below to configure the necessary settings to support this profile.
IdpConnectionConfigTasklet_CredentialsState=For each credential shown here, configure the necessary settings.
IdpConnectionConfigTasklet_ActivationState=Summary information for your IdP connection. Click a heading in a section to edit a particular configuration setting.
IdpConnectionConfigTasklet_OAuthSAMLGrantAttributeMappingState=You can configure this connection to provide identity and authentication information for an OAuth Assertion Grant connection. The configuration maps user attributes from the assertion attribute contract to the access token.
IdpConnectionConfigTasklet_InboundProvisioningState=Specify how and when to provision user accounts and groups.

# IdpProtocolSettingsTasklet
IdpProtocolSettingsTasklet_ServiceUrlConfigState=As the SP, you send authentication requests (AuthnRequests) for single sign-on to the IdP&#39;s SSO Service.  Depending on the situation, the IdP may have several endpoints available. Please provide the endpoints that you want to use when sending these requests.
IdpProtocolSettingsTasklet_SloServiceUrlConfigState=As the SP, you may send SAML logout messages to the IdP&#39;s <b>Single Logout Service</b>. Depending on the situation, the IdP may have several endpoints available for this purpose. Please provide the endpoints you would like to use.
IdpProtocolSettingsTasklet_AllowableSamlBindingsState=When the IdP sends messages, over what SAML bindings do you want to receive them?
IdpProtocolSettingsTasklet_ArtifactConfigState=Please provide the remote party URLs that you will use to resolve/translate the artifact and get the actual protocol message.
IdpProtocolSettingsTasklet_ConfigArtifactLifetimeState=Artifacts are meant to be short-lived tokens representing an issued message.  For how long should the recipient of the artifact be allowed to retrieve the corresponding message?
IdpProtocolSettingsTasklet_ArtifactResolverLocationState=Please provide the URL (also known as the SOAP Responder) of the remote party that you will use to resolve the artifact and get the assertion. You may optionally provide the source ID that uniquely identifies your partner. If missing, the SHA-1 hash of the connection ID is used as the Source ID.
IdpProtocolSettingsTasklet_SsoServiceUrlState=As the SP, you send requests for single sign-on to the IdP&#39;s SSO Service URL (also known as the Intersite Transfer Service).  Please provide the endpoint that you want to use when sending these requests.
IdpProtocolSettingsTasklet_OpenIdProviderMetadataState=The metadata below defines how you will interact with this partner using the OpenID Connect protocol. These details may already be complete based on the partner's metadata returned from its issuer URL.
IdpProtocolSettingsTasklet_DefaultTargetUrlState=Optionally, you can specify overrides for this IdP connection.

IdpProtocolSettingsTasklet_IdpSignaturePolicyState=Additional guarantees of authenticity may be agreed upon between you and your partner. For SP-initiated SSO, you can choose to sign authentication requests sent via the POST or redirect bindings. You can also choose to require signed assertions, regardless of the binding used.
IdpProtocolSettingsTasklet_SelectIdpXmlAssertionEncryptionState=Additional guarantees of message level privacy may be used between you and your partner through the use of XML encryption.  Specify an encryption policy for the exchange of SAML messages.
IdpProtocolSettingsTasklet_SelectIdpXmlAssertionEncryptionState_Luna=Additional guarantees of privacy using XML encryption may be used between you and your partner.  However, this server is configured to use an HSM that does not support XML encryption.
IdpProtocolSettingsTasklet_WsFedServiceUrlState=As the SP, you send security token requests and SLO messages to the IdP. Specify here the URL where the IdP is listening for these messages.
IdpProtocolSettingsTasklet_WsFedServiceUrlState_Whitelist_desc=For incoming SLO requests, your partner may specify a redirect location via the wreply parameter. The specified Endpoint URL will always be allowed. You can specify additional allowed domains and paths below.
IdpProtocolSettingsTasklet_SummaryCardState=Summary information for your Protocol Settings configuration. Click a heading link to edit a configuration setting.

# OpenID Provider Info
OpenIdProviderMetadataState_inline_help_jwtSecuredAuthorizationResponseModeType=QUERY JWT should only be used with OpenID Connect Login Type CODE unless the response JWT is encrypted to prevent token leakage in the URL.
OpenIdProviderMetadataState_inline_help_jwtAuthenticationSchemeTypeHeader=Type header, default none. A value of "authorization-grant+jwt" or "client-authentication+jwt", depends on the authn schema is recommended.
OpenIdProviderMetadataState_inline_help_jwtAuthenticationSchemeAudienceClaim=Audience claim, a value matching the issuer claim is recommended. When left blank, it defaults to the IdP token endpoint.
OpenIdProviderMetadataState_inline_help_jwtAuthenticationSchemeTypeLifetime=Lifetime of the token. Can not exceed 24 hours in minutes. When left blank, it defaults to 5 minutes.
OpenIdProviderMetadataState_inline_help_jwtAuthenticationSchemeIncludeNbfClaim=When enabled, the Not Before (NBF) claim is included to allow for clock skew.

UserSessionCreationTasklet_SelectIdpAccountLinkingState=Identity mapping is the process whereby users authenticated by the IdP are associated with user accounts local to the SP. PingFederate supplies two modes for identity mapping of disparate user accounts between different domains. Choose either ACCOUNT MAPPING or ACCOUNT LINKING to associate the user with a specific local account.  If this connection is to be used within an authentication policy, select the NO MAPPING option.
UserSessionCreationTasklet_CreateAttributeContractState=An Attribute Contract is a set of user attributes that the IdP will send in the assertion.
UserSessionCreationTasklet_CreateAttributeContractState_Oidc=An Attribute Contract is a set of user attributes that the IdP will send in the provider claim.
UserSessionCreationTasklet_ConfigAdapterMappingState=PingFederate uses session-creation adapters to identify a user to your applications and/or identity management system based on attributes sent in an assertion. Map an adapter instance for each target application on your system.
UserSessionCreationTasklet_ConfigAdapterMappingStateWithC2c=PingFederate can create sessions to internal applications and/or identity management system using adapters, or create sessions to partner SPs using Policy Contracts. A session will be created based on attributes sent in an assertion. Map an adapter instance for each target application on your system. Likewise, map a connection contract for each partner SP(s).
UserSessionCreationTasklet_ConfigAdapterMappingStateWithOidc=PingFederate uses session-creation adapters to identify a user to your applications and/or identity management system based on attributes sent in provider claims. Map an adapter instance for each target application on your system.
UserSessionCreationTasklet_ConfigAdapterMappingStateWithC2cWithOidc=PingFederate can create sessions to internal applications and/or identity management system using adapters, or create sessions to partner SPs using Policy Contracts. A session will be created based on attributes sent in provider claims. Map an adapter instance for each target application on your system. Likewise, map a connection contract for each partner SP(s).
UserSessionCreationTasklet_SummaryCardState=Summary information for Session Creation configuration. Click a heading link to edit a configuration setting.

IdpXaspTasklet_AttributeRequestServiceUrlState=Specify the URL at your IdP partner&#39;s site where attribute queries are to be sent.
IdpXaspTasklet_AttributeNameMappingState=Attributes requested by your application may not match exactly the attributes supplied by the IdP.  Specify the mapping between these sets of attributes.
IdpXaspTasklet_AttrAuthSecurityPolicyState=Specify the attribute authority profile&#39;s security policy with your partner.
IdpXaspTasklet_AttrAuthSecurityPolicyState_Luna=Specify the attribute authority profile&#39;s security policy with your partner. Note: This server is configured to use an HSM that does not support XML encryption, so &#39;Require encrypted assertion&#39; and &#39;Encrypt the Name Identifier&#39; are not available.
IdpXaspTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# IdP Config Adapter Mapping
IdpConfigAdapterMappingTasklet_SelectAdapterState=The list of attributes below, the Adapter Contract, is required for the selected adapter instance.
IdpConfigAdapterMappingTasklet_SelectAdapterStateNew=Select the adapter instance you would like to activate for incoming SAML messages from this partner.
IdpConfigAdapterMappingTasklet_SelectAdapterStateNew_Oidc=Select the adapter instance you would like to activate for incoming messages from this partner.
IdpConfigAdapterMappingTasklet_VirtualServerIdMappingState=You can optionally restrict this adapter to certain virtual server IDs. By default, this mapping will be applicable to all virtual server IDs. To restrict it to a subset of the available virtual server IDs, check Restrict Virtual Server IDs and select all the virtual server IDs that apply to this mapping.
IdpConfigAdapterMappingTasklet_SelectAdapterDataSourceState=You can fulfill the Adapter Contract by using only the attributes from the SAML assertion or by using these attributes to look up additional information from a local data store.
IdpConfigAdapterMappingTasklet_SelectAdapterDataSourceState_Oidc=You can fulfill the Adapter Contract by using only the attributes from the provider claims or by using these attributes to look up additional information from a local data store.
IdpConfigAdapterMappingTasklet_OverrideInstanceState=Click the button below to override the adapter settings.
IdpConfigAdapterMappingTasklet_SelectDataSourceState=Please select the data store from which local data, along with the attributes supplied in the SAML assertion, will be used to fulfill the SP Adapter Contract.
IdpConfigAdapterMappingTasklet_SelectDataSourceStateVo=Data Store not available, editing has been disabled.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_SelectDataSourceState_Oidc=Please select the data store from which local data, along with the attributes supplied in the provider claims, will be used to fulfill the SP Adapter Contract.
IdpConfigAdapterMappingTasklet_SelectDataSourceStateVo_Oidc=Data Store not available, editing has been disabled.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_SelectDatabaseTableAndColumnsState=Please select the table and columns you want to query. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the SP Adapter Contract.
IdpConfigAdapterMappingTasklet_SelectDatabaseTableAndColumnsStateVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_SelectDatabaseTableAndColumnsState_Oidc=Please select the table and columns you want to query. This information, along with the attributes supplied in the provider claims, will be used to fulfill the SP Adapter Contract.
IdpConfigAdapterMappingTasklet_SelectDatabaseTableAndColumnsStateVo_Oidc=Please select the table and columns you want to query. This information, along with the attributes supplied in the provider claims, will be used to fulfill the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_IdpConfigDatabaseFilterState=Please supply a WHERE clause to filter the data from your table.
IdpConfigAdapterMappingTasklet_IdpConfigDatabaseFilterStateVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_ConfigLdapDirSearchState=Please configure your directory search. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the SP Adapter Contract.
IdpConfigAdapterMappingTasklet_ConfigLdapDirSearchStateVo=Please configure your directory search. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_ConfigLdapDirSearchState_Oidc=Please configure your directory search. This information, along with the attributes supplied in the provider claims, will be used to fulfill the SP Adapter Contract.
IdpConfigAdapterMappingTasklet_ConfigLdapDirSearchStateVo_Oidc=Please configure your directory search. This information, along with the attributes supplied in the provider claims, will be used to fulfill the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_ConfigLdapFilterState=Please filter the data from your directory.
IdpConfigAdapterMappingTasklet_ConfigLdapFilterStateVo=Please filter the data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_IdpConfigLdapFilterState=Please filter the data from your directory.
IdpConfigAdapterMappingTasklet_IdpConfigLdapFilterStateVo=Please filter the data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_ConfigureCustomSourceFiltersState=Perform any filter configuration for this data source.
IdpConfigAdapterMappingTasklet_SelectCustomSourceFieldsState=Please select those fields you would like to use when mapping attributes to the SP Adapter Contract.
IdpConfigAdapterMappingTasklet_SummaryCardState=Adapter Mapping Summary
IdpConfigAdapterMappingTasklet_IdpConfigIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to continue the SSO transaction using the SP Adapter. Use this optional screen to configure the criteria for use with this conditional authorization.
IdpConfigAdapterMappingTasklet_IdpAdapterContractMappingState=You can fulfill your Adapter Contract session-creation requirements with values from the assertion, dynamic text, expressions, or from a data-store lookup.
IdpConfigAdapterMappingTasklet_IdpAdapterContractMappingState_Oidc=You can fulfill your Adapter Contract session-creation requirements with values from the provider claims, dynamic text, expressions, or from a data-store lookup.
IdpConfigAdapterMappingTasklet_MappingStateVo=You can fulfill your Adapter Contract session-creation requirements with values from the assertion, dynamic text, expressions, or from a data-store lookup.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_MappingState_OidcVo=You can fulfill your Adapter Contract session-creation requirements with values from the provider claims, dynamic text, expressions, or from a data-store lookup.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpConfigAdapterMappingTasklet_MappingState=You can fulfill your Adapter Contract session-creation requirements with values from the assertion, dynamic text, expressions, or from a data-store lookup.
IdpConfigAdapterMappingTasklet_MappingState_Oidc=You can fulfill your Adapter Contract session-creation requirements with values from the provider claims, dynamic text, expressions, or from a data-store lookup.

#InboundProvisioningTasklet
InboundProvisioningTasklet_InboundProvisioningUserRepositoryState=Choose the data store that serves as the local repository for user accounts and groups requiring provisioning.
InboundProvisioningTasklet_InboundProvisioningUserRepositoryStateVo=Choose the data store that serves as the local repository for user accounts and groups requiring provisioning.
InboundProvisioningTasklet_UserRepositoryStateVo=Data Store not available, editing has been disabled.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
InboundProvisioningTasklet_InboundProvisioningCustomScimAttributesState=Define Custom SCIM Attributes which will be appended to the existing core SCIM attributes.
InboundProvisioningTasklet_InboundProvisioningCustomScimAttributesStateVo=Define Custom SCIM Attributes which will be appended to the existing core SCIM attributes.
InboundProvisioningTasklet_InboundProvisioningCustomScim2AttributesState=Define Custom SCIM Attributes which will be appended to the existing core SCIM attributes.
InboundProvisioningTasklet_InboundProvisioningCustomScim2ServiceProviderConfigState=Optionally define the SCIM Service Provider Configuration.
InboundProvisioningTasklet_ConfigUserProvisioningLdapDirSearchState=Specify where records are located in the repository.
InboundProvisioningTasklet_ConfigUserProvisioningLdapDirSearchStateVo=Specify where user records are located in the repository.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
InboundProvisioningTasklet_InboundProvisioningConfigLdapFilterState=Using attributes from the SCIM request, specify an expression that results in a unique user identifier, when combined with the Base DN.
InboundProvisioningTasklet_InboundProvisioningConfigLdapFilterStateVo=Using attributes from the SCIM request, specify an expression that results in a unique user identifier, when combined with the Base DN.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
InboundProvisioningTasklet_InboundGroupProvisioningConfigLdapFilterState=Using attributes from the SCIM request, specify an expression that results in a unique group identifier, when combined with the Base DN.
InboundProvisioningTasklet_InboundGroupProvisioningConfigLdapFilterStateVo=Using attributes from the SCIM request, specify an expression that results in a unique group identifier, when combined with the Base DN.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
InboundProvisioningTasklet_InboundProvisioningOperationWriteUsersState=This task provides the configuration required to create a user within the user repository.  Click the button below to create or revise this configuration.
InboundProvisioningTasklet_InboundProvisioningOperationReadUsersState=This task provides the configuration required to lookup user info within the user repository and respond to incoming SCIM requests.  Click the button below to create or revise this configuration.
InboundProvisioningTasklet_InboundProvisioningOperationWriteGroupsState=This task provides the configuration required to create a group within the repository.  Click the button below to create or revise this configuration.
InboundProvisioningTasklet_InboundProvisioningOperationReadGroupsState=This task provides the configuration required to lookup group info within the repository and respond to incoming SCIM requests.  Click the button below to create or revise this configuration.
InboundProvisioningTasklet_InboundProvisioningDeleteUsersOptionsState=As an SCIM Service Provider, you can define how SCIM DELETE requests are handled within your user repository. Please define how SCIM DELETE requests should be handled.
InboundProvisioningTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

#InboundProvisioningOperationTasklet
InboundProvisioningOperationTasklet_UserProvisioningAttributesState_WriteUsers=Select attributes in the user repository that should be populated during a user-provisioning request.
InboundProvisioningOperationTasklet_UserProvisioningAttributesState_ReadUsers=Select attributes in the user repository that should be used to populate a response to a user-provisioning request.
InboundProvisioningOperationTasklet_UserProvisioningAttributesState_WriteGroups=Select attributes in the group repository that should be populated during a group-provisioning request.
InboundProvisioningOperationTasklet_UserProvisioningAttributesState_ReadGroups=Select attributes in the group repository that should be used to populate a response to a group-provisioning request.
InboundProvisioningOperationTasklet_InboundProvisioningMappingState_WriteUsers=Map attribute Sources and Values for each user repository attribute that should be populated.
InboundProvisioningOperationTasklet_InboundProvisioningMappingState_ReadUsers=Map attribute Sources and Values for each SCIM user attribute that should be populated.
InboundProvisioningOperationTasklet_InboundProvisioningMappingState_WriteGroups=Map attribute Sources and Values for each group repository attribute that should be populated.
InboundProvisioningOperationTasklet_InboundProvisioningMappingState_ReadGroups=Map attribute Sources and Values for each SCIM group attribute that should be populated.
InboundProvisioningOperationTasklet_InboundProvisioningAttributeContractState=An Attribute Contract is a set of user attributes that you will send to your partner in the SCIM response.
InboundProvisioningOperationTasklet_SummaryCardState=Click a heading link to edit a configuration setting.


# MainMenuTasklet
MainMenuTasklet_ConnMgmtState_IdP=On this screen you can manage connections to your partner IdPs. Use the drop-downs to filter the connection list.
MainMenuTasklet_ConnMgmtState_SP=On this screen you can manage connections to your partner SPs. Use the drop-downs to filter the connection list.

# SpConnectionConfigTasklet
SpConnectionConfigTasklet_ConnectionTemplateState=PingFederate provides quick-configuration templates, available separately with SaaS Connectors, for specific Service Providers. If applicable, please select a template for this connection; otherwise, continue to the next screen for more options.
SpConnectionConfigTasklet_ConnRoleAndProtocolState=Select the type of connection needed for this SP: Browser SSO Profiles (for Browser SSO), WS-Trust STS (for access to identity-enabled Web Services), Outbound Provisioning (for provisioning users/groups to an SP) or all.
SpConnectionConfigTasklet_ConnectionOptionsState=Please select options that apply to this connection.
SpConnectionConfigTasklet_ImportMetadataState_newState=To populate many connection settings automatically, you can upload the partner's metadata file, or specify a URL where PingFederate can download it. To periodically reload the connection settings from the URL, select Enable Automatic Reloading.
SpConnectionConfigTasklet_ImportMetadataState=To periodically update the connection settings from a URL, select Enable Automatic Reloading, and enter the URL below.
SpConnectionConfigTasklet_ImportMetadataCertState=The metadata file is signed but does not contain a certificate with which to verify the signature. Select the file that contains your partner&#39;s signature verification certificate.
SpConnectionConfigTasklet_MetadataSummaryState=Use the information below to evaluate the authenticity of the imported metadata.
SpConnectionConfigTasklet_GeneralInfoState=This information identifies your partner&#39;s unique connection identifier (Connection ID). Connection Name represents the plain-language identifier for this connection. Optionally, you can specify multiple virtual server IDs for your own server to use when communicating with this partner. If set, these virtual server IDs will be used in place of the unique protocol identifier configured for your server in Server Settings. The Base URL may be used to simplify configuration of partner endpoints.
SpConnectionConfigTasklet_ExtendedPropertyManagementState=Populate the extended properties for this connection.
SpConnectionConfigTasklet_SpBrowserSsoState=This task provides connection-endpoint and other configuration information enabling secure browser-based SSO, to resources at your partner&#39;s site. Click the button below to create or revise this configuration.
SpConnectionConfigTasklet_WsTrustSpState=Configure settings for the PingFederate WS-Trust Security Token Service.
SpConnectionConfigTasklet_AttributeRequesterState=The Attribute Query Profile supports SPs in requesting user attributes.  Click the button below to configure the necessary settings to support this profile.
SpConnectionConfigTasklet_CredentialsState=For each credential shown here, configure the necessary settings.
SpConnectionConfigTasklet_ActivationState=Summary information for your SP connection. Click a heading in a section to edit a particular configuration setting.
SpConnectionConfigTasklet_SaaSProvisioningState=Configure outbound provisioning for this service provider.

# SpProtocolSettingsTasklet
SpProtocolSettingsTasklet_WsFedServiceUrlState=As the IdP, you send security tokens and SLO cleanup messages to the SP. Specify here the URL where the SP is expecting to receive these messages.
SpProtocolSettingsTasklet_WsFedServiceUrlState_Whitelist_desc=The specified Endpoint URL will always be allowed. Additional allowed domains and paths should be listed below.
SpProtocolSettingsTasklet_AssertionConsumerServiceState=As the IdP, you send SAML assertions to the SP&#39;s <b>Assertion Consumer Service</b>. The SP may request that the SAML assertion be sent to one of several URLs, via different bindings. Please provide the possible assertion consumer URLs below and select one to be the default.
SpProtocolSettingsTasklet_AssertionConsumerServiceState_1x=As the IdP, you send SAML assertions to the SP&#39;s <b>Assertion Consumer Service</b>. The SP may request that the SAML assertion be sent to one of several URLs, via different bindings. Please provide the possible assertion consumer URLs below.
SpProtocolSettingsTasklet_SloServiceUrlConfigState=As the IdP, you may send SAML logout messages to the SP&#39;s <b>Single Logout Service</b>. Depending on the situation, the SP may request that messages be sent to one of several URLs, via different bindings. Please provide the endpoints that you would like to use.
SpProtocolSettingsTasklet_DefaultTargetUrlState=Proper functioning of SAML 1.x SP connections requires that a default target URL be specified in the case that the IdP application does not include one in its SSO request.  This default URL represents the destination on the SP where the user will be directed.
SpProtocolSettingsTasklet_AllowableSamlBindingsState=When the SP sends messages, what SAML bindings do you want to allow?
SpProtocolSettingsTasklet_ConfigArtifactLifetimeState=Artifacts are meant to be short-lived tokens representing an issued message.  For how long should the recipient of the artifact be permitted to retrieve the corresponding message?
SpProtocolSettingsTasklet_ArtifactConfigState=Please provide the remote party URLs that you will use to resolve/translate the artifact and get the actual protocol message.
SpProtocolSettingsTasklet_SpSignaturePolicyState=Additional guarantees of authenticity may be agreed upon between you and your partner. For SP-initiated SSO, you can choose to require signed authentication requests sent via the POST or redirect bindings. You can also choose to sign assertions sent to this partner, regardless of the binding used.
SpProtocolSettingsTasklet_SpSignaturePolicyState_NoSignedAuthnRequests=Additional guarantees of authenticity may be agreed upon between you and your partner. You may choose to sign assertions sent to this partner, regardless of the binding used.
SpProtocolSettingsTasklet_SelectSpXmlAssertionEncryptionState=Encryption may be applied to SAML messages for an added layer of protection in transport. If enabled, SAML Response messages may always be signed, regardless of the signature policy.
SpProtocolSettingsTasklet_SelectSpXmlAssertionEncryptionState_WsFed=Encryption may be applied to SAML messages for an added layer of protection in transport.
SpProtocolSettingsTasklet_SelectSpXmlAssertionEncryptionState_Luna=Additional guarantees of privacy using XML encryption may be used between you and your partner.  However, this server is configured to use an HSM that does not support XML encryption.
SpProtocolSettingsTasklet_SummaryCardState=Summary information for your Protocol Settings configuration. Click a heading link to edit a configuration setting.
SpProtocolSettingsTasklet_WsTrustVersionState=Select a WS-Trust version for tokens. The default version is 1.2.

AssertionCreationTasklet_SelectSpAccountLinkingState=Identity mapping is the process in which users authenticated by the IdP are associated with user accounts local to the SP.  Select the type of name identifier that you will send to the SP.  Your selection may affect the way that the SP will look up and associate the user to a specific local account.
AssertionCreationTasklet_WsFedIdentityMappingState=Select the type of name identifier you will send to the SP.  Your selection may affect the way the SP will look up and associate the user to a specific local account.
AssertionCreationTasklet_CreateAttributeContractState=An Attribute Contract is a set of user attributes that this server will send in the assertion.
AssertionCreationTasklet_CreateAttributeContractState_jwt=An Attribute Contract is a set of user attributes that this server will send in the JWT.
AssertionCreationTasklet_IdpAdapterMappingState=PingFederate uses IdP adapters, partner IdPs or Authentication Policies to authenticate users to your SP.  Users may be authenticated by one of several different adapters or Policy Contracts, so map an adapter instance for each IDM system or an authentication policy contract for each policy.
AssertionCreationTasklet_SummaryCardState=Summary information for your Assertion Creation configuration. Click a heading link to edit a configuration setting.
AssertionCreationTasklet_SummaryCardState_jwt=Summary information for your JWT Creation configuration. Click a heading link to edit a configuration setting.

# SpXaspTasklet
SpXaspTasklet_RetrievableAttributesState=Specify the list of attributes that may be returned to the SP in the response to an attribute request.
SpXaspTasklet_SpXaspConfigAttributeSourcesState=Here you can specify a series of local data stores that will be used to retrieve user attributes in response to an attribute request.
SpXaspTasklet_SpXaspAttributeSourceMappingState=Fulfill your Attribute Request with values from your Data Store lookup or with dynamic text values.
SpXaspTasklet_SpXaspAttributeSourceMappingStateVo=Fulfill your Attribute Request with values from your Data Store lookup or with dynamic text values.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpXaspTasklet_AttrReqSecurityPolicyState=Specify the attribute requester profile&#39;s security policy with your partner.
SpXaspTasklet_AttrReqSecurityPolicyState_Luna=Specify the attribute requester profile&#39;s security policy with your partner. Note: this server is configured to use an HSM that does not support XML encryption, so &#39;Encrypt the Assertion&#39; and &#39;Require an encrypted the Name Identifier&#39; are not available.
SpXaspTasklet_SpXaspIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to issue an attribute query response. Use this optional screen to configure the criteria for use with this conditional authorization.
SpXaspTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# SpConfigAdapterMappingTasklet
SpConfigAdapterMappingTasklet_SelectAdapterState=Attributes returned by the chosen adapter instance (the Adapter Contract) may be used to fulfill the Attribute Contract with your partner.
SpConfigAdapterMappingTasklet_OverrideInstanceState=Click the button below to override the adapter settings.
SpConfigAdapterMappingTasklet_SelectAdapterStateNew=Select an IdP adapter instance that may be used to authenticate users for this partner.  Attributes returned by the adapter instance you choose (the Adapter Contract) may be used to fulfill the Attribute Contract with your partner.
SpConfigAdapterMappingTasklet_VirtualServerIdMappingState=You can optionally restrict this adapter to certain virtual server IDs. By default, this mapping will be applicable to all virtual server IDs. To restrict it to a subset of the available virtual server IDs, check Restrict Virtual Server IDs and select all the virtual server IDs that apply to this mapping.
SpConfigAdapterMappingTasklet_SelectAssertionMappingState=You can choose to fulfill the Attribute Contract with your partner using either the values provided by the "{0}" adapter, or you can use these values plus additional attributes retrieved from local data stores.
SpConfigAdapterMappingTasklet_ConfigAttributeSourcesState=Here you can specify a series of local data stores that will be used to supply additional information about the user in the SAML assertion to the SP.
SpConfigAdapterMappingTasklet_FailsafeAttributeSourceState=If attribute mappings configured with the data-store setup fail to complete the Attribute Contract, PingFederate can either provide a default set of attributes (configured on the next screen) or stop the SSO transaction.
SpConfigAdapterMappingTasklet_SPDefaultAttributeMappingState=Fulfill your Attribute Contract with values from the authentication adapter or with dynamic text values.
SpConfigAdapterMappingTasklet_SPDefaultAttributeMappingState_UseOtherValues=Fulfill your Attribute Contract with values from the authentication adapter or dynamic text values. These values will be used if the user cannot be located in data stores. Coordinate with your partner to determine what default values to send.
SpConfigAdapterMappingTasklet_SPDefaultAttributeMappingState_UseOtherValuesOneMapping=Fulfill your Attribute Contract with values from one or more data stores, the authentication adapter, or dynamic text values.
SpConfigAdapterMappingTasklet_SpConfigIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources. Use this optional screen to configure the criteria for use with this conditional authorization.
SpConfigAdapterMappingTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# CredentialsTasklet
SP_CredentialsTasklet_BackChannelAuthenticationState=You selected one or more bindings that require additional security for communication with your partner.  Please ensure that security settings are properly configured.
SP_CredentialsTasklet_BackChannelAuthenticationState_1x=You selected the Artifact profile that uses the SOAP binding. This requires additional security for communication with your partner.  Please ensure that security settings are properly configured.
SP_CredentialsTasklet_SigningCertState=You may need to digitally sign SAML messages or security tokens to protect against tampering.  Please select a key/certificate to use from the list below.  A secondary signing certificate may be configured only if primary certificate has certificate rotation disabled.  The secondary signing certificate is only used  for inclusion in the connection metadata.
SP_CredentialsTasklet_SigningCertState_1x=You may need to digitally sign SAML messages or security tokens to protect against tampering.  Please select a key/certificate to use from the list below.  A secondary signing certificate may be configured only if primary certificate has certificate rotation disabled.  The secondary signing certificate is only used  for inclusion in the connection metadata.
SP_CredentialsTasklet_WsFedJwtSigningCertState=You need to digitally sign the JWT security token to protect against tampering.  Please select a supported key/certificate to use from the list below. Only EC and RSA certificates are supported and RSA certificates must have a minimum key size of 2048 bits.  A secondary signing certificate may be configured only if primary certificate has certificate rotation disabled.  The secondary signing certificate is only used  for inclusion in the connection metadata.
#SP_CredentialsTasklet_VerificationCertState=Incoming SAML messages or security tokens may be digitally signed. Please select the certificate(s) to use when verifying these digital signatures.  When multiple certificates are chosen, each certificate is tried from the top of the list down until the signature is verified.
#SP_CredentialsTasklet_VerificationCertState_1x=Incoming SAML messages or security tokens may be digitally signed. Please select the certificate(s) to use when verifying these digital signatures.  When multiple certificates are chosen, each certificate is tried from the top of the list down until the signature is verified.
SP_CredentialsTasklet_SignatureVerificationSettingsState=Incoming SAML messages or security tokens may be digitally signed. This configuration task provides options for verifying signatures.
SP_CredentialsTasklet_SelectXmlEncryptionCertState=Please select the partner certificate to use when encrypting message content as well as the preferred block encryption and key transport algorithms.  Only RSA keys can be used for XML encryption.
SP_CredentialsTasklet_SelectXmlDecryptionKeyState=Please select the certificates that corresponds to private keys that you will use to decrypt message content sent to you from your partner.  Only RSA keys can be used for XML encryption.
SP_CredentialsTasklet_SummaryCardState=Summary information for your Credentials configuration. Click a heading link to edit a configuration setting.

IDP_CredentialsTasklet_BackChannelAuthenticationState=You selected one or more bindings that require additional security for communication with your partner.  Please ensure that security settings are properly configured.
IDP_CredentialsTasklet_BackChannelAuthenticationState_1x=You selected the Artifact profile that uses the SOAP binding. This requires additional security for communication with your partner.  Please ensure that security settings are properly configured.
IDP_CredentialsTasklet_SigningCertState=You may need to digitally sign SAML messages to protect against tampering. Please select a key/certificate to use from the list below.  A secondary signing certificate may be configured only if primary certificate has certificate rotation disabled.  The secondary signing certificate is only used  for inclusion in the connection metadata.
IDP_CredentialsTasklet_SigningCertState_1x=You may need to digitally sign SAML messages to protect against tampering. Please select a key/certificate to use from the list below.  A secondary signing certificate may be configured only if primary certificate has certificate rotation disabled.  The secondary signing certificate is only used  for inclusion in the connection metadata.
#IDP_CredentialsTasklet_VerificationCertState=Please select the certificate(s) to use when verifying these digital signatures. When multiple certificates are chosen, each certificate is tried from the top of the list down until the signature is verified.
#IDP_CredentialsTasklet_VerificationCertState_1x=Incoming SAML messages or security tokens may be digitally signed. Please select the certificate(s) to use when verifying these signatures.  When multiple certificates are chosen, each certificate is tried from the top of the list down until the signature is verified.
IDP_CredentialsTasklet_SignatureVerificationSettingsState=Incoming SAML messages or security tokens may be digitally signed. This configuration task provides options for verifying signatures.
IDP_CredentialsTasklet_SelectXmlEncryptionCertState=Please select the partner certificate to use when encrypting message content as well as the preferred block encryption and key transport algorithms.  Only RSA keys can be used for XML encryption.
IDP_CredentialsTasklet_SelectXmlDecryptionKeyState=Please select the certificate that corresponds to the private key that you will use to decrypt message content sent to you from your partner.  Only RSA keys can be used for XML encryption.
IDP_CredentialsTasklet_SummaryCardState=Summary information for your Credentials configuration. Click a heading link to edit a configuration setting.

# IdpDiscoveryTasklet
IdpDiscoveryTasklet_ConfigDomainCookieSettingsState=Please select one or more roles that this server will play in the IdP Discovery profile.
IdpDiscoveryTasklet_ConfigCommonDomainServiceState=Please enter location and authentication information about the common domain service.
IdpDiscoveryTasklet_ConfigLocalCommonDomainServerState=Please provide configuration information for this server to act as the common domain service.
IdpDiscoveryTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# Affiliation Management
AffiliationsTasklet_AffiliationMgmtState=On this page you can create, edit or delete affiliations of SP partners.

# Manage Affiliations
ManageAffiliationsTasklet_ImportAffiliationMetadataState=If you have a metadata file describing this new affiliation, import the file here.
ManageAffiliationsTasklet_AffiliationGeneralInfoState=This information identifies your affiliation.
ManageAffiliationsTasklet_CreateAffiliationState=Manage the list of SP connections that are part of this affiliation. It is important that you configure each of the SP connections in an affiliation to generate opaque pseudonyms using the same adapter attributes.
ManageAffiliationsTasklet_AffiliationActivationState=Summary information for your SP Affiliation.  Click a link to edit a particular configuration setting.

# SP Attribute Source
SpAttributeSourceTasklet_SelectDataSourceState=Data stores are used to retrieve supplemental attributes. Specify the attribute store's details to use it in your configuration.
SpAttributeSourceTasklet_SelectDataSourceState_SpXasp=This server uses local data stores to retrieve user attributes in response to an attribute request.
SpAttributeSourceTasklet_SelectDataSourceState_A2A=This server uses local data stores to look up any attributes required by the SP Adapter Contract but not available directly from the IdP Adapter.
SpAttributeSourceTasklet_SelectDataSourceState_Apc2SpA=This server uses local data stores to look up any attributes required by the SP Adapter Contract but not available directly from the Authentication Policy Contract.
SpAttributeSourceTasklet_SelectDataSourceState_T2T=This server uses local data stores to look up any attributes required by the Token Generator Contract but not available directly from the Token Processor.
SpAttributeSourceTasklet_SelectDataSourceState_OIDC=This server uses local data stores to retrieve supplemental attributes returned by PingFederate from the User Info Endpoint and within the ID Token. Specify an Attribute Source name that will distinguish this user lookup for the selected data store.
SpAttributeSourceTasklet_SelectDataSourceState_WSTTP=Data stores are used to retrieve supplemental attributes. Specify the attribute store's details to use it in your configuration.
SpAttributeSourceTasklet_SelectDataSourceState_PP2TG=Data stores are used to retrieve supplemental attributes. Specify the attribute store's details to use it in your configuration.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_SpXasp=Please select the table and columns you want to query.  This information will be used to fulfill the attributes in the Retrievable Attributes list.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_A2A=Please select the table and columns you want to query.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_Apc2SpA=Please select the table and columns you want to query.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_T2T=Please select the table and columns you want to query.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_OIDC=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_WSTTP=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_PP2TG=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_ConfigDatabaseFilterState=Please supply a WHERE clause to filter the data from your table.
SpAttributeSourceTasklet_ConfigDatabaseFilterState_SpXasp=Define a filter for extracting data from your table.  In qualifying the search, you should use only those values passed in the DN from the SP.
SpAttributeSourceTasklet_ConfigDatabaseFilterState_A2A=Please supply a WHERE clause to filter the data from the table.
SpAttributeSourceTasklet_ConfigDatabaseFilterState_Apc2SpA=Please supply a WHERE clause to filter the data from the table.
SpAttributeSourceTasklet_ConfigDatabaseFilterState_T2T=Please supply a WHERE clause to filter the data from the table.
SpAttributeSourceTasklet_ConfigDatabaseFilterState_OIDC=Please supply a WHERE clause to filter the data from your table.
SpAttributeSourceTasklet_ConfigDatabaseFilterState_WSTTP=Please supply a WHERE clause to filter the data from your table.
SpAttributeSourceTasklet_ConfigDatabaseFilterState_PP2TG=Please supply a WHERE clause to filter the data from your table.
SpAttributeSourceTasklet_ConfigLdapDirSearchState=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_ConfigLdapDirSearchState_SpXasp=Please configure your directory search.  This information will be used to fulfill the attributes in the Retrievable Attributes list.
SpAttributeSourceTasklet_ConfigLdapDirSearchState_A2A=Please configure your directory search. This information, along with the attributes supplied in the Adapter Contract, will be used to fulfill the Attribute Contract of the target Adapter.
SpAttributeSourceTasklet_ConfigLdapDirSearchState_Apc2SpA=Please configure your directory search. This information, along with the attributes supplied in the Policy Contract, will be used to fulfill the Attribute Contract of the target Adapter.
SpAttributeSourceTasklet_ConfigLdapDirSearchState_T2T=Please configure your directory search. This information, along with the attributes supplied in the Token Processor, will be used to fulfill the Attribute Contract of the Token Generator.
SpAttributeSourceTasklet_ConfigLdapDirSearchState_OIDC=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_ConfigLdapDirSearchState_WSTTP=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_ConfigLdapDirSearchState_PP2TG=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_ConfigLdapDirAttrTypeState=Please specify the encoding type for the selected binary directory attributes.
SpAttributeSourceTasklet_ConfigLdapDirAttrTypeState_A2A=Please specify the encoding type for the selected binary directory attributes.
SpAttributeSourceTasklet_ConfigLdapDirAttrTypeState_Apc2SpA=Please specify the encoding type for the selected binary directory attributes.
SpAttributeSourceTasklet_ConfigLdapDirAttrTypeState_WSTTP=Please specify the encoding type for the selected binary directory attributes.
SpAttributeSourceTasklet_ConfigLdapDirAttrTypeState_OIDC=Please specify the encoding type for the selected binary directory attributes.
SpAttributeSourceTasklet_ConfigLdapDirAttrTypeState_PP2TG=Please specify the encoding type for the selected binary directory attributes.
SpAttributeSourceTasklet_ConfigLdapFilterState=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_SpConfigLdapFilterState_SpXasp=Define a filter for extracting data from your directory.  In qualifying the search, you should use only those values passed in the DN from the SP.
SpAttributeSourceTasklet_SpConfigLdapFilterState_A2A=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_SpConfigLdapFilterState_Apc2SpA=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_SpConfigLdapFilterState_T2T=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_SpConfigLdapFilterState_OIDC=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_SpConfigLdapFilterState_WSTTP=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_SpConfigLdapFilterState_PP2TG=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_SpConfigLdapFilterState=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_AdapterConfigLdapFilterState=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_AdapterConfigLdapFilterStateVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState=Perform any filter configuration for the data source.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_SpXasp=Define a filter for extracting data from this data store.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_A2A=Perform any filter configuration for this data source.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_Apc2SpA=Perform any filter configuration for this data source.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_T2T=Perform any filter configuration for this data source.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_OIDC=Perform any filter configuration for the data source.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_WSTTP=Perform any filter configuration for the data source.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_PP2TG=Perform any filter configuration for the data source.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState=Please select those fields you would like to use when mapping attributes to the contract.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_SpXasp=Based upon the data elements available from this data store, select the ones to retrieve.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_A2A=Please select the names of attributes you would like to use from this data source when mapping attributes into the SP Adapter Contract.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_Apc2SpA=Please select the names of attributes you would like to use from this data source when mapping attributes into the SP Adapter Contract.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_T2T=Please select the names of attributes you would like to use from this data source when mapping attributes into the Token Generator Contract.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_OIDC=Please select those fields you would like to use when mapping attributes to the contract.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_WSTTP=Please select those fields you would like to use when mapping attributes to the contract.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_PP2TG=Please select those fields you would like to use when mapping attributes to the contract.
SpAttributeSourceTasklet_SPAttributeSourceMappingState=Fulfill your Attribute Contract with values from the authentication adapter, dynamic text values, or from a data store lookup.
SpAttributeSourceTasklet_SummaryCardState=Attribute Source Summary
SpAttributeSourceTasklet_SummaryCardState_SpXasp=Attribute Source Summary
SpAttributeSourceTasklet_SummaryCardState_A2A=Attribute Source Summary
SpAttributeSourceTasklet_SummaryCardState_Apc2SpA=Attribute Source Summary
SpAttributeSourceTasklet_SummaryCardState_T2T=Attribute Source Summary
SpAttributeSourceTasklet_SummaryCardState_OIDC=Attribute Source Summary
SpAttributeSourceTasklet_SummaryCardState_WSTTP=Attribute Source Summary
SpAttributeSourceTasklet_SummaryCardState_PP2TG=Attribute Source Summary


# SP Attribute Source - ViewOnly
SpAttributeSourceTasklet_SelectDataSourceStateVo=Data stores are used to retrieve supplemental attributes. Specify the attribute store's details to use it in your configuration.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDataSourceState_SpXaspVo=This server uses local data stores to retrieve user attributes in response to an attribute request.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDataSourceState_A2AVo=This server uses local data stores to look up any attributes required by the SP Adapter Contract but not available directly from the IdP Adapter.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDataSourceState_Apc2SpAVo=This server uses local data stores to look up any attributes required by the SP Adapter Contract but not available directly from the Authentication Policy Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDataSourceState_T2TVo=This server uses local data stores to look up any attributes required by the Token Generator Contract but not available directly from the Token Processor.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDataSourceState_OIDCVo=This server uses local data stores to retrieve supplemental attributes returned by PingFederate from the User Info Endpoint and within the ID Token. Specify an Attribute Source name that will distinguish this user lookup for the selected data store.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDataSourceState_WSTTPVo=Data stores are used to retrieve supplemental attributes. Specify the attribute store's details to use it in your configuration.
SpAttributeSourceTasklet_SelectDataSourceState_PP2TGVo=Data stores are used to retrieve supplemental attributes. Specify the attribute store's details to use it in your configuration.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsStateVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_SpXaspVo=Please select the table and columns you want to query.  This information will be used to fulfill the attributes in the Retrievable Attributes list.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_A2AVo=Please select the table and columns you want to query.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_Apc2SpAVo=Please select the table and columns you want to query.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_T2TVo=Please select the table and columns you want to query.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_OIDCVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_WSTTPVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_PP2TGVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigDatabaseFilterStateVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigDatabaseFilterState_SpXaspVo=Define a filter for extracting data from your table.  In qualifying the search, you should use only those values passed in the DN from the SP.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigDatabaseFilterState_A2AVo=Please supply a WHERE clause to filter the data from the table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigDatabaseFilterState_Apc2SpAVo=Please supply a WHERE clause to filter the data from the table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigDatabaseFilterState_T2TVo=Please supply a WHERE clause to filter the data from the table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigDatabaseFilterState_OIDCVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigDatabaseFilterState_WSTTPVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigDatabaseFilterState_PP2TGVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapDirSearchStateVo=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapDirSearchState_SpXaspVo=Please configure your directory search.  This information will be used to fulfill the attributes in the Retrievable Attributes list.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapDirSearchState_A2AVo=Please configure your directory search. This information, along with the attributes supplied in the Adapter Contract, will be used to fulfill the Attribute Contract of the target Adapter.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapDirSearchState_Apc2SpAVo=Please configure your directory search. This information, along with the attributes supplied in the Policy Contract, will be used to fulfill the Attribute Contract of the target Adapter.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapDirSearchState_T2TVo=Please configure your directory search. This information, along with the attributes supplied in the Token Processor, will be used to fulfill the Attribute Contract of the Token Generator.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapDirSearchState_OIDCVo=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapDirSearchState_WSTTPVo=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapDirSearchState_PP2TGVo=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigLdapFilterStateVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SpConfigLdapFilterStateVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SpConfigLdapFilterState_SpXaspVo=Define a filter for extracting data from your directory.  In qualifying the search, you should use only those values passed in the DN from the SP.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SpConfigLdapFilterState_A2AVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SpConfigLdapFilterState_Apc2SpAVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SpConfigLdapFilterState_T2TVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SpConfigLdapFilterState_OIDCVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SpConfigLdapFilterState_WSTTPVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SpConfigLdapFilterState_PP2TGVo=Please enter a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersStateVo=Perform any filter configuration for the data source.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_SpXaspVo=Define a filter for extracting data from this data store.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_A2AVo=Perform any filter configuration for this data source.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_Apc2SpAVo=Perform any filter configuration for this data source.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_T2TVo=Perform any filter configuration for this data source.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_OIDCVo=Perform any filter configuration for the data source.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_WSTTPVo=Perform any filter configuration for the data source.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_PP2TGVo=Perform any filter configuration for the data source.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectCustomSourceFieldsStateVo=Please select those fields you would like to use when mapping attributes to the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectCustomSourceFieldsStateVo_SpXasp=Based upon the data elements available from this data store, select the ones to retrieve.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_A2AVo=Please select the names of attributes you would like to use from this data source when mapping attributes into the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_Apc2SpAVo=Please select the names of attributes you would like to use from this data source when mapping attributes into the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_T2TVo=Please select the names of attributes you would like to use from this data source when mapping attributes into the Token Generator Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_OIDCVo=Please select those fields you would like to use when mapping attributes to the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SPAttributeSourceMappingStateVo=Fulfill your Attribute Contract with values from the authentication adapter, dynamic text values, or from a data store lookup. <br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_AttributeSourceMappingState_WSTTPVo=Fulfill your Attribute Contract requirements with values from your session lookup adapter, dynamic text values, or from a data store lookup.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_AttributeSourceMappingState_PP2TGVo=Fulfill your Attribute Contract requirements with values from your session lookup adapter, dynamic text values, or from a data store lookup.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>

# Adapter Instance Tasklet
AuthnAdapterInstanceTasklet_SelectAdapterTypeState_newstate=Enter an Adapter Instance Name and ID, select the Adapter Type, and a parent if applicable.  The Adapter Type is limited to the adapters currently installed on your server.
AuthnAdapterInstanceTasklet_SelectAdapterTypeState_existingstate=The values of the selected Adapter.
AuthnAdapterInstanceTasklet_SelectAuthnContextState=This adapter type allows you to specify a fixed value that indicates how the user was authenticated.  This value will be included in the SAML assertion.
AuthnAdapterInstanceTasklet_AuthnAdapterActionState=Actions are available for this instance and can be invoked from here.
AuthnAdapterInstanceTasklet_CreateAdapterContractState=This adapter type supports the creation of an extended adapter contract after initial deployment of the adapter instance. This adapter contract may be used to fulfill the attribute contract, look up additional attributes from a local data store, or create a persistent name identifier which uniquely identifies the user passed to your SP partners.
AuthnAdapterInstanceTasklet_AdapterContractState=This adapter supports the creation of an Extended Adapter Contract after initial adapter deployment. This Adapter Contract may be used to fulfill the Attribute Contract, look up additional attributes from a local data store, or create a persistent name identifier which uniquely identifies the user passed to your SP partners. These are not modifiable.
AuthnAdapterInstanceTasklet_SelectUniqueIdValuesState=As an IdP, some of your SP partners may choose to receive a pseudonym to uniquely identify a user. From the attributes in this authentication adapter, please select the values that you would like to use in constructing this unique identifier. Optionally, specify here any attributes that must be masked in log files. You may also specify an attribute as the unique user key, which PingFederate will associate to user authentication sessions. For example, this association is used when you enable revocation of authentication sessions after password change or reset in the HTML form adapter.

#SessionCreationAdapterTasklet
SessionCreationAdapterTasklet_ConfigureAuthnAdapterState=Complete the configuration necessary to set the appropriate security context for user sessions in your environment. This configuration was designed into the adapter for use at your site.
SessionCreationAdapterTasklet_SummaryCardState=SP adapter instance summary information.
SessionCreationAdapterTasklet_AdapterContractState=This adapter type supports the creation of an extended adapter contract. Add additional attributes here that are required by the target application. This contract must be fulfilled using attributes from the source mapping combined with attributes returned from a local data store lookup. These are not modifiable.
SessionCreationAdapterTasklet_AuthnAdapterActionState=Actions are available for this instance and can be invoked from here.
SessionCreationAdapterTasklet_CreateAdapterContractState=This adapter type supports the creation of an extended adapter contract. Add additional attributes here that are required by the target application. This contract must be fulfilled using attributes from the source mapping combined with attributes returned from a local data store lookup.
SessionCreationAdapterTasklet_SelectAdapterTypeState_newstate=Please enter an Adapter Instance Name and ID, select the Adapter Type, and a parent if applicable.
SessionCreationAdapterTasklet_SelectAdapterTypeState_existingstate=The values of the selected Adapter.
SessionCreationAdapterTasklet_InheritableTargetApplicationInfoState=Optionally, you can specify the name of the application and the icon URL of the target application.

#AuthnAdapterInstanceTasklet
AuthnAdapterInstanceTasklet_ConfigureAdapterState=Complete the configuration necessary to look up user security contexts in your environment. This configuration was designed into the adapter for use at your site.
AuthnAdapterInstanceTasklet_PluginContractState=An Adapter Contract may be used to fulfill the Attribute Contract passed to your SP partners. By default, the adapter contract is fulfilled by the adapter itself. Optionally, additional attributes from local data stores can be used to fulfill the contract.
AuthnAdapterInstanceTasklet_SummaryCardState=IdP adapter instance summary information.

#ConfigPluginContractTasklet
ConfigPluginContractTasklet_ConfigPluginContractAttributeSourcesState=You can choose to fulfill the Adapter Contract with the adapter's default values, or you can use these values plus additional attributes retrieved from local data stores.
ConfigPluginContractTasklet_PluginContractFulfillmentMappingState=Fulfill your Adapter Contract with values from the authentication adapter or with dynamic text values.
ConfigPluginContractTasklet_PluginContractIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources. Use this optional screen to configure the criteria for use with this conditional authorization.
ConfigPluginContractTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# Adapter Management
AdapterManagementTasklet_SpAdapterManagementState=SP adapters are used to create local application sessions for users in order for PingFederate to provide SSO access to applications. Here you can manage instances of adapters that may be used to map from protocols to local applications.
AdapterManagementTasklet_IdpAdapterManagementState=IdP adapters look up session information and provide user identification to PingFederate. Here you can manage instances of adapters that may be used to fulfill attribute contracts in protocol mappings.

# Identity Store Provisioner
IdentityStoreProvisionerManagementTasklet_IdentityStoreProvisionerManagementState=PingFederate can use custom identity store provisioners to bridge Inbound SCIM processing to external user stores.
IdentityStoreProvisionerInstanceTasklet_SelectAdapterTypeState_newstate=Enter an Identity Store Provisioner Instance Name and ID, select the Identity Store Provisioner Type, and a parent if applicable.  The Identity Store Provisioner Type is limited to the provisioners currently installed on your server.
IdentityStoreProvisionerInstanceTasklet_SelectAdapterTypeState_existingstate=The values of the selected Identity Store Provisioner Instance.
IdentityStoreProvisionerInstanceTasklet_SummaryCardState=Identity Store Provisioner instance summary information.
IdentityStoreProvisionerInstanceTasklet_ConfigureAuthnAdapterState=Complete the configuration necessary for this identity store provisioner in your environment.
IdentityStoreProvisionerInstanceTasklet_CreateAdapterContractState=This identity store provisioner supports extending the built-in list of user attributes that the provisioner retrieves from the identity store.
IdentityStoreProvisionerInstanceTasklet_CreateIdentityStoreGroupContractState=This identity store provisioner supports extending the built-in list of group attributes that the provisioner retrieves from the identity store.

IdentityStoreProvisionerManagementState_Adapter_has_errors={0} has error(s), please review and fix.
IdentityStoreProvisionerManagementState_Connections_have_errors=Recent changes have created errors in dependent configuration settings. Please fix the errors before saving.

AdapterSelectorInstanceTasklet_AdapterSelectorManagementState=PingFederate uses Authentication Selectors globally (across connections) to choose which Authentication Source (an IdP Adapter or IdP Connection) to invoke based upon criteria defined in a Selector Instance.  Selector Instance results are mapped to Authentication Sources and applied as authentication policy.
AdapterSelectorInstanceTasklet_AuthnPolicyState=Authentication policies define how PingFederate authenticates users. Selectors and authentication sources can be conditionally chained together in paths to form policies. Ensure that successful paths end with Policy Contracts to reuse mapping configuration across protocols and applications.
AuthnPoliciesTasklet_DefaultAuthnSourcesState=Define the list of authentication sources for PingFederate to fall back on when it finds no authentication source from the applicable policies.

AdapterSelectorManagementTasklet_SelectAdapterTypeState_newstate=These values identify the Authentication Selector Instance.
AdapterSelectorManagementTasklet_SelectAdapterTypeState_existingstate=These values identify the Authentication Selector Instance.
AdapterSelectorManagementTasklet_ConfigureAuthnAdapterState=Complete the configuration needed for this Selector Instance.
AdapterSelectorManagementTasklet_CreateAdapterContractState=Specify expected result values. Each result value will be mapped to an appropriate Authentication Source.
AdapterSelectorManagementTasklet_SummaryCardState=Summary information.

# Fragments
PolicyFragmentState_inline_help_id=A unique identifier for this fragment. The ID cannot be changed after the fragment is created. This ID will be used to reference input and output attributes in the advanced Expressions fulfilment option.
PolicyFragmentState_inline_help_inputs=The input authentication policy contract that calling members will need to fulfill. These attributes will be available for use throughout the policy.
PolicyFragmentState_inline_help_outputs=The output authentication policy contract that this fragment will fulfill. Calling members will be able to use the values of the attributes in the output policy contract.
PolicyFragmentsTasklet_PolicyFragmentsState=Policy Fragments define a common authentication pattern that can be referenced in various flows within PingFederate.
PolicyFragmentTasklet_PolicyFragmentState=Policy Fragments define a common authentication pattern that can be referenced in various flows within PingFederate.

PolicyFragmentState_authn_tree_missing_option=The policy fragment is missing required configuration.
PolicyFragmentState_apc_mapping_errors=Please fix the mappings with errors.
PolicyFragmentState_incoming_user_id_changed=An Incoming User ID attribute has changed. Please select a new attribute.
PolicyFragmentState_rule_errors=Please fix the rules with errors.
PolicyFragmentState_option_errors=Please fix the options with errors.
PolicyFragmentState_policy_name_required=A fragment name is required.
PolicyFragmentState_policy_name_in_use=The fragment name ''{0}'' is already in use. Please choose a different name.
PolicyFragmentsState_policy_has_errors={0} has errors. Please edit the fragment to fix those errors.
PolicyFragmentState_policy_id_in_use=The policy ID ''{0}'' is already in use. Please choose a different ID.

# Authentication Session Policies
AuthenticationSessionPoliciesTasklet_AuthenticationSessionPoliciesConfigurationState=Sessions define how frequently users are challenged to authenticate. Application sessions apply to PingFederate user facing endpoints, such as the profile management endpoint. Authentication sessions wrap authentication sources (IdP adapters and IdP connections) to control when they are invoked. Additional tracking options for logout are available to control if all adapters should be involved in the logout process, and if the user's revoked session should be published. Publishing revoked sessions is recommended in order to provide a secure single logout (SLO) experience with PingAccess deployments.

# IdP Xml Encryption
IdpXmlEncryptionTasklet_SelectIdpXmlAssertionEncryptionState=XML encryption may be used to provide additional privacy at the XML message level.  Please select which parts of the assertion, if any, you expect your IdP partner to encrypt.
IdpXmlEncryptionTasklet_SelectXmlDecryptionKeyState=Please select the certificate that corresponds to the private key that you will use to decrypt message content sent to you from your IdP partner.  Only RSA keys can be used for XML encryption.
IdpXmlEncryptionTasklet_SelectXmlEncryptionCertState=Please select your partner&#39;s certificate to be used when encrypting message content as well as the preferred block encryption and key transport algorithms.  Only RSA keys can be used for XML encryption.
IdpXmlEncryptionTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# Sp Xml Encryption
SpXmlEncryptionTasklet_SelectSpXmlAssertionEncryptionState=Please select the elements to encrypt when sending assertions to your SP partner.
SpXmlEncryptionTasklet_SelectXmlDecryptionKeyState=Please select the certificate that corresponds to the private key that you will use to decrypt message content sent to you from your IdP partner.  Only RSA keys can be used for XML encryption.
SpXmlEncryptionTasklet_SelectXmlEncryptionCertState=Please select the partner certificate to be used when encrypting message content as well as the preferred block encryption and key transport algorithms.  Only RSA keys can be used for XML encryption.
SpXmlEncryptionTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# Manage Datasources
ManageDataSourcesTasklet_ManageDataSourcesState=Manage data stores for use with attribute lookups.

# Datasources
DataSourceTasklet_CustomDataBaseConfigState=Configure your data store connection by listing region-specific URLs on separate rows and corresponding node tags for each region. To tag the nodes that will use a particular URL, use the node.tags property in the run.properties file. Failover may be configurable within a single region via driver-specific URL parameters. Failover is not supported across different rows.
DataSourceTasklet_LdapConfigState=Complete the configuration necessary to connect to your data store. For regional deployments, specify region-specific hostnames on separate rows and the corresponding node tags for each region. To tag the nodes that use a particular hostname, use the node.tags property in the run.properties file. Failover can be configured within a single region by listing multiple space-separated hostnames in the same hostname row. Failover is not supported across different rows.
DataSourceTasklet_SelectDataSourceTypeState=Enter a data store name and select its type. Available types are limited to ones currently installed on your server.
DataSourceTasklet_SummaryCardState=Click a heading link to edit a configuration setting.
DataSourceTasklet_ConfigureAttributeSourceAdapterState=Complete the configuration necessary to connect to your data store.
DataSourceTasklet_AttributeSourceAdapterActionState=Actions are available for this instance and can be invoked from here.
DataSourceTasklet_LdapGatewayConfigState=Complete the configuration necessary to connect to your PingOne LDAP Gateway.

# Advanced Database Options
AdvancedDataBaseOptionsTasklet_AdvancedDataBaseOptionsState=Advanced Database Options

# Advanced LDAP Options
AdvancedLdapOptionsTasklet_AdvancedLdapOptionsState=Manage LDAP connection-pooling settings for the selected data store. PingFederate manages both a bind and a search pool for every LDAP data store instance. The settings on this page are applied to both connection pools separately.
AdvancedLdapOptionsTasklet_AdvancedLdapOptionsBinaryAttrsState=Specify the LDAP attributes to be handled as binary data.

# Advanced LDAP Gateway Options
AdvancedLdapGatewayOptionsTasklet_AdvancedLdapOptionsBinaryAttrsState=Specify the LDAP attributes to be handled as binary data.
AdvancedLdapOptionsBinaryAttrsState_Binary_Attribute=Binary Attribute

# IdP Inbound Artifact Bindings
InboundArtifactBindingConfigTasklet_OutboundConfigSoapAuthState=Select the SOAP authentication method(s) to use when you send a message using SOAP back channel. This message may be an Artifact Resolve request or an Attribute Query request.
InboundArtifactBindingConfigTasklet_OutboundConfigSoapAuthState_1x=Select the SOAP authentication method(s) to use when you send an Artifact Resolve request to your partner using the SOAP binding.
InboundArtifactBindingConfigTasklet_OutboundConfigSoapAuthState_Xasp=Select the SOAP authentication method(s) to use when you send an Attribute Query request to your partner.
InboundArtifactBindingConfigTasklet_BasicSoapAuthOutboundState=Specify the username and password to use when you authenticate with your partner&#39;s SOAP endpoint.
InboundArtifactBindingConfigTasklet_SslCertAuthState=Select the SSL client certificate you wish to use to authenticate with your partner&#39;s SOAP endpoint.
InboundArtifactBindingConfigTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# IdP Outbound Artifact Bindings
OutboundArtifactBindingConfigTasklet_InboundConfigSoapAuthState=Select the authentication method(s) to use when your partner sends a message using the HTTP back channel. This message may be an Artifact resolve request, Attribute Query or Provisioning request.
OutboundArtifactBindingConfigTasklet_InboundConfigSoapAuthState_1x=Select the authentication method to use when your partner sends an Artifact resolve request using the SOAP binding.
OutboundArtifactBindingConfigTasklet_InboundConfigSoapAuthState_Xasp=Select the authentication method(s) to use when your partner sends an Attribute Query response.
OutboundArtifactBindingConfigTasklet_BasicSoapAuthInboundState=Specify the username and password your partner will use to authenticate with your endpoint.
OutboundArtifactBindingConfigTasklet_SelectCertVerificationMethodState=Select the method of certificate verification to use when the remote party connects to the HTTP endpoint and begins SSL client certificate authentication.
OutboundArtifactBindingConfigTasklet_SslCertVerificationState=The incoming SSL connection will be identified by a specific certificate.  Select the certificate you wish to use.
OutboundArtifactBindingConfigTasklet_SubjectDnState=The incoming SSL connection will be identified by a specific Subject DN on the certificate.  Please provide that Subject DN. Optionally, you may also restrict the issuer to a specific Trusted CA.
OutboundArtifactBindingConfigTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# SP Outbound Artifact Bindings
SpOutboundArtifactBindingConfigTasklet_InboundConfigSoapAuthState=Select the SOAP authentication method(s) to use when your partner sends a message using the SOAP back channel. This message may be an Artifact resolve request or an Attribute Query request.
SpOutboundArtifactBindingConfigTasklet_InboundConfigSoapAuthState_1x=Select the SOAP authentication method to use when your partner sends an Artifact resolve request using the SOAP binding.
SpOutboundArtifactBindingConfigTasklet_BasicSoapAuthInboundState=Specify the username and password your partner will use to authenticate with your SOAP endpoint.
SpOutboundArtifactBindingConfigTasklet_SelectCertVerificationMethodState=Select the method of certificate verification to use when the remote party connects to the SOAP endpoint and begins SSL client certificate authentication.
SpOutboundArtifactBindingConfigTasklet_SslCertVerificationState=The incoming SSL connection will be identified by a specific certificate.  Select the certificate you wish to use.
SpOutboundArtifactBindingConfigTasklet_SubjectDnState=The incoming SSL connection will be identified by a specific Subject DN on the certificate.  Please provide that Subject DN. Optionally, you may also restrict the issuer to a specific Trusted CA.
SpOutboundArtifactBindingConfigTasklet_InboundConfigSoapAuthState_Xasp=Select the SOAP authentication method(s) to use when your partner sends an Attribute Query request using the SOAP back channel.
SpOutboundArtifactBindingConfigTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# Inbound Post Redirect Binding
InboundPostRedirectBindingTasklet_SignAuthNReqState=If you want to require authentication requests to be signed, check the box below.
InboundPostRedirectBindingTasklet_DsigVerificationInboundCertState=Incoming authentication requests and all Single Logout (SLO) messages must be digitally signed. Please select the certificate you will use to verify your partner&#39;s signature.
InboundPostRedirectBindingTasklet_SummaryCardState=Summary Info

# License Management
LicenseManagementTasklet_LicenseManagementState=Please select the file containing the new PingFederate license.

LocalSettingsTasklet_EnableIdpState=If you want this server to act as an Identity Provider, click the checkbox below.
LocalSettingsTasklet_ConfigIdpEventsState=Enter values that affect the user&#39;s experience when executing IdP-initiated SSO operations.
LocalSettingsTasklet_EnableSpState=If you want this server to act as a Service Provider, click the checkbox below.
LocalSettingsTasklet_ConfigSpEventsState=Enter values that affect the user&#39;s experience when executing SP-initiated SSO operations.
LocalSettingsTasklet_Logout_event=Logout

#SaaS Attribute Mapping
SaaSAttrSingleMappingTasklet_SaaSSelectAttrMappingState=Configure how attribute values from your user store will be mapped into Fields specified by the service provider.
SaaSAttrGroupMappingTasklet_SaaSSelectAttrGroupMappingState=Configure how attribute values from your user store will be mapped into Fields specified by the service provider.

# SaaS Channel
SaaSChannelTasklet_SaaSGeneralInfoState=Specify a unique name for this channel. Adjust the default number of processing threads as needed. The timeout applies to individual user and group provisioning operations on the target service provider.
SaaSChannelTasklet_SaaSSourceSelectionState=Choose the data store that serves as the local repository for user accounts requiring provisioning.
SaaSChannelTasklet_SaaSSourceSelectionStateVo=Choose the data store that serves as the local repository for user accounts requiring provisioning.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SaaSChannelTasklet_SaaSSourceSettingsState=Enter or modify LDAP settings that apply to the source user-data store, as needed. Note that these fields are preconfigured with default settings based on the LDAP Type, when specified (see documentation).  For most LDAP Directory installations, the default settings can be used.\
  <br><br>For Activity Directory user-data store, if Active Directory USN algorithm and uSNChanged attribute are chosen for change detection, ensure that PingFederate connects to a single DC. Otherwise, PingFederate may not detect changes because the uSNChanged attribute is not replicated across DCs.
SaaSChannelTasklet_SaaSSourceSettingsStateVo=Enter or modify LDAP settings that apply to the source user-data store, as needed. Note that these fields are preconfigured with default settings based on the LDAP Type, when specified (see documentation).  For most LDAP Directory installations, the default settings can be used.\
  <br><br>For Activity Directory user-data store, if Active Directory USN algorithm and uSNChanged attribute are chosen for change detection, ensure that PingFederate connects to a single DC. Otherwise, PingFederate may not detect changes because the uSNChanged attribute is not replicated across DCs.\
  <br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SaaSChannelTasklet_SaaSSourceLocationState=Enter the Base DN where user records are located in the data store, and specify either an LDAP Filter or Group DN.
SaaSChannelTasklet_SaaSSourceLocationStateVo=Enter the Base DN where user records are located in the data store, and specify either an LDAP Filter or Group DN.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SaaSChannelTasklet_SaaSAttrMappingMgmtState=Edit the mapping of attributes from the local data store into Fields specified by the service provider. The Refresh Fields button queries the target partner to update Fields and specifications.
SaaSChannelTasklet_SaaSAttrMappingMgmtStateVo=Edit the mapping of attributes from the local data store into Fields specified by the service provider. The Refresh Fields button queries the target partner to update Fields and specifications.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SaaSChannelTasklet_SaaSActivationState= Summary information for this provisioning channel. Click a heading in a section to edit a particular configuration setting. You can also activate or deactivate the channel, or reset provisioning synchronization if needed.

# SaaS Management
#SaaSManagementTasklet_SaaSManagementState=On this screen you can manage provisioning channels.  A channel is a combination of a source data store and a provisioning target.
SaaSManagementTasklet_SaaSManagementState=On this screen you can manage provisioning channels.  A channel is a combination of a source data store and a provisioning target.
SaaSManagementTasklet_SaaSTargetState=Specify credentials and/or other connection details that PingFederate will use to access the target service provider for outbound provisioning.
SaaSManagementTasklet_SaaSCustomScimAttributesState=Define Custom SCIM Attributes

# User Management
UsersTasklet_UserMgmtState=Please provide matching New and Confirm Passwords.

# WS Trust User Management
WsTrustUsersTasklet_BasicAuthUserMgmtState=Define a Username and Password for this user (strong passwords required).

UserInfoTasklet_UserInformationState=Provide identity information for this user.
UserInfoTasklet_PasswordGenerationState=This system generated password is valid for only a single use.  Upon subsequent login, the user will be required to change his or her password.
UserInfoTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# User Provisioning
UserProvisioningTasklet_UserAttributesState=User accounts are provisioned with attributes from the SAML Assertion by default. You can also retrieve additional attributes from the IdP using the Attribute Query profile.
UserProvisioningTasklet_UserRepositoryState=Choose the data store that serves as the local repository for user accounts requiring provisioning.
UserProvisioningTasklet_UserRepositoryStateVo=Choose the data store that serves as the local repository for user accounts requiring provisioning.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_UserProvisioningSqlMethodState=Indicate whether you want to map attributes from the assertion directly to database table columns or to stored-procedure parameters.
UserProvisioningTasklet_UserProvisioningSqlMethodStateVo=Indicate whether you want to map attributes from the assertion directly to database table columns or to stored-procedure parameters.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_SelectDatabaseTableAndColumnsState=Specify where user records are located in the repository.
UserProvisioningTasklet_SelectDatabaseTableAndColumnsStateVo=Specify where user records are located in the repository.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_SelectDatabaseSchemaAndStoredProcState=Select the Schema and Stored Procedure you want to use.
UserProvisioningTasklet_SelectDatabaseSchemaAndStoredProcStateVo=Select the Schema and Stored Procedure you want to use.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_ExpressProvisioningJdbcLocationState=Specify where user records are located in the repository.
UserProvisioningTasklet_ExpressProvisioningJdbcLocationStateVo=Specify where user records are located in the repository.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_ConfigUserProvisioningLdapDirSearchState=Specify where user records are located in the repository.
UserProvisioningTasklet_ConfigUserProvisioningLdapDirSearchStateVo=Specify where user records are located in the repository.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_UserProvisioningJdbcUniqueIdState=Select the database column that uniquely identifies the provisioned user on the SP side.  System-managed columns will not appear in this list since their values do not correlate with attributes sent by the IdP to provision or update a user.
UserProvisioningTasklet_UserProvisioningJdbcUniqueIdStateVo=Select the database column that uniquely identifies the provisioned user on the SP side.  System-managed columns will not appear in this list since their values do not correlate with attributes sent by the IdP to provision or update a user.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_UserProvisioningStoredProcParamMappingState=Map each attribute from the assertion to a stored-procedure parameter.
UserProvisioningTasklet_UserProvisioningStoredProcParamMappingStateVo=Map each attribute from the assertion to a stored-procedure parameter.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_UserProvisioningAdapterContractMappingState=Map attribute Sources and Values for each repository attribute that should be populated.
UserProvisioningTasklet_UserProvisioningAdapterContractMappingStateVo=Map attribute Sources and Values for each repository attribute that should be populated.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_EventTriggerState=Provisioning can occur as part of assertion processing for new users only, or for all users arriving from this IdP partner.
UserProvisioningTasklet_EventTriggerState_Oidc=Provisioning can occur as part of provider claims processing for new users only, or for all users arriving from this IdP partner.
UserProvisioningTasklet_ErrorHandlingState=Depending upon the nature of the target application and the agreement with the partner, specify the server&#39;s behavior when a provisioning request fails for any reason.
UserProvisioningTasklet_SummaryCardState=Click a heading link to edit a configuration setting.
UserProvisioningTasklet_UserProvisioningAttributesState=Select attributes in the user repository that should be populated during a user-provisioning request.
UserProvisioningTasklet_UserProvisioningAttributesStateVo=Select attributes in the user repository that should be populated during a user-provisioning request.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_UserProvisioningConfigLdapFilterState=Using attributes from the Assertion, specify an expression that results in a unique user identifier, when combined with the Base DN.
UserProvisioningTasklet_UserProvisioningConfigLdapFilterStateVo=Using attributes from the Assertion, specify an expression that results in a unique user identifier, when combined with the Base DN.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_UserProvisioningConfigLdapFilterState_Oidc=Using attributes from the provider claims, specify an expression that results in a unique user identifier, when combined with the Base DN.
UserProvisioningTasklet_UserProvisioningConfigLdapFilterStateVo_Oidc=Using attributes from the provider claims, specify an expression that results in a unique user identifier, when combined with the Base DN.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
UserProvisioningTasklet_UserSessionCreationIssuanceCriteria=PingFederate can evaluate various criteria to determine whether to create a user account during SSO. Use this optional screen to configure the criteria for use with this conditional authorization.

# Certificate Management
CertManagementTasklet_TrustedCAs_CertManagementState=Here you can import CA or self-signed server certificates into this server&#39;s global trust list. This extends the trust anchors beyond the ones included in your local Java environment.
CertManagementTasklet_SslServerCerts_CertManagementState=Establish and maintain the SSL certificates your server presents to incoming SSL connections.
CertManagementTasklet_SslCertAuth_CertManagementState=Establish and maintain the SSL client certificate your server presents as a client in an SSL transaction.
CertManagementTasklet_DsigSigningCert_CertManagementState=Establish and maintain your server&#39;s signing certificates, which may be used to sign assertions, security tokens, requests, and responses.  These certificates may also be used for decryption.
CertManagementTasklet_DsigVerificationCert_CertManagementState=Import and manage digital signature verification certificates.
CertManagementTasklet_SslCertVerification_CertManagementState=Connection-Specific SSL Verification Certificates
CertManagementTasklet_XmlEncryptionCert_CertManagementState=Import and manage the XML encryption certificate.

# Import Cert
ImportCertTasklet_CertSummaryState=Summary
ImportCertTasklet_CertSummaryState_Activatable=Summary information for your new certificate.  Select the checkbox to make this new certificate an active certificate.
ImportCertTasklet_CertSummaryState_Activatable_Vert_Cert=Summary information for your new certificate. Select the checkbox to make this new certificate an active certificate.
ImportCertState_key_pair_note=Please select the PEM or PKCS12 encoded file containing the desired certificate.
ImportCertState_key_pair_note_in_BCFIPS_mode=Please select the PEM encoded file containing the desired certificate.
ImportCertState_certificate_note=Please select the file containing the desired certificate.

# Link Cert
LinkCertTasklet_LinkCertState=Please select a reference to a private key stored in the HSM and the file containing the desired certificate.
LinkCertTasklet_CertSummaryState=Summary
LinkCertTasklet_CertSummaryState_Activatable=Summary information for your new certificate. Select the checkbox to make this new certificate an active certificate.
LinkCertState_Filename=Filename
LinkCertState_File_size=File Size
LinkCertState_Valid_path_required=You must provide a valid path to a file.
LinkCertState_Private_key_id_required=You must provide a valid private key ID.

# Create Cert
CreateCertTasklet_CreateCertState=Create a new Certificate and Private Key.
CreateCertTasklet_CertSummaryState=Summary
CreateCertTasklet_CertSummaryState_Activatable=Summary information for your new certificate.  Select the checkbox to make this new certificate an active certificate.

# Export Cert
ExportCertTasklet_ExportCertState=You have a choice of exporting the certificate and the key or just the certificate.
ExportCertTasklet_ExportCertState_Luna=The configured HSM does not allow the export of private keys. Therefore, you can only export the certificate.
ExportCertTasklet_ExportCertState_TrustedCAs=Only the public certificate of the trusted CA may be exported.
ExportCertTasklet_ExportCertState_Luna_TrustedCAs=The configured HSM does not allow the export of private keys. Therefore, you can only export the certificate.
ExportCertTasklet_CertSummaryState=Click the Export button to export this certificate to the file system.

# Certify Cert
CertifyCertTasklet_SelectCertifyCertState=Certify your certificate by having it signed by a Certificate Authority (CA). From here you can generate a Certificate Signing Request (CSR) to send to a CA or import a response to one previously issued.
CertifyCertTasklet_GenerateCsrState=Click "Export" to create a CSR for this certificate.
CertifyCertTasklet_ImportCsrRespState=Import the resulting CSR response.  The certificate specified in the CSR response must match the selected certificate.
CertifyCertTasklet_CertSummaryState=Summary

# Export Metadata
ExportMetadataTasklet_SelectExportRoleState=This system is configured to act as both an IdP and an SP.  For which role would you like to generate metadata?
ExportMetadataTasklet_SelectExportModeState=You can generate metadata specific to a connection, including the Attribute Contract and public key. Or you can provide a new contract and select a key manually. The resulting metadata may be shared with your partner to simplify connection creation.
ExportMetadataTasklet_ExportConnectionState=Select a connection that contains the Attribute Contract and Digital Signature Key you wish to include in the metadata.
ExportMetadataTasklet_ExportCustomContractState=Define the Attribute Contract you want to include in this metadata file.  Note that if you do not specify any attributes, no contract will be included in the generated metadata file.
ExportMetadataTasklet_ExportCertDataState=The metadata may contain a public key that this system uses for digital signatures.  If you wish to include a key, please select from the list of available signature keys.  A secondary signing certificate may be configured only if primary certificate has certificate rotation disabled.
ExportMetadataTasklet_ExportXmlEncryptionCertState=The metadata may contain a certificate that your partner can use to encrypt XML content.  If you wish to include a certificate, please select one from the list.
ExportMetadataTasklet_ExportMetadataSummaryState=Click the Export button to export this metadata to the file system.
ExportMetadataTasklet_ExportProtocolState=For this metadata file, choose from among the federation protocols you have enabled that support metadata exchange with partners.
ExportMetadataTasklet_MetadataSigningState=From this list of certificates, choose which one to use for signing the selected file.
ExportMetadataTasklet_ExportVirtualHostNameState=An alternate host name may be used in place of the Base URL.  If you wish to use an alternate host name, please select from the list of available virtual host names.  If no host name is selected, the Base URL will be used.

# PingOne Identity Repository Update
UpdatePingOneIdentityRepositoryTasklet_UpdatePingOneIdentityRepositoryState=PingFederate is connected to PingOne for Enterprise. To keep your settings in sync between PingFederate and PingOne for Enterprise, update the identity repository now. If you prefer to disconnect PingFederate from PingOne for Enterprise, go to PingOne for Enterprise Settings.

# Config Utils
ConfigurationArchiveTasklet_ConfigurationArchiveExportState=Create a ZIP file containing administrative-console configuration data.  The file may be used to copy a configuration to a different PingFederate server.
ConfigurationArchiveTasklet_SelectImportExportState=Select Export to create a configuration archive, or Import to deploy an existing archive to this instance of PingFederate.
ConfigurationArchiveTasklet_ConfigurationArchiveImportState=Import and deploy a ZIP file containing administrative-console configuration data (overwrites the current configuration).

AdministrativeAccountsTasklet_AdministrativeAccountsState=You can manage administrative-console or API users and create new accounts.
AdministrativeAccountsTasklet_AdministrativeAccountsState_Single_user_mode=You can change your password.
AdministrativeAccountsTasklet_AdministrativeAccountsState_Non_admin_mgr_mode=You can view your current role assignments and change your password.
AdministrativeAccountsState_Notification_Publisher_required=Please select a notification publisher for Notify Administrator Of Account Changes or configure a default notification publisher.

ManageServiceAuthenticationTasklet_ServiceAuthenticationState=Manage availability and credentials to services responsible for federation protocol handling, monitoring and administration.

ManageAttributeRequesterMappingTasklet_AttributeRequesterMappingState=During a request as part of the X.509 Attribute Sharing Profile, the Issuer DN, if supplied, is evaluated against the entries in the first table below in hierarchical order until a match is found. Use regular expressions to match different Issuer DNs to the same IdP Connection. If a match is found, the corresponding IdP connection is selected to issue the Attribute Query. If no Issuer DN match is found or if it is not provided, the Subject DN from the request is compared against the entries in the second table in a similar manner. If no Subject DN expression matches, then the default IdP connection is selected.

ManageVirtualHostNamesTasklet_VirtualHostNamesState=Optionally, you can define a list of alternate host names that may be used by the system in addition to what is defined for the PingFederate Base URL.

SignXmlTasklet_SelectXmlFileState=Select the metadata file you wish to sign.
SignXmlTasklet_XmlFileSigningCertState=From this list of certificates, choose which one to use for signing the selected file.
SignXmlTasklet_SignXmlFileSummaryState=Click the Export button to export this signed metadata file to the file system.

CertificateRevocationCheckingTasklet_ManageCertificateRevocationState=Specify the certificate validation mechanism.  For OCSP-based validation, specify the settings.

RedirectValidationTasklet_RedirectValidationState=PingFederate makes use of various parameters during SSO and SLO events to perform redirection. Without proper URL validation the server may be susceptible to attacks involving open redirections, which can include session token hijacking. Use this page to policylist the local HTTP-based URLs, or URIs that are allowed in these parameters to which PingFederate can redirect.
RedirectValidationState_Finish_editing=Please finish editing the current row.
RedirectValidationTasklet_PartnerRedirectValidationState=Some of the parameters used to perform redirection represent locations at a partner site. Use this page to enable validation of these parameters. Once validation for a parameter is enabled, the policy list for the parameter is managed within the connection settings on a per-partner basis.

# OpenID Connect
PoliciesManagementTasklet_PoliciesManagementState=This configuration allows you to define and manage OpenID Connect policies for obtaining user attributes ("claims") to be sent in an ID Token as well as in response to requests received at the PingFederate UserInfo endpoint.  Policies defined here may be mapped to specific OAuth clients.
PolicyManagementTasklet_PolicyManagementState=Enter a Policy ID and Name.  You may also change general settings for the ID Token.
PolicyManagementTasklet_CreatePolicyContractState=The required Attribute Contract consists of a user identifier (sub). You may extend the contract to include additional attributes that will be returned to OAuth clients. The preset extended-contract list contains OpenID Connect standard attributes. You can choose how attributes are delivered to OAuth clients if INCLUDE USER INFO IN ID TOKEN is not enabled in the previous step. If the client doesn't receive an OAuth access token, which is required to access the UserInfo endpoint, all attributes are delivered in the ID Token.
PolicyManagementTasklet_PolicyAttributeSourcesState=As an option, you can specify a series of local data stores to be used to supply additional information about the user for requests to the UserInfo endpoint.
PolicyManagementTasklet_PolicyContractMappingState=Fulfill the Attribute Contract with values from the Access Token or from other sources listed.
PolicyManagementTasklet_PolicyIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether clients are authorized to retrieve information about a user. Use this optional screen to configure the criteria for use with this conditional authorization.
PolicyManagementTasklet_SummaryCardState=Click a heading link to edit a configuration setting.
PolicyManagementTasklet_AttributeScopesState=Scopes are used in OpenID Connect to control the attributes that are released to OAuth clients. On this page you may add associations between scopes and attributes beyond what is defined in the specification.

# SpBrowserSsoTasklet
SpBrowserSsoTasklet_SelectSamlProfilesState=A SAML Profile defines what kind of messages may be exchanged between an Identity Provider and a Service Provider, and how the messages are transported (bindings).  As an IdP, you configure this information for your SP connection.
SpBrowserSsoTasklet_ConfigAssertionLifetimeState=When an assertion is issued to the SP, there is a timeframe of validity before and after issuance.  Please specify these parameters below.
SpBrowserSsoTasklet_ConfigAssertionLifetimeState_jwt=When a JWT is issued to the SP, there is a timeframe of validity before and after issuance.  Please specify these parameters below.
SpBrowserSsoTasklet_AssertionCreationState=This task provides the configuration for creating SAML assertions to enable SSO access to resources at your SP partner&#39;s site.
SpBrowserSsoTasklet_AssertionCreationState_jwt=This task provides the configuration for creating JWTs to enable SSO access to resources at your SP partner&#39;s site.
SpBrowserSsoTasklet_SpProtocolSettingsState=This task provides the configuration for specific endpoints and security considerations applicable to selected profiles. Click the button below to create or revise this configuration.
SpBrowserSsoTasklet_SummaryCardState=Summary information for your Browser SSO configuration. Click a heading link to edit a configuration setting.

# SignatureVerificationTasklet
SP_SignatureVerificationTasklet_SelectVerificationTrustModelState=Select the Trust Model to be used for verifying digital signatures received from this partner.
SP_SignatureVerificationTasklet_VerificationCertState=Select the certificates to use when verifying digital signatures. The signature verification process will attempt to use each certificate in the order they are listed until the signature is verified.
SP_SignatureVerificationTasklet_DynamicDsigSubjectDnState=Please enter the Subject DN that the certificate in the incoming message must match. Or select the SP-partner certificate on your file system to extract the DN automatically. Optionally, you may also restrict the issuer to a specific Trusted CA.
SP_SignatureVerificationTasklet_SummaryCardState=Summary information for your Signature Verification configuration.  Click a heading link to edit a configuration setting.

IDP_SignatureVerificationTasklet_SelectVerificationTrustModelState=Select the Trust Model to be used for verifying digital signatures received from this partner.
IDP_SignatureVerificationTasklet_VerificationCertState=Select the certificates to use when verifying digital signatures. The signature verification process will attempt to use each certificate in the order they are listed until the signature is verified.
IDP_SignatureVerificationTasklet_DynamicDsigSubjectDnState=Please enter the Subject DN that the certificate in the incoming message must match. Or select the SP-partner certificate on your file system to extract the DN automatically. Optionally, you may also restrict the issuer to a specific Trusted CA.
IDP_SignatureVerificationTasklet_SummaryCardState=Summary information for your Signature Verification configuration.  Click a heading link to edit a configuration setting.

# TokenProcessorTasklet
TokenProcessorTasklet_TokenPluginMgmtState=Token processors validate incoming tokens for security token service and OAuth token exchange use cases. Create instances of token processors here that can then be used in mapping and policy configuration.

# TokenProcessorInstanceTasklet
TokenProcessorInstanceTasklet_SelectAdapterTypeState_newstate=Enter a Token Processor Instance Name and ID, select the Token Processor Type, and a parent if applicable. The selection is limited to the processors currently installed on your server.
TokenProcessorInstanceTasklet_SelectAdapterTypeState_existingstate=The values of the selected Token Processor Instance.
TokenProcessorInstanceTasklet_ConfigureAuthnAdapterState=Complete the configuration necessary for this token processor in your environment.
TokenProcessorInstanceTasklet_AuthnAdapterActionState=Actions are available for this instance and can be invoked from here.
TokenProcessorInstanceTasklet_CreateAdapterContractState=This token processor supports extending the built-in list of user attributes that the processor retrieves from the incoming token. The Token Processor Contract is used to fulfill the Attribute Contract for outgoing tokens and/or to look up additional attributes from a local data store.
TokenProcessorInstanceTasklet_AttributeValueMaskState=Specify here any attributes that must be masked in log files (optional).
TokenProcessorInstanceTasklet_SummaryCardState=Token Processor Instance summary information.

# TokenGeneratorTasklet
TokenGeneratorTasklet_TokenPluginMgmtState=Token generators issue tokens for security token service and OAuth token exchange use cases. Create instances of token generators here that can then be used in mapping and policy configuration.

# PluginInstanceTasklet
TokenGeneratorInstanceTasklet_SelectAdapterTypeState_newstate=Please enter a Token Generator Instance Name and ID, select the Token Generator Type, and a parent if applicable.
TokenGeneratorInstanceTasklet_SelectAdapterTypeState_existingstate=The values of the selected Token Generator Instance.
TokenGeneratorInstanceTasklet_ConfigureAuthnAdapterState=Complete the configuration necessary to generate the required token type.
TokenGeneratorInstanceTasklet_AuthnAdapterActionState=Actions are available for this instance and can be invoked from here.
TokenGeneratorInstanceTasklet_CreateAdapterContractState=This token generator supports extending the built-in list of user attributes generally required for most applications. The token generator contract may be fulfilled using attributes from a protocol mapping, optionally combined with attributes returned from a data store lookup.
TokenGeneratorInstanceTasklet_SummaryCardState=Token Generator instance summary information.

# SystemUpdatesTasklet
UpdateSettingsTasklet_UpdateSettingsMgmtState=Specify update settings.
UpdateTasklet_UpdateState=PingFederate can automatically update system files on a continuous polling interval. Enable automatic system updates and/or initiate a manual update for the specified system component.

# WsTrustIdpRequestParametersTasklet
WsTrustIdpRequestParametersTasklet_WsTrustManageRequestContractsState=A Request Contract is set of parameters from incoming WS-Trust STS requests (RSTs) that may be used for mapping attributes into outgoing SAML security tokens.

# WsTrustRequestContractTasklet
WsTrustRequestContractTasklet_WsTrustRequestContractState=Specify one or more parameters that will be included in RSTs applicable to a connection partner (or partners). You can make Request Contracts available for token-attribute mapping during partner-connection configuration.
WsTrustRequestContractTasklet_SummaryCardState=Summary information for your STS Request Contract configuration. Click a heading link to edit a configuration setting.

# WsTrustStsSslAuthTasklet
WsTrustStsSslAuthTasklet_WsTrustSelectSslTypeState=Select the mechanisms to restrict access to WS-Trust STS endpoints via Mutual SSL Authentication.  If both options are selected, then the client certificate used for authentication to WS-Trust STS endpoints must meet both sets of restrictions.
WsTrustStsSslAuthTasklet_WsTrustRestrictBySubjectDnState=Specify the Subject DN for each certificate to be used to authenticate to WS-Trust STS endpoints.
WsTrustStsSslAuthTasklet_WsTrustRestrictByCertState=Select certificate Issuers that can be used to validate certificates for access to the WS-Trust STS endpoints.
WsTrustStsSslAuthTasklet_SummaryCardState=WS-Trust STS summary information.

# WsTrustStsSystemAuthTasklet
WsTrustStsSystemAuthTasklet_WsTrustSelectStsSystemAuthState=Specify the authentication mechanism(s) that can be used to access WS-Trust STS endpoints.  If both HTTP Basic Authentication and Mutual SSL Authentication are selected, then the client must provide credentials for both mechanisms.
WsTrustStsSystemAuthTasklet_WsTrustStsHttpBasicAuthState=Configure users for HTTP Basic authentication.
WsTrustStsSystemAuthTasklet_WsTrustStsSslAuthState=Configure Mutual SSL Authentication for access to WS-Trust STS endpoints.
WsTrustStsSystemAuthTasklet_SummaryCardState=WS-Trust STS summary information.

# WsTrustSpTasklet
WsTrustSpTasklet_WsTrustSpProtocolSettingsState=Specify WS-Trust protocol details for Web Service clients related to this connection. Partner Service Identifiers are compared to the AppliesTo element in the Requests for Security Token (RST) messages and may be either a complete URL or a base URL for matching variable ports or paths.
WsTrustSpTasklet_WsTrustTokenLifetimeState=When a token is issued to the SP, there is a timeframe of validity before and after issuance. Please specify these parameters below.
WsTrustSpTasklet_WsTrustTokenCreationState=This task provides the configuration for creating tokens to enable Web Services access to resources at your SP partner&#39;s site.
WsTrustSpTasklet_SummaryCardState=WS-Trust STS summary information.

# WsTrustSpTokenCreationTasklet
WsTrustSpTokenCreationTasklet_WsTrustAttributeContractState=An Attribute Contract is a set of user attributes that this server will send in the token.
WsTrustSpTokenCreationTasklet_WsTrustRequestContractSelectionState=(Optional) Select a Request Contract to be used to map attribute values into the security token.
WsTrustSpTokenCreationTasklet_WsTrustTokenProcessorMappingState=PingFederate uses IdP token processors to validate incoming tokens. Tokens may be processed by one of several different token processors, so map a token processor instance for each token type that may be required.
WsTrustSpTokenCreationTasklet_ErrorHandlingState=If the attribute contract cannot be fulfilled using data from the Request, you may either allow the STS transaction to continue with null attribute values sent in the generated token, or you may abort the transaction.
WsTrustSpTokenCreationTasklet_SummaryCardState=Token Creation summary information.

# WsTrustTokenProcessorMappingTasklet
WsTrustTokenProcessorMappingTasklet_WsTrustTokenProcessorInstanceState=Select an IdP token processor instance that may be used to authenticate users for this partner. Attributes returned by the token processor instance you choose (the Token Processor Contract) may be used to fulfill the Attribute Contract with your partner.
WsTrustTokenProcessorMappingTasklet_VirtualServerIdMappingState=You can optionally restrict this token processor to certain virtual server IDs.
WsTrustTokenProcessorMappingTasklet_WsTrustSelectAdditionalAttributesState=You can choose to fulfill the Attribute Contract with your partner using only the values provided by the selected token processor, or you can use these values plus additional attributes retrieved from local data stores.
WsTrustTokenProcessorMappingTasklet_WsTrustConfigAttributeSourcesState=Here you can specify a series of local data stores from which data, along with the attributes supplied in the incoming token, will be used to fulfill the Attribute Contract.
WsTrustTokenProcessorMappingTasklet_WsTrustAttrContractFulfillmentState=Fulfill your Attribute Contract with values from the incoming token, data stores, or dynamic text values.
WsTrustTokenProcessorMappingTasklet_WsTrustAttrContractFulfillmentStateVo=Fulfill your Attribute Contract with values from the incoming token, data stores, or dynamic text values.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
WsTrustTokenProcessorMappingTasklet_WsTrustIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources. Use this optional screen to configure the criteria for use with this conditional authorization.
WsTrustTokenProcessorMappingTasklet_SummaryCardState=Token Mapping summary information.
WsTrustTokenProcessorMappingTasklet_OverrideInstanceState=Click the button below to override the instance settings.

# WsTrustIdpTasklet
WsTrustIdpTasklet_WsTrustIdpProtocolSettingsState=Select whether the STS should validate incoming tokens only or validate and then generate other types of tokens.
WsTrustIdpTasklet_WsTrustTokenGenerationState=This task provides the configuration for generating tokens to enable SSO access to resources at your site.
WsTrustIdpTasklet_SummaryCardState=WS-Trust STS summary information.

# WsTrustSettingsTasklet
WsTrustSettingsTasklet_WsTrustManageRequestContractsState=A Request Contract is set of parameters from incoming WS-Trust STS requests (RSTs) that may be used for mapping attributes into outgoing SAML security tokens.

# WsTrustTokenGenerationTasklet
WsTrustTokenGenerationTasklet_WsTrustTokenGenerationAttrContractState=An Attribute Contract is a set of user attributes that the IdP will send in the token.
WsTrustTokenGenerationTasklet_WsTrustTokenGeneratorMappingState=PingFederate uses token generators to identify a user to your applications and/or identity management system based on attributes sent in the incoming SAML token. Map a token generator instance for each target application on your system.
WsTrustTokenGenerationTasklet_SummaryCardState=Token Generation summary information.

# WsTrustTokenGeneratorMappingTasklet
WsTrustTokenGeneratorMappingTasklet_WsTrustSelectTokenGeneratorState=The list of attributes below, the Token Generator Contract, is required for the selected token generator instance.
WsTrustTokenGeneratorMappingTasklet_OverrideInstanceState=Click the button below to override the instance settings.
WsTrustTokenGeneratorMappingTasklet_WsTrustSelectTokenGeneratorStateNew=Select the token generator instance you would like to activate for incoming SAML messages from this partner.
WsTrustTokenGeneratorMappingTasklet_WsTrustSelectTokenGeneratorDataSourceState=You can fulfill the Token Generator Contract by using only the attributes from the incoming SAML token or by using these attributes to look up additional information from a local data store.
WsTrustTokenGeneratorMappingTasklet_WsTrustSelectDataSourceState=Please select the data store from which local data, along with the attributes supplied in the incoming SAML token, will be used to fulfill the SP Token Generator Contract.
WsTrustTokenGeneratorMappingTasklet_WsTrustSelectDataSourceStateVo=Data Store not available, editing has been disabled.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
WsTrustTokenGeneratorMappingTasklet_WsTrustConfigLdapDirSearchState=Please configure your directory search. This information, along with the attributes supplied in the incoming SAML token, will be used to fulfill the Token Generator Contract.
WsTrustTokenGeneratorMappingTasklet_WsTrustConfigLdapDirSearchStateVo=Please configure your directory search. This information, along with the attributes supplied in the incoming SAML token, will be used to fulfill the Token Generator Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
WsTrustTokenGeneratorMappingTasklet_WsTrustConfigLdapFilterState=Please filter the data from your directory.
WsTrustTokenGeneratorMappingTasklet_WsTrustConfigLdapFilterStateVo=Please filter the data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
WsTrustTokenGeneratorMappingTasklet_WsTrustSelectDatabaseTableAndColumnsState=Please select the table and columns you want to query. This information, along with the attributes supplied in the SAML token, will be used to fulfill the Token Generator Contract.
WsTrustTokenGeneratorMappingTasklet_WsTrustSelectDatabaseTableAndColumnsStateVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the SAML token, will be used to fulfill the Token Generator Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
WsTrustTokenGeneratorMappingTasklet_WsTrustConfigDatabaseFilterState=Please supply a WHERE clause to filter the data from your table.
WsTrustTokenGeneratorMappingTasklet_WsTrustConfigDatabaseFilterStateVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
WsTrustTokenGeneratorMappingTasklet_WsTrustConfigureCustomSourceFiltersState=Perform any filter configuration for this data source.
WsTrustTokenGeneratorMappingTasklet_WsTrustSelectCustomSourceFieldsState=Please select those fields you would like to use when mapping attributes to the Token Generator Contract.
WsTrustTokenGeneratorMappingTasklet_VirtualServerIdMappingState=You can optionally restrict this token generator to certain virtual server IDs.
WsTrustTokenGeneratorMappingTasklet_WsTrustTokenGeneratorContractFulfillmentState=You can fulfill your Token Generator Contract requirements with values from the incoming SAML token, dynamic text, expressions, or from a data-store lookup.
WsTrustTokenGeneratorMappingTasklet_WsTrustTokenGeneratorContractFulfillmentStateVo=You can fulfill your Token Generator Contract requirements with values from the incoming SAML token, dynamic text, expressions, or from a data-store lookup.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
WsTrustTokenGeneratorMappingTasklet_WsTrustTokenGeneratorIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources. Use this optional screen to configure the criteria for use with this token authorization.
WsTrustTokenGeneratorMappingTasklet_SummaryCardState=Token Generator Mapping & User Lookup summary information.

###################################################################################################################
## ADD THESE IN ALPHABETICAL ORDER
###################################################################################################################
########################
# Messages by State
########################

# Common messages that can apply in various spots
Common_None=NONE
Common_Certificate_selection_required=You must select a certificate.
Common_SelectedCert=Selected Certificate
Common_Primary_cert=Primary Certificate
Common_Secondary_cert=Secondary Certificate
Common_Encrypt_status_summary=Status
Common_Active_desc=Active
Common_Inactive_desc=Inactive
Common_Protocols_must_match=All of the URLs you specify must have the same protocol (either http:// or https://).  If you are using relative URLs in conjunction with a Base URL (configured on the General Info screen) make sure the protocol for the Base URL is consistent with protocols for all the URLs specified here.
Common_Malformed_url=You entered a malformed URL. Please verify correct syntax for the protocol--for example, use square brackets around IPv6 addresses.
Common_Endpoint_base_url_malformed=Since you configured a Base URL on the General Info page, your Endpoint URL entry must be preceded with a "/"
Common_Export_not_clicked=Nothing has been exported. Please click the Export button.
Common_client_registration_policy_not_selected=Client Registration Policy instance is required.
Common_notification_sender_not_selected=Notification Publisher instance is required.

AccessTokenManagementState_Default_instance_required=A default instance is required.
AccessTokenManagementState_Adapter_has_errors={0} has error(s), please review and fix.
AccessTokenManagementState_Unable_to_delete_with_oauth_ref=Unable to delete Access Token Manager, please 'Check Usage' and resolve references before trying to delete again.

AdministrativeAccountsState_Username=User
AdministrativeAccountsState_Password_notification=Password Change Notification
AdministrativeAccountsState_One_admin_manager_required=There must be at least one active User Admin.
AdministrativeAccountsState_One_role_required=Each user must be assigned to at least one role.
AdministrativeAccountsState_Ea_role_without_admin=Only Administrators with the Admin role can be assigned the Expression Admin role. Enable the Admin role first to add a user to the Expression Admin role.
AdministrativeAccountsState_Dca_role_without_required_roles=Only Administrators with User Admin, Admin, and Crypto Admin roles can be assigned the Data Collection Admin role. Enable these roles first to add a user to the Data Collection Admin role.

ActivationState_Status=Connection Status
ActivationState_SSO_application_endpoint=SSO Application Endpoint
ActivationState_oidc_redirect_uri=Redirect URI
ActivationState_oidc_back_channel_logout_uri=Back-Channel Logout URI
ActivationState_oidc_front_channel_logout_uri=Front-Channel Logout URI
ActivationState_oidc_post_logout_redirect_uri=Post-Logout Redirect URI

AdapterManagementState_Adapter_has_errors={0} has error(s), please review and fix.
AdapterManagementState_Connections_have_errors=Recent changes have created errors in dependent configuration settings. Please fix the errors before saving.

AdapterSelectorManagementState_Adapter_has_errors={0} has error(s), please review and fix.

AuthnPolicyState_In_edit_mode_error=Please update or cancel the current item being edited.
AuthnPolicyState_authn_tree_missing_option=The authentication policy tree is missing required configuration.
AuthnPolicyState_apc_mapping_errors=Please fix the mappings with errors.
AuthnPolicyState_incoming_user_id_changed=An Incoming User ID attribute has changed. Please select a new attribute.
AuthnPolicyState_rule_errors=Please fix the rules with errors.
AuthnPolicyState_option_errors=Please fix the options with errors.
AuthnPolicyState_policy_name_required=A policy name is required.
AuthnPolicyState_policy_name_in_use=The policy name ''{0}'' is already in use. Please choose a different name.
AuthnPolicyState_policy_id_in_use=The policy ID ''{0}'' is already in use. Please choose a different ID.
AuthnPolicyState_inline_help_authn_api_application=Select an Authentication Application, created on the Authentication Applications screen, to complete authentication by API with compatible authentication sources and selectors.
AuthnPolicyState_inline_help_id=A unique identifier for this policy. The ID cannot be changed after the policy is created.

AuthnPoliciesTasklet_AuthnPoliciesState=Authentication policies define how PingFederate authenticates users. Selectors and authentication sources can be conditionally chained together in paths to form policies. Ensure that successful paths end with Policy Contracts to reuse mapping configuration across protocols and applications.
AuthnPoliciesState_policy_has_errors={0} has errors. Please edit the policy to fix those errors.
DefaultAuthnSourcesState_error_duplicate_defaults=You can't add duplicate authentication sources as a default.

AuthnPoliciesTasklet_TrackedHttpParamsState=Parameters received on the initial HTTP request that invoked authentication policy can be tracked throughout the workflow.  Configure the HTTP request parameters to track and make available to authentication sources, selectors, and contract mappings.
TrackedHttpParamsState_blank_value=Please specify a value for the Parameter Name
TrackedHttpParamsState_duplicate_name=The name ''{0}'' is already in the list of tracked parameters. Please select another parameter name.

# Authorization Errors
AdministrativeAccountsState_Not_authorized_create_user=You are not authorized to create a user.
AdministrativeAccountsState_Not_authorized_view_user=You are not authorized to view user data.
AdministrativeAccountsState_Not_authorized_inactivate=You are not authorized to change user status.
AdministrativeAccountsState_Not_authorized_change_password=You are not authorized to change other passwords.
AdministrativeAccountsState_Not_authorized_reset_password=You are not authorized to reset passwords.

AffiliationActivationState_Is_active=Active
AffiliationActivationState_Status=Affiliation Status

AffiliationGeneralInfoState_Affiliation_id_required=You must specify an Affiliation ID.
AffiliationGeneralInfoState_Affiliation_id_malformed=The Affiliation ID you specified is not a valid Entity ID
AffiliationGeneralInfoState_Owner_required=You must select an Affiliation Owner.
AffiliationGeneralInfoState_Affiliation_id_duplicate=An affiliation with that Affiliation ID already exists.
AffiliationGeneralInfoState_Affiliation_id_duplicate_with_sp=The Affiliation ID you specified is already in use by an SP Connection.
AffiliationGeneralInfoState_Affiliation_id=Affiliation ID
AffiliationGeneralInfoState_Affiliation_owner=Affiliation Owner

AffiliationList_AffiliationID_desc=Affiliation ID
AffiliationList_Status_desc=Status
AffiliationList_Action_desc=Action

ServiceAuthenticationState_App_id_required=An ID is required.
ServiceAuthenticationState_Shared_secret_required=Shared Secret required.
ServiceAuthenticationState_Confirm_shared_secret_required=Confirm Shared Secret required.
ServiceAuthenticationState_Shared_secret_and_confirm_must_match=The Shared Secret and Confirm Shared Secret must match.

ArtifactConfigState_Indexed_endpoint_required=You must define at least one Endpoint URL with an index.
ArtifactConfigState_Duplicate_index=You entered a duplicate index.
ArtifactConfigState_Index_gte_0_lte_65535=The index value must be an integer greater than or equal to 0 and less than or equal to 65535.
ArtifactConfigState_Malformed_url=You entered a malformed URL.
ArtifactConfigState_Url_required=You must specify a URL in the URL field.
ArtifactConfigState_Endpoint_required=Endpoint required.
ArtifactConfigState_Update_required=You must update the item you are editing.
ArtifactConfigState_Endpoint_base_url_malformed=Since you configured a Base URL on the General Info page, your Endpoint URL entry must begin with a "/"

ArtifactResolverLocationState_Endpoint_desc=Artifact Resolution Endpoint
ArtifactResolverLocationState_source_id_desc=Source ID
ArtifactResolverLocationState_Endpoint=Endpoint
ArtifactResolverLocationState_Endpoint_required=You must define at least one Endpoint URL.
ArtifactResolverLocationState_Endpoint_base_url_malformed=Since you configured a Base URL on the General Info page, your Endpoint URL entry must begin with a "/"
ArtifactResolverLocationState_Malformed_url=You entered a malformed URL.
ArtifactResolverLocationState_Format_invalid=The format of the Source ID is incorrect.  It should be a hex value.
ArtifactResolverLocationState_Length_invalid=The length of the Source ID must be 40 characters.
ArtifactResolverLocationState_Duplicate_source_id=That Source ID is in use. Please select another.
ArtifactResolverLocationState_Base_url_must_be_https=The Base URL that you configured must be HTTPS, otherwise you cannot configure the SSL Client Certificate.
ArtifactResolverLocationState_Endpoint_must_be_https=This endpoint must be HTTPS, otherwise you cannot configure the SSL Client Certificate.

AssertionCreationState_Not_configured=Assertion Creation not configured.
AssertionCreationState_menu_name_saml=Assertion Creation
AssertionCreationState_menu_name_jwt=JWT Creation
AssertionCreationState_config_header_saml=Assertion Configuration
AssertionCreationState_config_header_jwt=JWT Configuration
AssertionCreationState_submit_label_saml=Configure Assertion Creation
AssertionCreationState_submit_label_jwt=Configure JWT Creation

AttributeContractEditor_Name_required=You must specify a name for the attribute.
AttributeContractEditor_Already_contains=Contract already contains item:
AttributeContractEditor_Update_required=You must update the item you are editing.
AttributeContractEditor_One_attribute_required=You must define at least one attribute.
AttributeContractEditor_One_value_required=You must define at least one value.
AttributeContractEditor_Saml_subject_not_allowed=SAML_SUBJECT is not allowed.

ATMAttributeContractEditor_Name_required=You must specify a name for the attribute.
ATMAttributeContractEditor_Already_contains=Contract already contains item:
ATMAttributeContractEditor_Update_required=You must update the item you are editing.
ATMAttributeContractEditor_One_attribute_required=You must define at least one attribute.
ATMAttributeContractEditor_One_value_required=You must define at least one value.
ATMAttributeContractEditor_Saml_subject_not_allowed=SAML_SUBJECT is not allowed.

ATMTokenEndpointAttributeContractEditor_Name_required=You must specify a name for the attribute.
ATMTokenEndpointAttributeContractEditor_Update_required=You must update the item you are editing.
ATMTokenEndpointAttributeContractEditor_Already_contains=Contract already contains item:
ATMTokenEndpointAttributeContractEditor_Scope_Not_Exist=The attribute ''{0}'' contains a mapped scope ''{1}'' that does not exist.

PolicyAttributeContractEditor_Name_required=You must specify a name for the attribute.
PolicyAttributeContractEditor_Already_contains=Contract already contains item:
PolicyAttributeContractEditor_Update_required=You must update the item you are editing.
PolicyAttributeContractEditor_One_attribute_required=You must define at least one attribute.
PolicyAttributeContractEditor_One_value_required=You must define at least one value.
PolicyAttributeContractEditor_must_include_id_token=Standard OIDC claims must be delivered in the ID token.

AttributeNameMappingEditor_Local_name_required=Local Name is a required field.
AttributeNameMappingEditor_Remote_name_required=Remote Name is a required field.
AttributeNameMappingEditor_Already_contains=The mapping already contains
AttributeNameMappingEditor_Update_required=You must update or cancel.
AttributeNameMappingEditor_One_attribute_required=At least one item is required.

AttributeRequesterMappingState_Issuer_dn=Issuer DN
AttributeRequesterMappingState_Subject_dn=Subject DN

AttributeRequestServiceUrlState_Url_required=A URL is required.
AttributeRequestServiceUrlState_Endpoint_base_url_malformed=The URL is malformed.
AttributeRequestServiceUrlState_Malformed_url=The URL is malformed.
AttributeRequestServiceUrlState_Endpoint_url=Endpoint URL
AttributeRequestServiceUrlState_Endpoint_desc=Attribute Authority Service URL

AttrAuthSecurityPolicyState_Require_signed_response=Require signed Response
AttrAuthSecurityPolicyState_Require_signed_assertion=Require signed Assertion
AttrAuthSecurityPolicyState_Require_encrypted_assertion=Require encrypted Assertion
AttrAuthSecurityPolicyState_Send_client_auth=Send transport layer authentication
AttrAuthSecurityPolicyState_Sign_attribute_query=Sign the Attribute Query
AttrAuthSecurityPolicyState_Encrypt_name_id=Encrypt the Name Identifier
AttrAuthSecurityPolicyState_Mask_attribute_values=Mask attributes in log files

AttrReqSecurityPolicyState_Sign_response=Sign the Response
AttrReqSecurityPolicyState_Sign_assertion=Sign the Assertion
AttrReqSecurityPolicyState_Encrypt_assertion=Encrypt the Assertion
AttrReqSecurityPolicyState_Require_client_auth=Require transport layer authentication
AttrReqSecurityPolicyState_Require_signed_attribute_query=Require signed Attribute Query
AttrReqSecurityPolicyState_Require_encrypted_name_id=Require an encrypted Name Identifier

AttrReqMappingEditor_Connection_id_required=A Connection ID is required.
AttrReqMappingEditor_Already_contains=list already contains
AttrReqMappingEditor_Distinguished_name_required=A Distinguished Name is required.
AttrReqMappingEditor_Update_required=update pending...
AttrReqMappingEditor_invalid_regex=Invalid regular expression: {0}

APCMappingTasklet_APCIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources. Use this optional screen to configure the criteria for use with this conditional authorization.
APCMappingTasklet_SummaryCardState=Summary of Authentication Policy Contract Mapping
APCMappingTasklet_ApcAttributeSourceState=You can choose to fulfill the Contract Fulfillment with the authentication policy contract's default values, or you can use these values plus additional attributes retrieved from local data stores.
APCMappingTasklet_APCAdapterContractMappingState=Fulfill your Authentication Policy Contract with values from the authentication sources or with dynamic text values.

FragmentMappingTasklet_APCIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources. Use this optional screen to configure the criteria for use with this conditional authorization.
FragmentMappingTasklet_SummaryCardState=Summary of Fragment Mapping
FragmentMappingTasklet_ApcAttributeSourceState=You can choose to fulfill the inputs to the fragment with the fragment's default sources, or you can optionally add additional attributes retrieved from data stores.
FragmentMappingTasklet_APCAdapterContractMappingState=Fulfill your fragment's inputs with values from the current workflow or with dynamic text values.

BasicAuthUserMgmtState_Username_required=Username is required.
BasicAuthUserMgmtState_Password_required=Password is required.
BasicAuthUserMgmtState_Passwords_dont_match=Your Password and Confirm Password do not match.
BasicAuthUserMgmtState_Username_already_exists=The Username you specified already exists.
BasicAuthUserMgmtState_Current_password_required=Current User Password is required.
BasicAuthUserMgmtState_Current_password_invalid=Your current password is not valid.
BasicAuthUserMgmtState_Password_must_change=Your new password must be different than your current password.

BackChannelAuthenticationState_Inbound_Artifact_binding_required=You must configure back-channel authentication to use in conjunction with an inbound Artifact Binding.
BackChannelAuthenticationState_Outbound_Artifact_binding_required=You must configure back-channel authentication to use in conjunction with an outbound Artifact Binding.
BackChannelAuthenticationState_X=Send SOAP SLO messages to your partner.
BackChannelAuthenticationState_Y=Send artifact resolution requests to your partner.
BackChannelAuthenticationState_Z=Send SOAP SLO messages and artifact resolution requests to your partner.
BackChannelAuthenticationState_I=Receive SOAP SLO messages from your partner.
BackChannelAuthenticationState_J=Receive artifact resolution requests from your partner.
BackChannelAuthenticationState_K=Receive SOAP SLO messages and artifact resolution requests from your partner.

BasicSoapAuthInboundState_User_name_required=Username is required.
BasicSoapAuthInboundState_No_colons=Colons (:) are not permitted in the username
BasicSoapAuthInboundState_Password_required=Password is required.
BasicSoapAuthInboundState_Confirm_password_required=Confirm Password is required.
BasicSoapAuthInboundState_Passwords_dont_match=Your password and confirmation password do not match.
BasicSoapAuthInboundState_Both_passwords_required=Password and confirmation password are required.
BasicSoapAuthInboundState_Username_in_use=This username is used by connection {0}. Please choose a unique username.

BasicSoapAuthOutboundState_User_name_required=Username is required.
BasicSoapAuthOutboundState_No_colons=Colons (:) are not permitted in the Username.
BasicSoapAuthOutboundState_Password_required=Password is required.
BasicSoapAuthOutboundState_Confirm_password_required=Confirm Password is required.
BasicSoapAuthOutboundState_Passwords_dont_match=Your password and confirmation password do not match.
BasicSoapAuthOutboundState_Both_passwords_required=Password and confirmation password are required
BasicSoapAuthOutboundState_Username=Username

CertManagementState_Cant_delete_active_cert=You cannot delete the active certificate.
CertManagementState_Cant_delete_in_use_cert=You cannot delete certificates that are in use:
CertManagementState_Must_specify_active_cert=You must specify an active certificate.
CertManagementState_metadata_url=Metadata URL Certificate
CertManagementState_Ssl_cert_auth=SSL Certificate
CertManagementState_Dsig_cert=Dsign Certificate
CertManagementState_Ca_cert=CA Certificate
CertManagementState_Ssl_server_cert=SSL Server Certificate
CertManagementState_Unable_to_delete_with_oauth_ref=Unable to delete Certificate, please 'Check Usage' and resolve references before trying to delete again.
CertManagementState_Save_failed=Save failed: {0}

# Authorization Errors for Certificate Management
CertManagementState_Not_authorized_create_new=You are not authorized to create a new certificate.
CertManagementState_Not_authorized_export=You are not authorized to export certificates.
CertManagementState_Not_authorized_certify=You are not authorized to certify certificates.
CertManagementState_Not_authorized_import=You are not authorized to import certificates.
CertManagementState_Not_authorized_activate=You are not authorized to activate certificates.
CertManagementState_Not_authorized_deactivate=You are not authorized to deactivate certificates.
CertManagementState_Not_authorized_delete=You are not authorized to delete certificates.

CertSummaryState_Not_authorized_to_download=You are not authorized to export certificates.
CertSummaryState_Generic_download_error=There was an issue with the download. Please check server log for more details.
CertSummaryState_Cannot_import_duplicate_cert_exists=The selected certificate already exists in the keystore.  Please select a different certificate to import.
CertSummaryState_Active_admin_desc=Make this an active certificate for the Admin Console
CertSummaryState_Active_runtime_desc=Make this an active certificate for the Runtime Server
CertSummaryState_Active_vert_desc=Make this an active verification certificate
CertSummaryState_Active_desc=Make this the active certificate

ClusterConfigState_Metadata_upload_failed=Failed to upload IdP metadata to PingOne.

ConfigAdapterMappingState_One_required=You must configure at least one mapping.

ConfigArtifactLifetimeState_Artifact_lifetime_in_seconds=Artifact Lifetime in seconds

ConfigAssertionLifetimeState_menu_name_saml=Assertion Lifetime
ConfigAssertionLifetimeState_menu_name_jwt=JWT Lifetime
ConfigAssertionLifetimeState_Minutes_before_missing=You must specify a value for Minutes Before.
ConfigAssertionLifetimeState_Minutes_before_gte_0_lte_65535=You must specify an integer value greater than 0 and less than or equal to 65535 for Minutes Before.
ConfigAssertionLifetimeState_Minutes_after_missing=You must specify a value for Minutes After.
ConfigAssertionLifetimeState_Minutes_after_gte_0_lte_65535=You must specify an integer value greater than 0 and less than or equal to 65535 for Minutes After.
ConfigAssertionLifetimeState_minutes_before=Valid Minutes Before
ConfigAssertionLifetimeState_minutes_after=Valid Minutes After

ConfigAttributeSourcesState_One_attribute_source_required=You must configure at least one Attribute Source.
ConfigAttributeSourcesState_Data_store=Data Store
ConfigAttributeSourcesState_DataSources=Data Sources

jdbc_attribute_source_filter_blank=You must specify a WHERE clause.
jdbc_attribute_source_filter_invalid_substitution_variable=Invalid {0} reference in the WHERE clause.

ConfigCommonDomainServiceState_Passphrase=Pass Phrase
ConfigCommonDomainServiceState_Confirm_pass=Confirm Pass
ConfigCommonDomainServiceState_Base_url=Base URL of the PingFederate common domain service
ConfigCommonDomainServiceState_Passphrase_invalid=You entered an invalid pass phrase.
ConfigCommonDomainServiceState_Confirm_pass_invalid=You entered an invalid confirm pass.
ConfigCommonDomainServiceState_Passphrase_confirm_dont_match=Your pass phrase and confirm pass do not match.
ConfigCommonDomainServiceState_Passphrase_too_short=Your pass phrase must be at least six characters in length.
ConfigCommonDomainServiceState_Invalid_url=The base URL must be HTTPS and cannot contain any query parameters.

ConfigDomainCookieSettingsState_Common_domain_server_desc=Common domain server that sets and/or reads the common domain cookie
ConfigDomainCookieSettingsState_Sp_using_discovery_desc=SP using a common domain service to discover what Identity Providers a principal has recently used
ConfigDomainCookieSettingsState_Idp_using_discovery_desc=IdP using a common domain service to advertise the ability to authenticate a principal
ConfigDomainCookieSettingsState_Common_domain_server=Common domain server
ConfigDomainCookieSettingsState_Sp_using_cdc=SP using a common domain service
ConfigDomainCookieSettingsState_Idp_using_cdc=IdP using a common domain service
ConfigDomainCookieSettingsState_Checkbox_required=You must select at least one option.

ConfigIdpDiscovery_Common_domain_client=Common Domain Client
ConfigIdpDiscovery_Common_domain_server=Common Domain Server
ConfigIdpDiscoveryState_Client_or_server_required=Must configure a client or server

ConfigIdpEventsState_Valid_default_url_successful_slo_required=You must specify a valid default URL for a successful SLO. Please verify correct syntax for the protocol--for example, use square brackets around IPv6 addresses.
ConfigIdpEventsState_Default_url_successful_slo_required=You must specify a default URL for a successful SLO.
ConfigIdpEventsState_err_msg_req=Please specify the error text.
ConfigIdpEventsState_Success_url=SLO Success URL

ldap_attribute_source_base_dn_malformed=You entered a malformed Base DN.

ConfigLocalCommonDomainServerState_Passphrase=Pass phrase
ConfigLocalCommonDomainServerState_Confirm_pass=Confirm Pass
ConfigLocalCommonDomainServerState_Common_domain=Common Domain
ConfigLocalCommonDomainServerState_Cookie_lifetime=Cookie Lifetime (days)
ConfigLocalCommonDomainServerState_Passphrase_invalid=You entered an invalid pass phrase.
ConfigLocalCommonDomainServerState_Confirm_pass_invalid=You entered an invalid confirm pass.
ConfigLocalCommonDomainServerState_Passphrase_confirm_dont_match=Your pass phrase and confirm pass do not match.
ConfigLocalCommonDomainServerState_Invalid_cookie_lifetime=Cookie lifetime must be an integer between {0} and {1} (inclusive) or {2} to indicate a session cookie.
ConfigLocalCommonDomainServerState_Invalid_common_domain=Common Domain must start with a "." and contain at least one additional "."
ConfigLocalCommonDomainServerState_Base_url_contains_domain_passphrases_dont_match=Since the Base URL on the Common Domain Service page (previous page) contains the Common Domain configured here, the pass phrases must match.

ConfigSpEventsState_Valid_default_url_successful_sso_required=You must specify a valid default URL for a successful SSO.
ConfigSpEventsState_Default_url_successful_sso_required=You must specify a default URL for a successful SSO.
ConfigSpEventsState_Valid_default_url_successful_slo_required=You must specify a valid default URL for a successful SLO
ConfigSpEventsState_Default_url_successful_slo_required=You must specify a default URL for a successful SLO
ConfigSpEventsState_Sso_success_url=SSO Success URL
ConfigSpEventsState_Slo_success_url=SLO Success URL

ConfigurationArchiveImportState_Menu_name=Import
ConfigurationArchiveImportState_Archive_not_selected=Please select a configuration archive to be imported.
ConfigurationArchiveImportState_Archive_empty=Archive file is empty.
ConfigurationArchiveImportState_Archive_invalid=Invalid archive file.
ConfigurationArchiveImportState_Data_upgrade_warning=The data archive selected is from PingFederate version {0}. Importing this data archive will upgrade your data configuration to version {1}.

ConfigurationArchiveImport_Import_warning=Importing this data archive will overwrite your existing configuration.
ConfigurationArchiveImport_Reencrypt_archive_warning=Reencrypting this data archive will reencrypt configuration data with the existing configuration encryption key. Data stored externally, such as OAuth clients or persistent grants and sessions, will not be reencrypted. Configuration encryption keys in the data archive will not be imported.
ConfigurationArchiveImport_Force_import_warning=If the archive depends on adapters or other components not present in this PingFederate installation, then the resulting configuration will contain errors and the administrative console may become unstable until the components are installed.
ConfigurationArchiveImport_Continue_warning=Do you want to continue?

UpdatePingOneIdentityRepository_Confirm_update=PingOne users in your enterprise will be directed to this PingFederate environment during single sign-on. Are you sure you want to update the identity repository?

ConfigureCustomSourceFiltersState_Finish_editing=Please finish editing the current row.
ConfigureCustomSourceFiltersState_Adapter=Adapter
ConfigureCustomSourceFiltersState_No_configurable_fields=This adapter type has no individually configurable fields.

ConfigureAdapterState_Finish_editing=Please finish editing the current row.
ConfigureAdapterState_Adapter=Adapter
ConfigureAdapterState_No_configurable_fields=This adapter type has no individually configurable fields.

ConfigureAuthnAdapterState_Adapter=Adapter
ConfigureAuthnAdapterState_No_configurable_fields=This adapter type has no individually configurable fields.
ConfigureAuthnAdapterState_Finish_editing=Please finish editing the current row.

ConfigureAttributeSourceAdapterState_Adapter=Adapter
ConfigureAttributeSourceAdapterState_No_configurable_fields=This adapter type has no individually configurable fields.
ConfigureAttributeSourceAdapterState_Finish_editing=Please finish editing the current row.
ConfigureAttributeSourceAdapterState_InstanceName=Data Store Name
ConfigureAttributeSourceAdapterState_Name_required=Name is required.
ConfigureAttributeSourceAdapterState_Instance_name_in_use=This Name is already defined; please try a different name.
ConfigureAttributeSourceAdapterState_Mask_attribute_values=Mask Values in Log
ConfigureAttributeSourceAdapterState_Fips_status=FIPS Status

ConfigUserProvisioningLdapDirSearchState_Malformed_base_dn=You entered a malformed Base DN.

# Authorization errors
ConfigUtilsState_Not_authorized_to_download=You are not authorized to download this configuration.

# These are the text description fields on ConfigXmlEncryption.html
ConfigXmlEncryptionState_Decryption_desc=Decryption Key
ConfigXmlEncryptionState_Encryption_desc=Encryption Certificate
ConfigXmlEncryptionState_Key_transport_alg_desc=Key Transport Algorithm
ConfigXmlEncryptionState_Block_encryption_alg_desc=Block Encryption Algorithm
ConfigXmlEncryptionState_Not_configured=Not Configured
ConfigXmlEncryptionState_Status_desc=Status

ConnectionImportState_Menu_name=Import
ConnectionImportState_Not_selected=Please select a connection to be imported.
ConnectionImportState_Empty=Connection is empty.
ConnectionImportState_Invalid=Invalid connection XML.
ConnectionImportState_Invalid_role=The connection XML is not an {0} connection.
ConnectionImportTasklet_ConnectionImportState=Import a connection. If 'Allow Update' is checked and the connection already exists, it will be overwritten.

ConnectionList_Connection_name_desc=Connection Name
ConnectionList_ConnectionID_desc=Connection ID
ConnectionList_VirtualIdentity_desc=Virtual ID
ConnectionList_ModificationTime_desc=Modified
ConnectionList_CreationTime_desc=Created
ConnectionList_Protocol_desc=Protocol
ConnectionList_Status_desc=Enabled
ConnectionList_Action_desc=Action
ConnectionList_License_assignment=License Assignment

ConnMgmt_Connection_name_desc=Connection Name
ConnMgmt_ConnectionID_desc=Connection ID
ConnMgmt_VirtualIdentity_desc=Virtual ID
ConnMgmt_Protocol_desc=Protocol
ConnMgmt_Status_desc=Enabled
ConnMgmt_Action_desc=Action
ConnMgmt_ModificationTime_desc=Modified
ConnMgmt_CreationTime_desc=Created
ConnMgmt_License_assignment=License Assignment
ConnMgmt_Check_all_confirmation_msg=Error checking many connections may take a long time.  Are you sure you want to continue?
ConnMgmt_Replication_Status_desc=Replication Status

ConnectToPingOneState_Activation_key_required=You must provide an activation key.
ConnectToPingOneState_Create_user_admin=Disconnecting from PingOne will disable administrative console single sign-on. Please go to Account Management and create a User Admin before disconnecting.

ConnRoleAndProtocolState_Protocol_required=You must select a protocol before continuing.
ConnRoleAndProtocolState_ConnectionTargetType_desc=Connection Template
ConnRoleAndProtocolState_Protocol_desc=Protocol
ConnRoleAndProtocolState_Browser_sso_profiles=Browser SSO Profiles
ConnRoleAndProtocolState_WS_trust_sts=WS-Trust STS
ConnRoleAndProtocolState_OAuth_as=OAuth Assertion Grant
ConnRoleAndProtocolState_InboundProv=Inbound Provisioning
ConnRoleAndProtocolState_InboundProvVersion=SCIM Version
ConnRoleAndProtocolState_UserInboundProv=User Support
ConnRoleAndProtocolState_UserAndGroupInboundProv=User and Group Support
ConnRoleAndProtocolState_minimum_requirements_not_met_1=You must select {0}.
ConnRoleAndProtocolState_minimum_requirements_not_met_2=You must select at least one of the following: {0} or {1}.
ConnRoleAndProtocolState_WS_Trust_required=You must select WS-Trust STS.
ConnRoleAndProtocolState_Browser_sso_required=You must select Browser SSO Profiles.
ConnRoleAndProtocolState_License_group=License Group
ConnRoleAndProtocolState_Type=Type
ConnRoleAndProtocolState_Fips_status=FIPS Status
ConnRoleAndProtocolState_Type_not_selected=A type must be selected for ''{0}''.
ConnRoleAndProtocolState_Ws_fed_token_type_desc=WS-Federation Token Type

# Overriding the API error message
license_connection_group_invalid=This connection is currently assigned to License Group "{0}" which is not a valid License Group.

PingOneSsoSetupTasklet_SummaryCardState=Summary information for your SSO connection to PingOne.

CertificateRotationTasklet_DSignRotationSummaryState=Summary information for your rotation configuration.
CertificateRotationTasklet_EnableDSignRotationState=Enable rotation for the certificate. When certificate rotation is enabled, a new key pair and certificate is periodically generated based on your policy. Active connections referencing this entry will automatically make use of it. This feature is intended to be enabled only on certificates and keys used in partner connections leveraging automated metadata reloading.

CertificateExpiryWarningManagementTasklet_CertificateExpiryWarningManagementState=These certificates are expiring or have recently expired, please replace them and update the usage.

ConnectionOptionsState_Browser_sso=Browser SSO
ConnectionOptionsState_Attribute_query=Attribute Query
ConnectionOptionsState_Idp_discovery=IdP Discovery
ConnectionOptionsState_Attribute_query_requires_saml2=Attribute Query can only be used with the SAML 2.0 protocol.
ConnectionOptionsState_User_provisioning=JIT Provisioning
ConnectionOptionsState_OAuth_Attribute_Mapping=OAuth Attribute Mapping
ConnectionOptionsState_Minimum_requirements_not_met=You must select either Browser SSO or Attribute Query (or both).

ConnectionTemplateState_ConnectionTargetType_desc=Connection Template
ConnectionTemplateState_Connection_template_required=Connection Template is required.
ConnectionTemplateState_Use_template=Use a template for this connection
ConnectionTemplateState_Do_not_use_template=Do not use a template for this connection

CreateAffiliation_Selected_member_required=You must select at least one SP Connection
CreateAffiliation_Member=Member
CreateAffiliation_Is_active=Active
CreateAffiliation_Action=Action
CreateAffiliation_Sp_connection_id=SP Connection Name
CreateAffiliationState_Member=Member
CreateAffiliationState_Selected_member_required=You must select at least one member for this affiliation.
CreateAffiliationState_Duplicate_member_selected=You have selected the same member multiple times. You must only select a member once.

CreateCertState_Valid_days_summary=Number of days certificate is valid
CreateCertState_Common_name=Common Name
CreateCertState_Subject_alternative_names=Subject Alternative Names
CreateCertState_Organization=Organization
CreateCertState_Organizational_unit=Organizational Unit
CreateCertState_City=City
CreateCertState_State=State
CreateCertState_Country=Country
CreateCertState_Crypto_provider=Cryptographic Provider
CreateCertState_Key_algorithm=Key Algorithm
CreateCertState_Key_size=Key Size
CreateCertState_Signature_algorithm=Signature Algorithm

CustomDataBaseConfigState_Duplicate_data_store=You have already defined a data store with the same JDBC URL and Username.
CustomDataBaseConfigState_Data_store_unavailable=Unable to communicate with the specified data store.
CustomDataBaseConfigState_Data_store_secret_manager_error=Unable to obtain credentials from secret manager.
CustomDataBaseConfigState_Jdbc_url=JDBC URL
CustomDataBaseConfigState_Driver=Driver
CustomDataBaseConfigState_Username=Username
CustomDataBaseConfigState_Validate_connection=Validate Connection SQL
CustomDataBaseConfigState_Allow_multi_value_attributes=Allow Multi-Value Attributes
CustomDataBaseConfigState_InstanceName=Data Store Name
CustomDataBaseConfigState_Name_required=Name is required.
CustomDataBaseConfigState_Instance_name_in_use=This Name is already defined; please try a different name.
CustomDataBaseConfigState_Mask_attribute_values=Mask Values in Log
CustomDataBaseConfigState_Password_reference=Password Reference

AdvancedDataBaseOptionsState_Minimum_Pool_Size=Minimum Pool Size
AdvancedDataBaseOptionsState_Maximum_Pool_Size=Maximum Pool Size
AdvancedDataBaseOptionsState_Blocking_Timeout=Blocking Timeout (ms)
AdvancedDataBaseOptionsState_Idle_Timeout=Idle Timeout (min)

DataMap_Update_required=You are currently editing and must update the item you are editing or cancel your changes.
DataMap_Invalid_column=Invalid attribute: {0}
DataMap_Datetime_example_link_text=Datetime OGNL Examples

DefaultTargetUrlState_Url=URL
DefaultTargetUrlState_Title=Default Target URL
DefaultTargetUrlState_Default_Target_URL_Description=You can specify a default target URL for this IdP connection. Entering a URL in the Default Target URL field overrides the SP Default URL SSO setting.
DefaultTargetUrlState_Authn_Context_Description=Authentication Contexts can be mapped between the Local and Remote values. This mapping controls how Authentication Contexts are communicated with partners in both authentication requests and responses. Any value that is not defined in a mapping will be passed as is. An asterisk (*) can be used to match any value. Additionally, a blank value will match a case where the partner or local requester has not specified a value.

DsigSigningAssertionState_Must_select_a_valid_cert=You must select a valid certificate.

DsigSigningAuthnState_Must_select_a_valid_cert=You must select a valid certificate.

DsigVerificationCertState_Must_select_a_valid_cert=You must select a valid certificate.

DsigVerificationInboundCertState_Must_select_a_valid_cert=You must select a valid certificate.

DynamicDsigSubjectDnState_Subject_Dn_desc=Subject DN
DynamicDsigSubjectDnState_Issuer_Dn_desc=Issuer DN
DynamicDsigSubjectDnState_Valid_path_required=You must provide a valid path to a file.
DynamicDsigSubjectDnState_Error_importing_file=I/O Error occurred while extracting the file.
DynamicDsigSubjectDnState_Error_importing_file_see_log=An error occurred extracting the file. See server log for more details.
DynamicDsigSubjectDnState_Certificate_parsing_exception=Extracting this file caused a certificate parsing exception.
DynamicDsigSubjectDnState_Certificate_expired=An error occurred extracting the certificate. The certificate has expired.
DynamicDsigSubjectDnState_Invalid_subject_dn=You must specify a valid Subject DN.
DynamicDsigSubjectDnState_Invalid_issuer_dn=You must specify a valid Issuer DN.

# Overriding the API error messages
anchored_trust_invalid_subject_dn=You must specify a valid Subject DN.
anchored_trust_invalid_issuer_dn=You must specify a valid Issuer DN.

EnableDSignRotationState_cert_expired=Certificate rotation cannot be enabled for an expired certificate.

ErrorHandlingState_Continue_user_provisioning=Send the user's attributes to the target application
ErrorHandlingState_Continue_token_processor=Send user to SP using null values for attributes
ErrorHandlingState_Abort_user_provisioning=Abort the SSO transaction
ErrorHandlingState_Abort_token_processor=Abort the STS transaction

ExportCertState_Password_required=You must enter a password to export a certificate and a private key.
ExportCertState_Password_invalid=The password you selected is invalid.
ExportCertState_Passwords_dont_match=Your password and confirm passwords do not match.
ExportCertState_Export_selection_required=You must enter an export selection to proceed.

# Label for the ExportCertData.html page
ExportCertDataState_Digital_signature_label=Digital Signature Keys/Certs
ExportCertDataState_Secondary_digital_signature_label=Secondary Digital Signature Keys/Certs

# Summary Label for ExportCertDataState
ExportCertDataState_Signing_key_label=Signing Key
ExportCertDataState_Secondary_signing_key_label=Secondary Digital Signature Keys/Certs

# Errors for ExportCertDataState
ExportCertDataState_Primary_signing_cert_same_as_secondary_signing_cert=Secondary signing certificate cannot be the same as the primary signing certificate {0}.
ExportCertDataState_Secondary_signing_cert_cannot_have_rotation_enabled=The selected secondary signing certificate cannot have rotation enabled.


ExportConnectionState_Valid_connection_required=You must choose a Connection.
ExportConnectionState_Selected_connection=Selected connection
ExportConnectionState_Attribute=Attribute
ExportConnectionState_Digital_signature_key=Digital Signature Key
ExportConnectionState_Xml_encryption_key=XML Encryption Key
ExportConnectionState_Virtual_server_id=Virtual Server ID
ExportConnectionState_Virtual_host_name=Virtual Host Name

ExportMetadataSummaryState_Not_authorized_to_download=You are not authorized to download this metadata.

ExportProtocolState_Protocol=Protocol
ExportProtocolState_Protocol_required=You must select a protocol before continuing.
ExportProtocolState_SourceID=SourceID

ExportVirtualHostNameState_Virtual_host_name=Virtual Host Name

# Label for the ExportXmlEncryptionCert.html page
ExportXmlEncryptionCertState_Encrypt_keys_label=Encryption Certificate

ExpressionTest_Update_required=You are currently editing and must update the item you are editing or cancel your changes.
ExpressionTest_Invalid_column=Invalid attribute: {0}
ExpressionTest_Untestable_attributes=Testing of expressions containing the following attributes is not supported : {0}

FederationInfoState_Base_url_desc=Base URL
FederationInfoState_Saml_2_id_desc=SAML 2.0 Entity ID
FederationInfoState_Saml_1.x_id_desc=SAML 1.x Issuer/Audience
FederationInfoState_Saml_1.x_src_id_desc=SAML 1.x Source ID
FederationInfoState_Wsfed_realm_desc=WS-Federation Realm
FederationInfoState_My_entity_id=My Entity ID
FederationInfoState_My_base_url=My Base URL

GeneralInfoState_Connection_name_in_use=The Connection Name you specified is already in use.
GeneralInfoState_Draft_id_in_use=The {0} you specified is already in use by a draft connection.
GeneralInfoState_Connection_id=Connection ID
GeneralInfoState_Connection_name_in_use_on_sp_side=The Connection Name you specified is already in use by an IdP Connection. A Salesforce configuration requires both an IdP and SP connection so the Connection Name must be unique for both.
GeneralInfoState_Connection_id_in_use_on_sp_side=The Connection ID you specified is already in use by an IdP Connection. A Salesforce configuration requires both an IdP and SP connection so the Connection ID must be unique for both.
GeneralInfoState_Virtual_connection_id_in_use_on_sp_side=The Virtual Server ID you specified is already in use as a Connection ID by an IdP Connection.
GeneralInfoState_Virtual_server_id_required=Virtual Server ID is required.
GeneralInfoState_Virtual_server_id_finish_editing=Please finish editing the current virtual server ID.
GeneralInfoState_Virtual_server_id_already_exists=Virtual Server ID "{0}" has already been defined.
GeneralInfoState_Virtual_server_id_in_use=Virtual Server ID "{0}" is in use and cannot be deleted.
GeneralInfoState_Virtual_server_ids=Virtual Server IDs
GeneralInfoState_Action=Action
GeneralInfoState_field_required=You must provide a {0}.
GeneralInfoState_Metadata_loaded=Metadata successfully loaded.
GeneralInfoState_Metadata_loaded_updated_issuer=Metadata successfully loaded. The issuer was updated to match the `iss` value from the discovery endpoint.
GeneralInfoState_Metadata_Empty_Issuer=To load the provider metadata, please enter the Issuer.
GeneralInfoState_Metadata_Error=An error occurred while connecting to the OIDC discovery endpoint {0}.  Please check the URL of the Issuer and ensure that it is pointing to a valid discovery endpoint.
GeneralInfoState_Metadata_Cert_Error=An error occurred while connecting to the OIDC discovery endpoint {0}.  No trusted certificate found.


IdpAdapterManagementState_Connections_have_errors=Recent changes have created errors in dependent configuration settings. Please fix the errors before saving.
IdpAdapterManagementState_Adapter_has_errors={0} has error(s), please review and fix.

IdpAdapterMappingState_One_mapping_required=You must configure at least one mapping.

IdpConfigLdapFilterState_Filter=Filter
IdpConfigLdapFilterState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
IdpConfigDatabaseFilterState_inline_help_where=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
AdapterConfigLdapFilterState_Filter=Filter
AdapterConfigLdapFilterState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

IdpDiscoveryTasklet_Idp_discovery_management=IdP Discovery Management

IdpSignaturePolicyState_Authn_Requests_Signed=Sign AuthN requests over POST and Redirect
IdpSignaturePolicyState_Want_Assertions_Signed=Require digitally signed SAML Assertion
IdpSignaturePolicyState_Always_Sign_ArtifactResponse=Always Sign the ArtifactResponse
IdpSignaturePolicyState_Additional_signature_requirements_not_defined=Please select at least one additional signature requirement.


ImportAffiliationMetadataState_No_suitable_affiliations=No suitable affiliations were found in the XML file.
ImportAffiliationMetadataState_Invalid_xml_file=The XML file you provided is invalid.
ImportAffiliationMetadataState_no_file=The specified file could not be found.

ImportCertState_Valid_path_required=You must provide a valid path to a file.
ImportCertState_Filename=Filename
ImportCertState_File_size=File Size
ImportCertState_Subject_dn=Subject DN
ImportCertState_Serial_number=Serial Number
ImportCertState_Expires=Expires
ImportCertState_Crypto_provider=Cryptographic Provider

ImportCsrRespState_Select_file_to_import=You must select a file to import.
ImportCsrRespState_Subject_dn=Subject DN
ImportCsrRespState_Issuer_dn=Issuer DN
ImportCsrRespState_Serial_number=Serial Number
ImportCsrRespState_Expires=Expires
ImportCsrRespState_Filename=Filename
ImportCsrRespState_File_size=File Size

ImportMetadataState_no_metadata_file=Metadata file is required.
ImportMetadataState_no_metadata_URL=Metadata URL is required.
ImportMetadataState_Verification_error=There was a verification error when importing your file.
ImportMetadataState_Filename=Filename
ImportMetadataState_File_size=File Size
ImportMetadataState_Subject_dn=Certificate Subject DN
ImportMetadataState_Serial_number=Certificate Serial Number
ImportMetadataState_Status=Metadata Input Type
ImportMetadataState_Expires=Certificate Expires
ImportMetadataState_Metadata_signature_status=Metadata Signature Status
ImportMetadataState_Certificate_status=Certificate Status
ImportMetadataState_Metadata_load_failed=Metadata has not yet been loaded. Provide a valid Metadata XML file or URL and click Next.
ImportMetadataState_mismatched_entity_id=Expected connection ID ''{0}'' does not exist in the input metadata file or URL.
ImportMetadataState_no_suitable_connections=No suitable connections found in the metadata file or URL.
ImportMetadataState_select_entity_id=Select an entity ID.
ImportMetadataState_invalid_SAML_metadata_URL=Invalid Metadata for a SAML connection.
ImportMetadataState_invalid_metadata_URL=Invalid Metadata URL ''{0}''.
ImportMetadataState_invalid_saved_metadata_signature=Unable to verify the metadata signature with the associated certificate. Click on Manage Partner Metadata URLs to update the certificate.
ImportMetadataState_metadata_not_signed=A certificate is associated with this Metadata URL, but the metadata is not signed. If this is expected, reconfigure the settings by clicking on Manage Partner Metadata URLs.
ImportMetadataState_load_from_URL=Click Load Metadata to load the metadata from the URL.
ImportMetadataState_Entity_Id=Entity ID
ImportMetadataState_Metadata_URL=Metadata URL
ImportMetadataState_Enable_Auto_Metadata_Update=Automatically Update Metadata


#Import Metadata Tasklets
ImportMetadataTasklet_ImportMetadataState=If you have received a metadata file or URL from a partner describing this connection, provide the file or configure the Partner Metadata URL to update the connection.
ImportMetadataTasklet_ImportMetadataState_newState=If you have received a metadata file or URL from a partner describing this connection, provide the file or configure the Partner Metadata URL to update the connection.
ImportMetadataTasklet_ImportMetadataCertState=The metadata file is signed but does not contain a certificate to verify the signature. Select the file that contains your partner&#39;s signature verification certificate.
ImportMetadataTasklet_MetadataSummaryState=Use the information below to evaluate the authenticity of the imported metadata.
ImportMetadata_Continue_warning=Do you want to continue?
ImportMetadata_Update_warning=Importing this metadata will overwrite the existing connection configuration.


ImportMetadataCertState_Valid_path_required=You must provide a valid path to a file.
ImportMetadataCertState_Filename=Certificate Filename
ImportMetadataCertState_File_size=Certificate File Size
ImportMetadataCertState_Subject_dn=Certificate Subject DN
ImportMetadataCertState_Serial_number=Certificate Serial Number
ImportMetadataCertState_Expires=Certificate Expires
ImportMetadataCertState_Metadata_signature_status=Metadata Signature Status
ImportMetadataCertState_Certificate_status=Certificate Status

InboundConfigSoapAuthState_Basic_desc=HTTP Basic
InboundConfigSoapAuthState_Cert_desc=SSL Client Certificate
InboundConfigSoapAuthState_Dsig_desc=Digital Signature (Browser SSO profile only)
InboundConfigSoapAuthState_Dsig_desc_none=None
InboundConfigSoapAuthState_Soap_auth_type=Authentication Type
InboundConfigSoapAuthState_Ssl_required=SSL required
InboundConfigSoapAuthState_Ssl_client_cert_required=SSL Client Certificate is required.
InboundConfigSoapAuthState_Cert_or_none_required=Select at least one additional method beyond SSL Client Certificate, because at least one of your SOAP endpoints uses HTTP.
InboundConfigSoapAuthState_Require_ssl=Require SSL

InboundProvisioningUserRepositoryState_Data_store_required=Inbound Provisioning has not been configured.
InboundProvisioningUserRepositoryState_Data_store_unavailable=A connection cannot be made to this data store. Please select another one.
InboundProvisioningUserRepositoryState_Data_store_ssl_or_startTLS_required=The data store you select must have SSL or StartTLS enabled.
InboundProvisioningUserRepositoryState_Identity_store_provisioner_required=You must select an identity store provisioner.
InboundProvisioningUserRepositoryState_Identity_store_provisioner_with_group_support_required=The selected identity store provisioner does not support group provisioning. Select another provisioner or configure this connection to only support user provisioning.

IssuanceCriteriaState_Source=Source
IssuanceCriteriaState_Attr_name=Attribute Name
IssuanceCriteriaState_Condition=Condition
IssuanceCriteriaState_Comparison_value=Value
IssuanceCriteriaState_Error_result=Error Result
IssuanceCriteriaState_Criterion=Criterion
IssuanceCriteriaState_Expression=Expression
IssuanceCriteriaState_Required={0} is required
IssuanceCriteriaState_Dup_detected=Issuance criterion is not unique.
IssuanceCriteriaState_Update_required=You must update the item you are editing.
IssuanceCriteriaState_Invalid_column=Invalid attribute: {0}
IssuanceCriteriaState_Ea_role_required=Expression Admin Role is required to add or update expressions.
IssuanceCriteriaState_Invalid_criteria=There are issuance criteria based on sources or attributes which are no longer valid. Please remove the invalid criteria.
IssuanceCriteriaState_Invalid_source_type=Invalid Source: {0}
IssuanceCriteriaState_Cannot_Map_Request_Object=The HTTP Request object cannot be used in basic issuance criteria. Use an OGNL expression to select attributes or parameters from the request object.


KerberosRealmsSettingsState_Kdc_timeout_required=AD Domain Controller/Key Distribution Center Timeout required.
KerberosRealmsSettingsState_Kdc_timeout_format=AD Domain Controller/Key Distribution Center Timeout must be an integer between {0} and {1}.

KerberosRealmsSettingsState_Kdc_retries_required=AD Domain Controller/Key Distribution Center Retries required.
KerberosRealmsSettingsState_Kdc_retries_format=AD Domain Controller/Key Distribution Center Retries must be an integer between {0} and {1}.

KerberosRealmState_Realm_name_required=Domain/Realm Name is required.
KerberosRealmState_Realm_name_invalid=Domain/Realm Name is invalid.
KerberosRealmState_Kdc_invalid=Domain Controller/Key Distribution Center Host Name is invalid.
KerberosRealmState_Realm_name_exists=Domain/Realm Name already exists.
KerberosRealmState_Username_required=Domain/Realm Username is required.
KerberosRealmState_Password_required=Domain/Realm Password is required.
KerberosRealmState_Error_testing_kerberos_realm=Domain/Realm test failed: The following error was returned: {0}

LdapConfigState_Duplicate_hostname_username=You have already defined a data store with the same Hostname and Username.
LdapConfigState_Duplicate_hostname_diff_ldaptype=An LDAP Data Store with this Hostname already exists and has been defined with a different LDAP Type.
LdapConfigState_Hostname=Hostname(s)
LdapConfigState_Anonymous_bind=Anonymous Bind
LdapConfigState_Connection_Security=Connection Security
LdapConfigState_Use_ldap_referral=LDAP Referral
LdapConfigState_Use_DNS_SRV_Records=DNS SRV Record
LdapConfigState_Username=Username
LdapConfigState_InstanceName=Data Store Name
LdapConfigState_Name_required=Name is required.
LdapConfigState_Instance_name_in_use=This Name is already defined; please try a different name.
LdapConfigState_Mask_attribute_values=Mask Values in Log
LdapConfigState_Ldap_type=LDAP Type
LdapConfigState_Authentication_method=Authentication Method
LdapConfigState_Password_reference=Password Reference
LdapConfigState_Client_Tls_Certificate=Client TLS Certificate

LdapGatewayConfigState_Name_required='Name' is required.
LdapGatewayConfigState_InstanceName=Data Store Name
LdapGatewayConfigState_PingOneConnection=PingOne Connection
LdapGatewayConfigState_PingOneEnvironment=PingOne Environment
LdapGatewayConfigState_PingOneGateway=PingOne LDAP Gateway
LdapGatewayConfigState_Mask_attribute_values=Mask Values in Log
LdapGatewayConfigState_Ldap_type=LDAP Type
LdapGatewayConfigState_Connection_Security=Connection Security

AdvancedLdapOptionsState_Test_Connection_on_Borrow=Test Connection on Borrow
AdvancedLdapOptionsState_Test_Connection_on_Return=Test Connection on Return
AdvancedLdapOptionsState_Create_New_Connections_if_Necessary=Create New Connections if Necessary
AdvancedLdapOptionsState_Retry_Failed_Operations=Retry Failed Operations
AdvancedLdapOptionsState_Verify_LDAPS_Hostname=Verify LDAPS Hostname
AdvancedLdapOptionsState_Minimum_Connections=Minimum Connections
AdvancedLdapOptionsState_Maximum_Connections=Maximum Connections
AdvancedLdapOptionsState_Maximum_Wait=Maximum Wait (ms)
AdvancedLdapOptionsState_Time_Between_Eviction=Time Between Eviction (ms)
AdvancedLdapOptionsState_Read_Timeout=Read Timeout (ms)
AdvancedLdapOptionsState_Connection_Timeout=Connection Timeout (ms)
AdvancedLdapOptionsState_DNS_TTL=DNS TTL (ms)
AdvancedLdapOptionsState_LDAP_DNS_SRV_Record_prefix=LDAP DNS SRV Record prefix
AdvancedLdapOptionsState_LDAPs_DNS_SRV_Record_prefix=LDAPs DNS SRV Record prefix
AdvancedLdapOptionsState_Binary_Attribute=Binary Attribute

ProvisioningSetupState_Enabled=Enabled
ProvisioningSetupState_GroupDN=Group DN
ProvisioningSetupState_Nested=Nested Groups
ProvisioningSetupState_Invalid_group_dn=Invalid Group DN.

SamlEntityIdState_entity_id_required=A SAML 2.0 Entity ID is required.
SamlEntityIdState_invalid_entity_id=Invalid SAML 2.0 Entity ID. Please enter a valid entity ID.

ConnectToPingOne_DeleteDraftState=<div class="errortext">A draft connection to PingOne has already been created.</div><br>There is already an SP Connection draft associated with this PingOne account. If you would like to use this wizard again click 'No' to delete the draft and continue with the wizard. Otherwise click 'Yes' to load the draft connection so that it can be completed.<br>
ConnectToPingOne_SamlEntityIdState=To establish an SSO connection with PingOne, PingFederate will need to define a SAML 2.0 Entity ID.
ConnectToPingOne_ConnectToPingOneState=To connect PingFederate to your PingOne for Enterprise account, enter the activation key below.
ConnectToPingOne_SummaryCardState=Here is a summary of the connection to PingOne. Click a heading link to edit a configuration setting.

InitialSetupTasklet_CreateAdminAccountState=Please choose a username and password for your primary administrator. You can add other administrators to PingFederate after setup is complete.
InitialSetupTasklet_IdentityStoreConfigState=Connect a local user store to PingFederate. If you choose "Existing AD or Other User Store", a preconfigured connection wizard will guide your configuration.
InitialSetupTasklet_Login_success=Login was successful

CreateAdminAccountState_username_required=A username is required.
CreateAdminAccountState_password_required=A password is required.
CreateAdminAccountState_passwords_do_not_match=The passwords provided do not match.

PingOneAccountState_note_no_association=Do you want to connect this identity provider with PingOne for Enterprise to enable cloud-based single sign-on?

DeleteDraftState_version_error=The version of the draft is incompatible with this version of the server.

LicenseImportState_License_not_selected=Please select a license to be imported.
LicenseImportState_License_empty=License file is empty.
LicenseImportState_License_import_error=Your new license is not a valid license. This license cannot be imported.
LicenseImportState_note_licensed=You have a valid license for PingFederate.
LicenseImportState_note_not_licensed=Please upload a valid PingFederate license file.

DirectorySetupTasklet_DirectorySetupState=Please complete these fields to connect to your directory.
DirectorySetupTasklet_DirectorySetupSummaryState=Here is a summary of your directory configuration. Click a heading link to edit a configuration setting.
DirectorySetupTasklet_LdapsConfirmationState_non_secure=Your LDAP server does not support secure connections. A secure connection is recommended for production environments.
DirectorySetupTasklet_LdapsConfirmationState_certificate=Sorry, your directory server&rsquo;s certificate is not trusted. To complete a secure connection, you must import a certificate to establish the root of trust. Otherwise, you can go back a step and configure a different server.
DirectorySetupTasklet_LdapsConfirmationState_certificate_with_optout=Sorry, your directory server&rsquo;s certificate is not trusted. To complete a secure connection, you must import a certificate to establish the root of trust. Otherwise, you can continue with an unsecure connection.

DirectorySetupState_Hostname=Hostname
DirectorySetupState_Search_Base=Search Base
DirectorySetupState_Search_Filter=Search Filter
DirectorySetupState_search_base_required=A Search Base is required.
DirectorySetupState_unable_to_communicate_with_server_general=Unable to communicate with this directory server. Please see the logs for more details.
DirectorySetupState_unable_to_communicate_with_server=Unable to communicate with this directory server due to: {0}
DirectorySetupState_Invalid_search_base=Invalid Search Base.
DirectorySetupState_InstanceName=Data Store Name
DirectorySetupState_Name_required=Name is required.

KerberosAuthenticationState_note=If you need to configure Kerberos-based authentication for Windows users, complete the fields below.
KerberosAuthenticationState_invalid_hostname=''{0}'' is not a valid hostname.
KerberosAuthenticationState_realm_name=Realm Name
KerberosAuthenticationState_realm_username=Realm Username
KerberosAuthenticationState_ip_range=IP Range
KerberosAuthenticationState_kdc_hostname=KDC Hostname
KerberosAuthenticationState_Enabled=Enabled
KerberosAuthenticationState_invalid_ip_range=Invalid network range. Please verify that the network range is defined using CIDR notation. For example, 192.168.0.1/24.
KerberosAuthenticationState_need_at_least_one_iprange=You must provide at least one IP Range.

LdapsConfirmationState_Unable_to_communicate_with_datastore=Unable to communicate with the data store with this certificate. Please import a certificate to establish trust with the LDAP server.
LdapsConfirmationState_cert_required=You must import a certificate to establish the root of trust before continuing.
LdapsConfirmationState_cert_or_non_ssl_required=You must import a certificate to establish the root of trust or choose to complete an unsecure connection before continuing.
LdapsConfirmationState_only_one_option_allowed=You uploaded a certificate and selected to continue with an insecure connection. Only one option is allowed. Please make your selections again.
LdapsConfirmationState_subject_dn=Subject DN
LdapsConfirmationState_not_before=Valid From
LdapsConfirmationState_not_after=Expires On

InitialSetupTasklet_ChooseRolesState=Please select the roles you expect PingFederate to play.
ChooseRolesState_at_least_one_role_required=You must select at least one role.
ChooseRolesState_p1_requires_idp_role=When establishing a connection with PingOne, the Identity Provider role is required.

IdentitiesConfigState_Note=Would you like to connect a directory server?
UsecasesState_Note=What would you like to use PingFederate to do?

IdentityStoreConfigState_datastore_required=You must choose a user store to configure before continuing.
IdentityStoreConfigState_unable_to_communicate_with_user_store=Unable to communicate with the specified user store.
IdentityStoreConfigState_unable_to_get_conn=We are unable to get connection data from PingOne. Please see the log for more details.
IdentityStoreConfigState_is_associated_note=Connect a local user store to PingFederate. If you choose "Existing AD or Other User Store", a preconfigured connection wizard will guide your configuration.
IdentityStoreConfigState_initial_setup_note=What kind of user store would you like to connect to PingFederate?
IdentityStoreConfigState_not_associated_note=If you&rsquo;re connecting to a directory, start the quick connection process below. You can configure any other user store connections after the PingFederate setup is complete.

PingOneConfirmationState_unable_to_get_data_from_p1=Unable to download necessary information from PingOne. Please see the log for more details.
PingOneConfirmationState_entity_id_in_use=The entity ID ''{0}'' needed for the PingOne Sp Connection is in use by the connection ''{1}''. Please delete that connection before connecting to PingOne.
PingOneConfirmationState_save_failed=Unable to save SP Connection. Please see the log for more details.

ProvisioningSetupState_note=To configure provisioning to PingOne for Enterprise, specify the Group DN where PingFederate should look for users. Select Nested if you would like users in child groups to be provisioned as well.
ProvisioningSetupState_PingId_note=To configure de-provisioning and user profile updates for PingID here, specify the Group DN where PingFederate should look for users to de-provision and update for PingID.
ProvisioningSetupState_group_dn_required=A Group DN is required.

ldap_attribute_source_search_filter_required=A filter is required.
ldap_attribute_source_search_filter_var_not_found=The LDAP filter references a variable that is not recognized. Reference an available variable.
custom_message_ldap_attribute_source_search_filter_required=Please specify a filter.

LicenseGroupState_License_group=License Group

LicenseManagementState_License_import_error=The new license is not valid and cannot be imported. Please contact Ping Identity Support or try an alternative license file.
LicenseManagement_License_backup_msg=The new license file will overwrite the existing file in the installation's pingfederate/server/conf directory.  The previous file will be renamed as a backup.

LicensingAgreementState_You_must_accept=You must accept the license agreement to proceed.

#JKWS Endpoint
JWKSEndpointTasklet_JWKSEndpointKeysState=Specify whether to use static or dynamically rotating keys for OAuth and OpenID Connect. These keys are used to sign self-contained access tokens, sign or decrypt ID Tokens, and sign JWTs for client authentication and OpenID Connect request objects. All algorithms that do not have active keys will not be available for signing or decryption. Each RSA Signing algorithm can be associated with a unique key ID using PingFederate Administrative API.
JWKSEndpointKeysState_enable_static_keys=Enable Static Keys

ManageCertificateRevocationState_Enable_ocsp=Enable OCSP
ManageCertificateRevocationState_Default_ocsp_url=Default OCSP Responder URL
ManageCertificateRevocationState_Default_ocsp_signature_cert=Default OCSP Responder Signature Verification Certificate
ManageCertificateRevocationState_Add_nonce=Do NOT allow Responder to use cached responses
ManageCertificateRevocationState_Validity_interval_header=Validity Interval
ManageCertificateRevocationState_This_update_grace_period=This Update Grace Period (min)
ManageCertificateRevocationState_Next_update_grace_period=Next Update Grace Period (min)
ManageCertificateRevocationState_Timeout_header=Timeout
ManageCertificateRevocationState_Responder_timeout=Responder Timeout (sec)
ManageCertificateRevocationState_Response_cache_interval=Response Caching Interval (hrs)
ManageCertificateRevocationState_Error_handling_header=Error Handling
ManageCertificateRevocationState_Cert_Unknown=Certificate is Unknown
ManageCertificateRevocationState_OCSP_responder_unavailable=OCSP Responder is Unavailable
ManageCertificateRevocationState_OCSP_responder_error=OCSP Responder Returns Error
ManageCertificateRevocationState_Enable_crl=Enable CRL Checking
ManageCertificateRevocationState_Treat_unretrievable_crls_revoked=Treat Unretrievable CRLs as Revoked
ManageCertificateRevocationState_Resolution_failure=Next Retry on Resolution Failure (min)
ManageCertificateRevocationState_Update_expiration=Next Retry on Next Update Expiration (min)
ManageCertificateRevocationState_Verify_signature=Verify CRL Signature
ManageCertificateRevocationState_Proxy_settings_header=Proxy Settings
ManageCertificateRevocationState_Host=Host
ManageCertificateRevocationState_Port=Port
ManageCertificateRevocationState_Default_ocsp_url_required=Default OCSP Responder URL is required.
ManageCertificateRevocationState_Default_ocsp_url_invalid=Default OCSP Responder URL is not formatted correctly.
ManageCertificateRevocationState_This_update_grace_period_required=This Update Grace Period is required.
ManageCertificateRevocationState_This_update_grace_period_invalid=This Update Grace Period must be an integer greater than or equal to 1 and less than or equal to 65535.
ManageCertificateRevocationState_Next_update_grace_period_required=Next Update Grace Period is required.
ManageCertificateRevocationState_Next_update_grace_period_invalid=Next Update Grace Period must be an integer greater than or equal to 1 and less than or equal to 65535.
ManageCertificateRevocationState_Responder_timeout_required=Responder Timeout is required.
ManageCertificateRevocationState_Responder_timeout_invalid=Responder Timeout must be an integer greater than or equal to 1 and less than or equal to 65535.
ManageCertificateRevocationState_Response_cache_interval_required=Response Caching Interval is required.
ManageCertificateRevocationState_Response_cache_interval_invalid=Response Caching Interval must be an integer greater than or equal to 0 and less than or equal to 65535.
ManageCertificateRevocationState_Failover_defined_no_crl=Error Handling has been configured to failover to CRL but CRL Checking has not been enabled.
ManageCertificateRevocationState_No_Failover_defined_but_crl_is=OCSP Error Handling has not been configured for failover to CRL but CRL Checking has been enabled.  CRL Checking will not be used in this case and should be disabled.
ManageCertificateRevocationState_Resolution_failure_required=Next Retry on Resolution Failure is required.
ManageCertificateRevocationState_Resolution_failure_invalid=Next Retry on Resolution Failure must be an integer greater than or equal to 1 and less than or equal to 65535.
ManageCertificateRevocationState_Update_expiration_required=Next Retry on Next Update Expiration is required.
ManageCertificateRevocationState_Update_expiration_invalid=Next Retry on Next Update Expiration must be an integer greater than or equal to 1 and less than or equal to 65535.
ManageCertificateRevocationState_Host_and_port_required=When configuring Proxy Settings both the Host and Port must be configured.
ManageCertificateRevocationState_Proxy_host_invalid=Proxy Host is not formatted correctly.
ManageCertificateRevocationState_Proxy_port_invalid=Proxy Port must be an integer greater than or equal to 1 and less than or equal to 65535.

ManageDataSourcesState_Data_store_errors=One or more of the Data Stores has an error that must be resolved before you can save.

MetadataLifetimeState_Cache_duration_required=You must provide a Cache Duration.
MetadataLifetimeState_Cache_duration_illegal_value=Cache Duration must be an integer greater than zero.
MetadataLifetimeState_Metadata_refresh_delay_required=You must provide a Refresh Delay.
MetadataLifetimeState_Metadata_refresh_delay_illegal_value=Refresh Delay must be an integer greater than zero.
MetadataLifetimeState_Valid_until_required=You must provide a Valid Duration.

MetadataSigningState_Signing_cert_label=Signing Certificate
MetadataSigningState_Include_key_info=Include Certificate in KeyInfo
MetadataSigningState_Include_key_value=Include Raw Key in KeyValue
MetadataSigningState_Key_info_text=Include this certificate's public key certificate in the &lt;KeyInfo&gt; element.
MetadataSigningState_Key_value_text=Include the raw key in the signature &lt;KeyValue&gt; element.
MetadataSigningState_Signing_algorithm=Selected Signing Algorithm
MetadataSigningState_Unsupported_signing_algorithm=The signing certificate uses the unknown algorithm {0}.

MetadataUrlCertSummaryState_Verification_successful=Verification successful.
MetadataUrlCertTasklet_MetadataUrlCertSummaryState=Summary of the certificate used to verify the signature on the metadata.
MetadataUrlCertTasklet_MetadataUrlCertSummaryState_No_cert=No certificate is stored for this metadata URL. Click Verify to confirm that the URL is valid and the metadata is unsigned.
MetadataUrlCertTasklet_MetadataUrlState=Provide a valid Metadata URL
MetadataUrlImportCertTasklet_MetadataUrlImportCertState=Select the file that contains your partner's signature verification certificate.
MetadataUrlImportCertTasklet_SummaryCardState=Summary of imported certificate
MetadataUrlTasklet_MetadataUrlCertsState=PingFederate publishes and consumes SAML metadata through a URL. Metadata URLs and corresponding Signature Verification Certificates can be managed here.
MetadataUrlState_duplicate_url=Metadata URL ''{0}'' already exists.
MetadataUrlState_duplicate_metadata_name=This Name is already defined. Please try a different name.
MetadataUrlState_Metadata_url_invalid=Unable to obtain valid SAML metadata from URL ''{0}''.
MetadataUrlCertTasklet_MetadataUrlImportCertState=Import a verification certificate.
MetadataUrlCertTasklet_SummaryCardState=Summary of Metadata URL and Signature Verification Certificate
MetadataUrlState_load_from_URL=Metadata Not Loaded. Click Load Metadata to load the metadata from the URL.
MetadataUrlState_no_metadata_URL=Metadata URL is required.


MetadataUrlImportCertState_Filename=Filename
MetadataUrlImportCertState_File_size=File Size
MetadataUrlImportCertState_Valid_path_required=You must provide a valid path to a file.

DynamicConnectionSigningCertState_Cert_required=You must select a valid certificate.
DynamicConnectionSigningCertState_Signing_algorithm=Selected Signing Algorithm
DynamicConnectionSigningCertState_Unsupported_signing_algorithm=The signing certificate uses the unknown algorithm {0}.

NotificationOptionsState_Certificate_expirations=Certificate Events
NotificationOptionsState_Certificate_expirations_notification_email_address=Certificate Events Notification Email Address
NotificationOptionsState_Cert_final_warning_event=Final Warning Event (days)
NotificationOptionsState_Notification_Publisher=Notification Publisher
NotificationOptionsState_Cert_initial_warning_event=Initial Warning Event (days)
NotificationOptionsState_License_events=License Events
NotificationOptionsState_License_events_notification_email_address=License Events Notification Email Address
NotificationOptionsState_Metadata_events=Metadata Events
NotificationOptionsState_Metadata_events_notification_email_address=Metadata Update Events Notification Email Address
NotificationOptionsState_Thread_pool_exhaustion=Thread Pool Exhaustion Events
NotificationOptionsState_Thread_pool_exhaustion_notification_email_address=Thread Pool Exhaustion Events Notification Email Address
NotificationOptionsState_Thread_pool_exhaustion_thread_dump=Thread Pool Exhaustion Events Notification Thread Dump
NotificationOptionsState_Password_changes=Password Changes
NotificationOptionsState_Configuration_required=Configuration of the Email Server is required.
NotificationOptionsState_Notification_Publisher_required=Please select a notification publisher for {0} or configure a default notification publisher.
NotificationOptionsState_Notification_Publisher_required_or_logging_only=Please select a notification publisher for {0}, configure a default notification publisher or select Logging Only.
notifications_cert_final_warning_invalid=Invalid number of days for Final Warning Event
notifications_cert_final_warning_required=Final Warning Event is required
notifications_cert_initial_warning_invalid=Invalid number of days for Initial Warning Event
notifications_cert_final_greater_than_initial=Final Warning Event cannot be greater than the Initial Warning Event

OAuthAttributeMappingState_Not_configured=OAuth Attribute Mapping not configured.
OAuthAttributeMappingState_select_apc=Select an authentication policy contract to map into.

OAuthIdpConnectionSelectDataSourceData_Type=Type of Data Store
OAuthIdpConnectionSelectDataSourceData_Attribute_source=Attribute Source
OAuthSelectDataSourceState_Type=Type of Data Store
OAuthSelectDataSourceState_Data_store=Data Store
OAuthIdpConnectionSelectDataSourceData_Data_store=Data Store
OAuthSAMLSelectDataSourceData_Type=Type of Data Store
OAuthSAMLSelectDataSourceData_Attribute_source=Attribute Source
OAuthSAMLSelectDataSourceData_Data_store=Data Store
OAuthSAMLSelectDataSourceData_Data_store_unavailable=There is a problem connecting to this data store.  You may wish to check its availability, or choose another connection.  Click Manage Data Stores to create a different connection.
OAuthSource2TargetMappingState_Must_have_valid_value={0} must have a valid value.
OAuthClientManagementState_Card_id=Client ID
OAuthClientManagementState_Card_name=Client Name
OAuthClientManagementState_Card_description=Description
OAuthClientManagementState_Card_logo_url=Logo URL
OAuthClientManagementState_Card_bypass_approval_page=Bypass Approval Page
OAuthClientManagementState_Card_restrict_scopes=Restrict Scopes
OAuthClientManagementState_Card_redirect_uri=Redirect URI

OAuthClientManagementState_Certificate_parsing_exception=Importing this file caused a certificate parsing exception.
OAuthClientManagementState_Certificate_expired=An error occurred importing the certificate. The certificate has expired.
OAuthClientManagementState_Error_importing_file_see_log=An error occurred importing the file. See server log for more details.
OAuthClientManagementState_Valid_path_required=You must provide a valid path to a file.

OAuthClientsManagement_Replication_Status_desc=Replication Status

#Odd, would have expected this to have been set already
CfgLdapFilterState_Filter=Filter
CfgLdapFilterState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

OutboundConfigSoapAuthState_Soap_auth_type=SOAP Authentication Type
OutboundConfigSoapAuthState_Require_cert_chain=Require valid cert chain
OutboundConfigSoapAuthState_Basic_desc=HTTP Basic
OutboundConfigSoapAuthState_Cert_desc=SSL Client Certificate
OutboundConfigSoapAuthState_Dsig_desc=Digital Signature (Browser SSO profile only)
OutboundConfigSoapAuthState_Dsig_desc_none=None
OutboundConfigSoapAuthState_RequireValidCertChain_desc=Perform validation on partner's SSL server certificate when SSL used.
OutboundConfigSoapAuthState_RequireValidCertChain_desc_xasp=Perform validation on partner's SSL server certificate when SSL used.
OutboundConfigSoapAuthState_Ssl_client_cert_required=SSL Client Certificate is required.

OverrideInstanceState_You_must_override_instance=You must override the selected instance or uncheck the 'Override Instance Settings' checkbox in the previous screen.

# OpenID Connect Policy Management
openid_connect_token_manager_id_invalid=You must select an access token manager. If no access token managers are available, you can create one by clicking Access Token Management on the main OAuth Settings page.

PasswordGenerationState_Generated_password_required=A password is required.

PingIdRadiusState_required=''{0}'' is required.
PingIdRadiusState_invalid_ip=Invalid Client IP address.
PingIdRadiusState_invalid_port=Invalid Radius Server Authentication Port. Provide a values from 1 to 65535.


PingOneNextStepsState_Completion_msg_initial_setup=You have successfully set up PingFederate
PingOneNextStepsState_Completion_msg_initial_setup_p1_conn=and created a connection to PingOne for Enterprise
PingOneNextStepsState_Completion_msg_connect_to_pingone=You have successfully connected to PingOne.
PingOneNextStepsState_Completion_msg_clustered=You'll be able to update your PingOne identity repository settings after you replicate configuration changes.

PingOneSettingsState_Company_name=Company Name
PingOneSettingsState_Sp_connection=SP Connection
PingOneSettingsState_Enable_sso=Enable Single Sign-On
PingOneSettingsState_Enable_monitoring=Enable Monitoring
PingOneSettingsState_Previous_key_creation_time=Previous Key Creation Time
PingOneSettingsState_Current_key_creation_time=Current Key Creation Time
PingOneSettings_Confirm_update=PingOne users in your enterprise will be directed to this PingFederate environment during single sign-on. Are you sure you want to update the PingOne identity repository?

PoliciesManagementState_Default_required=A default policy is required.
PoliciesManagementState_Unable_to_delete_with_oauth_ref=Unable to delete OIDC policy, please 'Check Usage' and resolve references before trying to delete again.

SaaSActivationState_Status=Channel Status

SaaSAttrMappingMgmt_Unable_to_refresh=Unable to refresh the Attribute Mapping List.

SaaSAttrMappingMgmtState_Attr_mapping_required=Attribute Mapping must be defined.
SaaSAttrMappingMgmtState_Default_attr_mapping_not_loaded=Unable to load default Attribute Mapping.
SaaSAttrMappingMgmtState_Field_required=is required.
SaaSAttrMappingMgmtState_Expression_required=has more than one attribute selected, so you must specify an expression. Either remove attributes for this field or enable OGNL expressions for your PingFederate installation (see documentation).
SaaSAttrMappingMgmtState_Summary=Click link above to view mapping.

SaaSGeneralInfoState_Channel_name_required=You must specify a channel name.
SaaSGeneralInfoState_Channel_name_must_be_unique=A channel with this name already exists for this connection.
SaaSGeneralInfoState_Max_threads_required=You must specify Max Threads.
SaaSGeneralInfoState_Max_threads_invalid=You must specify an integer value greater than zero and less than or equal to 10,000 for Max Threads.  Please note that the maximum number of threads allocated for this channel will not exceed the maximum number of threads available within the container.
SaaSGeneralInfoState_timeout_required=You must specify Timeout.
SaaSGeneralInfoState_timeout_invalid=You must specify an integer that is greater than zero for the timeout.

SaaSGlobalProvisioningSettingsState_Synch_Freq_required=Synchronization Frequency is required.
SaaSGlobalProvisioningSettingsState_Synch_freq_int_range_error=Synchronization Frequency must be an integer greater than zero.
SaaSGlobalProvisioningSettingsState_Internal_data_store_required=You must select a data store.

SaaSManagementState_One_channel_required=You must define at least one Channel.

SaaSProvisioningState_Saas_provisioning_not_configured=Outbound Provisioning must be configured.
SaaSProvisioningState_Required_plugin_not_loaded=This connection is configured to use a SaaS Connector, but the supporting JAR file is not installed. Please consult your Connector documentation for information on reinstalling.

SaaSSelectAttrMappingState_Required_field_error=You must select at least one attribute, specify a default value, or specify an expression.
SaaSSelectAttrMappingState_Expression_required=You have more than one attribute selected, so you must specify an expression.
SaaSSelectAttrMappingState_Expression_required_ognl_disabled=You have more than one attribute selected, so you must specify an expression. Either remove attributes or click CANCEL and then enable OGNL expressions for your PingFederate installation (see documentation).
SaaSSelectAttrMappingState_Invalid_column=Invalid attribute: {0}

SaaSSourceLocationState_User_base_dn_required=You must specify the User Base DN.
SaaSSourceLocationState_User_filter_or_groupdn_required=You must specify either the Filter or the Group DN for Users.
SaaSSourceLocationState_Invalid_groupdn_filter=Invalid filter for Groups.
SaaSSourceLocationState_Invalid_user_filter=Invalid filter for Users.
SaaSSourceLocationState_Invalid_base_dn=Invalid User Base DN for Users.
SaaSSourceLocationState_Invalid_group_dn=Invalid Group DN for Users.
SaaSSourceLocationState_Invalid_group_dn_for_groups=Invalid Group DN for Groups.
SaaSSourceLocationState_Invalid_groups_group_dn_expect_group_object=Groups Group DN must contain the DN of a 'Group' object. For example, DN of an Organizational Unit (OU) is invalid.
SaaSSourceLocationState_Invalid_users_group_dn_expect_group_object=Users Group DN must contain the DN of a 'Group' object. For example, DN of an Organizational Unit (OU) is invalid.

SaaSSourceSelectionState_Data_store_required=You must select a data store.
SaaSSourceSelectionState_Data_store_unavailable=Unable to communicate with the specified data store.

SaaSSourceSettingsState_Entry_guid_attr_required=You must specify the Entry GUID Attribute.
SaaSSourceSettingsState_Member_of_group_attr_required=You must specify the Member of Group Attribute.
SaaSSourceSettingsState_Group_member_attr_or_member_of_group_attr_required=You must specify either the Member of Group Attribute or the Group Member Attribute.
SaaSSourceSettingsState_User_object_class_required=You must specify the User objectClass.
SaaSSourceSettingsState_Group_object_class_required=You must specify the Group objectClass.
SaaSSourceSettingsState_Usn_attr_required=You must specify the USN Attribute.
SaaSSourceSettingsState_Timestamp_attr_required=You must specify the Timestamp Attribute.
SaaSSourceSettingsState_Acct_status_attr_required=You must specify the Account Status Attribute.
SaaSSourceSettingsState_Flag_comparison_value_required=You must specify the Flag Comparison Value.

SaaSTargetState_User_name_required=Admin Email is required.
SaaSTargetState_Invalid_email_address=The email address you entered is not formatted correctly.
SaaSTargetState_Password_required=Admin Password is required.
SaaSTargetState_Confirm_password_required=Confirm Admin Password is required.
SaaSTargetState_Passwords_dont_match=Your Password and Confirm Password do not match.
SaaSTargetState_SaasTarget_test_connection_failed_forlog=Unable to connect to Target.
SaaSTargetState_SaasTarget_test_connection_failed=Unable to connect to Target. Please verify that the provided connection details are correct; check server log file for further details.
SaaSTargetState_SaasTarget_test_connection_failed_connection=Unable to connect to Target.  Please check network connectivity to the Target.
SaaSTargetState_Not_available=Info not available
SaaSTargetState_Fips_status=FIPS Status

SelectAuthnContextState_Saml_authn_context_required=You must select a SAML Authentication Context.
SelectAuthnContextState_Selected_context=Selected Context

SelectAdapterDataSourceState_Title=Attribute Contract
SelectAdapterDataSourceState_Additional_attributes=Use the {0} to look up additional information
SelectAdapterDataSourceState_No_additional_attributes=Use only the attributes available in the {0}

SelectAdapterState_You_must_select_an_adapter=You must select an adapter to map.
SelectAdapterState_Selected_adapter=Selected adapter

SelectAdapterTypeState_Type_required=Please select a Type.
SelectAdapterTypeState_Name_required=Name is required.
SelectAdapterTypeState_Id_required=ID is required.
SelectAdapterTypeState_Invalid_plugin_instance_id=The ID must be less than {0} characters, contain no spaces, and be alphanumeric.
SelectAdapterTypeState_Plugin_id_in_use=This ID is already defined; please try a different ID.
SelectAdapterTypeState_Plugin_name_in_use=This Name is already defined; please try a different name.
SelectAdapterTypeState_Plugin_instance_name=Instance Name
SelectAdapterTypeState_Plugin_instance_id=Instance ID
SelectAdapterTypeState_Plugin_type=Type
SelectAdapterTypeState_Plugin_class_name=Class Name
SelectAdapterTypeState_Plugin_parent_name=Parent Instance Name
SelectAdapterTypeState_Plugin_fips_status=FIPS Status
SelectAdapterTypeState_Authorization_detail_processor_supported_types=Supported Authorization Detail Types

SelectCertVerificationMethodState_Method=Cert Verification Method
SelectCertVerificationMethodState_Anchored_unanchored_required=You must select Anchored or Unanchored to proceed.

jdbc_attribute_source_table_not_allowed=The selected table, {0} cannot be used because it contains an unsupported column type: {1}
jdbc_attribute_source_expressions_required=The selected table, "{0}" contains a required datetime or smalldatetime column that cannot be fulfilled because OGNL expressions are turned off.  Please turn on OGNL expressions first in the file "server/default/data/config-store/org.sourceid.common.ExpressionManager.xml."
jdbc_attribute_source_table_required=You must select a table.
SelectDatabaseTableAndColumnsState_Column_required=You must select at least one column.

SelectDatabaseSchemaAndStoredProcState_Stored_procedure_required=You must select a stored procedure.

SelectDataSourceState_Attribute_source_id_required=You must provide an Attribute Source ID.
SelectDataSourceState_Attribute_source_id_must_be_alphanumeric=Attribute Source ID must be alphanumeric.
SelectDataSourceState_Attribute_source_description_required=You must provide an Attribute Source Description.
SelectDataSourceState_Attribute_source_description_exists=An Attribute Source with that description already exists.
SelectDataSourceState_Attribute_source_id_exists=An Attribute Source with that ID already exists.
SelectDataSourceState_Data_store_required=You must select a data store.
SelectDataSourceState_Data_store_unavailable=There is a problem connecting to this data store.  You may wish to check its availability, or choose another connection.  Click Manage Data Stores to create a different connection.
SelectDataSourceState_Attribute_source=Attribute Source
SelectDataSourceState_Attribute_source_id=Attribute Source ID
SelectDataSourceState_Type=Type of Data Store
SelectDataSourceState_Data_store=Data Store

SelectDataSourceTypeState_Database=Database
SelectDataSourceTypeState_Ldap=LDAP
SelectDataSourceTypeState_LDAP=LDAP
SelectDataSourceTypeState_Other=Other
SelectDataSourceTypeState_Type_required=You must select a type.
SelectDataSourceTypeState_Instance_name_in_use=This Name is already defined; please try a different name.
SelectDataSourceTypeState_Name_required=Name is required.
SelectDataSourceTypeState_Mask_attribute_values=Mask Values in Log

SelectIdpAuthnAdapterState_Select_an_adapter=You must select an adapter.
SelectIdpAuthnAdapterState_Selected_adapter_not_configured_correctly=The selected Adapter is not configured correctly.
SelectIdpAuthnAdapterState_Connections_have_errors=Connections using this adapter have errors that must be fixed before saving.
SelectIdpAuthnAdapterState_Idp_adapter_management=IdP adapter management

# These are the text descriptions next to the radio/checkboxes on SelectIdpAccountLinking.html
SelectIdpAccountLinkingState_Account_linking_desc=The IdP is sending a unique name identifier (possibly opaque). An opaque identifier preserves user privacy in that it cannot be traced back to a user's identity at the IdP. The name identifier is used by this SP to create a persistent association between the user and a specific local account.
SelectIdpAccountLinkingState_Account_linking_attr_checkbox_desc=The assertion includes attributes in addition to the unique name identifier.
SelectIdpAccountLinkingState_Account_linking_attr_checkbox_desc_oidc=The provider claim includes attributes in addition to the unique name identifier.
SelectIdpAccountLinkingState_Account_mapping_desc=The IdP is sending a set of attributes that may be used to dynamically map the user to a specific local account.
SelectIdpAccountLinkingState_no_mapping_desc=No attributes are mapped to the target session.

# These are the text descriptions next to the radio/checkbox on SelectIdpXmlAssertionEncryption.html
SelectIdpXmlAssertionEncryptionState_Encrypt_assertion_checkbox_desc=The entire assertion
SelectIdpXmlAssertionEncryptionState_Encrypt_saml_subject_checkbox_desc=SAML_SUBJECT (Name Identifier)
SelectIdpXmlAssertionEncryptionState_Encrypt_attributes_checkbox_desc=One or more attributes
SelectIdpXmlAssertionEncryptionState_Encrypt_assertion_summary=Encrypt Entire Assertion
SelectIdpXmlAssertionEncryptionState_Encrypt_saml_subject_summary=Encrypt Name Identifier
SelectIdpXmlAssertionEncryptionState_Encrypt_attributes_summary=Encrypt One or More Attributes
SelectIdpXmlAssertionEncryptionState_Encrypt_none_desc=None
SelectIdpXmlAssertionEncryptionState_Encrypt_enable_desc=Allow encrypted SAML Assertions and SLO messages
SelectIdpXmlAssertionEncryptionState_Encrypt_enable_desc_wsfed=Allow encrypted SAML messages
SelectIdpXmlAssertionEncryptionState_Encrypt_saml_subject_desc=Encrypt the SAML_SUBJECT in SLO messages to the IdP
SelectIdpXmlAssertionEncryptionState_Decrypt_saml_subject_desc=Allow encrypted SAML_SUBJECT in SLO messages from the IdP

SelectIdpXmlAssertionEncryptionState_Encrypt_selection_required=You must select at least one portion of the assertion you expect to be encrypted.

SelectSamlProfilesState_Idp_sso=IdP-Initiated SSO
SelectSamlProfilesState_Idp_slo=IdP-Initiated SLO
SelectSamlProfilesState_Sp_sso=SP-Initiated SSO
SelectSamlProfilesState_Sp_slo=SP-Initiated SLO
SelectSamlProfilesState_Attribute_query=Attribute Query

# These are the text descriptions next to the radio/checkboxes on SelectSpAccountLinking.html
SelectSpAccountLinkingState_Pseudonym_desc=Send the SP a unique, opaque name identifier that preserves user privacy.  The identifier cannot be traced back to the user's identity at this IdP and may be used by the SP to make a persistent association between the user and a specific local account.  The SP will often use account linking to identify the user locally.
SelectSpAccountLinkingState_Pseudonym_attr_checkbox_desc=Include attributes in addition to the pseudonym.
SelectSpAccountLinkingState_Standard_desc=Send the SP a known attribute value as the name identifier.  The SP will often use account mapping to identify the user locally.
SelectSpAccountLinkingState_Transient_desc=Send the SP an opaque, temporary value as the name identifier.
SelectSpAccountLinkingState_Transient_attr_checkbox_desc=Include attributes in addition to the transient identifier.
SelectSpAccountLinkingState_Pseudonym=Enable Pseudonym Identifier
SelectSpAccountLinkingState_Pseudonym_addl_attrs=Include additional attributes
SelectSpAccountLinkingState_Standard=Enable Standard Identifier
SelectSpAccountLinkingState_Transient=Enable Transient Identifier
SelectSpAccountLinkingState_Transient_addl_attrs=Include additional attributes

# These are the text descriptions next to the checkboxes on SelectSpXmlAssertionEncryption.html
SelectSpXmlAssertionEncryptionState_Encrypt_assertion_radio_desc=The entire assertion
SelectSpXmlAssertionEncryptionState_Encrypt_attributes_radio_desc=One or more attributes
SelectSpXmlAssertionEncryptionState_Encrypt_none_desc=None
SelectSpXmlAssertionEncryptionState_Encrypt_saml_subject=SAML_SUBJECT (Name Identifier)
SelectSpXmlAssertionEncryptionState_Encrypt_assertion_summary=Encrypt Entire Assertion
SelectSpXmlAssertionEncryptionState_Encrypt_saml_subject_summary=Encrypt Name Identifier
SelectSpXmlAssertionEncryptionState_Encrypt_attributes_summary=Attribute
SelectSpXmlAssertionEncryptionState_Encrypt_saml_subject_desc=Encrypt the SAML_SUBJECT in SLO messages to the SP
SelectSpXmlAssertionEncryptionState_Decrypt_saml_subject_desc=Allow encryption in SLO messages from the SP

# Error messages for SelectSpXmlAssertionEncryption
SelectSpXmlAssertionEncryptionState_Encrypt_selection_required=You must select at least one portion of the assertion to encrypt.

SelectUniqueIdValuesState_One_value_required=You must select at least one pseudonym value.
SelectUniqueIdValuesState_Revoke_session_enabled_must_select_unique_user_key=You must select a unique user key attribute when ''{0}'' is enabled.

# These are the text descriptions next to the radio buttons on SelectXmlDecryptionCert.html
SelectXmlDecryptionKeyState_Selected_cert_summary=Selected Decryption Certificate
SelectXmlDecryptionKeyState_Certs_should_not_match=Primary and Secondary certificates cannot be the same.
SelectXmlDecryptionKeyState_RSA_certificate_required=Only RSA keys can be used for decryption.

# These are the text descriptions next to the radio buttons on SelectXmlEncryptionCert.html
SelectXmlEncryptionCertState_Block_encrypt_algorithm=Block Encryption Algorithm
SelectXmlEncryptionCertState_Aes_128=AES-128
SelectXmlEncryptionCertState_Aes_256=AES-256
SelectXmlEncryptionCertState_Triple_des=Triple DES
SelectXmlEncryptionCertState_Aes_128_gcm=AES-128-GCM
SelectXmlEncryptionCertState_Aes_192_gcm=AES-192-GCM
SelectXmlEncryptionCertState_Aes_256_gcm=AES-256-GCM
SelectXmlEncryptionCertState_Key_transport_algorithm=Key Transport Algorithm
SelectXmlEncryptionCertState_Rsa_v15=RSA-v1.5
SelectXmlEncryptionCertState_Rsa_oaep=RSA-OAEP
SelectXmlEncryptionCertState_Rsa_oaep_256=RSA-OAEP using SHA-256 and MGF1 with SHA-256
SelectXmlEncryptionCertState_Help_message_p1=Due to the import restrictions of some countries, Java(TM) has built-in restrictions on available cryptographic strength (key size).
SelectXmlEncryptionCertState_Help_message_p2=To use larger key sizes, the "Unlimited Java Cryptography Extension (JCE) Jurisdiction Policy" must be enabled. See https://java.com/ for more details.
SelectXmlEncryptionCertState_RSA_certificate_required=Only RSA keys can be used for XML encryption.
SelectXmlEncryptionCertState_Block_encrypt_alg_summary=Selected Block Encryption Algorithm
SelectXmlEncryptionCertState_Key_transport_alg_summary=Selected Key Transport Algorithm
SelectXmlEncryptionCertState_Selected_cert_summary=Selected Encryption Certificate

SelectXmlFileState_Error_importing_file=An error occurred importing the selected metadata file.
SelectXmlFileState_Valid_path_required=Please select a metadata file to be signed.
SelectXmlFileState_Filename=Filename
SelectXmlFileState_File_size=File Size
SelectXmlFileState_Xml_exception=The format of the selected metadata file is not valid.
SelectXmlFileState_Already_signed_exception=The selected metadata file is already signed.
SelectXmlFileState_Invalid_xml_exception=The selected metadata file could not be validated against its schema.

SelectVerificationTrustModelState_Anchored_desc=The verification certificate must be signed by a Trusted CA and included in the incoming message.
SelectVerificationTrustModelState_Unanchored_desc=The verification certificate is self-signed, or you wish to trust a specific certificate.
SelectVerificationTrustModelState_Embedded_cert_desc=Use embedded certificates when available
SelectVerificationTrustModelState_Model_summary_desc=Trust Model
SelectVerificationTrustModelState_Embedded_certs_summary_desc=Use embedded certificates when available

ServiceEndpointState_Invalid_index=The index value must be an integer greater than or equal to 0 and less than or equal to 65535.
ServiceEndpointState_Duplicate_index=You entered a duplicate index.
ServiceEndpointState_Malformed_response_url=You entered a malformed Response URL.
sso_service_endpoint_url_malformed=You entered a malformed Endpoint URL.
sso_service_endpoint_relative_url_malformed=Since you configured a Base URL on the General Info page, your Endpoint URL entry must be preceded with a "/".
ServiceEndpointState_Response_base_url_malformed=Since you configured a Base URL on the General Info page, your Response URL entry must be preceded with a "/".
ServiceEndpointState_Invalid_binding=You must select a valid binding.
ServiceEndpointState_Unrecognized_binding_exists=Unrecognized bindings exist. Remove unrecognized bindings to continue.
ServiceEndpointState_Relative_urls_but_no_base=You have relative URLs but no Base URL configured.
ServiceEndpointState_Endpoint_required=You must specify at least one endpoint.
ServiceEndpointState_Finish_editing=You must update the item you are editing.
ServiceEndpointState_Default_endpoint_required=You must set a default endpoint.
ServiceEndpointState_Endpoint_url_required=You must specify an Endpoint URL.
ServiceEndpointState_Endpoint=Endpoint

ServerLicenseNotificationsState_Email_required=An email address is required.
ServerLicenseNotificationsState_Email_invalid=The email address you entered is not formatted correctly.
ServerLicenseNotificationsState_Notification_email_address=Notification Email Address

SignatureVerificationSettingsState_Not_configured=Signature Verification Settings not configured.
SignatureVerificationSettingsState_Digital_signature_not_configured=Settings not configured.

SigningCertState_dsigSigningAssertion_desc=You may also choose to enhance message exchange security by always signing SAML assertions.<br>
SigningCertState_checkboxText_desc=Always sign the SAML Assertion
SigningCertState_AssertionConsumerPostOrRedirectUsed=One (or more) of the endpoints are configured to use POST or Redirect.
SigningCertState_SloAndPostOrRedirect=SLO is selected and POST or Redirect is also selected.
SigningCertState_InboundSoapAndNoSSL=An inbound SOAP (Outbound Artifact) is not required to use SSL.
SigningCertState_SigningAssertion_failure_desc=A certificate is required because of the following reason(s):
SigningCertState_checkbox_checked_desc={0} is checked.
SigningCertState_UsingDsigAuth=The selected SOAP Authorization method is Digital Signature Identification.
SigningCertState_Cert_required=You must select a valid certificate.
SigningCertState_dsigSigningAuthn_desc=You may also choose to enhance message exchange security by always signing the SSO Authn Requests.<br>
SigningCertState_AuthnCheckboxText_desc=Sign the SSO AuthnRequest for POST and Redirect Bindings
SigningCertState_AuthnCheckboxText_desc_1x=Always sign the Artifact resolution request.
SigningCertState_IncludeKeyInfo=Include Certificate in KeyInfo
SigningCertState_IncludeKeyValue=Include Raw Key in KeyValue
SigningCertState_NotAllInboundsAreHTTPS=An inbound artifact binding is not using HTTPS.
SigningCertState_Signing_algorithm=Selected Signing Algorithm
SigningCertState_Key_info_text=Include the certificate in the signature &lt;KeyInfo&gt; element.
SigningCertState_Key_value_text=Include the raw key in the signature &lt;KeyValue&gt; element.
SigningCertState_Unsupported_signing_algorithm=The signing certificate uses the unknown algorithm {0}.
SigningCertState_Primary_signing_cert_same_as_secondary_signing_cert=Secondary signing certificate cannot be the same as the primary signing certificate {0}.
SigningCertState_Secondary_signing_cert_cannot_have_rotation_enabled=The selected secondary signing certificate cannot have rotation enabled.

SmsProviderSettingsTasklet_SmsProviderSettingsState=To connect PingFederate to Twilio as an SMS Provider for notifications (such as self-service password reset requests), configure the settings below to match your service account.

SoapAuthXasp_None_desc=No Client Authentication
SoapAuthXasp_Transport_layer_auth_desc=Transport Layer Authentication
SoapAuthXasp_Basic_desc=HTTP Basic
SoapAuthXasp_Ssl_client_cert_desc=SSL Client Certificate

SpAdapterManagementState_Connections_have_errors=Recent changes have created errors in dependent configuration settings. Please fix the errors before saving.
SpAdapterManagementState_Adapter_has_errors={0} has error(s), please review and fix.

SpConfigLdapFilterState_Filter=Filter
SpConfigLdapFilterState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

SpProtocolSettingsState_Not_configured=Protocol Settings not configured.

SpSignaturePolicyState_Authn_Requests_Signed=Require digitally signed AuthN requests
SpSignaturePolicyState_Signature_Setting=Signature Setting
SpSignaturePolicyState_Sign_Response_As_Required=Sign Response As Required
SpSignaturePolicyState_Always_Sign_Assertion=Always Sign Assertion
SpSignaturePolicyState_Always_Sign_ArtifactResponse=Always Sign the ArtifactResponse

SslCertAuthState_Cert_required=You must select a valid certificate.

SslCertVerificationState_Cert_required=You must specify a certificate for this artifact.
SslCertVerificationState_cert_in_use=This certificate is used by connection {0}. Please choose a unique certificate.

SsoServiceUrlState_Endpoint_desc=Endpoint URL
SsoServiceUrlState_Endpoint=Endpoint
SsoServiceUrlState_Endpoint_required=Endpoint Required

StringListEditor_String_required_add=Cannot add a blank field.
StringListEditor_Duplicates_not_allowed=Duplicates are not allowed.
StringListEditor_String_required_update=This field cannot be blank during update.
StringListEditor_Update_required=Update is pending, you must complete the update or cancel.
StringListEditor_One_attribute_required=At least one is required.

SubjectDnState_Subject_dn=Subject DN
SubjectDnState_Subject_dn_required=You must provide a valid Subject DN.
SubjectDnState_Issuer_dn=Issuer DN
SubjectDnState_Issuer_dn_required=You must provide a valid Issuer DN.
SubjectDnState_Issuer_dn_not_a_trust_anchor=The Issuer DN must match one of the built-in Java trust anchors or one of PingFederate's Trusted CA's.
SubjectDnState_dn_in_use=This subject DN is used by connection {0}. Please choose a unique DN.

SystemInfoState_Connection_id_required=You must provide a Connection ID.
SystemInfoState_Invalid_entity_id=The Entity ID must be a valid SAML 2 Entity ID.
SystemInfoState_Base_url_required=You must provide a Base URL.
SystemInfoState_Invalid_base_url_required=The Base URL must be a valid URL. Please verify correct syntax for the protocol--for example, use square brackets around IPv6 addresses.
SystemInfoState_Enable_email_notification=Enable Email Notification
SystemInfoState_My_company_name=My Company Name
SystemInfoState_Contact_name=Contact Name
SystemInfoState_Contact_number=Contact Number
SystemInfoState_Contact_email=Contact Email

SystemKeys_Rotate_complete_msg=A new system key has been created. Click Save to save the changes or Cancel to go back to the previous configuration.
SystemKeysState_Rotate_confirmation_msg=The previous system key was created on {0}. Persistent sessions whose last activity time was before this will be lost. Do you want to proceed?
SystemKeysState_Unable_to_rotate_replication_required=Unable to rotate system keys. Please replicate configuration first.

SystemOptionsState_Disable_auto_conn_validation=Disable automatic connection validation
SystemOptionsState_Auto_updates_enabled_message=Automatic Updates Enabled
SystemOptionsState_Auto_updates_disabled_message=Automatic Updates Disabled
SystemOptionsState_Incoming_proxy_settings=Incoming Proxy Settings
SystemOptionsState_Custom_global_http_header_name=HTTP Header for Client IP Addresses
SystemOptionsState_Client_ip_header_index=Client IP Address Header Index
SystemOptionsState_Forwarded_host_header_name=HTTP Header for Hostname
SystemOptionsState_Forwarded_host_header_index=Hostname Header Index
SystemOptionsState_Proxy_terminates_https_conns=Incoming proxy terminates HTTPS connections
SystemOptionsState_Enable_client_cert_header_auth=Enable Client Certificate Header authentication
SystemOptionsState_Client_cert_encoding_format=Client Certificate encoding
SystemOptionsState_Client_cert_header_name=Client Certificate Header Name
SystemOptionsState_Client_cert_chain_header_name=Client Certificate Chain Header Name

SystemOptions_Disable_auto_conn_validation=Disable automatic connection validation
SystemOptions_Enable_updates_checkbox_label=Enable automatic updates

LogSettingsTasklet_LogSettingsState=Enable verbose logging for specific message categories. Verbose logging can affect log volume and server performance. Certain categories (indicated below) include highly sensitive information.

GeneralSettingsTasklet_GeneralSettingsState=Configure general system wide settings for your PingFederate servers.
GeneralSettingsState_Data_store_validation_interval=Data-Store Validation Interval (secs)
GeneralSettingsState_Interval_required=Data Store Validation Interval is required.
GeneralSettingsState_Interval_int_range_error=Data Store Validation Interval must be an integer greater than or equal to 0.

TargetResourceValidationState_No_default_target=The default target URL for successful SSO is not currently specified on the Default URLs page.  When specified, it will always be allowed. Additional allowed domains and paths can be specified below.
TargetResourceValidationState_Has_default_target=The default target URL for successful SSO and/or the connection default target URL will always be allowed. In addition, allowed domains and paths can be specified below.

TokenPluginMgmtState_Connections_have_errors=Recent changes have created errors in dependent configuration settings. Please fix the errors before saving.
TokenPluginMgmtState_Adapter_has_errors={0} has error(s), please review and fix

UpdateState_Auto_updates_enabled_message=Automatic Updates Enabled

# Target URL Mapping
TargetUrlMappingTasklet_TargetUrlMappingState=When you have more than one target session (an SP adapter or a federation hub enabled SP connection) defined in an IdP connection, you must map the target URL to its target session. During SSO, the target URL requested will be compared against the URL(s) listed here until a match is found. If a match is not found, SSO will fail. Use a wildcard (*) to match multiple URLs to the same target session.
TargetUrlMappingState_Url_required=Please enter a URL in the URL field.
TargetUrlMappingState_Malformed_url=An incorrect URL was entered. Please review for accuracy and make any necessary corrections.
TargetUrlMappingState_Type_required=Please select a target session.
TargetUrlMappingState_Finish_editing=Please click update on the item you are editing.

UserAttributesState_Only_these_attrs=Use only these user attributes
UserAttributesState_Issue_attr_query=Issue an Attribute Query back to the IdP to retrieve additional user attributes
UserAttributesState_Attr_query_parenthesis=(Attribute Query must be enabled)

UserInformationState_Username=Username
UserInformationState_Phone_number=Phone Number
UserInformationState_Email_address=Email Address
UserInformationState_Department=Department
UserInformationState_Description=Description
UserInformationState_Username_required=A unique Username is required.
UserInformationState_Unique_username_required=That username is already in use.
UserInformationState_Email_address_required=E-mail Address is required.
UserInformationState_Invalid_email_format=Invalid E-mail Address format.

UserMgmtState_Password_required=Password is required.
UserMgmtState_Passwords_dont_match=Your Password and Confirm Password do not match.
UserMgmtState_Current_password_invalid=Your current password is not valid.
UserMgmtState_Current_password_doesnt_match=Passwords do not match.
UserMgmtState_Password_must_change=Your new password must be different than your current password.


MappingState_Invalid_system_managed_assignment="{0}" cannot be System Managed since this column in the target datasource is not System Managed.
MappingState_Invalid_source_for_system_managed_column="{0}" is a System Managed column and must be configured with a Source of System Managed.
MappingState_Unique_id_column_must_have_value="{0}" is the Unique ID and must have a value mapped.

UserProvisioningAdapterContractMapping_Datetime_example_link_text=Datetime OGNL Examples

InboundProvisioningConfigLdapFilterState_Filter=Filter
InboundProvisioningConfigLdapFilterState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
InboundGroupProvisioningConfigLdapFilterState_Filter=Filter
InboundGroupProvisioningConfigLdapFilterState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

# the total below must be incremented each time you add an example below for it to show up in the UI popup
MappingState_Datetime_examples_total=16

# the synopsis field shows the usage for this ognl operation in the UI popup
MappingState_Datetime_synopsis=@Converter@datetime(#inputFieldName, pattern)

# ordered examples for the ognl UI popup.  the remarks are optional.
MappingState_Datetime_example_1=@Converter@datetime("2000-01-18T07:17:07.777Z","yyyy-MM-dd'T'HH:mm:ss.SSSZ")
MappingState_Datetime_remarks_1=This conversion format is standard for SAML time values.
MappingState_Datetime_example_2=@Converter@datetime("2000-01-18 00:00:00Z","yyyy-MM-dd HH:mm:ssZ")
MappingState_Datetime_example_3=@Converter@datetime("2000-01-18 00:00:00","yyyy-MM-dd HH:mm:ss")
MappingState_Datetime_example_4=@Converter@datetime("01/18/2000","MM/dd/yyyy")
MappingState_Datetime_example_5=@Converter@datetime("01-18-2000","MM-dd-yyyy")
MappingState_Datetime_example_6=@Converter@datetime("18/01/2000","MM/dd/yyyy")
MappingState_Datetime_example_7=@Converter@datetime("01.18.2000","MM.dd.yyyy")
MappingState_Datetime_example_8=@Converter@datetime("01-18-2000","MM-dd-yy")
MappingState_Datetime_example_9=@Converter@datetime("00.01.18","yy.MM.dd")
MappingState_Datetime_example_10=@Converter@datetime("18/01/2000","dd/MM/yyyy")
MappingState_Datetime_example_11=@Converter@datetime("18.01.00","dd.MM.yy")
MappingState_Datetime_example_12=@Converter@datetime("18-01-00","dd-MM-yy")
MappingState_Datetime_example_13=@Converter@datetime("2000-01-18","yyyy-MM-dd")
MappingState_Datetime_example_14=@Converter@datetime("00/01/18","yy/MM/dd")
MappingState_Datetime_example_15=@Converter@datetime("000118","yyMMdd")
MappingState_Datetime_example_16=@Converter@datetime("20000118","yyyyMMdd")

MappingState_Mappings=Mappings
MappingState_inline_help_values=For Text source type, the format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

UserProvisioningAttributesState_One_attr_required=You must add at least one attribute.
UserProvisioningAttributesState_Root_obj_class_required_for_add=You must select a Root Object Class to add an attribute.
UserProvisioningAttributesState_Attribute_required_for_add=You must select an Attribute to add it.

UserProvisioningConfigLdapFilterState_Filter=Filter
UserProvisioningConfigLdapFilterState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
UserProvisioningConfigLdapFilterStateVo_Filter=Filter

UserProvisioningJdbcUniqueIdState_Unique_id_desc=Unique ID Column
UserProvisioningJdbcUniqueIdState_Selected_column_required=You must select a Unique ID Column
UserProvisioningJdbcUniqueIdStateVo_Unique_id_desc=Unique ID Column

UserRepositoryState_Attribute_source_description_required=You must provide an Attribute Source Description.
UserRepositoryState_Attribute_source_description_exists=An Attribute Source with that description already exists.
UserRepositoryState_Data_store_required=You must select a data store.
UserRepositoryState_Data_store_unavailable=A connection cannot be made to this data store. Please select another one.
UserRepositoryState_Attribute_source=Attribute Source
UserRepositoryState_Type=Type of Data Store
UserRepositoryState_Data_store=Data Store

UserSessionCreationState_Not_configured=User-Session Creation not configured.

UpdateSettingsMgmtState_Polling_interval_message=Polling Interval
UpdateSettingsMgmtState_Proxy_host_message=Proxy Host
UpdateSettingsMgmtState_Proxy_port_message=Proxy Port

VerificationCertState_verification_desc=If you want to require the SAML Authn Requests to be signed, check the box below.<br>
VerificationCertState_checkboxText_desc=Require Digitally Signed Authn Requests
VerificationCertState_checkboxText_desc_1x=Artifact resolution requests are digitally signed.
VerificationCertState_verification_failure_desc=A certificate is required because of the following reason(s):
VerificationCertState_checkbox_checked_desc={0} is checked.
VerificationCertState_NotAllInboundsAreHTTPS=An inbound artifact binding is not using HTTPS.
VerificationCertState_SloAndPostOrRedirect=SLO is selected and POST or Redirect is also selected.
VerificationCertState_UsesDsigAuth=The selected SOAP Authorization method is Digital Signature Identification.
VerificationCertState_AssertionVerification_desc=If you want to require that SAML assertions to be signed, check the box below.<br>
VerificationCertState_AssertionVerification_desc_1x=If you (the SP) want to require that all SAML 1.x assertions be signed, check the box below. (Responses sent via the POST binding are always signed.)<br>
VerificationCertState_AssertionCheckboxText_desc=Require digitally signed SAML Assertions from the IdP.
VerificationCertState_AssertionCheckboxText_desc_1x=Require digitally signed SAML Assertions from the IdP.
VerificationCertState_AuthnRequestConsumerPostOrRedirectUsed=One (or more) of the endpoints are configured to use POST or Redirect.
VerificationCertState_InboundBindingUsesPostOrRedirect=POST or Redirect is enabled as inbound binding.
VerificationCertState_Cert_required=You must select a valid certificate.
VerificationCertState_Certs_should_not_match=Primary and Secondary certificates cannot be the same.
VerificationCertState_SoapSloEndpointNotUsingHttps=A SOAP SLO endpoint is not using HTTPS.
VerificationCertState_UsingDsigAuth=Using Dsig Auth
VerificationCertState_IncludeKeyInfo=Include Key Info
VerificationCertState_Embedded_cert_table_desc1=Since you have elected to verify signatures using certificates embedded in incoming messages, PingFederate will use those certificates, when available, rather than one of those selected above. When an embedded certificate is used, the Subject DN of the certificate in the message must match the Subject DN of a certificate listed above. In addition, the Issuer DN must be among Trusted CAs.
VerificationCertState_Embedded_cert_table_desc2=The list below is derived from the certificate(s) selected above for this connection and provided for your information and validation:

VirtualHostNamesState_invalid_virtual_hostname_url=Invalid virtual hostname. A virtual hostname must be a valid host with no protocol, path, or port.

WhiteListEditor_Domain_name_required=Domain Name is a required field.
WhiteListEditor_Already_contains_domain=The Domain Name list already contains
WhiteListEditor_Already_contains_url=The Metadata Service URL list already contains
WhiteListEditor_Update_required=You must update or cancel.
WhiteListEditor_One_attribute_required=At least one item is required.
WhiteListEditor_Metadata_service_url_malformed=You entered a malformed Metadata Service URL
WhiteListEditor_Basic_view_error=Cannot use Basic View while Metadata Service URL column contains a value.

WsFedIdentityMappingState_Name_Identifier=Name Identifier
WsFedIdentityMappingState_EmailAddr_desc=Email Address
WsFedIdentityMappingState_UserPrincipalName_desc=User Principal Name
WsFedIdentityMappingState_CommonName_desc=Common Name

WsFedServiceUrlState_Malformed_url=You entered a malformed Endpoint URL.
WsFedServiceUrlState_Endpoint_base_url_malformed=Since you configured a Base URL on the General Info page, your Endpoint URL entry must be preceded with a "/".
WsFedServiceUrlState_Url_required=You must specify a URL in the URL field.
WsFedServiceUrlState_message_customization=Message Customization
WsFedServiceUrlState_invalid_message_customization_type=The selected message customization for response document is not supported for configured version of WS-Trust protocol.
WsFedServiceUrlState_Relative_urls_but_no_base=You have configured a relative Endpoint URL without configuring a Base URL.
WsFedServiceUrl_Endpoint_desc=Endpoint URL
WsFedServiceUrl_advancedNote=Message customizations allow an administrator to customize the security token sent from PingFederate to the SP. Customizations are applied using OGNL expressions. See the help for a description of available message objects that can be customized.

WsTrustConfigAttributeSourcesState_One_attribute_source_required=You must configure at least one Attribute Source.
WsTrustConfigAttributeSourcesState_Data_store=Data Store

WsTrustConfigLdapDirSearchState_Malformed_base_dn=You entered a malformed Base DN.
WsTrustConfigLdapDirSearchState_inline_help_base_dn=The Base DN can reference variables using the format ${variableName:=defaultValue}. The default value is optional. If specified, it will be used at runtime when the variable value is not available.

WsTrustConfigLdapFilterState_Filter=Filter
WsTrustConfigLdapFilterState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
WsTrustConfigDatabaseFilterState_inline_help_where=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

WsTrustIdpProtocolSettingsState_Title=Configure Protocol Settings
WsTrustIdpProtocolSettingsState_Header=Protocol Settings
WsTrustIdpProtocolSettingsState_Request_processing_options=Request Processing Options
WsTrustIdpProtocolSettingsState_Do_not_issue_local_token=Validate Incoming SAML Token
WsTrustIdpProtocolSettingsState_Issue_local_token=Validate Incoming SAML Token and Issue Local Token
WsTrustIdpProtocolSettingsState_Decrypt_assertion_desc=Decrypt SAML 2.0 Assertion

WsTrustIdpState_Wstrust_not_configured=WS-Trust STS has not been configured.

WsTrustListEditor_Subject_dn_required=Subject DN must not be blank.
WsTrustListEditor_Invalid_subject_dn=Subject DN is invalid.
WsTrustListEditor_Duplicate_subject_dn=This Subject DN already exists.
WsTrustListEditor_Update_required=You must update the item you are editing.

WsTrustManageRequestContractsState_Connections_have_errors=Recent changes have created errors in dependent configuration settings. Please fix the errors before saving.
WsTrustManageRequestContractsState_Instance_has_errors={0} has error(s), please review and fix.

WsTrustRequestContractSelection_Request_contract_desc=Request Contract
WsTrustRequestContractSelectionState_Request_contract_desc=Use Request Contract
WsTrustRequestContractSelectionState_Request_contract_name_desc=Contract Name
WsTrustRequestContractSelectionState_Request_contract_required=You must select a Contract.

WsTrustRequestContractState_Title=Create Request Contract
WsTrustRequestContractState_Request_contract_name=Contract Name
WsTrustRequestContractState_Instance_id=Contract ID
WsTrustRequestContractState_Parameters_section_title=Parameters to be provided in the request
WsTrustRequestContractState_Request_element=Request Element
WsTrustRequestContractState_Parameter_name=Parameter Name
WsTrustRequestContractState_Action=Action
WsTrustRequestContractState_Parameter_name_required=Parameter Name is required.
WsTrustRequestContractState_Parameter_name_already_exists=Parameter Name "{0}" has already been defined.
WsTrustRequestContractState_Parameter_name_invalid=Parameter Name must contain no spaces and be alphanumeric.
WsTrustRequestContractState_Request_contract_name_required=Contract Name is required.
WsTrustRequestContractState_Request_contract_id_required=Contract ID is required.
WsTrustRequestContractState_Request_contract_id_invalid=Contract ID must contain no spaces and be alphanumeric.
WsTrustRequestContractState_Request_parameter_required=At least one request parameter must be defined.
WsTrustRequestContractState_Duplicate_contract_name=A Request Contract with this name already exists.
WsTrustRequestContractState_Duplicate_contract_id=A Request Contract with this identifier already exists.
WsTrustRequestContractState_Finish_editing_parameter=Please finish editing the current request parameter.

WsTrustSelectAdditionalAttributesState_Title=Token Processor Contract
WsTrustSelectAdditionalAttributesState_Additional_attributes=Retrieve additional attributes from data stores to fulfill the Attribute Contract
WsTrustSelectAdditionalAttributesState_No_additional_attributes=Use only the Token Processor Contract values in the outgoing token

WsTrustSelectDatabaseTableAndColumnsState_Minimum_requirements_not_met=At least one database column must be selected.
WsTrustSelectDatabaseTableAndColumnsState_Table_required=You must select a table.
WsTrustSelectDatabaseTableAndColumnsState_Column_required=You must select at least one column.

WsTrustSelectDataSourceState_Type=Type of Data Store
WsTrustSelectDataSourceState_Data_store=Data Store
WsTrustSelectDataSourceState_Attribute_source=Attribute Source
WsTrustSelectDataSourceState_Data_store_required=You must select a data store.
WsTrustSelectDataSourceState_Data_store_unavailable=A connection cannot be made to this data store. Please select another one.

WsTrustTokenGeneratorContractFulfillmentState_Must_be_mapped="{0}" must be mapped to something.
WsTrustTokenGeneratorContractFulfillmentState_Cannot_Map_Request_Object="{0}" cannot map the HTTP Request object. Use an OGNL expression to select attributes or parameters from the request object.
WsTrustTokenGeneratorContractFulfillmentState_Does_not_have_mapped_value="{0}" does not have a value mapped.
WsTrustTokenGeneratorContractFulfillmentState_Must_have_valid_value="{0}" must have a valid value.
WsTrustTokenGeneratorContractFulfillmentState_Expressions_turned_off="{0}" could not be mapped to an expression because expressions are explicitly turned off in "server/default/data/config-store/org.sourceid.common.ExpressionManager.xml."
WsTrustTokenGeneratorContractFulfillmentState_inline_help_values=Choose the value to use for this contract attribute. For Text source type, the format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

WsTrustTokenGeneratorMappingState_One_required=You must configure at least one Generator Mapping.
WsTrustTokenGeneratorMappingState_Default_required=You must configure at least one Default Generator Mapping.
WsTrustTokenGeneratorMappingState_TG_mapping_not_configured=Token Generator Mapping has not been configured.

WsTrustTokenProcessorMappingState_One_required=You must configure at least one Token Processor Mapping.

WsTrustAttrContractFulfillmentState_Must_be_mapped="{0}" must be mapped to something.
WsTrustAttrContractFulfillmentState_Does_not_have_mapped_value="{0}" does not have a value mapped.
WsTrustAttrContractFulfillmentState__Cannot_Map_Request_Object="{0}" cannot map the HTTP Request object. Use an OGNL expression to select attributes or parameters from the request object.
WsTrustAttrContractFulfillmentState_Must_have_valid_value="{0}" must have a valid value.
WsTrustAttrContractFulfillmentState_Expressions_turned_off="{0}" could not be mapped to an expression because expressions are explicitly turned off in "server/default/data/config-store/org.sourceid.common.ExpressionManager.xml."


WsTrustRestrictByCertState_At_least_one_issuer_cert=You must add at least one Issuer Certificate.
WsTrustRestrictByCertState_Cert_expired={0} cannot be saved because it is expired.
WsTrustRestrictByCertState_Cert_revoked={0} cannot be saved because it is revoked.

WsTrustRestrictBySubjectDnState_At_least_one_subject_dn=You must add at least one Subject DN.

WsTrustSelectSslTypeState_Enable_subject_dn_summary=Restrict Access by Subject DN
WsTrustSelectSslTypeState_Enable_issuer_cert_summary=Restrict Access by Issuer Certificate
WsTrustSelectSslTypeState_Must_select_one=You must select one method to restrict access.

WsTrustSelectTokenGeneratorState_You_must_select_a_token_generator=You must select a token generator to map.
WsTrustSelectTokenGeneratorState_Selected_token_generator=Selected token generator

WsTrustTokenProcessorInstanceState_Selected_processor=Selected processor
WsTrustTokenProcessorInstanceState_You_must_select_a_token_processor=You must select a token processor to map.

WsTrustSelectTokenGeneratorDataSourceState_Token_only=Use only the attributes available in the incoming token
WsTrustSelectTokenGeneratorDataSourceState_Lookup_info=Use the incoming token to look up additional information

WsTrustSpProtocolSettings_Saml_token_settings=SAML Token Settings
WsTrustSpProtocolSettings_Partner_service_id_desc=Partner Service Identifier (corresponds to AppliesTo in RST)
WsTrustSpProtocolSettings_Generate_key_saml_desc=Generate Key for SAML Holder of Key Subject Confirmation Method
WsTrustSpProtocolSettings_Encrypt_saml_20=Encrypt SAML 2.0 Assertion
WsTrustSpProtocolSettings_Enable_oauth_saml_bearer=OAuth Assertion Profiles
WsTrustSpProtocolSettings_New_applies_to_blank=Partner Service Identifier cannot be blank.
WsTrustSpProtocolSettings_Applies_to_must_be_url=The Partner Service Identifier ''{0}'' must be a valid URL. Please verify correct syntax for the protocol--for example, use square brackets around IPv6 addresses.
WsTrustSpProtocolSettings_Already_contains=The Partner Service Identifiers already contains item: {0}
WsTrustSpProtocolSettings_Default_token_type_desc=Default Token Type
WsTrustSpProtocolSettingsState_Default_token_type_desc=Default SAML Token Type
WsTrustSpProtocolSettingsState_Title=Configure Protocol Settings
WsTrustSpProtocolSettingsState_Partner_service_id_summary=Partner Service Identifier
WsTrustSpProtocolSettingsState_Generate_key_saml_summary=Generate Key for SAML
WsTrustSpProtocolSettingsState_Encrypt_saml_20_summary=Encrypt SAML 2.0 Assertion
WsTrustSpProtocolSettingsState_Enable_oauth_saml_bearer_summary=OAuth Assertion Profiles
WsTrustSpProtocolSettingsState_message_customization=Message Customization
WsTrustSpProtocolSettingsState_Update_required=You must update the item you are editing.
WsTrustSpProtocolSettings_advancedNote=Message customizations allow an administrator to customize the security token sent from PingFederate to the SP. Customizations are applied using OGNL expressions. See the help for a description of available message objects that can be customized.


WsTrustSelectStsSystemAuthState_Auth_required=You must select a valid authentication method.
WsTrustSelectStsSystemAuthState_Enable_http_basic_summary=Require HTTP Basic Authentication
WsTrustSelectStsSystemAuthState_Enable_ssl_summary=Require Mutual SSL Authentication

WsTrustStsHttpBasicAuthState_At_least_one_user=You must configure at least one user for HTTP Basic Authentication.
WsTrustStsHttpBasicAuthState_Not_authorized_create_user=You are not authorized to create a user.

WsTrustStsSettingsState_Require_auth_for_endpoints=Require Auth to WS-Trust STS endpoints
WsTrustStsSettingsState_Authentication_methods=Authentication Methods
WsTrustStsSettingsState_None=None
WsTrustStsSettingsState_Require_http_basic_authentication=Require HTTP Basic Authentication
WsTrustStsSettingsState_Require_mutual_ssl_authentication=Require Mutual SSL Authentication

WsTrustStsSslAuthState_At_least_one_subject_dn=You must configure at least one Subject DN to Restrict Access by Subject DN.
WsTrustStsSslAuthState_Subject_dn=Subject DN

WsTrustTokenLifetimeState_Token_lifetime_minutes_before=Minutes Before
WsTrustTokenLifetimeState_Token_lifetime_assertion_minutes_after=Minutes After
WsTrustTokenLifetimeState_Minutes_before_required=You must specify a value for Minutes Before.
WsTrustTokenLifetimeState_Minutes_before_gte_0_lte_65535=You must specify an integer value greater than 0 and less than or equal to 65535 for Minutes Before.
WsTrustTokenLifetimeState_Minutes_after_required=You must specify a value for Minutes After.
WsTrustTokenLifetimeState_Minutes_after_gte_0_lte_525600=You must specify an integer value greater than 0 and less than or equal to 525600 (1 year) for Minutes After.

XmlFileSigningCertState_Cert_required=You must select a valid certificate.
XmlFileSigningCertState_IncludeKeyInfo=Include Certificate in KeyInfo
XmlFileSigningCertState_IncludeKeyValue=Include Raw Key in KeyValue
XmlFileSigningCertState_Signing_exception=There was a problem trying to sign the file.
XmlFileSigningCertState_Key_info_text=Include this certificate's public key certificate in the &lt;KeyInfo&gt; element.
XmlFileSigningCertState_Key_value_text=Include the raw key in the signature &lt;KeyValue&gt; element.
XmlFileSigningCertState_Signing_algorithm=Signing Algorithm

###################################################################################################################
## ADD THESE IN ALPHABETICAL ORDER
###################################################################################################################

# Adapter (source) to Adapter (target) mappings
Source2TargetMappings_A2A_duplicate_error=A mapping from ''{0}'' to ''{1}'' already exists.  Please select it from the list above or select different adapter instances.
Source2TargetMappings_A2A_select_source=Please select an IdP Adapter
Source2TargetMappings_A2A_select_target=Please select an SP Adapter
A2ATasklet_Adapter2AdapterMappingsState=This configuration allows user attributes from an IdP Adapter to be mapped directly to an SP Adapter on the same PingFederate server to create an authenticated session for special use cases, without the need to generate SAML messages in between.
Adapter2AdapterMappingTasklet_Source2TargetConfigAttributeSourcesState=Optionally, you may select a data store from which to look up any attributes required by the SP Adapter Contract but not available directly from the IdP Adapter.  Click Next to continue if no data store is needed.
Adapter2AdapterMappingTasklet_TargetApplicationInfoState=Optionally, you can specify the name of the application and the icon URL of the target application.
Adapter2AdapterMappingTasklet_Adapter2AdapterMappingState=You can fulfill your SP Adapter Contract requirements with values from the IdP Adapter, plain or dynamic text, or other sources if configured.
Adapter2AdapterMappingTasklet_DefaultTargetUrlState=Optionally, you can specify a default target URL for this adapter-to-adapter mapping configuration. Entering a URL in the Default Target URL field overrides any SP Default URL SSO setting.
Adapter2AdapterMappingTasklet_SummaryCardState=Adapter-to-Adapter Mapping Summary
Adapter2AdapterMappingTasklet_Adapter2AdapterSummaryState=Adapter-to-Adapter Mapping Summary
Adapter2AdapterMappingsState_mapping_has_errors=''{0}'' to ''{1}'' mapping has error(s), please review and fix.

#Source2TargetMappingTasklet_SelectDataSourceState=Optionally, you may select a data store from which to look up any attributes required by the SP Adapter Contract but not available directly from the IdP Adapter.  Click Next to continue if no data store is needed.
#Source2TargetMappingTasklet_SelectDatabaseTableAndColumnsState=Please select the table and columns you want to query.
#Source2TargetMappingTasklet_ConfigDatabaseFilterState=Please supply a WHERE clause to filter the data from the table.
#Source2TargetMappingTasklet_ConfigLdapDirSearchState=Please configure your directory search. This information, along with the attributes supplied in the Adapter Contract, will be used to fulfill the Attribute Contract of the target Adapter.
#Source2TargetMappingTasklet_CfgLdapFilterState=Please enter a Filter for extracting data from your directory.
#Source2TargetMappingTasklet_ConfigureCustomSourceFiltersState=Perform any filter configuration for this data source.
#Source2TargetMappingTasklet_SelectCustomSourceFieldsState=Please select the names of attributes you would like to use from this data source when mapping attributes into the SP Adapter Contract.
Adapter2AdapterMappingTasklet_LicenseGroupState=Select a license group to assign the mapping to.
Adapter2AdapterMappingTasklet_Source2TargetIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources.  Use this optional screen to configure the criteria for use with this conditional authorization.

# Token (source) to Token (target) mappings
Source2TargetMappings_T2T_duplicate_error=A mapping from ''{0}'' to ''{1}'' already exists.  Please select it from the list above or select different token plugin instances.
Source2TargetMappings_T2T_select_source=Please select a Token Processor
Source2TargetMappings_T2T_select_target=Please select a Token Generator
T2TTasklet_Token2TokenMappingsState=This configuration allows user attributes from a Token Processor to be mapped directly to a Token Generator on the same PingFederate server to exchange one token type for another.
Token2TokenMappingTasklet_Source2TargetConfigAttributeSourcesState=Optionally, you may select a data store from which to look up any attributes required by the Token Generator Contract but not available directly from the Token Processor.  Click Next to continue if no data store is needed.
Token2TokenMappingTasklet_Token2TokenMappingState=You can fulfill your Token Generator Contract requirements with values from the Token Processor, plain or dynamic text, or other sources if configured.
Token2TokenMappingTasklet_SummaryCardState=STS Token Exchange Mapping Summary
Token2TokenMappingTasklet_LicenseGroupState=Select a license group to assign the mapping to.
Token2TokenMappingTasklet_Source2TargetIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to exchange a token.  Use this optional screen to configure the criteria for use with this conditional authorization.
Token2TokenMappingsState_mapping_has_errors=''{0}'' to ''{1}'' mapping has error(s), please review and fix.

# APC to Sp Adapter mappings
Source2TargetMappings_Apc2SpA_duplicate_error=A mapping from ''{0}'' to ''{1}'' already exists.  Please select it from the list above or create a different mapping.
Source2TargetMappings_Apc2SpA_select_source=Please select an Authentication Policy Contract
Source2TargetMappings_Apc2SpA_select_target=Please select an SP Adapter
Apc2SpAdapterMappingsTasklet_Apc2SpAdapterMappingsState=This configuration allows attributes from an Authentication Policy Contract to be mapped directly to an SP Adapter, allowing an authentication policy to be applied to your target application.
Apc2SpAdapterMappingTasklet_Source2TargetConfigAttributeSourcesState=Optionally, you may select a data store from which to look up any attributes required by the SP Adapter Contract but not available directly from the Policy Contract.  Click Next to continue if no data store is needed.
Apc2SpAdapterMappingTasklet_Adapter2AdapterMappingState=You can fulfill your SP Adapter Contract requirements with values from the Authentication Policy Contact, plain or dynamic text, or other sources if configured.
Apc2SpAdapterMappingTasklet_DefaultTargetUrlState=Optionally, you can specify a default target URL for this mapping configuration. Entering a URL in the Default Target URL field overrides any SP Default URL SSO setting.
Apc2SpAdapterMappingTasklet_SummaryCardState=Authentication Policy Adapter Mapping Summary
Apc2SpAdapterMappingTasklet_LicenseGroupState=Select a license group to assign the mapping to.
Apc2SpAdapterMappingTasklet_Source2TargetIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources.  Use this optional screen to configure the criteria for use with this conditional authorization.
Apc2SpAdapterMappingsState_mapping_has_errors=''{0}'' to ''{1}'' mapping has error(s), please review and fix.

MappingState_Must_be_mapped="{0}" must be mapped to something.
MappingState_Does_not_have_mapped_value="{0}" does not have a value mapped.
MappingState_Cannot_Map_Request_Object="{0}" cannot map the HTTP Request object. Use an OGNL expression to select attributes or parameters from the request object.
MappingState_Must_have_valid_value="{0}" must have a valid value.
MappingState_Expressions_turned_off="{0}" could not be mapped to an expression because expressions are explicitly turned off in "server/default/data/config-store/org.sourceid.common.ExpressionManager.xml."
MappingState_Expression_admin_role_required="{0}" Expression Admin role is required to update expression.


PasswordCredentialValidatorTasklet_PasswordCredentialValidatorMgmtState=Credential Validators are plug-ins used to verify username and password pairs in various contexts throughout the system. The actual application of a Validator instance must be configured in the appropriate context as needed (e.g., OAuth Resource Owner Credentials Mapping).
PasswordCredentialValidatorMgmtState_SelectAdapterTypeState_newstate=Identify this Credential Validator Instance. The Validator types available are limited to the plug-in implementations currently installed on your server.
PasswordCredentialValidatorMgmtState_SelectAdapterTypeState_existingstate=The values of the selected Credential Validator Instance.
PasswordCredentialValidatorMgmtState_ConfigureAuthnAdapterState=Complete the configuration necessary for this Password Credential Validator to check username/password pairs. This configuration was designed into, and is specific to, the selected Credential Validator plug-in.
PasswordCredentialValidatorMgmtState_CreateAdapterContractState=You can extend the attribute contract of this Password Credential Validator instance.
PasswordCredentialValidatorMgmtState_SummaryCardState=Password Credential Validator configuration summary.
PasswordCredentialValidatorMgmtState_Adapter_has_errors={0} has error(s), please review and fix.
PasswordCredentialValidatorMgmtState_Connections_have_errors=Recent changes have created errors in dependent configuration settings. Please fix the errors before saving.

AccessTokenManagementTasklet_AccessTokenManagementState=PingFederate uses Access Token Management plugins to issue and validate OAuth access tokens. Each plugin instance can have its own token type, configuration settings, and attribute contract.
BearerAccessTokenMgmtPluginTasklet_SelectAdapterTypeState_newstate=Enter an Access Token Management Instance Name and ID, select the plugin Access Token Management Type, and a parent if applicable. The types available are limited to the plugins currently installed on your server.
BearerAccessTokenMgmtPluginTasklet_SelectAdapterTypeState_existingstate=The values for the selected Access Token Management instance.
BearerAccessTokenMgmtPluginTasklet_ConfigureAuthnAdapterState=Complete the configuration necessary to issue and validate access tokens. This configuration was designed into, and is specific to, the selected Access Token Management plugin.
BearerAccessTokenMgmtPluginTasklet_AtmContractState=Provide the names of the attributes that will be carried in (or referenced by) the OAuth access token. For auditing purposes, an attribute may be chosen as the subject.
BearerAccessTokenMgmtPluginTasklet_AtmTokenEndpointContractState=Provide the names of the attributes that will be carried in (or referenced by) the Token Endpoint response.
BearerAccessTokenMgmtPluginTasklet_AtmSelectionSettingsState=Specify a list of base resource URI's which can be used to select this Access Token Management instance.
BearerAccessTokenMgmtPluginTasklet_AtmAccessControlSettingsState=Optionally, you can restrict which OAuth clients are allowed to use this Access Token Management instance.
BearerAccessTokenMgmtPluginTasklet_SessionValidationState=On this page, a policy can be defined to bind together the validity of access tokens with the user's session. A session identifier can be included in the access token to allow clients to query session status and tailor the application flow. You can require that the session has not been revoked through a logout and/or enforce that the user still has an authentication session that has not timed out. Activity on associated authentication sessions can also be updated to slide idle timeouts each time the access token is successfully validated.
BearerAccessTokenMgmtPluginTasklet_SummaryCardState=Access Token Management Configuration Summary

AccessTokenMappingTasklet_OAuthUserKey2AccessTokenMappingState=Manage the attribute mapping(s) used to fulfill the access token attribute contracts. \
   This configuration maps from a persistent grant or other sources into the access token attribute contract. For mappings involving a persistent grant, a default mapping should be configured for each access token manager. \
   The default can be overridden based on the context of the authentication event of the original grant.

OAuthSelectDataSourceState_Data_store_unavailable=There is a problem connecting to this data store.  You may wish to check its availability, or choose another connection.  Click Manage Data Stores to create a different connection.
OAuthIdpConnectionSelectDataSourceData_Data_store_unavailable=There is a problem connecting to this data store.  You may wish to check its availability, or choose another connection.  Click Manage Data Stores to create a different connection.
OAuthIdpConnectionConfigLdapDirSearchState_Malformed_base_dn=You entered a malformed Base DN.
OAuthIdpConnectionConfigLdapDirSearchState_inline_help_base_dn=The Base DN can reference variables using the format ${variableName:=defaultValue}. The default value is optional. If specified, it will be used at runtime when the variable value is not available.
OAuthIdpConnectionConfigDatabaseFilterState_inline_help_where=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
OAuthIdpConnectionDatabaseTableAndColumnState_Column_required=You must select at least one column.

OAuthIdpAdapter2TargetMappingTasklet_OAuthSource2TargetIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to issue an access token. Use this optional screen to configure the criteria for use with this token authorization.
OAuthIdpAdapter2TargetMappingTasklet_SummaryCardState=Mapping Summary
OAuthIdpAdapter2TargetMappingTasklet_OAuthSelectDataSourceState=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.
OAuthIdpAdapter2TargetMappingTasklet_ConfigLdapDirSearchState=Configure the basis of your directory search.
OAuthIdpAdapter2TargetMappingTasklet_CfgLdapFilterState=Specify a Filter for extracting data from your directory.
OAuthIdpAdapter2TargetMappingTasklet_SelectDatabaseTableAndColumnsState=Define the table and columns you want to query.
OAuthIdpAdapter2TargetMappingTasklet_OAuthSource2TargetMappingState=Select a Source and Value to map into each item in the Contract list.
OAuthIdpAdapter2TargetMappingTasklet_ConfigDatabaseFilterState=Specify a WHERE clause to filter the data from the table.
OAuthIdpAdapter2TargetMappingTasklet_SelectCustomSourceFieldsState=Select the names of attributes you would like to map from this data source.
OAuthIdpAdapter2TargetMappingTasklet_ConfigureCustomSourceFiltersState=Define any filter configuration for this data source.
OAuthIdpAdapter2TargetMappingTasklet_OAuthSource2TargetAttributeSourcesState=As an option, you can specify a series of local data stores from which to look up any additional attributes required to fulfill the mapping.

OAuthRoCreds2TargetMappingTasklet_OAuthSource2TargetIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to issue an access token. Use this optional screen to configure the criteria for use with this token authorization.
OAuthRoCreds2TargetMappingTasklet_SummaryCardState=Mapping Summary
OAuthRoCreds2TargetMappingTasklet_OAuthSelectDataSourceState=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.
OAuthRoCreds2TargetMappingTasklet_ConfigLdapDirSearchState=Configure the basis of your directory search.
OAuthRoCreds2TargetMappingTasklet_CfgLdapFilterState=Specify a Filter for extracting data from your directory.
OAuthRoCreds2TargetMappingTasklet_SelectDatabaseTableAndColumnsState=Define the table and columns you want to query.
OAuthRoCreds2TargetMappingTasklet_OAuthSource2TargetMappingState=Select a Source and Value to map into each item in the Contract list.
OAuthRoCreds2TargetMappingTasklet_ConfigDatabaseFilterState=Specify a WHERE clause to filter the data from the table.
OAuthRoCreds2TargetMappingTasklet_SelectCustomSourceFieldsState=Select the names of attributes you would like to map from this data source.
OAuthRoCreds2TargetMappingTasklet_ConfigureCustomSourceFiltersState=Define any filter configuration for this data source.
OAuthRoCreds2TargetMappingTasklet_OAuthSource2TargetAttributeSourcesState=As an option, you can specify a series of local data stores from which to look up any additional attributes required to fulfill the mapping.

OAuthApc2TargetMappingTasklet_OAuthSource2TargetIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to issue an access token. Use this optional screen to configure the criteria for use with this token authorization.
OAuthApc2TargetMappingTasklet_SummaryCardState=Mapping Summary
OAuthApc2TargetMappingTasklet_OAuthSelectDataSourceState=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.
OAuthApc2TargetMappingTasklet_ConfigLdapDirSearchState=Configure the basis of your directory search.
OAuthApc2TargetMappingTasklet_CfgLdapFilterState=Specify a Filter for extracting data from your directory.
OAuthApc2TargetMappingTasklet_SelectDatabaseTableAndColumnsState=Define the table and columns you want to query.
OAuthApc2TargetMappingTasklet_OAuthSource2TargetMappingState=Select a Source and Value to map into each item in the Contract list.
OAuthApc2TargetMappingTasklet_ConfigDatabaseFilterState=Specify a WHERE clause to filter the data from the table.
OAuthApc2TargetMappingTasklet_SelectCustomSourceFieldsState=Select the names of attributes you would like to map from this data source.
OAuthApc2TargetMappingTasklet_ConfigureCustomSourceFiltersState=Define any filter configuration for this data source.
OAuthApc2TargetMappingTasklet_OAuthSource2TargetAttributeSourcesState=As an option, you can specify a series of local data stores from which to look up any additional attributes required to fulfill the mapping.

OAuthTepp2TargetMappingTasklet_OAuthSource2TargetIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to issue an access token. Use this optional screen to configure the criteria for use with this token authorization.
OAuthTepp2TargetMappingTasklet_SummaryCardState=Mapping Summary
OAuthTepp2TargetMappingTasklet_OAuthSelectDataSourceState=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.
OAuthTepp2TargetMappingTasklet_ConfigLdapDirSearchState=Configure the basis of your directory search.
OAuthTepp2TargetMappingTasklet_CfgLdapFilterState=Specify a Filter for extracting data from your directory.
OAuthTepp2TargetMappingTasklet_SelectDatabaseTableAndColumnsState=Define the table and columns you want to query.
OAuthTepp2TargetMappingTasklet_OAuthSource2TargetMappingState=Select a Source and Value to map into each item in the Contract list.
OAuthTepp2TargetMappingTasklet_ConfigDatabaseFilterState=Specify a WHERE clause to filter the data from the table.
OAuthTepp2TargetMappingTasklet_SelectCustomSourceFieldsState=Select the names of attributes you would like to map from this data source.
OAuthTepp2TargetMappingTasklet_ConfigureCustomSourceFiltersState=Define any filter configuration for this data source.
OAuthTepp2TargetMappingTasklet_OAuthSource2TargetAttributeSourcesState=As an option, you can specify a series of local data stores from which to look up any additional attributes required to fulfill the mapping.

OAuthUserKey2AccessTokenMappingTasklet_OAuthSource2TargetIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to issue an access token. Use this optional screen to configure the criteria for use with this token authorization.
OAuthUserKey2AccessTokenMappingTasklet_SummaryCardState=Mapping Summary
OAuthUserKey2AccessTokenMappingTasklet_OAuthSelectDataSourceState=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.
OAuthUserKey2AccessTokenMappingTasklet_ConfigLdapDirSearchState=Configure the basis of your directory search.
OAuthUserKey2AccessTokenMappingTasklet_CfgLdapFilterState=Specify a Filter for extracting data from your directory.
OAuthUserKey2AccessTokenMappingTasklet_SelectDatabaseTableAndColumnsState=Define the table and columns you want to query.
OAuthUserKey2AccessTokenMappingTasklet_OAuthSource2TargetMappingState=Select a Source and Value to map into each item in the Contract list.
OAuthUserKey2AccessTokenMappingTasklet_ConfigDatabaseFilterState=Specify a WHERE clause to filter the data from the table.
OAuthUserKey2AccessTokenMappingTasklet_SelectCustomSourceFieldsState=Select the names of attributes you would like to map from this data source.
OAuthUserKey2AccessTokenMappingTasklet_ConfigureCustomSourceFiltersState=Define any filter configuration for this data source.
OAuthUserKey2AccessTokenMappingTasklet_OAuthSource2TargetAttributeSourcesState=As an option, you can specify a series of local data stores from which to look up any additional attributes required to fulfill the mapping.

AuthorizationServerSettingsTasklet_OAuthAuthorizationServerSettingsState=Provide general configuration and policy for the PingFederate Authorization Server.

OAuthSource2TargetMappingTasklet_SummaryCardState=Mapping Summary
OAuthSource2TargetMappingTasklet_CfgLdapFilterState=Specify a Filter for extracting data from your directory.
OAuthSource2TargetMappingTasklet_SelectDatabaseTableAndColumnsState=Define the table and columns you want to query.
OAuthSource2TargetMappingTasklet_OAuthRoCreds2TargetMappingsState=Manage the mappings from Credential Validator instances into the persistent grant contract.  \
  Password Validator instances mapped here will be used to authenticate username/password pairs for the OAuth Resource Owner Password Credentials grant.

OAuthSource2TargetMappingTasklet_OAuthIdpAdapter2TargetMappingsState=Manage the mappings from Adapter instances into the persistent grant contract and the USER_NAME value displayed to end users.  \
  Adapter instances mapped here will be used to authenticate resource owners for OAuth Authorization Code and Implicit grants.
OAuthSource2TargetMappingTasklet_OAuthApc2TargetMappingsState=Manage the mappings from Policy Contracts into the persistent grant contract and the USER_NAME value displayed to end users.  \
  Authentication policies mapped here will be used to authenticate resource owners for OAuth Authorization Code and Implicit grants.
OAuthSource2TargetMappingTasklet_OAuthTepp2TargetMappingsState=Manage the mappings from Token Exchange Processor Policies into the persistent grant contract and the USER_NAME value displayed to end users.  \
  Processor policies mapped here will be used to authenticate resource owners for OAuth Authorization Code and Implicit grants.

OAuthSource2TargetMappingTasklet_SelectCustomSourceFieldsState=Select the names of attributes you would like to map from this data source.
OAuthSource2TargetMappingTasklet_ConfigureCustomSourceFiltersState=Define any filter configuration for this data source.

# Restored text to original before the change
OAuthClientsManagementTasklet_OAuthClientsManagementState=Manage OAuth clients (also known as applications).
OAuthClientsManagementTasklet_OAuthClientsManagementStateBackendDatabase=Manage OAuth clients (also known as applications).  Note that this configuration is maintained in a back-end data store. For server clustering ensure that the data store is accessible to all PingFederate runtime nodes for updates to be deployed immediately. Runtime configuration synchronization (see the Server Clustering Guide) does not include these settings.

OAuthClientManagementTasklet_OAuthClientManagementState=Manage the configuration and policy information about a client.
OAuthClientManagementTasklet_ExtendedPropertyManagementState=Manage the extended properties for this client.

IdpBrowserSsoTasklet_OAuthAttributeMappingState=You can configure this connection to provide identity and authentication information for OAuth Authorization Code and Implicit grants. The configuration maps user attributes directly into the persistent grant contract and the USER_NAME displayed to end users. Alternatively, the user attributes can be indirectly mapped into the persistent grant contract via an authentication policy contract.
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnection2TargetMappingState=Manage attribute mappings into the persistent grant contract and the USER_NAME value displayed to end users.
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnection2TargetMappingStateVo=Manage attribute mappings into the persistent grant contract and the USER_NAME value displayed to end users.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionSelectDataSourceData=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionSelectDataSourceDataVo=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionConfigDatabaseFilterState=Specify a WHERE clause to filter the data from your table.
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionConfigDatabaseFilterStateVo=Specify a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionConfigLdapDirSearchState=Configure the basis of your directory search.
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionConfigLdapDirSearchStateVo=Configure the basis of your directory search.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthIdpConnection2TargetMappingTasklet_CfgLdapFilterState=Please filter the data from your directory.
OAuthIdpConnection2TargetMappingTasklet_CfgLdapFilterStateVo=Please filter the data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionDatabaseTableAndColumnState=Please select the table and columns you want to query. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the SP Adapter Contract.
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionDatabaseTableAndColumnStateVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionDatabaseTableAndColumnState_Oidc=Please select the table and columns you want to query. This information, along with the attributes supplied in the provider claims, will be used to fulfill the SP Adapter Contract.
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionDatabaseTableAndColumnStateVo_Oidc=Please select the table and columns you want to query. This information, along with the attributes supplied in the provider claims, will be used to fulfill the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthIdpConnection2TargetMappingTasklet_OAuthSAMLConfigureCustomSourceFiltersState=Perform any filter configuration for this data source.
OAuthIdpConnection2TargetMappingTasklet_OAuthSAMLSelectCustomSourceFieldsState=Select the names of attributes you would like to map from this data source.
OAuthIdpConnection2TargetMappingTasklet_SummaryCardState=Summary information for your OAuth Attribute Mapping configuration. Click a heading link to edit a configuration setting.
OAuthIdpConnection2TargetMappingTasklet_OAuthIdpConnectionIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to issue an access token. Use this optional screen to configure the criteria for use with this token authorization.
SelectBearerAccessTokenMgmtTypeState_Type_required=Please select a type.

#OAuth Assertion Grant Tasklet
OAuthSAMLGrantAttributeMappingTasklet_SummaryCardState=OAuth Assertion Grant Attribute Mapping Summary
OAuthSAMLGrantAttributeMappingTasklet_OAuthSAML2TargetMappingListState=Associate one or more Access Token Managers with this connection to define how access tokens are created.
OAuthSAMLGrantAttributeMappingTasklet_OAuthSAMLCreateAttributeContractState=The OAuth Assertion Grant Attribute Contract is a set of user attributes the IdP sends in the SAML or JWT assertion. This Attribute Contract is shared between all of the Access Token Manager mappings.
OAuthSAML2TargetMappingTasklet_SelectTokenManagerState=Selected Access Token Manager instance that is associated with this connection. Attributes are mapped from the OAuth Assertion Grant Attribute Contract into the Access Token Manager's contract to define the resulting content of the created access token.
OAuthSAML2TargetMappingTasklet_SelectTokenManagerStateNew=Select an Access Token Manager instance to associate with this connection. Attributes are mapped from the connection''s contract into the Access Token Manager''s contract to define the resulting content of created access token.
OAuthSAML2TargetMappingTasklet_OAuthSAMLCreateAttributeContractState=An Attribute Contract is a set of user attributes the IdP sends in the SAML or JWT assertion.
OAuthSAML2TargetMappingTasklet_OAuthSAMLSelectDataSourceData=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.
OAuthSAML2TargetMappingTasklet_OAuthSAMLSelectDataSourceDataVo=Optionally, you may select a data store from which to look up any additional attributes required to fulfill the mapping.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthSAML2TargetMappingTasklet_OAuthSAML2TargetMappingState=You can map SAML or JWT grant attributes to the attribute values of the OAuth access token using values from the assertion, dynamic text, expressions, or from a data-store lookup.
OAuthSAML2TargetMappingTasklet_OAuthSAML2TargetMappingStateVo=You can map SAML or JWT grant attributes to the attribute values of the OAuth access token using values from the assertion, dynamic text, expressions, or from a data-store lookup.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthSAML2TargetMappingTasklet_SummaryCardState=Summary information for your OAuth Assertion Grant configuration. Click a heading link to edit a configuration setting.
OAuthSAML2TargetMappingTasklet_OAuthSAMLConfigLdapDirSearchState=Please configure your directory search. This information, along with the attributes supplied in the SAML or JWT assertion, are used to fulfill the Attribute contract.
OAuthSAML2TargetMappingTasklet_OAuthSAMLConfigLdapDirSearchStateVo=Please configure your directory search. This information, along with the attributes supplied in the SAML or JWT assertion, are used to fulfill the Attribute contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthSAML2TargetMappingTasklet_CfgLdapFilterState=Specify a Filter for extracting data from your directory.
OAuthSAML2TargetMappingTasklet_CfgLdapFilterStateVo=Specify a Filter for extracting data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthSAML2TargetMappingTasklet_OAuthSAMLConfigDatabaseFilterState=Please supply a WHERE clause to filter the data from your table.
OAuthSAML2TargetMappingTasklet_OAuthSAMLConfigDatabaseFilterStateVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthSAML2TargetMappingTasklet_ConfigureCustomSourceFiltersState=Define any filter configuration for this data source.
OAuthSAML2TargetMappingTasklet_OAuthSAMLSelectCustomSourceFieldsState=Select the names of attributes you would like to map from this data source.
OAuthSAML2TargetMappingTasklet_OAuthSAMLConfigureCustomSourceFiltersState=Define any filter configuration for this data source.
OAuthSAML2TargetMappingTasklet_OAuthSAMLDatabaseTableAndColumnState=Define the table and columns you want to query.
OAuthSAML2TargetMappingTasklet_OAuthSAMLDatabaseTableAndColumnStateVo=Define the table and columns you want to query.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
OAuthSAML2TargetMappingTasklet_OAuthSAML2IssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to issue an access token. Use this optional screen to configure the criteria for use with this token authorization.
OAuthSAMLDatabaseTableAndColumnState_Column_required=You must select at least one column.
OAuthSAMLDatabaseTableAndColumnState_Table_required=You must select a table.
OAuthSAMLConfigLdapDirSearchState_Malformed_base_dn=You entered a malformed Base DN.
OAuthSAMLConfigLdapDirSearchState_inline_help_base_dn=The Base DN can reference variables using the format ${variableName:=defaultValue}. The default value is optional. If specified, it will be used at runtime when the variable value is not available.
OAuthSAMLConfigDatabaseFilterState_inline_help_where=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
OAuthSAML2TargetMappingListState_One_required=You must configure at least one Access Token Manager Mapping.

SelectTokenManagerState_Selected_token_manager=Selected Access Token Manager
SelectTokenManagerState_You_must_select_a_token_manager=You must select an access token manager.

KerberosRealmsTasklet_KerberosRealmsState=PingFederate uses a centralized configuration of Active Directory Domains or Kerberos Realms to verify authenticated users via adapters or token processors.
KerberosRealmTasklet_KerberosRealmState=Configure an AD Domain or Kerberos Realm for PingFederate to contact your Domain Controller(s) or Key Distribution Center(s) for verifying user authentication.
KerberosRealmsTasklet_KerberosRealmsSettingsState=On this screen you can change default security and logging settings for all configured Domains or Realms.

#Connection Mapping Contracts Tasklet
ConnMappingContractInfoState_name_empty=A contract name is required.
ConnMappingContractInfoState_duplicate_name=The name ''{0}'' is already in use. Please select another name.
ConnMappingContractsTasklet_ConnMappingContractsState=Policy Contracts allow authentication policies to map directly to target applications (such as SP Connections). They also allow IdP Connections to map directly into SP Connections using a shared contract. This allows PingFederate to act as a federation hub between IdP and SP partners.
ConnMappingContractTasklet_ConnMappingContractInfoState=Define the name of the contract. The ID is automatically generated by PingFederate.
ConnMappingContractTasklet_ConnMappingCreateContractState=Define the set of attributes that will bind an authentication policy to a target application or bind an IdP Connection to an SP Connection.
ConnMappingContractTasklet_SummaryCardState=Authentication policy contract summary information.

# Idp Connection's C2C Contract Mapping Tasklet
IdpC2cContractMappingTasklet_SelectC2cContractStateNew=Select the authentication policy contract you would like to activate for incoming SAML messages from this partner.
IdpC2cContractMappingTasklet_SelectC2cContractStateNew_Oidc=Select the authentication policy contract you would like to activate for incoming provider claims from this partner.
IdpC2cContractMappingTasklet_SelectC2cContractState=The list of attributes below, is required for the selected contract.
IdpC2cContractMappingTasklet_VirtualServerIdMappingState=You can optionally restrict this contract mapping to certain virtual server IDs. By default, this mapping will be applicable to all virtual server IDs. To restrict it to a subset of the available virtual server IDs, check Restrict Virtual Server IDs and select all the virtual server IDs that apply to this mapping.
IdpC2cContractMappingTasklet_SelectC2cContractDataSourceState=You can fulfill the Authentication Policy Contract by using only the attributes from the SAML assertion or by using these attributes to look up additional information from a local data store.
IdpC2cContractMappingTasklet_SelectC2cContractDataSourceState_Oidc=You can fulfill the Authentication Policy Contract by using only the attributes from the provider claims or by using these attributes to look up additional information from a local data store.
IdpC2cContractMappingTasklet_SelectDataSourceState=Please select the data store from which local data, along with the attributes supplied in the SAML assertion, will be used to fulfill the Authentication Policy Contract.
IdpC2cContractMappingTasklet_SelectDataSourceStateVo=Data Store not available, editing has been disabled.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_SelectDataSourceState_Oidc=Please select the data store from which local data, along with the attributes supplied in the provider claims, will be used to fulfill the Authentication Policy Contract.
IdpC2cContractMappingTasklet_SelectDataSourceStateVo_Oidc=Data Store not available, editing has been disabled.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_SelectDatabaseTableAndColumnsState=Please select the table and columns you want to query. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the Authentication Policy Contract.
IdpC2cContractMappingTasklet_SelectDatabaseTableAndColumnsStateVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the Authentication Policy Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_SelectDatabaseTableAndColumnsState_Oidc=Please select the table and columns you want to query. This information, along with the attributes supplied in the provider claims, will be used to fulfill the Authentication Policy Contract.
IdpC2cContractMappingTasklet_SelectDatabaseTableAndColumnsStateVo_Oidc=Please select the table and columns you want to query. This information, along with the attributes supplied in the provider claims, will be used to fulfill the Authentication Policy Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_IdpConfigDatabaseFilterState=Please supply a WHERE clause to filter the data from your table.
IdpC2cContractMappingTasklet_IdpConfigDatabaseFilterStateVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_ConfigLdapDirSearchState=Please configure your directory search. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the Authentication Policy Contract.
IdpC2cContractMappingTasklet_ConfigLdapDirSearchStateVo=Please configure your directory search. This information, along with the attributes supplied in the SAML assertion, will be used to fulfill the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_ConfigLdapDirSearchState_Oidc=Please configure your directory search. This information, along with the attributes supplied in the provider claims, will be used to fulfill the Authentication Policy Contract.
IdpC2cContractMappingTasklet_ConfigLdapDirSearchStateVo_Oidc=Please configure your directory search. This information, along with the attributes supplied in the provider claims, will be used to fulfill the SP Adapter Contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_ConfigLdapFilterState=Please filter the data from your directory.
IdpC2cContractMappingTasklet_ConfigLdapFilterStateVo=Please filter the data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_IdpConfigLdapFilterState=Please filter the data from your directory.
IdpC2cContractMappingTasklet_IdpConfigLdapFilterStateVo=Please filter the data from your directory.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_ConfigureCustomSourceFiltersState=Perform any filter configuration for this data source.
IdpC2cContractMappingTasklet_SelectCustomSourceFieldsState=Please select those fields you would like to use when mapping attributes to the Authentication Policy Contract.
IdpC2cContractMappingTasklet_IdpC2cContractFulfillmentState=You can fulfill your Authentication Policy Contract with values from the assertion, dynamic text, expressions, or from a data-store lookup.
IdpC2cContractMappingTasklet_MappingState=You can fulfill your Authentication Policy Contract with values from the provider claims, dynamic text, expressions, or from a data-store lookup.
IdpC2cContractMappingTasklet_MappingState_Oidc=You can fulfill your Authentication Policy Contract with values from the provider claims, dynamic text, expressions, or from a data-store lookup.
IdpC2cContractMappingTasklet_MappingStateVo=You can fulfill your Authentication Policy Contract with values from the assertion, dynamic text, expressions, or from a data-store lookup.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_MappingStateVo_Oidc=You can fulfill your Authentication Policy Contract with values from the provider claims, dynamic text, expressions, or from a data-store lookup.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
IdpC2cContractMappingTasklet_IdpC2cContractFulfillmentState_Oidc=You can fulfill your Authentication Policy Contract with values from the provider claims, dynamic text, expressions, or from a data-store lookup.
IdpC2cContractMappingTasklet_IdpConfigIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether to continue the SSO transaction. Use this optional screen to configure the criteria for use with this conditional authorization.
IdpC2cContractMappingTasklet_SummaryCardState=Connection Contract Mapping Summary
SelectC2cContractState_contract_required=You must select a contract to map to.
SelectC2cContractState_partner_conn_already_mapped=You cannot select this contract. This connection is already mapped to its opposite connection ''{0}'' via contract ''{1}''.
SelectC2cContractState_Selected_contract=Selected contract
SelectC2cContractDataSourceState_Title=Authentication Policy Contract
SelectC2cContractDataSourceState_Additional_attributes=Use the {0} to look up additional information
SelectC2cContractDataSourceState_No_additional_attributes=Use only the attributes available in the {0}

# SP Connection's C2C Contract Mapping Tasklet
SpConfigC2cMappingTasklet_SelectC2cContractStateNew=Select an authentication policy contract that may be used to authenticate users for this partner.  Attributes returned by the authentication policy contract you choose may be used to fulfill the Attribute Contract with your partner.
SpConfigC2cMappingTasklet_SelectC2cContractState=Attributes returned by the chosen authentication policy contract may be used to fulfill the Attribute Contract with your partner.
SpConfigC2cMappingTasklet_VirtualServerIdMappingState=You can optionally restrict this contract mapping to certain virtual server IDs. By default, this mapping will be applicable to all virtual server IDs. To restrict it to a subset of the available virtual server IDs, check Restrict Virtual Server IDs and select all the virtual server IDs that apply to this mapping.
SpConfigC2cMappingTasklet_SelectC2cAssertionAttrsState=You can choose to fulfill the Attribute Contract with your partner using either the values provided by the "{0}" authentication policy contract, or you can use these values plus additional attributes retrieved from local data stores.
SpConfigC2cMappingTasklet_ConfigAttributeSourcesState=Here you can specify a series of local data stores that will be used to supply additional information about the user in the SAML assertion to the SP.
SpConfigC2cMappingTasklet_FailsafeAttributeSourceState=If attribute mappings configured with the data-store setup fail to complete the Attribute Contract, PingFederate can either provide a default set of attributes (configured on the next screen) or stop the SSO transaction.
SpConfigC2cMappingTasklet_SPDefaultAttributeMappingState=Fulfill your Attribute Contract with values from the authentication policy contract or with dynamic text values.
SpConfigC2cMappingTasklet_SPDefaultAttributeMappingState_UseOtherValues=Fulfill your Attribute Contract with values from the authentication policy contract or dynamic text values. These values will be used if the user cannot be located in data stores. Coordinate with your partner to determine what default values to send.
SpConfigC2cMappingTasklet_SPDefaultAttributeMappingState_UseOtherValuesOneMapping=Fulfill your Attribute Contract with values from one or more data stores, the authentication policy contract, or dynamic text values.
SpConfigC2cMappingTasklet_SpConfigIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to access SP resources. Use this optional screen to configure the criteria for use with this conditional authorization.
SpConfigC2cMappingTasklet_SummaryCardState=Click a heading link to edit a configuration setting.

# Dependency Error Management Tasklets
DependencyErrorManagementTasklet_DependencyErrorManagementState = Recent changes have created errors in dependent configuration settings. Please fix the errors.
DependencyErrorManagementTasklet_DependencyErrorManagementEmptyState = All dependency errors have been resolved.

# Protocol Message Customization Component
MessageCustomizationCard_Update_required=You must update the item you are editing.
MessageCustomizationCard_hook_type_required=Please select a Message Type.
MessageCustomizationCard_hook_expr_required=Please enter an OGNL expression.
MessageCustomizationCard_invalid_hook_expr=The OGNL expression is invalid.
ServiceEndpointState_message_customization=Message Customization
AssertionConsumerServiceState_advancedNote=Message customizations allow an administrator to customize the assertions sent from PingFederate to the SP's Assertion Consumer Service. Customizations are applied using OGNL expressions. See the help for a description of available message objects that can be customized.
ServiceUrlConfigState_advancedNote=Message customizations allow an administrator to customize the authentication requests sent from PingFederate to the IdP's SSO Service. Customizations are applied using OGNL expressions. See the help for a description of available message objects that can be customized.

# Protocol Message Customization State
MessageCustomizationState_message_customization=Message Customization
MessageCustomizationState_Update_required=You must update the item you are editing.
MessageCustomizationState_hook_type_required=Please select a Message Type.
MessageCustomizationState_hook_expr_required=Please enter an OGNL expression.
MessageCustomizationState_invalid_hook_expr=The OGNL expression is invalid.

# Inbound Provisioning Custom Scim Attributes
InboundProvisioningCustomScimAttributesState_custom_attribute=Custom Attribute
InboundProvisioningCustomScimAttributesState_extension_namespace=Extension Namespace
InboundProvisioningCustomScimAttributesState_extension_namespace_cannot_be_blank=Extension namespace (schema name) cannot be blank when at least one attribute is present.
InboundProvisioningCustomScimAttributeState_custom_attribute_name_exists=Custom Attribute Name already exists.
InboundProvisioningCustomScimAttributesState_custom_attribute_name_exists=Custom Attribute Name already exists.
InboundProvisioningCustomScimAttributeTasklet_InboundProvisioningCustomScimAttributeState=Custom SCIM Attribute Configuration. You are presented with options to make the attribute complex and/or multi-valued.

# Inbound Provisioning Custom SCIM 2.0 Attributes
InboundProvisioningCustomScim2AttributesState_custom_attribute=Custom 2.0 Attribute
InboundProvisioningCustomScim2AttributesState_extension_namespace=Extension Namespace
InboundProvisioningCustomScim2AttributesState_extension_namespace_cannot_be_blank=Extension namespace (schema name) cannot be blank when at least one attribute is present.
InboundProvisioningCustomScim2AttributeState_custom_attribute_name_exists=Custom Attribute Name already exists.
InboundProvisioningCustomScim2AttributesState_custom_attribute_name_exists=Custom Attribute Name already exists.
InboundProvisioningCustomScim2AttributeTasklet_InboundProvisioningCustomScim2AttributeState=Custom SCIM Attribute Configuration. You are presented with options to define the attribute's schema characteristics.
InboundProvisioningCustomScim2SubAttributeTasklet_InboundProvisioningCustomScim2SubAttributeState=Custom SCIM Sub Attribute Configuration. You are presented with options to define the attribute's schema characteristics.

#Outbound Provisioning Custom Scim Attributes
SaaSCustomScimAttributesState_custom_attribute=Custom Attribute
SaaSCustomScimAttributesState_extension_namespace=Extension Namespace
SaaSCustomScimAttributesState_extension_namespace_cannot_be_blank=Extension namespace (schema name) cannot be blank when at least one attribute present.
SaaSCustomScimAttributeState_custom_attribute_name_exists=Custom Attribute Name already exists.
SaaSCustomScimAttributeState_custom_attribute_name_invalid_alphanumeric_only=Custom Attribute Name has an invalid format. Please use AlphaNumeric characters only.
SaaSCustomScimAttributeState_custom_attribute_name_invalid_blank_not_allowed=Custom Attribute Name has an invalid format. Attribute name cannot be blank.
SaaSCustomScimAttributeState_custom_sub_attribute_name_invalid_alphanumeric_only=Sub-Attribute Name has an invalid format. Please use AlphaNumeric characters only.
SaaSCustomScimAttributeState_custom_type_name_invalid_alphanumeric_only=Type has an invalid format. Please use AlphaNumeric characters only.
SaaSCustomScimAttributesState_custom_attribute_name_exists=Custom Attribute Name already exists.
SaaSCustomScimAttributesState_custom_attribute_name_invalid_alphanumeric_only=Custom Attribute Name has an invalid format. Please use AlphaNumeric characters only.
SaaSCustomScimAttributesState_custom_attribute_name_invalid_blank_not_allowed=Custom Attribute Name has an invalid format. Attribute name cannot be blank.
SaaSCustomScimAttributeTasklet_SaaSCustomScimAttributeState=Custom SCIM Attribute Configuration. You are presented with options to make the attribute complex and/or multi-valued.
SaaSCustomScimAttributeState_custom_sub_attributes_count=A complex custom attribute requires at least one sub-attribute.
SaaSCustomScimAttributeState_custom_sub_attributes_name=Sub-attribute name "type" is reserved when there are canonical values (types) specified.
SaaSCustomScimAttributeState_custom_attribute_types_count=A multi-valued custom attribute requires at least one type (canonical value).
SaaSCustomScimAttributesState_identity_mapping_with_attribute_name_exists=Mapping with Attribute Name already exists.
SaaSCustomScimAttributeState_identity_mapping_with_attribute_name_exists=Mapping Attribute Name already exists.
SaaSCustomScimAttributeState_custom_attr_name_must_not_match_core_attr_id=Custom Attribute ID must not match Core Attribute ID: {0}
SaaSCustomScimAttributesState_custom_attr_name_must_not_match_core_attr_id=Custom Attribute ID must not match Core Attribute ID: {0}

LocalIdentityProfilesTasklet_LocalIdentityProfilesState=Local identity profiles give users the option to authenticate with third-party identity providers, as well as self-service registration and management of their profiles.
LocalIdentityProfileTasklet_LocalIdentityGeneralInfoState=Enter a local identity profile name and choose an authentication policy contract, which is the set of attributes that are returned from an authentication policy that uses this profile. Also choose whether or not to enable self-service registration and profile management.
LocalIdentityGeneralInfoState_name_empty=A Local Identity Profile name is required.
LocalIdentityGeneralInfoState_duplicate_name=The name ''{0}'' is already in use. Please select another name.
LocalIdentityGeneralInfoState_apc_required=An Authentication Policy Contract is required.
LocalIdentityGeneralInfoState_sp_role_required_for_profile=The SP Role for PingFederate must be enabled for Profile Management. Please enable the SP Role before enabling Profile Management.
LocalIdentityProfileTasklet_LocalIdentityAuthSourcesState=Authentication sources are identifiers for third-party identity providers, such as social providers. They're used to display these providers on the HTML form adapter user interface as alternate authentication and registration options. They're also used in authentication policies to configure branches to IdP adapters and connections. Attributes from authentication sources can be stored with the local identity in the data store.
LocalIdentityAuthSourcesState_inline_help_update_interval=Choose the number of days to wait before updating the attributes from these Authentication Sources. Decimal values are acceptable (i.e. Choose 0.25 to update every 6 hours).
LocalIdentityAuthSourcesState_duplicate_name=The name ''{0}'' is already in use. Please select another name.
LocalIdentityAuthSourcesState_invalid_update_interval=The update interval ''{0}'' is invalid.
LocalIdentityAuthSourcesState_invalid_update_interval_number=Please enter a number between 0 and 99999.
LocalIdentityAuthSourcesState_update_interval_required=An update interval is required when attribute updates are enabled.
LocalIdentityAuthSourcesState_blank_value=Please specify a value for the new authentication source.
LocalIdentityAuthSourcesState_auth_sources_required=If Store Attributes is enabled, at least one Authentication Source must be defined.
LocalIdentityProfileTasklet_FieldsConfigState=Determine which fields will be displayed as input controls on the user registration and profile management pages.
FieldConfigState_inline_help_id=The ID will be used to reference the field throughout the UI and as the field name in the html templates. The ID must be unique and cannot be modified after the field is added.
FieldConfigState_inline_help_default_value=The default value will be used to fill in the field on the registration page. For checkbox fields, using the default value of 'true' will default to the checkbox being checked.
FieldConfigState_inline_help_label=The Label will be used as a label heading for the field on the given page.
FieldConfigState_inline_help_options=These are possible options that will be displayed for this field.
FieldConfigState_Id_required=Field ID is required.
FieldConfigState_reserved_word_id=The ID ''{0}'' is reserved. Please choose another ID.
FieldConfigState_reserved_word_label=The label ''{0}'' is reserved. Please choose another label.
FieldConfigState_Invalid_id=The ID must be less than {0} characters, contain no spaces, and be alphanumeric.
FieldConfigState_Label_required=Field Label is required.
FieldConfigState_options_value_required=Options are required for the ''{0}'' field type.
FieldConfigState_required_and_read_only=A field cannot be Required and Read-Only. Please select one to continue.
FieldConfigState_id_in_use=The ID ''{0}'' is already in use by another field.
FieldConfigState_option_already_in_use=The option ''{0}'' has already been added. Please choose a different option.
FieldConfigState_option_cant_be_blank=Option values cannot be blank.
FieldsConfigState_one_field_required=At least one field must be defined.
FieldsConfigState_one_unique_field_required=You must select one field to be the unique ID field.
FieldsConfigState_one_registration_field_required=Unique field must be marked for Registration.
FieldsConfigState_only_one_unique_field_allowed=More than one field is marked as unique. Only one field can be chosen to be the unique field.
FieldConfigTasklet_SummaryCardState=This is a summary of the local identity field.
LocalIdentityProfileTasklet_LocalIdentityEmailVerificationState=
LocalIdentityEmailVerification_enable_email_ownership_verification_desc=Send users an email to verify ownership of their email account.
LocalIdentityEmailVerification_verify_email_desc=HTML email template (in <pf_home>/server/default/conf/template/mail-notifications) used to send an email ownership verification email. The default value is message-template-email-ownership-verification.html.
LocalIdentityEmailVerification_email_verification_sent_desc=HTML template (in <pf_home>/server/default/conf/template) to render when an ownership verification email is successfully sent. The default value is local.identity.email.verification.sent.html.
LocalIdentityEmailVerification_email_verification_success_desc=HTML template (in <pf_home>/server/default/conf/template) to render when a user successfully verifies ownership of their email address. The default value is local.identity.email.verification.success.html.
LocalIdentityEmailVerification_email_verification_error_desc=HTML template (in <pf_home>/server/default/conf/template) to render when an error occurs when sending the user a verification email. The default value is local.identity.email.verification.error.html.
LocalIdentityEmailVerification_select_email_notification_sender_desc=Notification publisher mechanism for end users.
LocalIdentityEmailVerification_email_verification_type_desc=Select the method to use for email ownership verification.
LocalIdentityEmailVerification_otp_length_desc=The number of characters used in one-time passcodes. The default value is 8.
LocalIdentityEmailVerification_otp_retry_attempts_desc=The number of retry attempts for each one-time passcode. The default value is 3.
LocalIdentityEmailVerification_allowed_otp_character_set_desc=Provide a set of characters allowed to be used during one-time passcode generation. The default value is 23456789BCDFGHJKMNPQRSTVWXZbcdfghjkmnpqrstvwxz.
LocalIdentityEmailVerification_otp_time_to_live_desc=Number of minutes the one-time passcode is valid. The default value is 15.
LocalIdentityEmailVerification_otp_template_desc=HTML template (in <pf_home>/server/default/conf/template) to render when one-time passcode verification is required. The default value is local.identity.email.verification.otp.html.
LocalIdentityEmailVerification_otl_time_to_live_desc=Number of minutes the one-time link is valid. The default value is 1440.
LocalIdentityEmailVerification_select_email_used_for_verification_desc= The field that contains the email address to verify. This field is limited to email and text type fields.
LocalIdentityEmailVerification_select_storage_for_verification_desc=The field used to store the email ownership verification status.  This field is limited to hidden type fields.
LocalIdentityEmailVerification_enable_require_verified_email_desc=The user must verify their email address before they can use this local identity profile to complete a single sign-on transaction.
LocalIdentityEmailVerification_require_verified_email_template_name_desc=HTML template (in <pf_home>/server/default/conf/template) to render when the user must verify their email address before they can use this local identity profile to complete a single sign-on transaction. The default value is local.identity.email.verification.required.html.
LocalIdentityEmailVerificationState_sp_role_required_for_email_verification=The SP Role must be enabled when Email Ownership Verification is enabled.
LocalIdentityEmailVerificationState_VerifyEmailTemplateName_required=Email Template is required.
LocalIdentityEmailVerificationState_EmailVerificationSentTemplateName_required=Sent Template is required.
LocalIdentityEmailVerificationState_EmailVerificationSuccessTemplateName_required=Success Template is required.
LocalIdentityEmailVerificationState_EmailVerificationErrorTemplateName_required=Error Template is required.
LocalIdentityEmailVerificationState_MailSettings_Notification_Publisher_required=Please select a notification publisher or configure a default notification publisher if Email Ownership Verification is enabled.
LocalIdentityEmailVerificationState_FieldUsedForOwnershipVerification_required=Email Field Used For Ownership Verification is required.
LocalIdentityEmailVerificationState_FieldStoringVerificationStatus_required=Email Verification Status Field is required.
LocalIdentityEmailVerificationState_RequireVerifiedEmailTemplateName_required=Require Verified Email Template is required.
LocalIdentityProfileTasklet_RegistrationConfigState=Configure the user registration page.
RegistrationConfig_Enable_Captcha_desc=Risk can be enabled on the registration page to prevent automated registration attempts.
RegistrationConfig_select_captcha_provider_desc=Risk provider service for end users.
RegistrationConfig_registration_template_desc=HTML template (in <pf_home>/server/default/conf/template) to render for a user to register. The default value is local.identity.registration.html.
RegistrationConfigState_Captcha_provider_required=Please select a Risk provider or configure a default Risk provider if Risk is enabled.
LocalIdentityProfileTasklet_DataStoreConfigState=Configure the data store where local identities will be stored.
LocalIdentityProfileTasklet_LocalIdentitySummaryState=This is a summary of the local identity profile.
LocalIdentityProfileTasklet_ProfileConfigState=Configure the user profile management page.
ProfileConfigState_profile_management_template_desc=HTML template (in <pf_home>/server/default/conf/template) to render for a user to manage their profile. The default value is local.identity.profile.html.
ProfileConfigState_delete_identity_desc=Gives users the option to delete their local identity profile without administrator assistance.
ProfileConfigState_TemplateName_required=Profile Template Name is required.
DataStoreConfigTasklet_DataStoreSelectionState=Choose the data store where local identities will be stored.
DataStoreConfigState_must_configured_data_store=You must configure a data store mapping.
DataStoreSelectionState_Data_store_required=You must select a data store.
DataStoreSelectionState_Data_store_unavailable=Unable to communicate with the specified data store.
DataStoreConfigTasklet_DataStoreMappingState=Configure the mapping between the local identity profile fields and the data store attributes.
DataStoreMappingState_missing_field_mapping=The field {0} needs to be mapped to a data store attribute.
DataStoreMappingState_missing_field_mappings=The fields {0} need to be mapped to unique data store attributes.
DataStoreMappingState_attribute_already_mapped=The attribute ''{0}'' has been assigned to more than one field. A data store attribute can only be mapped to one field.
DataStoreConfigTasklet_LdapGeneralInfoState=Configure the base DN and attributes that will be used for local identities.
DataStoreConfigTasklet_LdapWriteIdentityState=Configure the settings for creating local identities. Use the available fields and attributes to complete the relative DN pattern, which will be used as a prefix to the base DN configured on the LDAP configuration tab. The object class is the objectClass value used when creating a new local identity.
ConfigLdapDirSearch_basedn_desc=Specify where local identities are stored in the LDAP data store.
LdapGeneralInfoState_base_dn_required=Please specify a Base DN.
LdapGeneralInfoState_inline_help_base_dn=The Base DN can reference variables using the format ${variableName:=defaultValue}. The default value is optional. If specified, it will be used at runtime when the variable value is not available.
LdapGeneralInfoState_ldap_attribute_required=Please add at least {0} LDAP attribute(s) for fulfilling the data store mapping.
LdapWriteIdentityState_create_pattern_required=Please specify a Relative DN pattern.
LdapWriteIdentityState_inline_help_filter=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
DataStoreConfigTasklet_SummaryCardState=This is a summary of the data store configuration.
DataStoreSelectionState_Type=Type
DataStoreSelectionState_Data_store=Data Store
LocalIdentityProfileMappingTasklet_LocalIdentityAttributeSourceState=Additional data stores can be configured to look up supplementary attributes for contract fulfillment.
LocalIdentityProfileMappingTasklet_LocalIdentityOutboundContractMappingState=Fulfill the Authentication Policy Contract associated with this Local Identity Profile with values from the authentication sources or with dynamic text values.
LocalIdentityProfileMappingTasklet_LocalIdentityIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether clients are authorized to retrieve information about a user. Use this optional screen to configure the criteria for use with this conditional authorization.
LocalIdentityProfileMappingTasklet_SummaryCardState=This is the summary of the inbound mapping and contract fulfillment.
LocalIdentityInboundMappingState_Mappings=Mappings
LocalIdentityInboundMappingState_Does_not_have_mapped_value="{0}" does not have a value mapped.
LocalIdentityInboundMappingState_Cannot_Map_Request_Object="{0}" cannot map the HTTP Request object. Use an OGNL expression to select attributes or parameters from the request object.
LocalIdentityInboundMappingState_invalid_inbound_attribute=There are inbound mappings that no longer match any fields for this Local Identity Profile. Please remove the invalid mappings.
LocalIdentityInboundMappingState_Must_have_valid_value="{0}" must have a valid value.
LocalIdentityInboundMappingState_Required_attr_missing=The attribute "{0}" is required to be fulfilled.
LocalIdentityInboundMappingState_Required_attrs_missing=The attribute "{0}" must be fulfilled.
LocalIdentityInboundMappingState_Expressions_turned_off="{0}" could not be mapped to an expression because expressions are explicitly turned off in "server/default/data/config-store/org.sourceid.common.ExpressionManager.xml."
LocalIdentityInboundMappingState_note=Configure the attribute mappings for authentication and registration. The {0} is used to look up an identity that is already registered and should be mapped from the subject identifier of the preceding authentication source. All other fields can be mapped to pre-populate values on the registration page.
LocalIdentityInboundMappingState_registration_note=Optionally configure the attribute mappings for authentication and registration. Fields can be mapped to pre-populate values on the registration page.
LocalIdentitySummaryState_Profile_Management_Endpoint=Profile Management Endpoint
LocalIdentitySummaryState_Send_Email_Ownership_Verification_Endpoint=Email Ownership Verification Endpoint

#CIBA
OOBAuthTasklet_OOBAuthenticatorsMgmtState=Manage CIBA Authenticator instances, which are used to authenticate users using an out-of-band method.
OOBAuthenticatorTasklet_OOBAuthenticatorsMgmtState=Manage CIBA Authenticator instances, which are used to authenticate users using an out-of-band method.
OOBAuthenticatorsMgmtState_SelectAdapterTypeState_existingstate=The values of the selected CIBA Authenticator Instance.
OOBAuthenticatorsMgmtState_SelectAdapterTypeState_newstate=Enter a CIBA Authenticator Instance Name, ID and select the Authenticator Type. The CIBA Authenticator Type is limited to the out-of-band authenticators currently installed on your server.
OOBAuthenticatorsMgmtState_ConfigureAuthnAdapterState=Complete the configuration necessary to authenticate users with this CIBA Authenticator.
OOBAuthenticatorsMgmtState_AuthnAdapterActionState=Actions can be used to test the validity of the authenticator configuration or to perform secondary configuration tasks.
OOBAuthenticatorsMgmtState_CreateAdapterContractState=The authenticator contract is the list of input parameters used to challenge the user for authentication. Some authenticators support extending the contract for additional functionality, such as formatting the data presented to the user during the authentication challenge.
OOBAuthenticatorsMgmtState_SummaryCardState=CIBA Authenticator instance summary information.
CibaPoliciesManagementTasklet_CibaPoliciesManagementState=CIBA Request Policies process identity hints and authenticate users to receive consent. The CIBA grant flow is initiated by a direct request from the client and involves an out-of-band interaction with the user to complete authentication and authorization. OAuth clients that support the CIBA grant type can be configured to use a specific CIBA Request Policy or a default.
CibaPolicyManagementTasklet_CibaPolicyManagementState=Specify the policy id, name and the authenticator that will be used to authenticate a user and receive their consent for authorizing OAuth clients. The User Code PCV can optionally be used to verify the user_code provided with the request before invoking the authenticator to prevent unwanted authentication challenges from reaching users.
CibaPolicyManagementTasklet_CibaPolicyRequestHintContractState=The identity hint contract is the set of attributes received in the CIBA request that identifies the user. The IDENTITY_HINT_SUBJECT is automatically populated by the sub attribute of an identity hint token or from the value provided in the login_hint request attribute.
CibaPolicyManagementTasklet_CibaPolicyEnhanceRequestHintContractMappingState=CIBA request policies can optionally process the identity hint to further augment the identity data prior to contract fulfillment.
RequestHintContractMappingTasklet_RequestHintContractAttributeSourcesState=Optionally specify a series of data stores from which data, along with the attributes supplied in the original identity hint, will be used to fulfill the identity hint's attribute contract.
RequestHintContractMappingTasklet_RequestHintContractFulfillmentMappingState=Fulfill the attribute contract with values from the original identity hint, data stores or dynamic text values.
RequestHintContractMappingTasklet_RequestHintContractIssuanceCriteriaState=PingFederate can evaluate various criteria to determine if the current transaction is authorized to continue or if it should be terminated. Use this optional screen to configure the criteria for use with this conditional authorization.
RequestHintContractMappingTasklet_SummaryCardState=Identity Hint Mapping summary information.
CibaPolicyManagementTasklet_CibaPolicyAttributeSourcesState=Specify a series of data stores from which data, along with the attributes supplied in the identity hint, will be used to fulfill this request policy's attribute contract.
SpAttributeSourceTasklet_SelectDataSourceState_CIBA=Data stores are used to retrieve supplemental attributes. Specify the attribute store's details to use it in your configuration.
SpAttributeSourceTasklet_SelectDataSourceState_CIBAVo=Data stores are used to retrieve supplemental attributes. Specify the attribute store's details to use it in your configuration.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_CIBA=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_SelectDatabaseTableAndColumnsState_CIBAVo=Please select the table and columns you want to query. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_CibaConfigDatabaseFilterState_CIBA=Please supply a WHERE clause to filter the data from your table.
SpAttributeSourceTasklet_CibaConfigDatabaseFilterState_CIBAVo=Please supply a WHERE clause to filter the data from your table.<br><br><div class="errortext">This information is read-only because the data store is currently unavailable.</div>
SpAttributeSourceTasklet_SummaryCardState_CIBA=Attribute Source summary information.
SpAttributeSourceTasklet_ConfigLdapDirSearchState_CIBA=Please configure your directory search. This information, along with the attributes supplied in the contract, will be used to fulfill the contract.
SpAttributeSourceTasklet_SpConfigLdapFilterState_CIBA=Please enter a Filter for extracting data from your directory.
SpAttributeSourceTasklet_SelectCustomSourceFieldsState_CIBA=Please select those fields you would like to use when mapping attributes to the contract.
SpAttributeSourceTasklet_ConfigureCustomSourceFiltersState_CIBA=Perform any filter configuration for the data source.
CibaPolicyManagementTasklet_CibaPolicyContractFulfillmentState=Fulfill the attribute contract with values from the identity hint, data stores or dynamic text values. This contract is used to map into the OAuth grant, the CIBA authenticator and optionally the user code PCV.
CibaPolicyManagementTasklet_CibaPolicyIssuanceCriteriaState=PingFederate can evaluate various criteria to determine if the current transaction is authorized to continue or if it should be terminated. Use this optional screen to configure the criteria for use with this conditional authorization.
CibaPolicyManagementTasklet_SummaryCardState=CIBA Policy summary information.
CibaPoliciesManagementState_Default_required=A default policy is required.
CibaConfigDatabaseFilterState_inline_help_where=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.
CibaPoliciesManagementState_Unable_to_delete_with_oauth_ref=Unable to delete CIBA policy, please 'Check Usage' and resolve references before trying to delete again.

#Outbound Provisioning Group Attribute Mappings
SaaSSelectAttrGroupMappingState_group_attribute_id_required=Attribute ID is required when creating a mapping for it.
SaaSSelectAttrGroupMappingState_ldap_attribute_required=LDAP Attribute is required when creating mapping.

# JWT Signing Cert State
WsFedJwtSigningCertState_Cert_required=You must select a valid certificate.
WsFedJwtSigningCertState_Signing_algorithm=Selected Signing Algorithm
WsFedJwtSigningCertState_Unsupported_signing_algorithm=The signing certificate uses the unknown algorithm {0}.
WsFedJwtSigningCertState_Primary_signing_cert_same_as_secondary_signing_cert=Secondary signing certificate cannot be the same as the primary signing certificate {0}.
WsFedJwtSigningCertState_Secondary_signing_cert_cannot_have_rotation_enabled=The selected secondary signing certificate cannot have rotation enabled.


# Messages that are shared between states. Used with getMessageWithFullKey
shared_message_activation_key_invalid=The activation key is invalid or has expired. Please sign on to PingOne to get a new activation key.
shared_message_service_unavailable=PingFederate was unable to connect to PingOne. Please check your network configuration.
shared_message_dissociate_failed=Failed to disconnect from PingOne. Please contact your administrator for more information.

PingOneSetup_BasicInfoState_note=To set up your enterprise identity bridge, let's first confirm your Base URL.
StandaloneSetup_BasicInfoState_note=Welcome to PingFederate. To set up your enterprise identity bridge, let's first confirm your Base URL and Entity ID.


authn_source_type_required=You must specify an authentication source for the policy.
authn_session_policy_invalid_idle_timeout=Invalid Idle Timeout. The Idle Timeout must be between 1 minute and {2} {3}. You can also leave it blank to let the Idle Timeout match the Maximum Timeout.
authn_session_policy_invalid_max_timeout=Invalid Maximum Timeout. The Maximum Timeout must be between 1 minute and {2} {3}. You can also leave it blank to indicate that sessions do not expire.


VirtualServerIdMappingState_restricted_virtual_entity_ids_required=This mapping is set to restrict virtual entity ids, however, the restricted virtual ID list was empty. Please specify valid virtual entity ID(s) and try again.

ClientSettingsTasklet_OAuthDynamicClientRegistrationState=Allow developers to register OAuth clients via an API in a standardized way and optionally manage them. You can enable or disable dynamic client registration and choose whether registration requires an access token. Also, you can enable or disable dynamic client management and choose to rotate the registration access token or the client secret on each management call as well allowing client deletion.
ClientSettingsTasklet_OAuthDynamicClientRegistrationPoliciesState=Client registration policies can provide additional control over which registrations and configurations are accepted and stored for each client.
ClientSettingsTasklet_OAuthDynamicClientRegistrationScopeConstraintsState=Scope constraints limit the scopes able to be requested by clients who register or update using dynamic client registration or management. The combination of scopes requested during registration or update and the scope constraints determine the scopes available to the client.
ClientSettingsTasklet_OAuthDynamicClientRegistrationAuthorizationDetailTypesConstraintsState=Authorization detail types constraints limit the authorization details types able to be requested by clients who register or update using dynamic client registration or management. The combination of authorization detail types requested during registration or update and the authorization detail types constraints determine the authorization detail types available to the client.
ClientSettingsTasklet_OAuthDynamicClientRegistrationDefaultsState=OAuth client configuration defaults determine the default settings that are unique to PingFederate for OAuth clients who register or update using dynamic client registration or management. These settings can be overridden by client registration policies enforced during dynamic client registration and management calls.
ClientSettingsTasklet_ExtendedPropertiesState=Add extended properties to store additional information about Partners and OAuth clients.
ClientSettingsTasklet_OAuthDynamicClientRegistrationSummaryState=This is a summary of your OAuth client settings. You can click the heading in each section to edit that particular configuration setting.
ExtendedPropertiesTasklet_ExtendedPropertiesState=Define extended properties to store additional information about IdP/SP Connections and OAuth Clients.

# Notification Publisher Plugin
NotificationSenderTasklet_NotificationSenderManagementState=Notification Publishers are used to deliver messages to end users and administrators. The default Notification Publisher will be used in other areas of PingFederate configuration where one is not explicitly defined.
NotificationSenderManagementState_Default_instance_required=A default instance is required.
NotificationSenderManagementState_SelectAdapterTypeState_newstate=Enter a notification publisher instance name and ID, and select the type.
NotificationSenderManagementState_SelectAdapterTypeState_existingstate=The values of the selected notification publisher instance.
NotificationSenderManagementState_ConfigureAuthnAdapterState=Configure the settings for this particular notification publisher.
NotificationSenderManagementState_SummaryCardState=This is a summary of the configuration settings for this notification publisher instance. You can click the heading in each section to edit that particular setting.
NotificationSenderManagementState_AuthnAdapterActionState=Actions are available for this instance and can be invoked from here.
NotificationSenderManagementState_Adapter_has_errors={0} has error(s), please review and fix.

# Dynamic Client Registration Policy Plugin
OAuthDynamicClientRegistrationPolicyManagementTasklet_OAuthDynamicClientRegistrationPolicyManagementState=Client registration policies can provide additional control over which registrations and configurations are accepted and stored for each client.
OAuthDynamicClientRegistrationPolicyManagementState_SelectAdapterTypeState_newstate=Enter a policy instance name and ID, and select the policy type, which is limited by the client registration policies currently installed on your server.
OAuthDynamicClientRegistrationPolicyManagementState_SelectAdapterTypeState_existingstate=The values of the selected client registration policy instance.
OAuthDynamicClientRegistrationPolicyManagementState_ConfigureAuthnAdapterState=Configure the settings for this particular client registration policy.
OAuthDynamicClientRegistrationPolicyManagementState_SummaryCardState=This is a summary of the configuration settings for this client registration policy instance. You can click the heading in each section to edit that particular setting.

SystemKeysTasklet_SystemKeysState=System keys are used in cryptographic operations to generate and consume internal tokens. These tokens are leveraged in several use cases such as one-time links for self-service password reset. Periodic rotation can ensure optimal security of your environment.

ProtocolSettingsTasklet_SaaSGlobalProvisioningSettingsState=Specify the database through which PingFederate facilitates outbound provisioning to service providers. You can optionally modify the default synchronization frequency. These settings apply to all outbound provisioning "channels." You must also enable provisioning in the run.properties file.
ProtocolSettingsTasklet_ConfigIdpDiscoveryState=IdP Discovery may be used by federated applications to determine which IdPs have authenticated a particular user in the past.
ProtocolSettingsTasklet_FederationInfoState=You must create a unique identifier for your server for use with your federation partners. You will need to communicate this with your partners out-of-band or through metadata exchange.  The Base URL is used to construct other URLs in the system and may be used as part of your system ID.
ProtocolSettingsTasklet_FederationInfoState_1x=You must create a unique identifier for your server for use with your federation partners. You will need to communicate this with your partners out-of-band or through metadata exchange.  The Base URL is used to construct other URLs in the system and may be used as part of your system ID. The SAML 1.x Source ID defaults to the SHA-1 hash of the SAML 1.x Issuer. Enter an alternate Source ID value if desired.
ProtocolSettingsTasklet_WsTrustStsSettingsState=Configure WS-Trust STS authentication requirements if you want to restrict access to the service. These settings are optional.
ProtocolSettingsTasklet_ServerSettingsSummaryState=Protocol Settings Summary Information

MetadataSettingsTasklet_SystemInfoState=This is general information that identifies your server. This information is included whenever you export connection metadata.
MetadataSettingsTasklet_DynamicConnectionSigningCertState=Select a certificate for signing the metadata which will be published. If no certificate is selected, the published metadata will not be signed.
MetadataSettingsTasklet_MetadataLifetimeState=Specify validity period for published metadata and refresh delay for automated metadata reloading.
MetadataSettingsTasklet_ServerSettingsSummaryState=Metadata Information Summary

NotificationOptionsTasklet_NotificationOptionsState=Select which server events should result in notifications sent via a configured notification publisher. Certain events can be configured to log exclusively to server.log file by selecting "Logging Only". \
  <br> Administrator console warnings for certificate expiration are ON by default and can be turned off by configuring 0 days.
NotificationOptionsTasklet_NotificationOptionsState_licenseonly=Select which server events should result in notifications sent via a configured notification publisher. Certain events can be configured to log exclusively to server.log file by selecting "Logging Only". \
  <br> Administrator console warnings for certificate expiration are ON by default and can be turned off by configuring 0 days.

SystemOptionsTasklet_SystemOptionsState=When PingFederate is deployed behind a proxy server or load-balancer, configure PingFederate to use information in HTTP headers added by the proxy server to construct correct responses.

ConnMgmt_Disable_auto_conn_validation=Disable automatic connection validation
ManageDataSources_Data_store_validation_interval=Data-Store Validation Interval (secs)

PingOneSettingsTasklet_PingOneSettingsState=PingFederate is connected to a PingOne for Enterprise account. On this page, you can configure PingOne-hosted capabilities, such as administrative console single sign-on.
PingOneSettingsTasklet_PingOneSettingsState_active_sp_conn=PingFederate is connected to a PingOne for Enterprise account. On this page, you can configure PingOne-hosted capabilities, such as administrative console single sign-on. You can also update the PingOne identity repository with the settings for this PingFederate environment.

#Authentication Applications
AuthenticationApplicationsTasklet_AuthenticationApplicationsState=Authentication Applications present user interfaces to collect credentials when authentication is completed via the Authentication API. The Default Authentication Application is used for Authentication Sources that are invoked directly (not as part of Authentication Policy) and that support the Authentication API.
AuthenticationApplicationTasklet_AuthenticationApplicationState=Manage the configuration of an Authentication API Application.

TokenExchangeProcessorPolicyTasklet_ProcessorPoliciesManagementState=Define and manage OAuth token exchange processor policies here to control how PingFederate consumes tokens. These policies can then be mapped to OAuth clients.
ProcessorPolicyManagementTasklet_ProcessorPolicyManagementState=Enter an ID, name, and other general settings for your token exchange processor policy.
ProcessorPolicyManagementTasklet_SummaryCardState=Token Exchange processor policy summary information.
ProcessorPolicyManagementTasklet_ProcessorPolicyContractState=Optional: Add attributes to the attribute contract that the token exchange processor policy produces. The subject attribute is mandatory.
ProcessorPolicyManagementTasklet_ProcessorMappingState= During a token exchange, token processors consume subject tokens and, optionally, actor tokens. From here, map these token types to token processor instances.
ProcessorMappingTasklet_ProcessorMappingTokenTypeState=Select a Subject token processor, a Subject token type, an Actor token processor and an Actor token type. Actor token processor and token type selection may be optional based on token exchange processor policy configuration.
ProcessorMappingTasklet_SummaryCardState=Token exchange processor policy summary information.
ProcessorMappingTasklet_ProcessorMappingContractFulfillmentState=You can fulfill your token exchange processor policy contract with values from the subject token, actor token, dynamic text, expressions, or from a data-store lookup.
ProcessorMappingTasklet_ProcessorMappingIssuanceCriteriaState=PingFederate can evaluate various criteria to determine whether users are authorized to exchange a token. Use this optional screen to configure the criteria for use with this conditional authorization.
ProcessorMappingTasklet_ProcessorMappingAttributeSourcesState=As an option, you can specify a series of local data stores from which to look up any additional attributes required to fulfill the mapping.
ProcessorPoliciesManagementState_Default_required=A default policy is required.
ProcessorPoliciesManagementState_Unable_to_delete_with_oauth_ref=Unable to delete Token Processor policy, please 'Check Usage' and resolve references before trying to delete again.

TokenExchangeGeneratorPolicyTasklet_GeneratorPoliciesManagementState=Define and manage OAuth token exchange generator groups to control how PingFederate produces tokens.
GeneratorPolicyManagementTasklet_GeneratorPolicyManagementState=Enter an ID, name, and other general settings for your token exchange generator group.
GeneratorPolicyManagementTasklet_GeneratorTokenTypeState=Token generators produce tokens in an exchange. From here you can map token generator instances to support different token types.
GeneratorPolicyManagementTasklet_SummaryCardState=Token exchange generator group summary information.
GeneratorPoliciesManagementState_Default_required=A default group is required.

TEPP2TGTasklet_ProcessorPolicy2GeneratorMappingsState=Map token processor policies to token generator groups here to enable the exchange of one token type to another.
Source2TargetMappings_PP2TG_duplicate_error=A mapping from ''{0}'' to ''{1}'' already exists. Please select it from the list above or create a different mapping.
Source2TargetMappings_PP2TG_select_source=Please select a Token Exchange Processor Policy
Source2TargetMappings_PP2TG_select_target=Please select a Token Generator
PolicyProcessor2GeneratorMappingTasklet_ProcessorPolicy2GeneratorMappingState=Fulfill the token generator group contract with values from the token exchange processor policy, text, or other configured sources.
PolicyProcessor2GeneratorMappingTasklet_Source2TargetConfigAttributeSourcesState=Optional: Specify local data stores from which to look up any additional attributes required to fulfill the mapping.
PolicyProcessor2GeneratorMappingTasklet_SummaryCardState=Token generator mapping summary.
PolicyProcessor2GeneratorMappingTasklet_LicenseGroupState=Select a license group to assign the mapping to.
PolicyProcessor2GeneratorMappingTasklet_Source2TargetIssuanceCriteriaState=Optional: Configure criteria that PingFederate evaluates to determine whether clients are authorized to exchange tokens.
ProcessorPolicy2GeneratorMappingsState_mapping_has_errors=''{0}'' to ''{1}'' mapping has error(s), please review and fix.

SelectUniqueIdValuesState_inline_help_unique_uer_key_attribute=Select an attribute to uniquely identify users signing on with this adapter. The attribute's value will be used to identify user sessions across all adapters.

ManageSecretManagersTasklet_ManageSecretManagersState=Manage secret managers for use with external secret storage services.
ManageSecretManagersState_SelectAdapterTypeState_newstate=Please enter a Secret Manager Instance Name and ID, and select the Secret Manager Type.
ManageSecretManagersState_SelectAdapterTypeState_existingstate=The values of the selected Secret Manager.
ManageSecretManagersState_ConfigureAuthnAdapterState=Configure the settings for this Secret Manager.
ManageSecretManagersState_SummaryCardState=Secret Manager summary for configuration.
ManageSecretManagersState_AuthnAdapterActionState=Actions are available for this instance and can be invoked from here.

ConfigLdapDirSearchState_inline_help_base_dn=The Base DN can reference variables using the format ${variableName:=defaultValue}. The default value is optional. If specified, it will be used at runtime when the variable value is not available.
ConfigDatabaseFilterState_inline_help_where=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

AdapterConfigDatabaseFilterState_inline_help_where=The format ${attributeName:-defaultValue} can be used to reference attribute values. The default value is optional. If specified, it will be used at runtime when the attribute value is not available.

ConfigurationArchiveExportState_Generic_download_error=Configuration archive download failed. Please check the server logs.

# Authorization Detail Processor
ManageAuthorizationDetailProcessorsTasklet_ManageAuthorizationDetailProcessorsState=Manage authorization detail processors for use with OAuth Rich Authorization Requests.
ManageAuthorizationDetailProcessorsState_SelectAdapterTypeState_newstate=Please enter an Authorization Detail Processor Instance Name and ID, and select the Authorization Detail Processor Type.
ManageAuthorizationDetailProcessorsState_SelectAdapterTypeState_existingstate=The values of the selected Authorization Detail Processor.
ManageAuthorizationDetailProcessorsState_ConfigureAuthnAdapterState=Configure the settings for this Authorization Detail Processor.
ManageAuthorizationDetailProcessorsState_SummaryCardState=Authorization Detail Processor summary for configuration.

#Risk Providers
ManageCaptchaProvidersTasklet_ManageCaptchaProvidersState=Manage CAPTCHA and Risk Providers for use with external Risk services.
ManageCaptchaProvidersState_SelectAdapterTypeState_newstate=Please enter a Risk provider Instance Name and ID, and select the Risk providers Type.
ManageCaptchaProvidersState_SelectAdapterTypeState_existingstate=The values of the selected Risk provider.
ManageCaptchaProvidersState_ConfigureAuthnAdapterState=Configure the settings for this Risk provider.
ManageCaptchaProvidersState_SummaryCardState=Risk provider summary for configuration.
ManageCaptchaProvidersState_Default_instance_required=A default instance is required.