#
# This LDIF file creates the needed schema objects for Access Grant support in LDAP.
#
# These are the required attributes. You may alter the name of the attributes, but in doing so you
# must also change their corresponding values in
# "pingfederate/server/default/data/config-store/org.sourceid.oauth20.token.AccessGrantManagerLDAPPingDirectoryImpl.xml"
# to match, and change the "MUST" and "MAY" attribute names in the "accessGrant" objectClass in the
# "access-grant-ldap-pingdirectory.ldif" file. Once created, we recommend not to rename these attribute names.
#
# Use the following command to apply the changes to the directory server:
#
#     ldapmodify --defaultAdd --filename access-grant-attributes-ldap-pingdirectory.ldif
#
dn: cn=schema
changetype: modify
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.1
  NAME ( 'accessGrantAttributes' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
  SINGLE-VALUE
  X-MIN-VALUE-LENGTH '0'
  X-MAX-VALUE-LENGTH '4194304' )
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.2
  NAME ( 'accessGrantContextualQualifier' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
  SINGLE-VALUE
  X-MIN-VALUE-LENGTH '0'
  X-MAX-VALUE-LENGTH '64' )
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.3
  NAME ( 'accessGrantClientId' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
  SINGLE-VALUE
  X-MIN-VALUE-LENGTH '0'
  X-MAX-VALUE-LENGTH '256' )
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.4
  NAME ( 'accessGrantExpires' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE )
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.5
  NAME ( 'accessGrantGuid' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
  SINGLE-VALUE
  X-MIN-VALUE-LENGTH '0'
  X-MAX-VALUE-LENGTH '32' )
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.6
  NAME ( 'accessGrantGrantType' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
  SINGLE-VALUE
  X-MIN-VALUE-LENGTH '0'
  X-MAX-VALUE-LENGTH '128' )
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.7
  NAME ( 'accessGrantHashedRefreshTokenValue' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
  SINGLE-VALUE
  X-MIN-VALUE-LENGTH '0'
  X-MAX-VALUE-LENGTH '256')
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.8
  NAME ( 'accessGrantIssued' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE )
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.9
  NAME ( 'accessGrantScope' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
  SINGLE-VALUE
  X-MIN-VALUE-LENGTH '0'
  X-MAX-VALUE-LENGTH '256')
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.10
  NAME ( 'accessGrantUniqueUserIdentifier' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
  SINGLE-VALUE
  X-MIN-VALUE-LENGTH '0'
  X-MAX-VALUE-LENGTH '256')
-
add: attributeTypes
attributeTypes: ( 1.3.6.1.4.1.28867.9.2.11
  NAME ( 'accessGrantUpdated' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE )
