<!--
  ~ Copyright (c) 2020, WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
  ~
  ~ WSO2 Inc. licenses this file to you under the Apache License,
  ~ Version 2.0 (the "License"); you may not use this file except
  ~ in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~ http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing,
  ~ software distributed under the License is distributed on an
  ~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  ~ KIND, either express or implied.  See the License for the
  ~ specific language governing permissions and limitations
  ~ under the License.
  ~
  -->

<ClaimConfig>
    <Dialects>
        <Dialect dialectURI="http://wso2.org/claims">
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/accountConfirmedTime</ClaimURI>
                <DisplayName>Confirmed Time</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>confirmedTime</AttributeID>
                <Description>Account confirmed timestamp of the user</Description>
            </Claim>
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/isReadOnlyUser</ClaimURI>
                <DisplayName>Read Only User</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>isReadOnlyUser</AttributeID>
                <Description>Claim to store if the user is read only</Description>
            </Claim>
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/isLiteUser</ClaimURI>
                <DisplayName>Lite User</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>isLiteUser</AttributeID>
                <Description>Claim to store if this is a lite user account.</Description>
            </Claim>
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/failedSmsOtpAttempts</ClaimURI>
                <DisplayName>Failed SMS OTP Attempts</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>failedSmsOtpAttempts</AttributeID>
                <Description>Failed SMS OTP Attempts</Description>
            </Claim>
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/failedEmailOtpAttempts</ClaimURI>
                <DisplayName>Failed Email OTP Attempts</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>failedEmailOtpAttempts</AttributeID>
                <Description>Failed Email OTP Attempts</Description>
            </Claim>
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/failedTotpAttempts</ClaimURI>
                <DisplayName>Failed TOTP Attempts</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>failedTotpAttempts</AttributeID>
                <Description>Failed TOTP Attempts</Description>
            </Claim>
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/verifySecretkey</ClaimURI>
                <DisplayName>Verify Secret Key</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>verifySecretkey</AttributeID>
                <Description>Claim to store the secret key until verified</Description>
            </Claim>
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/mobileNumber.pendingValue</ClaimURI>
                <DisplayName>Verification Pending Mobile Number</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>pendingMobileNumber</AttributeID>
                <Description>To store newly updated mobile number until it is verified.</Description>
                <ReadOnly/>
            </Claim>
            <Claim>
                <ClaimURI>http://wso2.org/claims/identity/tenantAdminAskPassword</ClaimURI>
                <DisplayName>Tenant Admin Ask Password</DisplayName>
                <!-- If user store based identity store is used, a proper mapped attribute
                in your user store must be configured for this. -->
                <AttributeID>tenantAdminAskPassword</AttributeID>
                <Description>Temporary claim to invoke email tenant admin ask Password feature</Description>
            </Claim>
        </Dialect>
        <Dialect dialectURI="urn:ietf:params:scim:schemas:extension:enterprise:2.0:User">
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:forcePasswordReset</ClaimURI>
                <DisplayName>Force Password Reset</DisplayName>
                <AttributeID>forcePasswordReset</AttributeID>
                <Description>Temporary claim to invoke forced password reset feature</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/adminForcedPasswordReset</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:oneTimePassword</ClaimURI>
                <DisplayName>One Time Password</DisplayName>
                <AttributeID>oneTimePassword</AttributeID>
                <Description>One Time Password</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/oneTimePassword</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:accountLocked</ClaimURI>
                <DisplayName>Account Locked</DisplayName>
                <AttributeID>accountLocked</AttributeID>
                <Description>Account locked</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/accountLocked</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:accountState</ClaimURI>
                <DisplayName>Account State</DisplayName>
                <AttributeID>accountState</AttributeID>
                <Description>Account state</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/accountState</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:emailOTPDisabled</ClaimURI>
                <DisplayName>Disable email OTP</DisplayName>
                <AttributeID>emailOTPDisabled</AttributeID>
                <Description>Store whether email OTP is enabled or disabled</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/emailotp_disabled</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:emailVerified</ClaimURI>
                <DisplayName>Email Verified</DisplayName>
                <AttributeID>emailVerified</AttributeID>
                <Description>True if the End-User's e-mail address has been verified; otherwise false</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/emailVerified</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:failedEmailOTPAttempts</ClaimURI>
                <DisplayName>Account State</DisplayName>
                <AttributeID>failedEmailOTPAttempts</AttributeID>
                <Description>Number of failed email OTP attempts</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/failedEmailOtpAttempts</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:failedLoginAttempts</ClaimURI>
                <DisplayName>Faliled Login Attempts</DisplayName>
                <AttributeID>failedLoginAttempts</AttributeID>
                <Description>Number of failed login attempts</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/failedLoginAttempts</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:failedLoginAttemptsBeforeSuccess</ClaimURI>
                <DisplayName>Faliled Login Attempts Before Success</DisplayName>
                <AttributeID>failedLoginAttemptsBeforeSuccess</AttributeID>
                <Description>Number of failed attempts before a success login</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/failedLoginAttemptsBeforeSuccess</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:failedLoginLockoutCount</ClaimURI>
                <DisplayName>Failed Lockout Count</DisplayName>
                <AttributeID>failedLoginLockoutCount</AttributeID>
                <Description>Failed lockout count</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/failedLoginLockoutCount</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:failedPasswordRecoveryAttempts</ClaimURI>
                <DisplayName>Failed Password Recovery Attempts</DisplayName>
                <AttributeID>failedPasswordRecoveryAttempts</AttributeID>
                <Description>Number of consecutive failed attempts done for password recovery</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/failedPasswordRecoveryAttempts</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:failedSMSOTPAttempts</ClaimURI>
                <DisplayName>Failed SMS OTP attempts</DisplayName>
                <AttributeID>failedSMSOTPAttempts</AttributeID>
                <Description>Number of failed SMS OTP attempts</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/failedSmsOtpAttempts</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:failedTOTPAttempts</ClaimURI>
                <DisplayName>Failed TOTP Attempts</DisplayName>
                <AttributeID>failedTOTPAttempts</AttributeID>
                <Description>Number of failed TOTP attempts</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/failedTotpAttempts</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:isLiteUser</ClaimURI>
                <DisplayName>Lite User</DisplayName>
                <AttributeID>isLiteUser</AttributeID>
                <Description>Store whether the account is a lite user account</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/isLiteUser</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:lastLoginTime</ClaimURI>
                <DisplayName>Last Login Time</DisplayName>
                <AttributeID>lastLoginTime</AttributeID>
                <Description>Last login time</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/lastLoginTime</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:lastLogonTime</ClaimURI>
                <DisplayName>Last Logon Time</DisplayName>
                <AttributeID>lastLogonTime</AttributeID>
                <Description>Last logon time</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/lastLogonTime</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:lastPasswordUpdateTime</ClaimURI>
                <DisplayName>Last Password Update Time</DisplayName>
                <AttributeID>lastPasswordUpdateTime</AttributeID>
                <Description>Last password update time</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/lastPasswordUpdateTime</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:lockedReason</ClaimURI>
                <DisplayName>Locked Reason</DisplayName>
                <AttributeID>lockedReason</AttributeID>
                <Description>The reason why the user account is locked</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/lockedReason</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:phoneVerified</ClaimURI>
                <DisplayName>Phone Verified</DisplayName>
                <AttributeID>phoneVerified</AttributeID>
                <Description>True if the End-User's phone number has been verified; otherwise false</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/phoneVerified</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:preferredChannel</ClaimURI>
                <DisplayName>Preferred Channel</DisplayName>
                <AttributeID>preferredChannel</AttributeID>
                <Description>Preferred Notification Channel</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/preferredChannel</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:smsOTPDisabled</ClaimURI>
                <DisplayName>Disable SMS OTP</DisplayName>
                <AttributeID>smsOTPDisabled</AttributeID>
                <Description>Store whether SMS OTP is enabled or disabled</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/smsotp_disabled</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:tenantAdminAskPassword</ClaimURI>
                <DisplayName>Tenant Admin Ask Password</DisplayName>
                <AttributeID>tenantAdminAskPassword</AttributeID>
                <Description>Temporary claim to invoke email tenant admin ask Password feature</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/tenantAdminAskPassword</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:unlockTime</ClaimURI>
                <DisplayName>Unlock Time</DisplayName>
                <AttributeID>unlockTime</AttributeID>
                <Description>Unlock time</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/unlockTime</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:accountDisabled</ClaimURI>
                <DisplayName>Account Disabled</DisplayName>
                <AttributeID>accountDisabled</AttributeID>
                <Description>Store whether the user account is disabled or not</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/accountDisabled</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:dateOfBirth</ClaimURI>
                <DisplayName>Date Of Birth</DisplayName>
                <AttributeID>dateOfBirth</AttributeID>
                <Description>Date of birth</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/dob</MappedLocalClaim>
            </Claim>
        </Dialect>
        <Dialect dialectURI="http://schemas.xmlsoap.org/ws/2005/05/identity">
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:isReadOnlyUser</ClaimURI>
                <DisplayName>Read Only User</DisplayName>
                <AttributeID>isReadOnlyUser</AttributeID>
                <Description>Claim to store if the user is read only</Description>
                <Required />
                <DisplayOrder>1</DisplayOrder>
                <SupportedByDefault />
                <MappedLocalClaim>http://wso2.org/claims/identity/isReadOnlyUser</MappedLocalClaim>
            </Claim>
        </Dialect>
        <Dialect dialectURI="urn:ietf:params:scim:schemas:core:2.0">
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:core:2.0:User:phoneNumbers.fax</ClaimURI>
                <DisplayName>Phone Numbers - Fax Phone Number</DisplayName>
                <AttributeID>faxPhoneNumber</AttributeID>
                <Description>Fax Phone Number</Description>
                <DisplayOrder>5</DisplayOrder>
                <SupportedByDefault />
                <RegEx>^\s*(?:\+?(\d{1,3}))?[-. (]*(\d{3})[-. )]*(\d{3})[-. ]*(\d{4})(?: *x(\d+))?\s*$</RegEx>
                <MappedLocalClaim>http://wso2.org/claims/phoneNumbers.fax</MappedLocalClaim>
            </Claim>
            <Claim>
                <ClaimURI>urn:ietf:params:scim:schemas:core:2.0:User:phoneNumbers.pager</ClaimURI>
                <DisplayName>Phone Numbers - Pager Phone Number</DisplayName>
                <AttributeID>pagerPhoneNumber</AttributeID>
                <Description>Pager Phone Number</Description>
                <DisplayOrder>5</DisplayOrder>
                <SupportedByDefault />
                <RegEx>^\s*(?:\+?(\d{1,3}))?[-. (]*(\d{3})[-. )]*(\d{3})[-. ]*(\d{4})(?: *x(\d+))?\s*$</RegEx>
                <MappedLocalClaim>http://wso2.org/claims/phoneNumbers.pager</MappedLocalClaim>
            </Claim>
        </Dialect>
    </Dialects>
</ClaimConfig>
