<?xml version="1.0"?>
<configuration>
  <!-- LDAP BINDING & SIGNIN PAGE
    This section is provided to perform LDAP binding and configure the signin page as part of the membership user authentication.
  -->
  <configSections>
    <section name="accessManager" type="IBM.Security.Web.AccessManagerSection, IBM.Security.Web.ApplicationServices" />
  </configSections>

  <accessManager>
    <ldapBinding trustedUsername="" address="" suffix="" prefix="" enabled="false"/>
    <signinPage disablePostbackQueryString="ctx=ws" postbackDelay="3" />
  </accessManager>
  
  <system.web>
    <!--  AUTHENTICATION 
        This section sets the authentication policies of the application. Possible modes are "Windows", "Forms", 
        "Passport" and "None".  You must use "Forms" when using the Access Manager Membership Provider.
    -->
    <authentication mode="Forms">
      <forms loginUrl="AccessManagerSignin.aspx" protection="All" timeout="30" name="AppNameCookie" path="/" requireSSL="false" slidingExpiration="true" defaultUrl="default.aspx" cookieless="UseCookies" enableCrossAppRedirects="false"/>
    </authentication>
    <authorization>
      <allow users="*"/>
    </authorization>

    <!-- This section defines the Access Manager role and membership providers for ASP.NET.  -->
    <membership defaultProvider="AccessManagerMembershipProvider">
      <providers>
        <add applicationName="your application name" name="AccessManagerMembershipProvider" type="IBM.Security.Web.AccessManagerMembershipProvider, IBM.Security.Web.ApplicationServices, Version=1.8.0.0" userName="iv-user" comment="tam-comment_http_header " email="tam-user-email_http_header " creationDate="tam-user-created_http_header " passwordQuestion="tam-user-pwd-question_http_header" extendedProviderName="AspNetReadOnlyXmlMembershipProvider"/>
      </providers>
    </membership>

    <roleManager defaultProvider="AccessManagerRoleProvider" enabled="true">
      <providers>
        <add applicationName="your application name" name="AccessManagerRoleProvider" type="IBM.Security.Web.AccessManagerRoleProvider, IBM.Security.Web.ApplicationServices, Version=1.8.0.0" userName="iv-user" groupName="iv-groups" extendedProviderName="AspNetReadOnlyXmlRoleProvider" availableRoles="Administrators, Librarians, Students"/>
      </providers>
    </roleManager>
  </system.web>

</configuration>