From 891fcb71cef33326fc36dc711e74aba07833a347 Mon Sep 17 00:00:00 2001
From: brycentrivir <bwirick@trivir.com>
Date: Wed, 8 Apr 2026 16:14:28 -0600
Subject: [PATCH] feat: flipped extraction flag, rebuilding of failing tests
 afterwards

---
 src/cli/config/config-export.ts               |     6 +-
 src/cli/node/node-export.ts                   |     6 +-
 src/cli/script/script-export.ts               |     6 +-
 src/cli/server/server-export.ts               |     8 +-
 .../__snapshots__/config-export.test.js.snap  |     5 +-
 .../en/__snapshots__/node-export.test.js.snap |     4 +-
 .../__snapshots__/script-export.test.js.snap  |     4 +-
 .../__snapshots__/server-export.test.js.snap  |     5 +-
 .../config-export.e2e.test.js.snap            |    16 -
 .../node-export.e2e.test.js.snap              |  4491 +-
 .../script-export.e2e.test.js.snap            | 36231 ++++++++--------
 .../server-export.e2e.test.js.snap            | 12521 +++---
 test/e2e/config-export.e2e.test.js            |    12 +-
 .../am_1076162899/recording.har               |     0
 .../oauth2_393036114/recording.har            |     0
 .../openidm_3290118515/recording.har          |     0
 .../am_1076162899/recording.har               |     0
 .../oauth2_393036114/recording.har            |     0
 .../openidm_3290118515/recording.har          |     0
 .../am_1076162899/recording.har               |     0
 .../oauth2_393036114/recording.har            |     0
 .../openidm_3290118515/recording.har          |     0
 .../am_1076162899/recording.har               |     0
 .../oauth2_393036114/recording.har            |     0
 .../openidm_3290118515/recording.har          |     0
 .../am_1076162899/recording.har               |     0
 .../oauth2_393036114/recording.har            |     0
 .../openidm_3290118515/recording.har          |     0
 .../am_1076162899/recording.har               |     0
 .../am_1076162899/recording.har               |     0
 .../am_1076162899/recording.har               |     0
 test/e2e/node-export.e2e.test.js              |    21 +-
 test/e2e/script-export.e2e.test.js            |    14 +-
 test/e2e/server-export.e2e.test.js            |    41 +-
 34 files changed, 26368 insertions(+), 27023 deletions(-)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_all-separate_extract_directory_use-string-arrays_1044561342 => 0_all-separate_no-extract_directory_use-string-arrays_2175757408}/am_1076162899/recording.har (100%)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_all-separate_extract_directory_use-string-arrays_1044561342 => 0_all-separate_no-extract_directory_use-string-arrays_2175757408}/oauth2_393036114/recording.har (100%)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_all-separate_extract_directory_use-string-arrays_1044561342 => 0_all-separate_no-extract_directory_use-string-arrays_2175757408}/openidm_3290118515/recording.har (100%)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_node-id_193359214 => 0_node-id_D_781094437}/am_1076162899/recording.har (100%)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_node-id_193359214 => 0_node-id_D_781094437}/oauth2_393036114/recording.har (100%)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_node-id_193359214 => 0_node-id_D_781094437}/openidm_3290118515/recording.har (100%)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_node-name_use-string-arrays_2043637667 => 0_node-name_use-string-arrays_no-extract_1586525519}/am_1076162899/recording.har (100%)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_node-name_use-string-arrays_2043637667 => 0_node-name_use-string-arrays_no-extract_1586525519}/oauth2_393036114/recording.har (100%)
 rename test/e2e/mocks/node_2982235661/export_4211608755/{0_node-name_use-string-arrays_2043637667 => 0_node-name_use-string-arrays_no-extract_1586525519}/openidm_3290118515/recording.har (100%)
 rename test/e2e/mocks/script_540962730/export_4211608755/{0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095 => 0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201}/am_1076162899/recording.har (100%)
 rename test/e2e/mocks/script_540962730/export_4211608755/{0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095 => 0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201}/oauth2_393036114/recording.har (100%)
 rename test/e2e/mocks/script_540962730/export_4211608755/{0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095 => 0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201}/openidm_3290118515/recording.har (100%)
 rename test/e2e/mocks/script_540962730/export_4211608755/{0_extract_script-id_directory_3126738353 => 0_no-extract_script-id_directory_3322257391}/am_1076162899/recording.har (100%)
 rename test/e2e/mocks/script_540962730/export_4211608755/{0_extract_script-id_directory_3126738353 => 0_no-extract_script-id_directory_3322257391}/oauth2_393036114/recording.har (100%)
 rename test/e2e/mocks/script_540962730/export_4211608755/{0_extract_script-id_directory_3126738353 => 0_no-extract_script-id_directory_3322257391}/openidm_3290118515/recording.har (100%)
 rename test/e2e/mocks/server_1085029842/export_4211608755/{0_server-id_2035896751 => 0_server-id_directory_1227895731}/am_1076162899/recording.har (100%)
 rename test/e2e/mocks/server_1085029842/export_4211608755/{0_server-url_extract_directory_434708301 => 0_server-url_no-extract_directory_2567965531}/am_1076162899/recording.har (100%)
 rename test/e2e/mocks/server_1085029842/export_4211608755/{0_u_file_default_no-metadata_256171004 => 0_u_file_default_no-metadata_directory_2134419444}/am_1076162899/recording.har (100%)

diff --git a/src/cli/config/config-export.ts b/src/cli/config/config-export.ts
index 822a40f94..947a85f90 100644
--- a/src/cli/config/config-export.ts
+++ b/src/cli/config/config-export.ts
@@ -41,9 +41,9 @@ export default function setup() {
     )
     .addOption(
       new Option(
-        '-x, --extract',
-        'Extract scripts and server properties from the exported file, and save it to a separate file. Ignored with -a.'
-      )
+        '-x, --no-extract',
+        'Do not extract scripts and server properties from the exported file to a separate file.'
+      ).default(true, 'true')
     )
     .addOption(
       new Option(
diff --git a/src/cli/node/node-export.ts b/src/cli/node/node-export.ts
index ac5dc1f0f..41a2c25d5 100644
--- a/src/cli/node/node-export.ts
+++ b/src/cli/node/node-export.ts
@@ -47,9 +47,9 @@ export default function setup() {
     )
     .addOption(
       new Option(
-        '-x, --extract',
-        'Extract the script from the exported file, and save it to a separate file. Ignored with -a.'
-      )
+        '-x, --no-extract',
+        'Do not extract the script from the exported file to a separate file.'
+      ).default(true, 'true')
     )
     .addOption(
       new Option(
diff --git a/src/cli/script/script-export.ts b/src/cli/script/script-export.ts
index d77a4bf92..2e9aab5dd 100644
--- a/src/cli/script/script-export.ts
+++ b/src/cli/script/script-export.ts
@@ -61,9 +61,9 @@ export default function setup() {
     )
     .addOption(
       new Option(
-        '-x, --extract',
-        'Extract the script from the exported file, and save it to a separate file. Ignored with -a.'
-      )
+        '-x, --no-extract',
+        'Do not extract the script from the exported file to a separate file.'
+      ).default(true, 'true')
     )
     .addOption(
       new Option(
diff --git a/src/cli/server/server-export.ts b/src/cli/server/server-export.ts
index ae8598526..583ab4b8d 100644
--- a/src/cli/server/server-export.ts
+++ b/src/cli/server/server-export.ts
@@ -46,9 +46,9 @@ export default function setup() {
     )
     .addOption(
       new Option(
-        '-x, --extract',
-        'Extract scripts and server properties from the exported file, and save it to a separate file. Ignored with -a.'
-      )
+        '-x, --no-extract',
+        'Do not extract the server properties from the exported file to a separate file.'
+      ).default(true, 'true')
     )
     .addOption(
       new Option(
@@ -101,7 +101,7 @@ export default function setup() {
           verboseMessage(`Exporting all servers to a single file...`);
           const outcome = await exportServersToFile(
             options.file,
-            options.extract,
+            false,
             options.metadata,
             {
               includeDefault: options.default,
diff --git a/test/client_cli/en/__snapshots__/config-export.test.js.snap b/test/client_cli/en/__snapshots__/config-export.test.js.snap
index 647ee250c..0dd08f126 100644
--- a/test/client_cli/en/__snapshots__/config-export.test.js.snap
+++ b/test/client_cli/en/__snapshots__/config-export.test.js.snap
@@ -65,9 +65,8 @@ Options:
                              source environment.
   --use-string-arrays        Where applicable, use string arrays to store
                              multi-line text (e.g. scripts). (default: off)
-  -x, --extract              Extract scripts and server properties from the
-                             exported file, and save it to a separate file.
-                             Ignored with -a.
+  -x, --no-extract           Do not extract scripts and server properties from
+                             the exported file to a separate file.
   -h, --help                 Help
   -hh, --help-more           Help with all options.
   -hhh, --help-all           Help with all options, environment variables, and
diff --git a/test/client_cli/en/__snapshots__/node-export.test.js.snap b/test/client_cli/en/__snapshots__/node-export.test.js.snap
index 7fda336e3..1b2e19832 100644
--- a/test/client_cli/en/__snapshots__/node-export.test.js.snap
+++ b/test/client_cli/en/__snapshots__/node-export.test.js.snap
@@ -35,8 +35,8 @@ Options:
   -N, --no-metadata            Does not include metadata in the export file.
   --use-string-arrays          Where applicable, use string arrays to store
                                scripts. (default: off)
-  -x, --extract                Extract the script from the exported file, and
-                               save it to a separate file. Ignored with -a.
+  -x, --no-extract             Do not extract the script from the exported file
+                               to a separate file.
   -h, --help                   Help
   -hh, --help-more             Help with all options.
   -hhh, --help-all             Help with all options, environment variables, and
diff --git a/test/client_cli/en/__snapshots__/script-export.test.js.snap b/test/client_cli/en/__snapshots__/script-export.test.js.snap
index fc0ec5002..f043c881e 100644
--- a/test/client_cli/en/__snapshots__/script-export.test.js.snap
+++ b/test/client_cli/en/__snapshots__/script-export.test.js.snap
@@ -38,8 +38,8 @@ Options:
                              scripts). Ignored with -a and -A.
   -s, --script <script>      DEPRECATED! Use -n/--script-name instead. Name of
                              the script.
-  -x, --extract              Extract the script from the exported file, and save
-                             it to a separate file. Ignored with -a.
+  -x, --no-extract           Do not extract the script from the exported file to
+                             a separate file.
   -h, --help                 Help
   -hh, --help-more           Help with all options.
   -hhh, --help-all           Help with all options, environment variables, and
diff --git a/test/client_cli/en/__snapshots__/server-export.test.js.snap b/test/client_cli/en/__snapshots__/server-export.test.js.snap
index 8a1ea52c1..80381fa77 100644
--- a/test/client_cli/en/__snapshots__/server-export.test.js.snap
+++ b/test/client_cli/en/__snapshots__/server-export.test.js.snap
@@ -38,9 +38,8 @@ Options:
                                  full url (if not unique, it will error out). If
                                  specified, only one server is exported and the
                                  options -a and -A are ignored.
-  -x, --extract                  Extract scripts and server properties from the
-                                 exported file, and save it to a separate file.
-                                 Ignored with -a.
+  -x, --no-extract               Do not extract the server properties from the
+                                 exported file to a separate file.
   -h, --help                     Help
   -hh, --help-more               Help with all options.
   -hhh, --help-all               Help with all options, environment variables,
diff --git a/test/e2e/__snapshots__/config-export.e2e.test.js.snap b/test/e2e/__snapshots__/config-export.e2e.test.js.snap
index 5c88340cb..337146e52 100644
--- a/test/e2e/__snapshots__/config-export.e2e.test.js.snap
+++ b/test/e2e/__snapshots__/config-export.e2e.test.js.snap
@@ -8,14 +8,6 @@ exports[`frodo config export "frodo config export --all --modified-properties --
 
 exports[`frodo config export "frodo config export --all --modified-properties --read-only --file testExportAll2.json --include-active-values --use-string-arrays --no-decode --no-coords --type classic": should export everything to a single file named testExportAll2.json with no decoding variables, no journey coordinates, and using string arrays 2`] = `""`;
 
-exports[`frodo config export "frodo config export --all-separate --no-metadata --default --directory exportAllTestDir8 --include-active-values --use-string-arrays --no-decode --no-coords --type classic": should export everything, including default scripts, into separate files in the directory exportAllTestDir8 with scripts extracted, no decoding variables, no journey coordinates, separate mappings, and using string arrays 1`] = `0`;
-
-exports[`frodo config export "frodo config export --all-separate --no-metadata --default --directory exportAllTestDir8 --include-active-values --use-string-arrays --no-decode --no-coords --type classic": should export everything, including default scripts, into separate files in the directory exportAllTestDir8 with scripts extracted, no decoding variables, no journey coordinates, separate mappings, and using string arrays 2`] = `""`;
-
-exports[`frodo config export "frodo config export --all-separate --read-only --no-metadata --default --directory exportAllTestDir3 --use-string-arrays --no-decode --no-coords --extract --separate-mappings": should export everything, including default scripts, into separate files in the directory exportAllTestDir3 with scripts extracted, no decoding variables, no journey coordinates, separate mappings, and using string arrays 1`] = `0`;
-
-exports[`frodo config export "frodo config export --all-separate --read-only --no-metadata --default --directory exportAllTestDir3 --use-string-arrays --no-decode --no-coords --extract --separate-mappings": should export everything, including default scripts, into separate files in the directory exportAllTestDir3 with scripts extracted, no decoding variables, no journey coordinates, separate mappings, and using string arrays 2`] = `""`;
-
 exports[`frodo config export "frodo config export --global-only -af testExportAllGlobal.json -m classic": should export all global config to a single file named testExportAllGlobal.json. 1`] = `0`;
 
 exports[`frodo config export "frodo config export --global-only -af testExportAllGlobal.json -m classic": should export all global config to a single file named testExportAllGlobal.json. 2`] = `""`;
@@ -28,18 +20,10 @@ exports[`frodo config export "frodo config export -AD exportAllTestDir1": should
 
 exports[`frodo config export "frodo config export -AD exportAllTestDir1": should export everything into separate files in the directory exportAllTestDir1 2`] = `""`;
 
-exports[`frodo config export "frodo config export -MAsxD exportAllTestDir2": should export everything into separate files in the directory exportAllTestDir2 with scripts extracted and mappings separate 1`] = `0`;
-
-exports[`frodo config export "frodo config export -MAsxD exportAllTestDir2": should export everything into separate files in the directory exportAllTestDir2 with scripts extracted and mappings separate 2`] = `""`;
-
 exports[`frodo config export "frodo config export -RAD exportAllTestDir5 --include-active-values": should export everything including secret values into separate files in the directory exportAllTestDir5 1`] = `0`;
 
 exports[`frodo config export "frodo config export -RAD exportAllTestDir5 --include-active-values": should export everything including secret values into separate files in the directory exportAllTestDir5 2`] = `""`;
 
-exports[`frodo config export "frodo config export -RMAsxD exportAllTestDir7 -m classic": should export everything into separate files in the directory exportAllTestDir7 with scripts extracted and mappings separate 1`] = `0`;
-
-exports[`frodo config export "frodo config export -RMAsxD exportAllTestDir7 -m classic": should export everything into separate files in the directory exportAllTestDir7 with scripts extracted and mappings separate 2`] = `""`;
-
 exports[`frodo config export "frodo config export -adND exportAllTestDir4": should export everything, including default scripts, to a single file 1`] = `0`;
 
 exports[`frodo config export "frodo config export -adND exportAllTestDir4": should export everything, including default scripts, to a single file 2`] = `""`;
diff --git a/test/e2e/__snapshots__/node-export.e2e.test.js.snap b/test/e2e/__snapshots__/node-export.e2e.test.js.snap
index 3339bc136..c11c22bfe 100644
--- a/test/e2e/__snapshots__/node-export.e2e.test.js.snap
+++ b/test/e2e/__snapshots__/node-export.e2e.test.js.snap
@@ -1007,49 +1007,11 @@ Note that for required parameters that are not specified in the options will use
 }
 `;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5 1`] = `0`;
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5 1`] = `0`;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5 2`] = `""`;
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5 2`] = `""`;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/ALU.nodeTypes.js 1`] = `
-"var SCRIPT_OUTCOMES = {
-    SUCCESS: 'Success'
-};
-
-var OPERATORS = {
-    ADD: "ADD",
-    SUBTRACT: "SUBTRACT",
-    MULTIPLY: "MULTIPLY",
-    DIVIDE: "DIVIDE"
-}
-
-function main() {
-    var a = Number(properties.a);
-    var b = Number(properties.b);
-    switch (properties.operator) {
-        case OPERATORS.ADD:
-            nodeState.putShared("z", a + b);
-            break;
-        case OPERATORS.SUBTRACT:
-            nodeState.putShared("z", a - b);
-            break;
-        case OPERATORS.MULTIPLY:
-            nodeState.putShared("z", a * b);
-            break;
-        case OPERATORS.DIVIDE:
-            if (b == 0) throw new Error("Cannot divide by 0");
-            nodeState.putShared("z", a / b);
-            break;
-        default: throw new Error("Unknown operator.");
-    }
-    action.goTo(SCRIPT_OUTCOMES.SUCCESS);
-}
-
-main();
-"
-`;
-
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/ALU.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5: customNodeExportDir5/ALU.nodeTypes.json 1`] = `
 {
   "meta": Any<Object>,
   "nodeTypes": {
@@ -1084,7 +1046,43 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
           "type": "STRING",
         },
       },
-      "script": "file://ALU.nodeTypes.js",
+      "script": [
+        "var SCRIPT_OUTCOMES = {",
+        "    SUCCESS: 'Success'",
+        "};",
+        "",
+        "var OPERATORS = {",
+        "    ADD: "ADD",",
+        "    SUBTRACT: "SUBTRACT",",
+        "    MULTIPLY: "MULTIPLY",",
+        "    DIVIDE: "DIVIDE"",
+        "}",
+        "",
+        "function main() {",
+        "    var a = Number(properties.a);",
+        "    var b = Number(properties.b);",
+        "    switch (properties.operator) {",
+        "        case OPERATORS.ADD:",
+        "            nodeState.putShared("z", a + b);",
+        "            break;",
+        "        case OPERATORS.SUBTRACT:",
+        "            nodeState.putShared("z", a - b);",
+        "            break;",
+        "        case OPERATORS.MULTIPLY:",
+        "            nodeState.putShared("z", a * b);",
+        "            break;",
+        "        case OPERATORS.DIVIDE:",
+        "            if (b == 0) throw new Error("Cannot divide by 0");",
+        "            nodeState.putShared("z", a / b);",
+        "            break;",
+        "        default: throw new Error("Unknown operator.");",
+        "    }",
+        "    action.goTo(SCRIPT_OUTCOMES.SUCCESS);",
+        "}",
+        "",
+        "main();",
+        "",
+      ],
       "serviceName": "c6063fb2f5dc42dd9772bedc93898bd8",
       "tags": [
         "math",
@@ -1095,612 +1093,610 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
 }
 `;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Display-Callback.nodeTypes.js 1`] = `
-"var SCRIPT_OUTCOMES = {
-    OUTCOME: 'outcome'
-};
-
-var CALLBACKS = {
-	BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK",
-	CHOICE_CALLBACK: "CHOICE_CALLBACK",
-	CONFIRMATION_CALLBACK: "CONFIRMATION_CALLBACK",
-	CONSENT_MAPPING_CALLBACK: "CONSENT_MAPPING_CALLBACK",
-	DEVICE_PROFILE_CALLBACK: "DEVICE_PROFILE_CALLBACK",
-	HIDDEN_VALUE_CALLBACK: "HIDDEN_VALUE_CALLBACK",
-	HTTP_CALLBACK: "HTTP_CALLBACK",
-	IDP_CALLBACK: "IDP_CALLBACK",
-	KBA_CREATE_CALLBACK: "KBA_CREATE_CALLBACK",
-	LANGUAGE_CALLBACK: "LANGUAGE_CALLBACK",
-	METADATA_CALLBACK: "METADATA_CALLBACK",
-	NAME_CALLBACK: "NAME_CALLBACK",
-	NUMBER_ATTRIBUTE_INPUT_CALLBACK: "NUMBER_ATTRIBUTE_INPUT_CALLBACK",
-	PASSWORD_CALLBACK: "PASSWORD_CALLBACK",
-	POLLING_WAIT_CALLBACK: "POLLING_WAIT_CALLBACK",
-    REDIRECT_CALLBACK: "REDIRECT_CALLBACK",
-	SCRIPT_TEXT_OUTPUT_CALLBACK: "SCRIPT_TEXT_OUTPUT_CALLBACK",
-	SELECT_IDP_CALLBACK: "SELECT_IDP_CALLBACK",
-	STRING_ATTRIBUTE_INPUT_CALLBACK: "STRING_ATTRIBUTE_INPUT_CALLBACK",
-	SUSPENDED_TEXT_OUTPUT_CALLBACK: "SUSPENDED_TEXT_OUTPUT_CALLBACK",
-	TERMS_AND_CONDITIONS_CALLBACK: "TERMS_AND_CONDITIONS_CALLBACK",
-	TEXT_INPUT_CALLBACK: "TEXT_INPUT_CALLBACK",
-	TEXT_OUTPUT_CALLBACK: "TEXT_OUTPUT_CALLBACK",
-	VALIDATED_PASSWORD_CALLBACK: "VALIDATED_PASSWORD_CALLBACK",
-	VALIDATED_USERNAME_CALLBACK: "VALIDATED_USERNAME_CALLBACK",
-	X509_CERTIFICATE_CALLBACK: "X509_CERTIFICATE_CALLBACK"
-}
-
-function isStringPresent(value) {
-    return value;
-}
-
-function getString(value) {
-    return value || '';
-}
-
-function isArrayPresent(value) {
-    return value;
-}
-
-function getArray(value) {
-    return value ? JSON.parse(value) : [];
-}
-
-function isObjectPresent(value) {
-    return value;
-}
-
-function getObject(value) {
-    return value ? JSON.parse(value) : {};
-}
-
-function isIntPresent(value) {
-    return value;
-}
-
-function getInt(value) {
-    return value ? parseInt(value) : 0;
-}
-
-function isDoublePresent(value) {
-    return value;
-}
-
-function getDouble(value) {
-    return value ? parseFloat(value) : 0.0;
-}
-
-function isBooleanPresent(value) {
-    return value;
-}
-
-function getBoolean(value) {
-    return value ? value.toLowerCase() === 'true' : false;
-}
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5: customNodeExportDir5/Display-Callback.nodeTypes.json 1`] = `
+{
+  "meta": Any<Object>,
+  "nodeTypes": {
+    "ef81b1a52c914710b3388caebfe7233a-1": {
+      "_id": "ef81b1a52c914710b3388caebfe7233a-1",
+      "description": "Displays custom callback to the page",
+      "displayName": "Display Callback",
+      "errorOutcome": false,
+      "inputs": [],
+      "outcomes": [
+        "outcome",
+      ],
+      "outputs": [],
+      "properties": {
+        "callback": {
+          "description": "The callback to display",
+          "multivalued": false,
+          "options": {
+            "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK": "booleanAttributeInputCallback",
+            "CHOICE_CALLBACK": "choiceCallback",
+            "CONFIRMATION_CALLBACK": "confirmationCallback",
+            "CONSENT_MAPPING_CALLBACK": "consentMappingCallback",
+            "DEVICE_PROFILE_CALLBACK": "deviceProfileCallback",
+            "HIDDEN_VALUE_CALLBACK": "hiddenValueCallback",
+            "HTTP_CALLBACK": "httpCallback",
+            "IDP_CALLBACK": "idPCallback",
+            "KBA_CREATE_CALLBACK": "kbaCreateCallback",
+            "LANGUAGE_CALLBACK": "languageCallback",
+            "METADATA_CALLBACK": "metadataCallback",
+            "NAME_CALLBACK": "nameCallback",
+            "NUMBER_ATTRIBUTE_INPUT_CALLBACK": "numberAttributeInputCallback",
+            "PASSWORD_CALLBACK": "passwordCallback",
+            "POLLING_WAIT_CALLBACK": "pollingWaitCallback",
+            "REDIRECT_CALLBACK": "redirectCallback",
+            "SCRIPT_TEXT_OUTPUT_CALLBACK": "scriptTextOutputCallback",
+            "SELECT_IDP_CALLBACK": "selectIdPCallback",
+            "STRING_ATTRIBUTE_INPUT_CALLBACK": "stringAttributeInputCallback",
+            "SUSPENDED_TEXT_OUTPUT_CALLBACK": "suspendedTextOutputCallback",
+            "TERMS_AND_CONDITIONS_CALLBACK": "termsAndConditionsCallback",
+            "TEXT_INPUT_CALLBACK": "textInputCallback",
+            "TEXT_OUTPUT_CALLBACK": "textOutputCallback",
+            "VALIDATED_PASSWORD_CALLBACK": "validatedPasswordCallback",
+            "VALIDATED_USERNAME_CALLBACK": "validatedUsernameCallback",
+            "X509_CERTIFICATE_CALLBACK": "x509CertificateCallback",
+          },
+          "required": true,
+          "title": "Callback",
+          "type": "STRING",
+        },
+        "objectSharedProperty": {
+          "description": "The objectAttributes property on the shared state to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Object Attributes Shared Property",
+          "type": "STRING",
+        },
+        "objectTransientProperty": {
+          "description": "The objectAttributes property on the transient state to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Object Attributes Transient Property",
+          "type": "STRING",
+        },
+        "options": {
+          "description": "The options containing the parameters for the callback (see documentation for possible parameters: https://docs.pingidentity.com/pingoneaic/latest/am-scripting/scripting-api-node.html#scripting-api-node-callbacks). 
 
-function setProperty(value) {
-    if (properties.sharedProperty) nodeState.putShared(properties.sharedProperty, value);
-    if (properties.transientProperty) nodeState.putTransient(properties.transientProperty, value);
-    if (properties.objectSharedProperty) {
-        var attributes = {};
-        attributes[properties.objectSharedProperty] = value;
-        nodeState.mergeShared({
-            objectAttributes: attributes
-        });
-    }
-    if (properties.objectTransientProperty) {
-        var attributes = {};
-        attributes[properties.objectTransientProperty] = value;
-        nodeState.mergeTransient({
-            objectAttributes: attributes
-        });
-    }
-}
+For example, for textOutputCallback, the options could be: { messageType: 0, message: "Hello World!" }. 
 
-function booleanAttributeInputCallback() {
-    var name = getString(properties.options.name);
-    var prompt = getString(properties.options.prompt);
-    var value = getBoolean(properties.options.value);
-    var required = getBoolean(properties.options.required);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
-        if (isArrayPresent(failedPolicies)) {
-            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
-        } else {
-            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
-        }
-    } else if (isArrayPresent(failedPolicies)) {
-        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, failedPolicies);
-    } else {
-        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required);
-    }
-}
-
-function choiceCallback() {
-    var prompt = getString(properties.options.prompt);
-    var choices = getArray(properties.options.choices);
-    var defaultChoice = getInt(properties.options.defaultChoice);
-    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);
-    callbacksBuilder.choiceCallback(prompt, choices, defaultChoice, multipleSelectionsAllowed);
-}
-
-function confirmationCallback() {
-    var prompt = getString(properties.options.prompt);
-    var messageType = getInt(properties.options.messageType);
-    var options = getArray(properties.options.options);
-    var optionType = getInt(properties.options.optionType);
-    var defaultOption = getInt(properties.options.defaultOption);
-    if (isStringPresent(properties.options.prompt)) {
-        if (isIntPresent(properties.options.optionType)) {
-            callbacksBuilder.confirmationCallback(prompt, messageType, optionType, defaultOption);
-        } else {
-            callbacksBuilder.confirmationCallback(prompt, messageType, options, defaultOption);
-        }
-    } else {
-        if (isIntPresent(properties.options.optionType)) {
-            callbacksBuilder.confirmationCallback(messageType, optionType, defaultOption);
-        } else {
-            callbacksBuilder.confirmationCallback(messageType, options, defaultOption);
-        }
-    }
-}
-
-function consentMappingCallback() {
-    var config = getObject(properties.options.config);
-    var message = getString(properties.options.message);
-    var isRequired = getBoolean(properties.options.isRequired);
-    var name = getString(properties.options.name);
-    var displayName = getString(properties.options.displayName);
-    var icon = getString(properties.options.icon);
-    var accessLevel = getString(properties.options.accessLevel);
-    var titles = getArray(properties.options.titles);
-    if (isObjectPresent(properties.options.prompt)) {
-        callbacksBuilder.consentMappingCallback(config, message, isRequired);
-    } else {
-        callbacksBuilder.consentMappingCallback(name, displayName, icon, accessLevel, titles, message, isRequired);
-    }
-}
-
-function deviceProfileCallback() {
-    var metadata = getBoolean(properties.options.metadata);
-    var location = getBoolean(properties.options.location);
-    var message = getString(properties.options.message);
-    callbacksBuilder.deviceProfileCallback(metadata, location, message);
-}
-
-function hiddenValueCallback() {
-    var id = getString(properties.options.id);
-    var value = getString(properties.options.value);
-    callbacksBuilder.hiddenValueCallback(id, value);
-}
-
-function httpCallback() {
-    var authorizationHeader = getString(properties.options.authorizationHeader);
-    var negotiationHeader = getString(properties.options.negotiationHeader);
-    var authRHeader = getString(properties.options.authRHeader);
-    var negoName = getString(properties.options.negoName);
-    var negoValue = getString(properties.options.negoValue);
-    if (isStringPresent(properties.options.authorizationHeader) || isStringPresent(properties.options.negotiationHeader)) {
-        var errorCode = getString(properties.options.errorCode);
-        callbacksBuilder.httpCallback(authorizationHeader, negotiationHeader, errorCode);
-    } else {
-        var errorCode = getInt(properties.options.errorCode);
-        callbacksBuilder.httpCallback(authRHeader, negoName, negoValue, errorCode);
-    }
-}
-
-function idPCallback() {
-    var provider = getString(properties.options.provider);
-    var clientId = getString(properties.options.clientId);
-    var redirectUri = getString(properties.options.redirectUri);
-    var scope = getArray(properties.options.scope);
-    var nonce = getString(properties.options.nonce);
-    var request = getString(properties.options.request);
-    var requestUri = getString(properties.options.requestUri);
-    var acrValues = getArray(properties.options.acrValues);
-    var requestNativeAppForUserInfo = getBoolean(properties.options.requestNativeAppForUserInfo);
-    var token = getString(properties.options.token);
-    var tokenType = getString(properties.options.tokenType);
-    if (isStringPresent(properties.options.token) || isStringPresent(properties.options.tokenType)) {
-        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo, token, tokenType);
-    } else {
-        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo);
-    }
-}
-
-function kbaCreateCallback() {
-    var prompt = getString(properties.options.prompt);
-    var predefinedQuestions = getArray(properties.options.predefinedQuestions);
-    var allowUserDefinedQuestions = getBoolean(properties.options.allowUserDefinedQuestions);
-    callbacksBuilder.kbaCreateCallback(prompt, predefinedQuestions, allowUserDefinedQuestions);
-}
-
-function languageCallback() {
-    var language = getString(properties.options.language);
-    var country = getString(properties.options.country);
-    callbacksBuilder.languageCallback(language, country);
-}
-
-function metadataCallback() {
-    var outputValue = getObject(properties.options.outputValue);
-    callbacksBuilder.metadataCallback(outputValue);
-}
-
-function nameCallback() {
-    var prompt = getString(properties.options.prompt);
-    var defaultName = getString(properties.options.defaultName);
-    if (isStringPresent(properties.options.defaultName)) {
-        callbacksBuilder.nameCallback(prompt, defaultName);
-    } else {
-        callbacksBuilder.nameCallback(prompt);
-    }
-}
-
-function numberAttributeInputCallback() {
-    var name = getString(properties.options.name);
-    var prompt = getString(properties.options.prompt);
-    var value = getDouble(properties.options.value);
-    var required = getBoolean(properties.options.required);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
-        if (isArrayPresent(failedPolicies)) {
-            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
-        } else {
-            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
-        }
-    } else if (isArrayPresent(failedPolicies)) {
-        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, failedPolicies);
-    } else {
-        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required);
-    }
-}
-
-function passwordCallback() {
-    var prompt = getString(properties.options.prompt);
-    var echoOn = getBoolean(properties.options.echoOn);
-    callbacksBuilder.passwordCallback(prompt, echoOn);
-}
-
-function pollingWaitCallback() {
-    var waitTime = getString(properties.options.waitTime);
-    var message = getString(properties.options.message);
-    callbacksBuilder.pollingWaitCallback(waitTime, message);
-}
-
-function redirectCallback() {
-    throw new Error('Not Implemented');
-}
-
-function scriptTextOutputCallback() {
-    var message = getString(properties.options.message);
-    callbacksBuilder.scriptTextOutputCallback(message);
-}
-
-function selectIdPCallback() {
-    var providers = getObject(properties.options.providers);
-    callbacksBuilder.selectIdPCallback(providers);
-}
-
-function stringAttributeInputCallback() {
-    var name = getString(properties.options.name);
-    var prompt = getString(properties.options.prompt);
-    var value = getString(properties.options.value);
-    var required = getBoolean(properties.options.required);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
-        if (isArrayPresent(failedPolicies)) {
-            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
-        } else {
-            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
-        }
-    } else if (isArrayPresent(failedPolicies)) {
-        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, failedPolicies);
-    } else {
-        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required);
-    }
-}
-
-function suspendedTextOutputCallback() {
-    var messageType = getInt(properties.options.messageType);
-    var message = getString(properties.options.message);
-    callbacksBuilder.suspendedTextOutputCallback(messageType, message);
-}
-
-function termsAndConditionsCallback() {
-    var version = getString(properties.options.version);
-    var terms = getString(properties.options.terms);
-    var createDate = getString(properties.options.createDate);
-    callbacksBuilder.termsAndConditionsCallback(version, terms, createDate);
-}
-
-function textInputCallback() {
-    var prompt = getString(properties.options.prompt);
-    var defaultText = getString(properties.options.defaultText);
-    if (isStringPresent(properties.options.defaultText)) {
-        callbacksBuilder.textInputCallback(prompt, defaultText);
-    } else {
-        callbacksBuilder.textInputCallback(prompt);
-    }
-}
-
-function textOutputCallback() {
-    var messageType = getString(properties.options.messageType);
-    var message = getString(properties.options.message);
-    callbacksBuilder.textOutputCallback(messageType, message);
-}
-
-function validatedPasswordCallback() {
-    var prompt = getString(properties.options.prompt);
-    var echoOn = getBoolean(properties.options.echoOn);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isArrayPresent(properties.options.failedPolicies)) {
-        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly, failedPolicies);
-    } else {
-        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly);
-    }
-}
-
-function validatedUsernameCallback() {
-    var prompt = getString(properties.options.prompt);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isArrayPresent(properties.options.failedPolicies)) {
-        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly, failedPolicies);
-    } else {
-        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly);
-    }
-}
-
-function x509CertificateCallback() {
-    throw new Error('Not Implemented');
-}
-
-function getBooleanAttributeInputCallback() {
-    setProperty(callbacks.getBooleanAttributeInputCallbacks().get(0));
-}
-
-function getChoiceCallback() {
-    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);
-    var selections = callbacks.getChoiceCallbacks().get(0);
-    setProperty(multipleSelectionsAllowed ? selections : selections[0]);
-}
-
-function getConfirmationCallback() {
-    setProperty(callbacks.getConfirmationCallbacks().get(0));
-}
-
-function getConsentMappingCallback() {
-    setProperty(callbacks.getConsentMappingCallbacks().get(0));
-}
-
-function getDeviceProfileCallback() {
-    setProperty(callbacks.getDeviceProfileCallbacks().get(0));
-}
-
-function getHiddenValueCallback() {
-    var id = getString(properties.options.id);
-    setProperty(callbacks.getHiddenValueCallbacks().get(id));
-}
-
-function getHttpCallback() {
-    setProperty(callbacks.getHttpCallbacks().get(0));
-}
-
-function getIdPCallback() {
-    setProperty(callbacks.getIdpCallbacks().get(0));
-}
-
-function getKbaCreateCallback() {
-    setProperty(callbacks.getKbaCreateCallbacks().get(0));
-}
-
-function getLanguageCallback() {
-    setProperty(callbacks.getLanguageCallbacks().get(0));
-}
-
-function getNameCallback() {
-    setProperty(callbacks.getNameCallbacks().get(0));
-}
-
-function getNumberAttributeInputCallback() {
-    setProperty(callbacks.getNumberAttributeInputCallbacks().get(0));
-}
-
-function getPasswordCallback() {
-    setProperty(callbacks.getPasswordCallbacks().get(0));
-}
-
-function getSelectIdPCallback() {
-    setProperty(callbacks.getSelectIdPCallbacks().get(0));
-}
-
-function getStringAttributeInputCallback() {
-    setProperty(callbacks.getStringAttributeInputCallbacks().get(0));
-}
-
-function getTermsAndConditionsCallback() {
-    setProperty(callbacks.getTermsAndConditionsCallbacks().get(0));
-}
-
-function getTextInputCallback() {
-    setProperty(callbacks.getTextInputCallbacks().get(0));
-}
-
-function getValidatedPasswordCallback() {
-    setProperty(callbacks.getValidatedPasswordCallbacks().get(0));
-}
-
-function getValidatedUsernameCallback() {
-    setProperty(callbacks.getValidatedUsernameCallbacks().get(0));
-}
-
-function getX509CertificateCallback() {
-    setProperty(callbacks.getX509CertificateCallbacks().get(0));
-}
-
-function main() {
-    if (!callbacks.isEmpty()) {
-        switch (properties.callback) {
-            case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: getBooleanAttributeInputCallback(); break;
-            case CALLBACKS.CHOICE_CALLBACK: getChoiceCallback(); break;
-            case CALLBACKS.CONFIRMATION_CALLBACK: getConfirmationCallback(); break;
-            case CALLBACKS.CONSENT_MAPPING_CALLBACK: getConsentMappingCallback(); break;
-            case CALLBACKS.DEVICE_PROFILE_CALLBACK: getDeviceProfileCallback(); break;
-            case CALLBACKS.HIDDEN_VALUE_CALLBACK: getHiddenValueCallback(); break;
-            case CALLBACKS.HTTP_CALLBACK: getHttpCallback(); break;
-            case CALLBACKS.IDP_CALLBACK: getIdPCallback(); break;
-            case CALLBACKS.KBA_CREATE_CALLBACK: getKbaCreateCallback(); break;
-            case CALLBACKS.LANGUAGE_CALLBACK: getLanguageCallback(); break;
-            case CALLBACKS.NAME_CALLBACK: getNameCallback(); break;
-            case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: getNumberAttributeInputCallback(); break;
-            case CALLBACKS.PASSWORD_CALLBACK: getPasswordCallback(); break;
-            case CALLBACKS.SELECT_IDP_CALLBACK: getSelectIdPCallback(); break;
-            case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: getStringAttributeInputCallback(); break;
-            case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: getTermsAndConditionsCallback(); break;
-            case CALLBACKS.TEXT_INPUT_CALLBACK: getTextInputCallback(); break;
-            case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: getValidatedPasswordCallback(); break;
-            case CALLBACKS.VALIDATED_USERNAME_CALLBACK: getValidatedUsernameCallback(); break;
-            case CALLBACKS.X509_CERTIFICATE_CALLBACK: getX509CertificateCallback(); break;
-            default: break;
-        }
-        action.goTo(SCRIPT_OUTCOMES.OUTCOME);
-        return;
-    }
-
-    switch (properties.callback) {
-        case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: booleanAttributeInputCallback(); break;
-        case CALLBACKS.CHOICE_CALLBACK: choiceCallback(); break;
-        case CALLBACKS.CONFIRMATION_CALLBACK: confirmationCallback(); break;
-        case CALLBACKS.CONSENT_MAPPING_CALLBACK: consentMappingCallback(); break;
-        case CALLBACKS.DEVICE_PROFILE_CALLBACK: deviceProfileCallback(); break;
-        case CALLBACKS.HIDDEN_VALUE_CALLBACK: hiddenValueCallback(); break;
-        case CALLBACKS.HTTP_CALLBACK: httpCallback(); break;
-        case CALLBACKS.IDP_CALLBACK: idPCallback(); break;
-        case CALLBACKS.KBA_CREATE_CALLBACK: kbaCreateCallback(); break;
-        case CALLBACKS.LANGUAGE_CALLBACK: languageCallback(); break;
-        case CALLBACKS.METADATA_CALLBACK: metadataCallback(); break;
-        case CALLBACKS.NAME_CALLBACK: nameCallback(); break;
-        case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: numberAttributeInputCallback(); break;
-        case CALLBACKS.PASSWORD_CALLBACK: passwordCallback(); break;
-        case CALLBACKS.POLLING_WAIT_CALLBACK: pollingWaitCallback(); break;
-        case CALLBACKS.REDIRECT_CALLBACK: redirectCallback(); break;
-        case CALLBACKS.SCRIPT_TEXT_OUTPUT_CALLBACK: scriptTextOutputCallback(); break;
-        case CALLBACKS.SELECT_IDP_CALLBACK: selectIdPCallback(); break;
-        case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: stringAttributeInputCallback(); break;
-        case CALLBACKS.SUSPENDED_TEXT_OUTPUT_CALLBACK: suspendedTextOutputCallback(); break;
-        case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: termsAndConditionsCallback(); break;
-        case CALLBACKS.TEXT_INPUT_CALLBACK: textInputCallback(); break;
-        case CALLBACKS.TEXT_OUTPUT_CALLBACK: textOutputCallback(); break;
-        case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: validatedPasswordCallback(); break;
-        case CALLBACKS.VALIDATED_USERNAME_CALLBACK: validatedUsernameCallback(); break;
-        case CALLBACKS.X509_CERTIFICATE_CALLBACK: x509CertificateCallback(); break;
-        default: throw new Error('Unknown Callback'); // Should never reach this case
-    }
-}
-
-main();
-"
-`;
-
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Display-Callback.nodeTypes.json 1`] = `
-{
-  "meta": Any<Object>,
-  "nodeTypes": {
-    "ef81b1a52c914710b3388caebfe7233a-1": {
-      "_id": "ef81b1a52c914710b3388caebfe7233a-1",
-      "description": "Displays custom callback to the page",
-      "displayName": "Display Callback",
-      "errorOutcome": false,
-      "inputs": [],
-      "outcomes": [
-        "outcome",
+Note that for required parameters that are not specified in the options will use default values based on the type of the parameter ("" for Strings, [] for Arrays, {} for Objects, 0 for Ints, 0.0 for Doubles, and false for Booleans).",
+          "multivalued": false,
+          "required": true,
+          "title": "Options",
+          "type": "OBJECT",
+        },
+        "sharedProperty": {
+          "description": "The shared state property to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Shared State Property",
+          "type": "STRING",
+        },
+        "transientProperty": {
+          "description": "The transient state property to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Transient State Property",
+          "type": "STRING",
+        },
+      },
+      "script": [
+        "var SCRIPT_OUTCOMES = {",
+        "    OUTCOME: 'outcome'",
+        "};",
+        "",
+        "var CALLBACKS = {",
+        "	BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK",",
+        "	CHOICE_CALLBACK: "CHOICE_CALLBACK",",
+        "	CONFIRMATION_CALLBACK: "CONFIRMATION_CALLBACK",",
+        "	CONSENT_MAPPING_CALLBACK: "CONSENT_MAPPING_CALLBACK",",
+        "	DEVICE_PROFILE_CALLBACK: "DEVICE_PROFILE_CALLBACK",",
+        "	HIDDEN_VALUE_CALLBACK: "HIDDEN_VALUE_CALLBACK",",
+        "	HTTP_CALLBACK: "HTTP_CALLBACK",",
+        "	IDP_CALLBACK: "IDP_CALLBACK",",
+        "	KBA_CREATE_CALLBACK: "KBA_CREATE_CALLBACK",",
+        "	LANGUAGE_CALLBACK: "LANGUAGE_CALLBACK",",
+        "	METADATA_CALLBACK: "METADATA_CALLBACK",",
+        "	NAME_CALLBACK: "NAME_CALLBACK",",
+        "	NUMBER_ATTRIBUTE_INPUT_CALLBACK: "NUMBER_ATTRIBUTE_INPUT_CALLBACK",",
+        "	PASSWORD_CALLBACK: "PASSWORD_CALLBACK",",
+        "	POLLING_WAIT_CALLBACK: "POLLING_WAIT_CALLBACK",",
+        "    REDIRECT_CALLBACK: "REDIRECT_CALLBACK",",
+        "	SCRIPT_TEXT_OUTPUT_CALLBACK: "SCRIPT_TEXT_OUTPUT_CALLBACK",",
+        "	SELECT_IDP_CALLBACK: "SELECT_IDP_CALLBACK",",
+        "	STRING_ATTRIBUTE_INPUT_CALLBACK: "STRING_ATTRIBUTE_INPUT_CALLBACK",",
+        "	SUSPENDED_TEXT_OUTPUT_CALLBACK: "SUSPENDED_TEXT_OUTPUT_CALLBACK",",
+        "	TERMS_AND_CONDITIONS_CALLBACK: "TERMS_AND_CONDITIONS_CALLBACK",",
+        "	TEXT_INPUT_CALLBACK: "TEXT_INPUT_CALLBACK",",
+        "	TEXT_OUTPUT_CALLBACK: "TEXT_OUTPUT_CALLBACK",",
+        "	VALIDATED_PASSWORD_CALLBACK: "VALIDATED_PASSWORD_CALLBACK",",
+        "	VALIDATED_USERNAME_CALLBACK: "VALIDATED_USERNAME_CALLBACK",",
+        "	X509_CERTIFICATE_CALLBACK: "X509_CERTIFICATE_CALLBACK"",
+        "}",
+        "",
+        "function isStringPresent(value) {",
+        "    return value;",
+        "}",
+        "",
+        "function getString(value) {",
+        "    return value || '';",
+        "}",
+        "",
+        "function isArrayPresent(value) {",
+        "    return value;",
+        "}",
+        "",
+        "function getArray(value) {",
+        "    return value ? JSON.parse(value) : [];",
+        "}",
+        "",
+        "function isObjectPresent(value) {",
+        "    return value;",
+        "}",
+        "",
+        "function getObject(value) {",
+        "    return value ? JSON.parse(value) : {};",
+        "}",
+        "",
+        "function isIntPresent(value) {",
+        "    return value;",
+        "}",
+        "",
+        "function getInt(value) {",
+        "    return value ? parseInt(value) : 0;",
+        "}",
+        "",
+        "function isDoublePresent(value) {",
+        "    return value;",
+        "}",
+        "",
+        "function getDouble(value) {",
+        "    return value ? parseFloat(value) : 0.0;",
+        "}",
+        "",
+        "function isBooleanPresent(value) {",
+        "    return value;",
+        "}",
+        "",
+        "function getBoolean(value) {",
+        "    return value ? value.toLowerCase() === 'true' : false;",
+        "}",
+        "",
+        "function setProperty(value) {",
+        "    if (properties.sharedProperty) nodeState.putShared(properties.sharedProperty, value);",
+        "    if (properties.transientProperty) nodeState.putTransient(properties.transientProperty, value);",
+        "    if (properties.objectSharedProperty) {",
+        "        var attributes = {};",
+        "        attributes[properties.objectSharedProperty] = value;",
+        "        nodeState.mergeShared({",
+        "            objectAttributes: attributes",
+        "        });",
+        "    }",
+        "    if (properties.objectTransientProperty) {",
+        "        var attributes = {};",
+        "        attributes[properties.objectTransientProperty] = value;",
+        "        nodeState.mergeTransient({",
+        "            objectAttributes: attributes",
+        "        });",
+        "    }",
+        "}",
+        "",
+        "function booleanAttributeInputCallback() {",
+        "    var name = getString(properties.options.name);",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var value = getBoolean(properties.options.value);",
+        "    var required = getBoolean(properties.options.required);",
+        "    var policies = getObject(properties.options.policies);",
+        "    var validateOnly = getBoolean(properties.options.validateOnly);",
+        "    var failedPolicies = getArray(properties.options.failedPolicies);",
+        "    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {",
+        "        if (isArrayPresent(failedPolicies)) {",
+        "            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);",
+        "        } else {",
+        "            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly);",
+        "        }",
+        "    } else if (isArrayPresent(failedPolicies)) {",
+        "        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, failedPolicies);",
+        "    } else {",
+        "        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required);",
+        "    }",
+        "}",
+        "",
+        "function choiceCallback() {",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var choices = getArray(properties.options.choices);",
+        "    var defaultChoice = getInt(properties.options.defaultChoice);",
+        "    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);",
+        "    callbacksBuilder.choiceCallback(prompt, choices, defaultChoice, multipleSelectionsAllowed);",
+        "}",
+        "",
+        "function confirmationCallback() {",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var messageType = getInt(properties.options.messageType);",
+        "    var options = getArray(properties.options.options);",
+        "    var optionType = getInt(properties.options.optionType);",
+        "    var defaultOption = getInt(properties.options.defaultOption);",
+        "    if (isStringPresent(properties.options.prompt)) {",
+        "        if (isIntPresent(properties.options.optionType)) {",
+        "            callbacksBuilder.confirmationCallback(prompt, messageType, optionType, defaultOption);",
+        "        } else {",
+        "            callbacksBuilder.confirmationCallback(prompt, messageType, options, defaultOption);",
+        "        }",
+        "    } else {",
+        "        if (isIntPresent(properties.options.optionType)) {",
+        "            callbacksBuilder.confirmationCallback(messageType, optionType, defaultOption);",
+        "        } else {",
+        "            callbacksBuilder.confirmationCallback(messageType, options, defaultOption);",
+        "        }",
+        "    }",
+        "}",
+        "",
+        "function consentMappingCallback() {",
+        "    var config = getObject(properties.options.config);",
+        "    var message = getString(properties.options.message);",
+        "    var isRequired = getBoolean(properties.options.isRequired);",
+        "    var name = getString(properties.options.name);",
+        "    var displayName = getString(properties.options.displayName);",
+        "    var icon = getString(properties.options.icon);",
+        "    var accessLevel = getString(properties.options.accessLevel);",
+        "    var titles = getArray(properties.options.titles);",
+        "    if (isObjectPresent(properties.options.prompt)) {",
+        "        callbacksBuilder.consentMappingCallback(config, message, isRequired);",
+        "    } else {",
+        "        callbacksBuilder.consentMappingCallback(name, displayName, icon, accessLevel, titles, message, isRequired);",
+        "    }",
+        "}",
+        "",
+        "function deviceProfileCallback() {",
+        "    var metadata = getBoolean(properties.options.metadata);",
+        "    var location = getBoolean(properties.options.location);",
+        "    var message = getString(properties.options.message);",
+        "    callbacksBuilder.deviceProfileCallback(metadata, location, message);",
+        "}",
+        "",
+        "function hiddenValueCallback() {",
+        "    var id = getString(properties.options.id);",
+        "    var value = getString(properties.options.value);",
+        "    callbacksBuilder.hiddenValueCallback(id, value);",
+        "}",
+        "",
+        "function httpCallback() {",
+        "    var authorizationHeader = getString(properties.options.authorizationHeader);",
+        "    var negotiationHeader = getString(properties.options.negotiationHeader);",
+        "    var authRHeader = getString(properties.options.authRHeader);",
+        "    var negoName = getString(properties.options.negoName);",
+        "    var negoValue = getString(properties.options.negoValue);",
+        "    if (isStringPresent(properties.options.authorizationHeader) || isStringPresent(properties.options.negotiationHeader)) {",
+        "        var errorCode = getString(properties.options.errorCode);",
+        "        callbacksBuilder.httpCallback(authorizationHeader, negotiationHeader, errorCode);",
+        "    } else {",
+        "        var errorCode = getInt(properties.options.errorCode);",
+        "        callbacksBuilder.httpCallback(authRHeader, negoName, negoValue, errorCode);",
+        "    }",
+        "}",
+        "",
+        "function idPCallback() {",
+        "    var provider = getString(properties.options.provider);",
+        "    var clientId = getString(properties.options.clientId);",
+        "    var redirectUri = getString(properties.options.redirectUri);",
+        "    var scope = getArray(properties.options.scope);",
+        "    var nonce = getString(properties.options.nonce);",
+        "    var request = getString(properties.options.request);",
+        "    var requestUri = getString(properties.options.requestUri);",
+        "    var acrValues = getArray(properties.options.acrValues);",
+        "    var requestNativeAppForUserInfo = getBoolean(properties.options.requestNativeAppForUserInfo);",
+        "    var token = getString(properties.options.token);",
+        "    var tokenType = getString(properties.options.tokenType);",
+        "    if (isStringPresent(properties.options.token) || isStringPresent(properties.options.tokenType)) {",
+        "        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo, token, tokenType);",
+        "    } else {",
+        "        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo);",
+        "    }",
+        "}",
+        "",
+        "function kbaCreateCallback() {",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var predefinedQuestions = getArray(properties.options.predefinedQuestions);",
+        "    var allowUserDefinedQuestions = getBoolean(properties.options.allowUserDefinedQuestions);",
+        "    callbacksBuilder.kbaCreateCallback(prompt, predefinedQuestions, allowUserDefinedQuestions);",
+        "}",
+        "",
+        "function languageCallback() {",
+        "    var language = getString(properties.options.language);",
+        "    var country = getString(properties.options.country);",
+        "    callbacksBuilder.languageCallback(language, country);",
+        "}",
+        "",
+        "function metadataCallback() {",
+        "    var outputValue = getObject(properties.options.outputValue);",
+        "    callbacksBuilder.metadataCallback(outputValue);",
+        "}",
+        "",
+        "function nameCallback() {",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var defaultName = getString(properties.options.defaultName);",
+        "    if (isStringPresent(properties.options.defaultName)) {",
+        "        callbacksBuilder.nameCallback(prompt, defaultName);",
+        "    } else {",
+        "        callbacksBuilder.nameCallback(prompt);",
+        "    }",
+        "}",
+        "",
+        "function numberAttributeInputCallback() {",
+        "    var name = getString(properties.options.name);",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var value = getDouble(properties.options.value);",
+        "    var required = getBoolean(properties.options.required);",
+        "    var policies = getObject(properties.options.policies);",
+        "    var validateOnly = getBoolean(properties.options.validateOnly);",
+        "    var failedPolicies = getArray(properties.options.failedPolicies);",
+        "    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {",
+        "        if (isArrayPresent(failedPolicies)) {",
+        "            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);",
+        "        } else {",
+        "            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly);",
+        "        }",
+        "    } else if (isArrayPresent(failedPolicies)) {",
+        "        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, failedPolicies);",
+        "    } else {",
+        "        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required);",
+        "    }",
+        "}",
+        "",
+        "function passwordCallback() {",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var echoOn = getBoolean(properties.options.echoOn);",
+        "    callbacksBuilder.passwordCallback(prompt, echoOn);",
+        "}",
+        "",
+        "function pollingWaitCallback() {",
+        "    var waitTime = getString(properties.options.waitTime);",
+        "    var message = getString(properties.options.message);",
+        "    callbacksBuilder.pollingWaitCallback(waitTime, message);",
+        "}",
+        "",
+        "function redirectCallback() {",
+        "    throw new Error('Not Implemented');",
+        "}",
+        "",
+        "function scriptTextOutputCallback() {",
+        "    var message = getString(properties.options.message);",
+        "    callbacksBuilder.scriptTextOutputCallback(message);",
+        "}",
+        "",
+        "function selectIdPCallback() {",
+        "    var providers = getObject(properties.options.providers);",
+        "    callbacksBuilder.selectIdPCallback(providers);",
+        "}",
+        "",
+        "function stringAttributeInputCallback() {",
+        "    var name = getString(properties.options.name);",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var value = getString(properties.options.value);",
+        "    var required = getBoolean(properties.options.required);",
+        "    var policies = getObject(properties.options.policies);",
+        "    var validateOnly = getBoolean(properties.options.validateOnly);",
+        "    var failedPolicies = getArray(properties.options.failedPolicies);",
+        "    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {",
+        "        if (isArrayPresent(failedPolicies)) {",
+        "            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);",
+        "        } else {",
+        "            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly);",
+        "        }",
+        "    } else if (isArrayPresent(failedPolicies)) {",
+        "        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, failedPolicies);",
+        "    } else {",
+        "        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required);",
+        "    }",
+        "}",
+        "",
+        "function suspendedTextOutputCallback() {",
+        "    var messageType = getInt(properties.options.messageType);",
+        "    var message = getString(properties.options.message);",
+        "    callbacksBuilder.suspendedTextOutputCallback(messageType, message);",
+        "}",
+        "",
+        "function termsAndConditionsCallback() {",
+        "    var version = getString(properties.options.version);",
+        "    var terms = getString(properties.options.terms);",
+        "    var createDate = getString(properties.options.createDate);",
+        "    callbacksBuilder.termsAndConditionsCallback(version, terms, createDate);",
+        "}",
+        "",
+        "function textInputCallback() {",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var defaultText = getString(properties.options.defaultText);",
+        "    if (isStringPresent(properties.options.defaultText)) {",
+        "        callbacksBuilder.textInputCallback(prompt, defaultText);",
+        "    } else {",
+        "        callbacksBuilder.textInputCallback(prompt);",
+        "    }",
+        "}",
+        "",
+        "function textOutputCallback() {",
+        "    var messageType = getString(properties.options.messageType);",
+        "    var message = getString(properties.options.message);",
+        "    callbacksBuilder.textOutputCallback(messageType, message);",
+        "}",
+        "",
+        "function validatedPasswordCallback() {",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var echoOn = getBoolean(properties.options.echoOn);",
+        "    var policies = getObject(properties.options.policies);",
+        "    var validateOnly = getBoolean(properties.options.validateOnly);",
+        "    var failedPolicies = getArray(properties.options.failedPolicies);",
+        "    if (isArrayPresent(properties.options.failedPolicies)) {",
+        "        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly, failedPolicies);",
+        "    } else {",
+        "        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly);",
+        "    }",
+        "}",
+        "",
+        "function validatedUsernameCallback() {",
+        "    var prompt = getString(properties.options.prompt);",
+        "    var policies = getObject(properties.options.policies);",
+        "    var validateOnly = getBoolean(properties.options.validateOnly);",
+        "    var failedPolicies = getArray(properties.options.failedPolicies);",
+        "    if (isArrayPresent(properties.options.failedPolicies)) {",
+        "        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly, failedPolicies);",
+        "    } else {",
+        "        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly);",
+        "    }",
+        "}",
+        "",
+        "function x509CertificateCallback() {",
+        "    throw new Error('Not Implemented');",
+        "}",
+        "",
+        "function getBooleanAttributeInputCallback() {",
+        "    setProperty(callbacks.getBooleanAttributeInputCallbacks().get(0));",
+        "}",
+        "",
+        "function getChoiceCallback() {",
+        "    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);",
+        "    var selections = callbacks.getChoiceCallbacks().get(0);",
+        "    setProperty(multipleSelectionsAllowed ? selections : selections[0]);",
+        "}",
+        "",
+        "function getConfirmationCallback() {",
+        "    setProperty(callbacks.getConfirmationCallbacks().get(0));",
+        "}",
+        "",
+        "function getConsentMappingCallback() {",
+        "    setProperty(callbacks.getConsentMappingCallbacks().get(0));",
+        "}",
+        "",
+        "function getDeviceProfileCallback() {",
+        "    setProperty(callbacks.getDeviceProfileCallbacks().get(0));",
+        "}",
+        "",
+        "function getHiddenValueCallback() {",
+        "    var id = getString(properties.options.id);",
+        "    setProperty(callbacks.getHiddenValueCallbacks().get(id));",
+        "}",
+        "",
+        "function getHttpCallback() {",
+        "    setProperty(callbacks.getHttpCallbacks().get(0));",
+        "}",
+        "",
+        "function getIdPCallback() {",
+        "    setProperty(callbacks.getIdpCallbacks().get(0));",
+        "}",
+        "",
+        "function getKbaCreateCallback() {",
+        "    setProperty(callbacks.getKbaCreateCallbacks().get(0));",
+        "}",
+        "",
+        "function getLanguageCallback() {",
+        "    setProperty(callbacks.getLanguageCallbacks().get(0));",
+        "}",
+        "",
+        "function getNameCallback() {",
+        "    setProperty(callbacks.getNameCallbacks().get(0));",
+        "}",
+        "",
+        "function getNumberAttributeInputCallback() {",
+        "    setProperty(callbacks.getNumberAttributeInputCallbacks().get(0));",
+        "}",
+        "",
+        "function getPasswordCallback() {",
+        "    setProperty(callbacks.getPasswordCallbacks().get(0));",
+        "}",
+        "",
+        "function getSelectIdPCallback() {",
+        "    setProperty(callbacks.getSelectIdPCallbacks().get(0));",
+        "}",
+        "",
+        "function getStringAttributeInputCallback() {",
+        "    setProperty(callbacks.getStringAttributeInputCallbacks().get(0));",
+        "}",
+        "",
+        "function getTermsAndConditionsCallback() {",
+        "    setProperty(callbacks.getTermsAndConditionsCallbacks().get(0));",
+        "}",
+        "",
+        "function getTextInputCallback() {",
+        "    setProperty(callbacks.getTextInputCallbacks().get(0));",
+        "}",
+        "",
+        "function getValidatedPasswordCallback() {",
+        "    setProperty(callbacks.getValidatedPasswordCallbacks().get(0));",
+        "}",
+        "",
+        "function getValidatedUsernameCallback() {",
+        "    setProperty(callbacks.getValidatedUsernameCallbacks().get(0));",
+        "}",
+        "",
+        "function getX509CertificateCallback() {",
+        "    setProperty(callbacks.getX509CertificateCallbacks().get(0));",
+        "}",
+        "",
+        "function main() {",
+        "    if (!callbacks.isEmpty()) {",
+        "        switch (properties.callback) {",
+        "            case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: getBooleanAttributeInputCallback(); break;",
+        "            case CALLBACKS.CHOICE_CALLBACK: getChoiceCallback(); break;",
+        "            case CALLBACKS.CONFIRMATION_CALLBACK: getConfirmationCallback(); break;",
+        "            case CALLBACKS.CONSENT_MAPPING_CALLBACK: getConsentMappingCallback(); break;",
+        "            case CALLBACKS.DEVICE_PROFILE_CALLBACK: getDeviceProfileCallback(); break;",
+        "            case CALLBACKS.HIDDEN_VALUE_CALLBACK: getHiddenValueCallback(); break;",
+        "            case CALLBACKS.HTTP_CALLBACK: getHttpCallback(); break;",
+        "            case CALLBACKS.IDP_CALLBACK: getIdPCallback(); break;",
+        "            case CALLBACKS.KBA_CREATE_CALLBACK: getKbaCreateCallback(); break;",
+        "            case CALLBACKS.LANGUAGE_CALLBACK: getLanguageCallback(); break;",
+        "            case CALLBACKS.NAME_CALLBACK: getNameCallback(); break;",
+        "            case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: getNumberAttributeInputCallback(); break;",
+        "            case CALLBACKS.PASSWORD_CALLBACK: getPasswordCallback(); break;",
+        "            case CALLBACKS.SELECT_IDP_CALLBACK: getSelectIdPCallback(); break;",
+        "            case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: getStringAttributeInputCallback(); break;",
+        "            case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: getTermsAndConditionsCallback(); break;",
+        "            case CALLBACKS.TEXT_INPUT_CALLBACK: getTextInputCallback(); break;",
+        "            case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: getValidatedPasswordCallback(); break;",
+        "            case CALLBACKS.VALIDATED_USERNAME_CALLBACK: getValidatedUsernameCallback(); break;",
+        "            case CALLBACKS.X509_CERTIFICATE_CALLBACK: getX509CertificateCallback(); break;",
+        "            default: break;",
+        "        }",
+        "        action.goTo(SCRIPT_OUTCOMES.OUTCOME);",
+        "        return;",
+        "    }",
+        "",
+        "    switch (properties.callback) {",
+        "        case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: booleanAttributeInputCallback(); break;",
+        "        case CALLBACKS.CHOICE_CALLBACK: choiceCallback(); break;",
+        "        case CALLBACKS.CONFIRMATION_CALLBACK: confirmationCallback(); break;",
+        "        case CALLBACKS.CONSENT_MAPPING_CALLBACK: consentMappingCallback(); break;",
+        "        case CALLBACKS.DEVICE_PROFILE_CALLBACK: deviceProfileCallback(); break;",
+        "        case CALLBACKS.HIDDEN_VALUE_CALLBACK: hiddenValueCallback(); break;",
+        "        case CALLBACKS.HTTP_CALLBACK: httpCallback(); break;",
+        "        case CALLBACKS.IDP_CALLBACK: idPCallback(); break;",
+        "        case CALLBACKS.KBA_CREATE_CALLBACK: kbaCreateCallback(); break;",
+        "        case CALLBACKS.LANGUAGE_CALLBACK: languageCallback(); break;",
+        "        case CALLBACKS.METADATA_CALLBACK: metadataCallback(); break;",
+        "        case CALLBACKS.NAME_CALLBACK: nameCallback(); break;",
+        "        case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: numberAttributeInputCallback(); break;",
+        "        case CALLBACKS.PASSWORD_CALLBACK: passwordCallback(); break;",
+        "        case CALLBACKS.POLLING_WAIT_CALLBACK: pollingWaitCallback(); break;",
+        "        case CALLBACKS.REDIRECT_CALLBACK: redirectCallback(); break;",
+        "        case CALLBACKS.SCRIPT_TEXT_OUTPUT_CALLBACK: scriptTextOutputCallback(); break;",
+        "        case CALLBACKS.SELECT_IDP_CALLBACK: selectIdPCallback(); break;",
+        "        case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: stringAttributeInputCallback(); break;",
+        "        case CALLBACKS.SUSPENDED_TEXT_OUTPUT_CALLBACK: suspendedTextOutputCallback(); break;",
+        "        case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: termsAndConditionsCallback(); break;",
+        "        case CALLBACKS.TEXT_INPUT_CALLBACK: textInputCallback(); break;",
+        "        case CALLBACKS.TEXT_OUTPUT_CALLBACK: textOutputCallback(); break;",
+        "        case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: validatedPasswordCallback(); break;",
+        "        case CALLBACKS.VALIDATED_USERNAME_CALLBACK: validatedUsernameCallback(); break;",
+        "        case CALLBACKS.X509_CERTIFICATE_CALLBACK: x509CertificateCallback(); break;",
+        "        default: throw new Error('Unknown Callback'); // Should never reach this case",
+        "    }",
+        "}",
+        "",
+        "main();",
+        "",
       ],
-      "outputs": [],
-      "properties": {
-        "callback": {
-          "description": "The callback to display",
-          "multivalued": false,
-          "options": {
-            "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK": "booleanAttributeInputCallback",
-            "CHOICE_CALLBACK": "choiceCallback",
-            "CONFIRMATION_CALLBACK": "confirmationCallback",
-            "CONSENT_MAPPING_CALLBACK": "consentMappingCallback",
-            "DEVICE_PROFILE_CALLBACK": "deviceProfileCallback",
-            "HIDDEN_VALUE_CALLBACK": "hiddenValueCallback",
-            "HTTP_CALLBACK": "httpCallback",
-            "IDP_CALLBACK": "idPCallback",
-            "KBA_CREATE_CALLBACK": "kbaCreateCallback",
-            "LANGUAGE_CALLBACK": "languageCallback",
-            "METADATA_CALLBACK": "metadataCallback",
-            "NAME_CALLBACK": "nameCallback",
-            "NUMBER_ATTRIBUTE_INPUT_CALLBACK": "numberAttributeInputCallback",
-            "PASSWORD_CALLBACK": "passwordCallback",
-            "POLLING_WAIT_CALLBACK": "pollingWaitCallback",
-            "REDIRECT_CALLBACK": "redirectCallback",
-            "SCRIPT_TEXT_OUTPUT_CALLBACK": "scriptTextOutputCallback",
-            "SELECT_IDP_CALLBACK": "selectIdPCallback",
-            "STRING_ATTRIBUTE_INPUT_CALLBACK": "stringAttributeInputCallback",
-            "SUSPENDED_TEXT_OUTPUT_CALLBACK": "suspendedTextOutputCallback",
-            "TERMS_AND_CONDITIONS_CALLBACK": "termsAndConditionsCallback",
-            "TEXT_INPUT_CALLBACK": "textInputCallback",
-            "TEXT_OUTPUT_CALLBACK": "textOutputCallback",
-            "VALIDATED_PASSWORD_CALLBACK": "validatedPasswordCallback",
-            "VALIDATED_USERNAME_CALLBACK": "validatedUsernameCallback",
-            "X509_CERTIFICATE_CALLBACK": "x509CertificateCallback",
-          },
-          "required": true,
-          "title": "Callback",
-          "type": "STRING",
-        },
-        "objectSharedProperty": {
-          "description": "The objectAttributes property on the shared state to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Object Attributes Shared Property",
-          "type": "STRING",
-        },
-        "objectTransientProperty": {
-          "description": "The objectAttributes property on the transient state to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Object Attributes Transient Property",
-          "type": "STRING",
-        },
-        "options": {
-          "description": "The options containing the parameters for the callback (see documentation for possible parameters: https://docs.pingidentity.com/pingoneaic/latest/am-scripting/scripting-api-node.html#scripting-api-node-callbacks). 
-
-For example, for textOutputCallback, the options could be: { messageType: 0, message: "Hello World!" }. 
-
-Note that for required parameters that are not specified in the options will use default values based on the type of the parameter ("" for Strings, [] for Arrays, {} for Objects, 0 for Ints, 0.0 for Doubles, and false for Booleans).",
-          "multivalued": false,
-          "required": true,
-          "title": "Options",
-          "type": "OBJECT",
-        },
-        "sharedProperty": {
-          "description": "The shared state property to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Shared State Property",
-          "type": "STRING",
-        },
-        "transientProperty": {
-          "description": "The transient state property to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Transient State Property",
-          "type": "STRING",
-        },
-      },
-      "script": "file://Display-Callback.nodeTypes.js",
       "serviceName": "ef81b1a52c914710b3388caebfe7233a",
       "tags": [
         "callback",
@@ -1711,40 +1707,7 @@ Note that for required parameters that are not specified in the options will use
 }
 `;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Display-State.nodeTypes.js 1`] = `
-"var SCRIPT_OUTCOMES = {
-  OUTCOME: "outcome"
-};
-
-function main() {
-    if (!callbacks.isEmpty()) {
-        action.goTo(SCRIPT_OUTCOMES.OUTCOME);
-        return;
-    }
-    var keySet = nodeState.keys(); // Java Set<String>
-    var keys = Array.from(keySet); // Make it into JavaScript array
-    debugState = {};
-    for (var i in keys) {
-        var k = new String(keys[i]);
-        var item = nodeState.get(k);
-        if (typeof item === "object") {
-            debugState[k] = nodeState.getObject(k);
-        } else {
-            debugState[k] = nodeState.get(k);
-        }
-    }
-    if (properties.displayFormat === "JSON") {
-        callbacksBuilder.textOutputCallback(0, \`<pre style="text-align: left;">\${JSON.stringify(debugState, null, 2)}</pre>\`);
-        return;
-    }
-    callbacksBuilder.textOutputCallback(0, \`<table><tr><td style="border: 1px solid black;">Key</td><td style="border: 1px solid black;">Value</td></tr>\${Array.from(Object.keys(debugState).map(k => \`<tr><td style="border: 1px solid black;"><pre style="text-align: left;">\${k}</pre></td><td style="border: 1px solid black;"><pre style="text-align: left;">\${debugState[k]}</pre></td></tr>\`))}</table>\`);
-}
-
-main();
-"
-`;
-
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Display-State.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5: customNodeExportDir5/Display-State.nodeTypes.json 1`] = `
 {
   "meta": Any<Object>,
   "nodeTypes": {
@@ -1772,7 +1735,38 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
           "type": "STRING",
         },
       },
-      "script": "file://Display-State.nodeTypes.js",
+      "script": [
+        "var SCRIPT_OUTCOMES = {",
+        "  OUTCOME: "outcome"",
+        "};",
+        "",
+        "function main() {",
+        "    if (!callbacks.isEmpty()) {",
+        "        action.goTo(SCRIPT_OUTCOMES.OUTCOME);",
+        "        return;",
+        "    }",
+        "    var keySet = nodeState.keys(); // Java Set<String>",
+        "    var keys = Array.from(keySet); // Make it into JavaScript array",
+        "    debugState = {};",
+        "    for (var i in keys) {",
+        "        var k = new String(keys[i]);",
+        "        var item = nodeState.get(k);",
+        "        if (typeof item === "object") {",
+        "            debugState[k] = nodeState.getObject(k);",
+        "        } else {",
+        "            debugState[k] = nodeState.get(k);",
+        "        }",
+        "    }",
+        "    if (properties.displayFormat === "JSON") {",
+        "        callbacksBuilder.textOutputCallback(0, \`<pre style="text-align: left;">\${JSON.stringify(debugState, null, 2)}</pre>\`);",
+        "        return;",
+        "    }",
+        "    callbacksBuilder.textOutputCallback(0, \`<table><tr><td style="border: 1px solid black;">Key</td><td style="border: 1px solid black;">Value</td></tr>\${Array.from(Object.keys(debugState).map(k => \`<tr><td style="border: 1px solid black;"><pre style="text-align: left;">\${k}</pre></td><td style="border: 1px solid black;"><pre style="text-align: left;">\${debugState[k]}</pre></td></tr>\`))}</table>\`);",
+        "}",
+        "",
+        "main();",
+        "",
+      ],
       "serviceName": "8ab9f1aad4b4460a9c45d15fb148e221",
       "tags": [
         "debug",
@@ -1783,39 +1777,7 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
 }
 `;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Generate-JWT.nodeTypes.js 1`] = `
-"var aud = properties.audience;
-var iss = properties.issuer;
-var validity = properties.validity;
-var esv = properties.signingkey;
-
-var signingkey = systemEnv.getProperty(esv);
-
-var username = nodeState.get("username");
-
-var data = {
-  jwtType:"SIGNED",
-  jwsAlgorithm: "HS256",
-  issuer: iss,
-  subject: username,
-  audience: aud,
-  type: "JWT",
-  validityMinutes: validity,
-  signingKey: signingkey
-};
-
-var jwt = jwtAssertion.generateJwt(data);
-
-if (jwt !== null && jwt.length > 0) {
-  nodeState.putShared("assertionJwt" , jwt);
-  action.goTo("True");
-} else {
-  action.goTo("False");
-}
-"
-`;
-
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Generate-JWT.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5: customNodeExportDir5/Generate-JWT.nodeTypes.json 1`] = `
 {
   "meta": Any<Object>,
   "nodeTypes": {
@@ -1862,7 +1824,36 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
           "type": "NUMBER",
         },
       },
-      "script": "file://Generate-JWT.nodeTypes.js",
+      "script": [
+        "var aud = properties.audience;",
+        "var iss = properties.issuer;",
+        "var validity = properties.validity;",
+        "var esv = properties.signingkey;",
+        "",
+        "var signingkey = systemEnv.getProperty(esv);",
+        "",
+        "var username = nodeState.get("username");",
+        "",
+        "var data = {",
+        "  jwtType:"SIGNED",",
+        "  jwsAlgorithm: "HS256",",
+        "  issuer: iss,",
+        "  subject: username,",
+        "  audience: aud,",
+        "  type: "JWT",",
+        "  validityMinutes: validity,",
+        "  signingKey: signingkey",
+        "};",
+        "",
+        "var jwt = jwtAssertion.generateJwt(data);",
+        "",
+        "if (jwt !== null && jwt.length > 0) {",
+        "  nodeState.putShared("assertionJwt" , jwt);",
+        "  action.goTo("True");",
+        "} else {",
+        "  action.goTo("False");",
+        "}",
+      ],
       "serviceName": "e5ad0110c8ee4dafaae983003cd05d4a",
       "tags": [
         "Utilities",
@@ -1873,21 +1864,7 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
 }
 `;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Has-Session.nodeTypes.js 1`] = `
-"var SCRIPT_OUTCOMES = {
-    TRUE: 'True',
-    FALSE: 'False'
-}
-
-function main() {
-    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
-}
-
-main();
-"
-`;
-
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Has-Session.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5: customNodeExportDir5/Has-Session.nodeTypes.json 1`] = `
 {
   "meta": Any<Object>,
   "nodeTypes": {
@@ -1903,7 +1880,19 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
       ],
       "outputs": [],
       "properties": {},
-      "script": "file://Has-Session.nodeTypes.js",
+      "script": [
+        "var SCRIPT_OUTCOMES = {",
+        "    TRUE: 'True',",
+        "    FALSE: 'False'",
+        "}",
+        "",
+        "function main() {",
+        "    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);",
+        "}",
+        "",
+        "main();",
+        "",
+      ],
       "serviceName": "c605506774a848f7877b4d17a453bd39",
       "tags": [
         "utilities",
@@ -1913,21 +1902,7 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
 }
 `;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Has-Session-AM.nodeTypes.js 1`] = `
-"var SCRIPT_OUTCOMES = {
-    TRUE: 'True',
-    FALSE: 'False'
-}
-
-function main() {
-    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
-}
-
-main();
-"
-`;
-
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Has-Session-AM.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5: customNodeExportDir5/Has-Session-AM.nodeTypes.json 1`] = `
 {
   "meta": Any<Object>,
   "nodeTypes": {
@@ -1943,7 +1918,19 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
       ],
       "outputs": [],
       "properties": {},
-      "script": "file://Has-Session-AM.nodeTypes.js",
+      "script": [
+        "var SCRIPT_OUTCOMES = {",
+        "    TRUE: 'True',",
+        "    FALSE: 'False'",
+        "}",
+        "",
+        "function main() {",
+        "    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);",
+        "}",
+        "",
+        "main();",
+        "",
+      ],
       "serviceName": "session",
       "tags": [
         "utilities",
@@ -1953,64 +1940,7 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
 }
 `;
 
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Vector-ALU.nodeTypes.js 1`] = `
-"var SCRIPT_OUTCOMES = {
-    SUCCESS: 'Success'
-};
-
-var OPERATORS = {
-    ADD: "ADD",
-    SUBTRACT: "SUBTRACT",
-    DOT: "DOT",
-    CROSS: "CROSS"
-}
-
-function add(a, b) {
-    return a.map((v, i) => v + b[i]);
-}
-
-function subtract(a, b) {
-    return a.map((v, i) => v - b[i]);
-}
-
-function dot(a, b) {
-    return a.reduce((sum, v, i) => sum + v * b[i], 0);
-}
-
-function cross(a, b) {
-    return [
-        a[1] * b[2] - a[2] * b[1],
-        a[2] * b[0] - a[0] * b[2],
-        a[0] * b[1] - a[1] * b[0]
-    ];
-}
-
-function main() {
-    if (properties.a.length !== properties.b.length) throw new Error("Vectors not the same dimension.");
-    switch (properties.operator) {
-        case OPERATORS.ADD:
-            nodeState.putShared("c", add(properties.a, properties.b));
-            break;
-        case OPERATORS.SUBTRACT:
-            nodeState.putShared("c", subtract(properties.a, properties.b));
-            break;
-        case OPERATORS.DOT:
-            nodeState.putShared("c", dot(properties.a, properties.b));
-            break;
-        case OPERATORS.CROSS:
-            if (properties.a.length !== 3) throw new Error("Vectors not dimension 3 for cross product");
-            nodeState.putShared("c", cross(properties.a, properties.b));
-            break;
-        default: throw new Error("Unknown operator.");
-    }
-    action.goTo(SCRIPT_OUTCOMES.SUCCESS);
-}
-
-main();
-"
-`;
-
-exports[`frodo node export "frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5: customNodeExportDir5/Vector-ALU.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5: customNodeExportDir5/Vector-ALU.nodeTypes.json 1`] = `
 {
   "meta": Any<Object>,
   "nodeTypes": {
@@ -2066,7 +1996,62 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
           "type": "STRING",
         },
       },
-      "script": "file://Vector-ALU.nodeTypes.js",
+      "script": [
+        "var SCRIPT_OUTCOMES = {",
+        "    SUCCESS: 'Success'",
+        "};",
+        "",
+        "var OPERATORS = {",
+        "    ADD: "ADD",",
+        "    SUBTRACT: "SUBTRACT",",
+        "    DOT: "DOT",",
+        "    CROSS: "CROSS"",
+        "}",
+        "",
+        "function add(a, b) {",
+        "    return a.map((v, i) => v + b[i]);",
+        "}",
+        "",
+        "function subtract(a, b) {",
+        "    return a.map((v, i) => v - b[i]);",
+        "}",
+        "",
+        "function dot(a, b) {",
+        "    return a.reduce((sum, v, i) => sum + v * b[i], 0);",
+        "}",
+        "",
+        "function cross(a, b) {",
+        "    return [",
+        "        a[1] * b[2] - a[2] * b[1],",
+        "        a[2] * b[0] - a[0] * b[2],",
+        "        a[0] * b[1] - a[1] * b[0]",
+        "    ];",
+        "}",
+        "",
+        "function main() {",
+        "    if (properties.a.length !== properties.b.length) throw new Error("Vectors not the same dimension.");",
+        "    switch (properties.operator) {",
+        "        case OPERATORS.ADD:",
+        "            nodeState.putShared("c", add(properties.a, properties.b));",
+        "            break;",
+        "        case OPERATORS.SUBTRACT:",
+        "            nodeState.putShared("c", subtract(properties.a, properties.b));",
+        "            break;",
+        "        case OPERATORS.DOT:",
+        "            nodeState.putShared("c", dot(properties.a, properties.b));",
+        "            break;",
+        "        case OPERATORS.CROSS:",
+        "            if (properties.a.length !== 3) throw new Error("Vectors not dimension 3 for cross product");",
+        "            nodeState.putShared("c", cross(properties.a, properties.b));",
+        "            break;",
+        "        default: throw new Error("Unknown operator.");",
+        "    }",
+        "    action.goTo(SCRIPT_OUTCOMES.SUCCESS);",
+        "}",
+        "",
+        "main();",
+        "",
+      ],
       "serviceName": "c15e2efb3deb4d4ea338c74a6440b69f",
       "tags": [
         "math",
@@ -2078,11 +2063,11 @@ exports[`frodo node export "frodo node export --all-separate --extract --directo
 }
 `;
 
-exports[`frodo node export "frodo node export --node-id c605506774a848f7877b4d17a453bd39-1": should export the custom node with id "c605506774a848f7877b4d17a453bd39-1" 1`] = `0`;
+exports[`frodo node export "frodo node export --node-id c605506774a848f7877b4d17a453bd39-1 -D customNodeExportDir6": should export the custom node with id "c605506774a848f7877b4d17a453bd39-1" 1`] = `0`;
 
-exports[`frodo node export "frodo node export --node-id c605506774a848f7877b4d17a453bd39-1": should export the custom node with id "c605506774a848f7877b4d17a453bd39-1" 2`] = `""`;
+exports[`frodo node export "frodo node export --node-id c605506774a848f7877b4d17a453bd39-1 -D customNodeExportDir6": should export the custom node with id "c605506774a848f7877b4d17a453bd39-1" 2`] = `""`;
 
-exports[`frodo node export "frodo node export --node-id c605506774a848f7877b4d17a453bd39-1": should export the custom node with id "c605506774a848f7877b4d17a453bd39-1": c605506774a848f7877b4d17a453bd39-1.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export --node-id c605506774a848f7877b4d17a453bd39-1 -D customNodeExportDir6": should export the custom node with id "c605506774a848f7877b4d17a453bd39-1": customNodeExportDir6/c605506774a848f7877b4d17a453bd39-1.nodeTypes.json 1`] = `
 {
   "meta": Any<Object>,
   "nodeTypes": {
@@ -2098,17 +2083,7 @@ exports[`frodo node export "frodo node export --node-id c605506774a848f7877b4d17
       ],
       "outputs": [],
       "properties": {},
-      "script": "var SCRIPT_OUTCOMES = {
-    TRUE: 'True',
-    FALSE: 'False'
-}
-
-function main() {
-    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
-}
-
-main();
-",
+      "script": "file://c605506774a848f7877b4d17a453bd39.nodeTypes.js",
       "serviceName": "c605506774a848f7877b4d17a453bd39",
       "tags": [
         "utilities",
@@ -2118,11 +2093,11 @@ main();
 }
 `;
 
-exports[`frodo node export "frodo node export --node-name 'Display Callback' --use-string-arrays": should export the custom node with display name "DisplayCallback" 1`] = `0`;
+exports[`frodo node export "frodo node export --node-name 'Display Callback' --use-string-arrays --no-extract": should export the custom node with display name "DisplayCallback" 1`] = `0`;
 
-exports[`frodo node export "frodo node export --node-name 'Display Callback' --use-string-arrays": should export the custom node with display name "DisplayCallback" 2`] = `""`;
+exports[`frodo node export "frodo node export --node-name 'Display Callback' --use-string-arrays --no-extract": should export the custom node with display name "DisplayCallback" 2`] = `""`;
 
-exports[`frodo node export "frodo node export --node-name 'Display Callback' --use-string-arrays": should export the custom node with display name "DisplayCallback": Display-Callback.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export --node-name 'Display Callback' --use-string-arrays --no-extract": should export the custom node with display name "DisplayCallback": Display-Callback.nodeTypes.json 1`] = `
 {
   "meta": Any<Object>,
   "nodeTypes": {
@@ -2726,55 +2701,22 @@ Note that for required parameters that are not specified in the options will use
         "main();",
         "",
       ],
-      "serviceName": "ef81b1a52c914710b3388caebfe7233a",
-      "tags": [
-        "callback",
-        "utilities",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4 1`] = `0`;
-
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4 2`] = `""`;
-
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/ALU.nodeTypes.json 1`] = `
-{
-  "nodeTypes": {
-    "c6063fb2f5dc42dd9772bedc93898bd8-1": {
-      "_id": "c6063fb2f5dc42dd9772bedc93898bd8-1",
-      "description": "Simple ALU that performs basic binary math operations. Expects an "x" and "y" value on the shared state, and will produce a new "z" value on the shared state as output.",
-      "displayName": "ALU",
-      "errorOutcome": true,
-      "inputs": [
-        "x",
-        "y",
-      ],
-      "outcomes": [
-        "Success",
-      ],
-      "outputs": [
-        "z",
-      ],
-      "properties": {
-        "operator": {
-          "defaultValue": "ADD",
-          "description": "The operation to perform.",
-          "multivalued": false,
-          "options": {
-            "ADD": "+",
-            "DIVIDE": "/",
-            "MULTIPLY": "*",
-            "SUBTRACT": "-",
-          },
-          "required": true,
-          "title": "Operator",
-          "type": "STRING",
-        },
-      },
-      "script": "var SCRIPT_OUTCOMES = {
+      "serviceName": "ef81b1a52c914710b3388caebfe7233a",
+      "tags": [
+        "callback",
+        "utilities",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4 1`] = `0`;
+
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4 2`] = `""`;
+
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/ALU.nodeTypes.js 1`] = `
+"var SCRIPT_OUTCOMES = {
     SUCCESS: 'Success'
 };
 
@@ -2808,107 +2750,56 @@ function main() {
 }
 
 main();
-",
-      "serviceName": "c6063fb2f5dc42dd9772bedc93898bd8",
-      "tags": [
-        "math",
-        "utilities",
-      ],
-    },
-  },
-}
+"
 `;
 
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Display-Callback.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/ALU.nodeTypes.json 1`] = `
 {
   "nodeTypes": {
-    "ef81b1a52c914710b3388caebfe7233a-1": {
-      "_id": "ef81b1a52c914710b3388caebfe7233a-1",
-      "description": "Displays custom callback to the page",
-      "displayName": "Display Callback",
-      "errorOutcome": false,
-      "inputs": [],
+    "c6063fb2f5dc42dd9772bedc93898bd8-1": {
+      "_id": "c6063fb2f5dc42dd9772bedc93898bd8-1",
+      "description": "Simple ALU that performs basic binary math operations. Expects an "x" and "y" value on the shared state, and will produce a new "z" value on the shared state as output.",
+      "displayName": "ALU",
+      "errorOutcome": true,
+      "inputs": [
+        "x",
+        "y",
+      ],
       "outcomes": [
-        "outcome",
+        "Success",
+      ],
+      "outputs": [
+        "z",
       ],
-      "outputs": [],
       "properties": {
-        "callback": {
-          "description": "The callback to display",
+        "operator": {
+          "defaultValue": "ADD",
+          "description": "The operation to perform.",
           "multivalued": false,
           "options": {
-            "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK": "booleanAttributeInputCallback",
-            "CHOICE_CALLBACK": "choiceCallback",
-            "CONFIRMATION_CALLBACK": "confirmationCallback",
-            "CONSENT_MAPPING_CALLBACK": "consentMappingCallback",
-            "DEVICE_PROFILE_CALLBACK": "deviceProfileCallback",
-            "HIDDEN_VALUE_CALLBACK": "hiddenValueCallback",
-            "HTTP_CALLBACK": "httpCallback",
-            "IDP_CALLBACK": "idPCallback",
-            "KBA_CREATE_CALLBACK": "kbaCreateCallback",
-            "LANGUAGE_CALLBACK": "languageCallback",
-            "METADATA_CALLBACK": "metadataCallback",
-            "NAME_CALLBACK": "nameCallback",
-            "NUMBER_ATTRIBUTE_INPUT_CALLBACK": "numberAttributeInputCallback",
-            "PASSWORD_CALLBACK": "passwordCallback",
-            "POLLING_WAIT_CALLBACK": "pollingWaitCallback",
-            "REDIRECT_CALLBACK": "redirectCallback",
-            "SCRIPT_TEXT_OUTPUT_CALLBACK": "scriptTextOutputCallback",
-            "SELECT_IDP_CALLBACK": "selectIdPCallback",
-            "STRING_ATTRIBUTE_INPUT_CALLBACK": "stringAttributeInputCallback",
-            "SUSPENDED_TEXT_OUTPUT_CALLBACK": "suspendedTextOutputCallback",
-            "TERMS_AND_CONDITIONS_CALLBACK": "termsAndConditionsCallback",
-            "TEXT_INPUT_CALLBACK": "textInputCallback",
-            "TEXT_OUTPUT_CALLBACK": "textOutputCallback",
-            "VALIDATED_PASSWORD_CALLBACK": "validatedPasswordCallback",
-            "VALIDATED_USERNAME_CALLBACK": "validatedUsernameCallback",
-            "X509_CERTIFICATE_CALLBACK": "x509CertificateCallback",
+            "ADD": "+",
+            "DIVIDE": "/",
+            "MULTIPLY": "*",
+            "SUBTRACT": "-",
           },
           "required": true,
-          "title": "Callback",
-          "type": "STRING",
-        },
-        "objectSharedProperty": {
-          "description": "The objectAttributes property on the shared state to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Object Attributes Shared Property",
-          "type": "STRING",
-        },
-        "objectTransientProperty": {
-          "description": "The objectAttributes property on the transient state to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Object Attributes Transient Property",
-          "type": "STRING",
-        },
-        "options": {
-          "description": "The options containing the parameters for the callback (see documentation for possible parameters: https://docs.pingidentity.com/pingoneaic/latest/am-scripting/scripting-api-node.html#scripting-api-node-callbacks). 
-
-For example, for textOutputCallback, the options could be: { messageType: 0, message: "Hello World!" }. 
-
-Note that for required parameters that are not specified in the options will use default values based on the type of the parameter ("" for Strings, [] for Arrays, {} for Objects, 0 for Ints, 0.0 for Doubles, and false for Booleans).",
-          "multivalued": false,
-          "required": true,
-          "title": "Options",
-          "type": "OBJECT",
-        },
-        "sharedProperty": {
-          "description": "The shared state property to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Shared State Property",
-          "type": "STRING",
-        },
-        "transientProperty": {
-          "description": "The transient state property to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Transient State Property",
+          "title": "Operator",
           "type": "STRING",
         },
       },
-      "script": "var SCRIPT_OUTCOMES = {
+      "script": "file://ALU.nodeTypes.js",
+      "serviceName": "c6063fb2f5dc42dd9772bedc93898bd8",
+      "tags": [
+        "math",
+        "utilities",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Display-Callback.nodeTypes.js 1`] = `
+"var SCRIPT_OUTCOMES = {
     OUTCOME: 'outcome'
 };
 
@@ -2941,488 +2832,981 @@ var CALLBACKS = {
 	X509_CERTIFICATE_CALLBACK: "X509_CERTIFICATE_CALLBACK"
 }
 
-function isStringPresent(value) {
-    return value;
+function isStringPresent(value) {
+    return value;
+}
+
+function getString(value) {
+    return value || '';
+}
+
+function isArrayPresent(value) {
+    return value;
+}
+
+function getArray(value) {
+    return value ? JSON.parse(value) : [];
+}
+
+function isObjectPresent(value) {
+    return value;
+}
+
+function getObject(value) {
+    return value ? JSON.parse(value) : {};
+}
+
+function isIntPresent(value) {
+    return value;
+}
+
+function getInt(value) {
+    return value ? parseInt(value) : 0;
+}
+
+function isDoublePresent(value) {
+    return value;
+}
+
+function getDouble(value) {
+    return value ? parseFloat(value) : 0.0;
+}
+
+function isBooleanPresent(value) {
+    return value;
+}
+
+function getBoolean(value) {
+    return value ? value.toLowerCase() === 'true' : false;
+}
+
+function setProperty(value) {
+    if (properties.sharedProperty) nodeState.putShared(properties.sharedProperty, value);
+    if (properties.transientProperty) nodeState.putTransient(properties.transientProperty, value);
+    if (properties.objectSharedProperty) {
+        var attributes = {};
+        attributes[properties.objectSharedProperty] = value;
+        nodeState.mergeShared({
+            objectAttributes: attributes
+        });
+    }
+    if (properties.objectTransientProperty) {
+        var attributes = {};
+        attributes[properties.objectTransientProperty] = value;
+        nodeState.mergeTransient({
+            objectAttributes: attributes
+        });
+    }
+}
+
+function booleanAttributeInputCallback() {
+    var name = getString(properties.options.name);
+    var prompt = getString(properties.options.prompt);
+    var value = getBoolean(properties.options.value);
+    var required = getBoolean(properties.options.required);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
+        if (isArrayPresent(failedPolicies)) {
+            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
+        } else {
+            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
+        }
+    } else if (isArrayPresent(failedPolicies)) {
+        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, failedPolicies);
+    } else {
+        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required);
+    }
+}
+
+function choiceCallback() {
+    var prompt = getString(properties.options.prompt);
+    var choices = getArray(properties.options.choices);
+    var defaultChoice = getInt(properties.options.defaultChoice);
+    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);
+    callbacksBuilder.choiceCallback(prompt, choices, defaultChoice, multipleSelectionsAllowed);
+}
+
+function confirmationCallback() {
+    var prompt = getString(properties.options.prompt);
+    var messageType = getInt(properties.options.messageType);
+    var options = getArray(properties.options.options);
+    var optionType = getInt(properties.options.optionType);
+    var defaultOption = getInt(properties.options.defaultOption);
+    if (isStringPresent(properties.options.prompt)) {
+        if (isIntPresent(properties.options.optionType)) {
+            callbacksBuilder.confirmationCallback(prompt, messageType, optionType, defaultOption);
+        } else {
+            callbacksBuilder.confirmationCallback(prompt, messageType, options, defaultOption);
+        }
+    } else {
+        if (isIntPresent(properties.options.optionType)) {
+            callbacksBuilder.confirmationCallback(messageType, optionType, defaultOption);
+        } else {
+            callbacksBuilder.confirmationCallback(messageType, options, defaultOption);
+        }
+    }
+}
+
+function consentMappingCallback() {
+    var config = getObject(properties.options.config);
+    var message = getString(properties.options.message);
+    var isRequired = getBoolean(properties.options.isRequired);
+    var name = getString(properties.options.name);
+    var displayName = getString(properties.options.displayName);
+    var icon = getString(properties.options.icon);
+    var accessLevel = getString(properties.options.accessLevel);
+    var titles = getArray(properties.options.titles);
+    if (isObjectPresent(properties.options.prompt)) {
+        callbacksBuilder.consentMappingCallback(config, message, isRequired);
+    } else {
+        callbacksBuilder.consentMappingCallback(name, displayName, icon, accessLevel, titles, message, isRequired);
+    }
+}
+
+function deviceProfileCallback() {
+    var metadata = getBoolean(properties.options.metadata);
+    var location = getBoolean(properties.options.location);
+    var message = getString(properties.options.message);
+    callbacksBuilder.deviceProfileCallback(metadata, location, message);
 }
 
-function getString(value) {
-    return value || '';
+function hiddenValueCallback() {
+    var id = getString(properties.options.id);
+    var value = getString(properties.options.value);
+    callbacksBuilder.hiddenValueCallback(id, value);
 }
 
-function isArrayPresent(value) {
-    return value;
+function httpCallback() {
+    var authorizationHeader = getString(properties.options.authorizationHeader);
+    var negotiationHeader = getString(properties.options.negotiationHeader);
+    var authRHeader = getString(properties.options.authRHeader);
+    var negoName = getString(properties.options.negoName);
+    var negoValue = getString(properties.options.negoValue);
+    if (isStringPresent(properties.options.authorizationHeader) || isStringPresent(properties.options.negotiationHeader)) {
+        var errorCode = getString(properties.options.errorCode);
+        callbacksBuilder.httpCallback(authorizationHeader, negotiationHeader, errorCode);
+    } else {
+        var errorCode = getInt(properties.options.errorCode);
+        callbacksBuilder.httpCallback(authRHeader, negoName, negoValue, errorCode);
+    }
 }
 
-function getArray(value) {
-    return value ? JSON.parse(value) : [];
+function idPCallback() {
+    var provider = getString(properties.options.provider);
+    var clientId = getString(properties.options.clientId);
+    var redirectUri = getString(properties.options.redirectUri);
+    var scope = getArray(properties.options.scope);
+    var nonce = getString(properties.options.nonce);
+    var request = getString(properties.options.request);
+    var requestUri = getString(properties.options.requestUri);
+    var acrValues = getArray(properties.options.acrValues);
+    var requestNativeAppForUserInfo = getBoolean(properties.options.requestNativeAppForUserInfo);
+    var token = getString(properties.options.token);
+    var tokenType = getString(properties.options.tokenType);
+    if (isStringPresent(properties.options.token) || isStringPresent(properties.options.tokenType)) {
+        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo, token, tokenType);
+    } else {
+        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo);
+    }
 }
 
-function isObjectPresent(value) {
-    return value;
+function kbaCreateCallback() {
+    var prompt = getString(properties.options.prompt);
+    var predefinedQuestions = getArray(properties.options.predefinedQuestions);
+    var allowUserDefinedQuestions = getBoolean(properties.options.allowUserDefinedQuestions);
+    callbacksBuilder.kbaCreateCallback(prompt, predefinedQuestions, allowUserDefinedQuestions);
 }
 
-function getObject(value) {
-    return value ? JSON.parse(value) : {};
+function languageCallback() {
+    var language = getString(properties.options.language);
+    var country = getString(properties.options.country);
+    callbacksBuilder.languageCallback(language, country);
 }
 
-function isIntPresent(value) {
-    return value;
+function metadataCallback() {
+    var outputValue = getObject(properties.options.outputValue);
+    callbacksBuilder.metadataCallback(outputValue);
 }
 
-function getInt(value) {
-    return value ? parseInt(value) : 0;
+function nameCallback() {
+    var prompt = getString(properties.options.prompt);
+    var defaultName = getString(properties.options.defaultName);
+    if (isStringPresent(properties.options.defaultName)) {
+        callbacksBuilder.nameCallback(prompt, defaultName);
+    } else {
+        callbacksBuilder.nameCallback(prompt);
+    }
 }
 
-function isDoublePresent(value) {
-    return value;
+function numberAttributeInputCallback() {
+    var name = getString(properties.options.name);
+    var prompt = getString(properties.options.prompt);
+    var value = getDouble(properties.options.value);
+    var required = getBoolean(properties.options.required);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
+        if (isArrayPresent(failedPolicies)) {
+            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
+        } else {
+            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
+        }
+    } else if (isArrayPresent(failedPolicies)) {
+        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, failedPolicies);
+    } else {
+        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required);
+    }
 }
 
-function getDouble(value) {
-    return value ? parseFloat(value) : 0.0;
+function passwordCallback() {
+    var prompt = getString(properties.options.prompt);
+    var echoOn = getBoolean(properties.options.echoOn);
+    callbacksBuilder.passwordCallback(prompt, echoOn);
 }
 
-function isBooleanPresent(value) {
-    return value;
+function pollingWaitCallback() {
+    var waitTime = getString(properties.options.waitTime);
+    var message = getString(properties.options.message);
+    callbacksBuilder.pollingWaitCallback(waitTime, message);
 }
 
-function getBoolean(value) {
-    return value ? value.toLowerCase() === 'true' : false;
+function redirectCallback() {
+    throw new Error('Not Implemented');
 }
 
-function setProperty(value) {
-    if (properties.sharedProperty) nodeState.putShared(properties.sharedProperty, value);
-    if (properties.transientProperty) nodeState.putTransient(properties.transientProperty, value);
-    if (properties.objectSharedProperty) {
-        var attributes = {};
-        attributes[properties.objectSharedProperty] = value;
-        nodeState.mergeShared({
-            objectAttributes: attributes
-        });
-    }
-    if (properties.objectTransientProperty) {
-        var attributes = {};
-        attributes[properties.objectTransientProperty] = value;
-        nodeState.mergeTransient({
-            objectAttributes: attributes
-        });
-    }
+function scriptTextOutputCallback() {
+    var message = getString(properties.options.message);
+    callbacksBuilder.scriptTextOutputCallback(message);
 }
 
-function booleanAttributeInputCallback() {
+function selectIdPCallback() {
+    var providers = getObject(properties.options.providers);
+    callbacksBuilder.selectIdPCallback(providers);
+}
+
+function stringAttributeInputCallback() {
     var name = getString(properties.options.name);
     var prompt = getString(properties.options.prompt);
-    var value = getBoolean(properties.options.value);
+    var value = getString(properties.options.value);
     var required = getBoolean(properties.options.required);
     var policies = getObject(properties.options.policies);
     var validateOnly = getBoolean(properties.options.validateOnly);
     var failedPolicies = getArray(properties.options.failedPolicies);
     if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
         if (isArrayPresent(failedPolicies)) {
-            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
+            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
         } else {
-            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
+            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
         }
     } else if (isArrayPresent(failedPolicies)) {
-        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, failedPolicies);
+        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, failedPolicies);
     } else {
-        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required);
+        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required);
+    }
+}
+
+function suspendedTextOutputCallback() {
+    var messageType = getInt(properties.options.messageType);
+    var message = getString(properties.options.message);
+    callbacksBuilder.suspendedTextOutputCallback(messageType, message);
+}
+
+function termsAndConditionsCallback() {
+    var version = getString(properties.options.version);
+    var terms = getString(properties.options.terms);
+    var createDate = getString(properties.options.createDate);
+    callbacksBuilder.termsAndConditionsCallback(version, terms, createDate);
+}
+
+function textInputCallback() {
+    var prompt = getString(properties.options.prompt);
+    var defaultText = getString(properties.options.defaultText);
+    if (isStringPresent(properties.options.defaultText)) {
+        callbacksBuilder.textInputCallback(prompt, defaultText);
+    } else {
+        callbacksBuilder.textInputCallback(prompt);
+    }
+}
+
+function textOutputCallback() {
+    var messageType = getString(properties.options.messageType);
+    var message = getString(properties.options.message);
+    callbacksBuilder.textOutputCallback(messageType, message);
+}
+
+function validatedPasswordCallback() {
+    var prompt = getString(properties.options.prompt);
+    var echoOn = getBoolean(properties.options.echoOn);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isArrayPresent(properties.options.failedPolicies)) {
+        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly, failedPolicies);
+    } else {
+        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly);
+    }
+}
+
+function validatedUsernameCallback() {
+    var prompt = getString(properties.options.prompt);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isArrayPresent(properties.options.failedPolicies)) {
+        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly, failedPolicies);
+    } else {
+        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly);
     }
 }
 
-function choiceCallback() {
-    var prompt = getString(properties.options.prompt);
-    var choices = getArray(properties.options.choices);
-    var defaultChoice = getInt(properties.options.defaultChoice);
-    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);
-    callbacksBuilder.choiceCallback(prompt, choices, defaultChoice, multipleSelectionsAllowed);
+function x509CertificateCallback() {
+    throw new Error('Not Implemented');
+}
+
+function getBooleanAttributeInputCallback() {
+    setProperty(callbacks.getBooleanAttributeInputCallbacks().get(0));
+}
+
+function getChoiceCallback() {
+    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);
+    var selections = callbacks.getChoiceCallbacks().get(0);
+    setProperty(multipleSelectionsAllowed ? selections : selections[0]);
+}
+
+function getConfirmationCallback() {
+    setProperty(callbacks.getConfirmationCallbacks().get(0));
+}
+
+function getConsentMappingCallback() {
+    setProperty(callbacks.getConsentMappingCallbacks().get(0));
+}
+
+function getDeviceProfileCallback() {
+    setProperty(callbacks.getDeviceProfileCallbacks().get(0));
+}
+
+function getHiddenValueCallback() {
+    var id = getString(properties.options.id);
+    setProperty(callbacks.getHiddenValueCallbacks().get(id));
+}
+
+function getHttpCallback() {
+    setProperty(callbacks.getHttpCallbacks().get(0));
+}
+
+function getIdPCallback() {
+    setProperty(callbacks.getIdpCallbacks().get(0));
+}
+
+function getKbaCreateCallback() {
+    setProperty(callbacks.getKbaCreateCallbacks().get(0));
 }
 
-function confirmationCallback() {
-    var prompt = getString(properties.options.prompt);
-    var messageType = getInt(properties.options.messageType);
-    var options = getArray(properties.options.options);
-    var optionType = getInt(properties.options.optionType);
-    var defaultOption = getInt(properties.options.defaultOption);
-    if (isStringPresent(properties.options.prompt)) {
-        if (isIntPresent(properties.options.optionType)) {
-            callbacksBuilder.confirmationCallback(prompt, messageType, optionType, defaultOption);
-        } else {
-            callbacksBuilder.confirmationCallback(prompt, messageType, options, defaultOption);
-        }
-    } else {
-        if (isIntPresent(properties.options.optionType)) {
-            callbacksBuilder.confirmationCallback(messageType, optionType, defaultOption);
-        } else {
-            callbacksBuilder.confirmationCallback(messageType, options, defaultOption);
-        }
-    }
+function getLanguageCallback() {
+    setProperty(callbacks.getLanguageCallbacks().get(0));
 }
 
-function consentMappingCallback() {
-    var config = getObject(properties.options.config);
-    var message = getString(properties.options.message);
-    var isRequired = getBoolean(properties.options.isRequired);
-    var name = getString(properties.options.name);
-    var displayName = getString(properties.options.displayName);
-    var icon = getString(properties.options.icon);
-    var accessLevel = getString(properties.options.accessLevel);
-    var titles = getArray(properties.options.titles);
-    if (isObjectPresent(properties.options.prompt)) {
-        callbacksBuilder.consentMappingCallback(config, message, isRequired);
-    } else {
-        callbacksBuilder.consentMappingCallback(name, displayName, icon, accessLevel, titles, message, isRequired);
-    }
+function getNameCallback() {
+    setProperty(callbacks.getNameCallbacks().get(0));
 }
 
-function deviceProfileCallback() {
-    var metadata = getBoolean(properties.options.metadata);
-    var location = getBoolean(properties.options.location);
-    var message = getString(properties.options.message);
-    callbacksBuilder.deviceProfileCallback(metadata, location, message);
+function getNumberAttributeInputCallback() {
+    setProperty(callbacks.getNumberAttributeInputCallbacks().get(0));
 }
 
-function hiddenValueCallback() {
-    var id = getString(properties.options.id);
-    var value = getString(properties.options.value);
-    callbacksBuilder.hiddenValueCallback(id, value);
+function getPasswordCallback() {
+    setProperty(callbacks.getPasswordCallbacks().get(0));
 }
 
-function httpCallback() {
-    var authorizationHeader = getString(properties.options.authorizationHeader);
-    var negotiationHeader = getString(properties.options.negotiationHeader);
-    var authRHeader = getString(properties.options.authRHeader);
-    var negoName = getString(properties.options.negoName);
-    var negoValue = getString(properties.options.negoValue);
-    if (isStringPresent(properties.options.authorizationHeader) || isStringPresent(properties.options.negotiationHeader)) {
-        var errorCode = getString(properties.options.errorCode);
-        callbacksBuilder.httpCallback(authorizationHeader, negotiationHeader, errorCode);
-    } else {
-        var errorCode = getInt(properties.options.errorCode);
-        callbacksBuilder.httpCallback(authRHeader, negoName, negoValue, errorCode);
-    }
+function getSelectIdPCallback() {
+    setProperty(callbacks.getSelectIdPCallbacks().get(0));
 }
 
-function idPCallback() {
-    var provider = getString(properties.options.provider);
-    var clientId = getString(properties.options.clientId);
-    var redirectUri = getString(properties.options.redirectUri);
-    var scope = getArray(properties.options.scope);
-    var nonce = getString(properties.options.nonce);
-    var request = getString(properties.options.request);
-    var requestUri = getString(properties.options.requestUri);
-    var acrValues = getArray(properties.options.acrValues);
-    var requestNativeAppForUserInfo = getBoolean(properties.options.requestNativeAppForUserInfo);
-    var token = getString(properties.options.token);
-    var tokenType = getString(properties.options.tokenType);
-    if (isStringPresent(properties.options.token) || isStringPresent(properties.options.tokenType)) {
-        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo, token, tokenType);
-    } else {
-        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo);
-    }
+function getStringAttributeInputCallback() {
+    setProperty(callbacks.getStringAttributeInputCallbacks().get(0));
 }
 
-function kbaCreateCallback() {
-    var prompt = getString(properties.options.prompt);
-    var predefinedQuestions = getArray(properties.options.predefinedQuestions);
-    var allowUserDefinedQuestions = getBoolean(properties.options.allowUserDefinedQuestions);
-    callbacksBuilder.kbaCreateCallback(prompt, predefinedQuestions, allowUserDefinedQuestions);
+function getTermsAndConditionsCallback() {
+    setProperty(callbacks.getTermsAndConditionsCallbacks().get(0));
 }
 
-function languageCallback() {
-    var language = getString(properties.options.language);
-    var country = getString(properties.options.country);
-    callbacksBuilder.languageCallback(language, country);
+function getTextInputCallback() {
+    setProperty(callbacks.getTextInputCallbacks().get(0));
 }
 
-function metadataCallback() {
-    var outputValue = getObject(properties.options.outputValue);
-    callbacksBuilder.metadataCallback(outputValue);
+function getValidatedPasswordCallback() {
+    setProperty(callbacks.getValidatedPasswordCallbacks().get(0));
 }
 
-function nameCallback() {
-    var prompt = getString(properties.options.prompt);
-    var defaultName = getString(properties.options.defaultName);
-    if (isStringPresent(properties.options.defaultName)) {
-        callbacksBuilder.nameCallback(prompt, defaultName);
-    } else {
-        callbacksBuilder.nameCallback(prompt);
-    }
+function getValidatedUsernameCallback() {
+    setProperty(callbacks.getValidatedUsernameCallbacks().get(0));
 }
 
-function numberAttributeInputCallback() {
-    var name = getString(properties.options.name);
-    var prompt = getString(properties.options.prompt);
-    var value = getDouble(properties.options.value);
-    var required = getBoolean(properties.options.required);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
-        if (isArrayPresent(failedPolicies)) {
-            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
-        } else {
-            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
+function getX509CertificateCallback() {
+    setProperty(callbacks.getX509CertificateCallbacks().get(0));
+}
+
+function main() {
+    if (!callbacks.isEmpty()) {
+        switch (properties.callback) {
+            case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: getBooleanAttributeInputCallback(); break;
+            case CALLBACKS.CHOICE_CALLBACK: getChoiceCallback(); break;
+            case CALLBACKS.CONFIRMATION_CALLBACK: getConfirmationCallback(); break;
+            case CALLBACKS.CONSENT_MAPPING_CALLBACK: getConsentMappingCallback(); break;
+            case CALLBACKS.DEVICE_PROFILE_CALLBACK: getDeviceProfileCallback(); break;
+            case CALLBACKS.HIDDEN_VALUE_CALLBACK: getHiddenValueCallback(); break;
+            case CALLBACKS.HTTP_CALLBACK: getHttpCallback(); break;
+            case CALLBACKS.IDP_CALLBACK: getIdPCallback(); break;
+            case CALLBACKS.KBA_CREATE_CALLBACK: getKbaCreateCallback(); break;
+            case CALLBACKS.LANGUAGE_CALLBACK: getLanguageCallback(); break;
+            case CALLBACKS.NAME_CALLBACK: getNameCallback(); break;
+            case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: getNumberAttributeInputCallback(); break;
+            case CALLBACKS.PASSWORD_CALLBACK: getPasswordCallback(); break;
+            case CALLBACKS.SELECT_IDP_CALLBACK: getSelectIdPCallback(); break;
+            case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: getStringAttributeInputCallback(); break;
+            case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: getTermsAndConditionsCallback(); break;
+            case CALLBACKS.TEXT_INPUT_CALLBACK: getTextInputCallback(); break;
+            case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: getValidatedPasswordCallback(); break;
+            case CALLBACKS.VALIDATED_USERNAME_CALLBACK: getValidatedUsernameCallback(); break;
+            case CALLBACKS.X509_CERTIFICATE_CALLBACK: getX509CertificateCallback(); break;
+            default: break;
         }
-    } else if (isArrayPresent(failedPolicies)) {
-        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, failedPolicies);
-    } else {
-        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required);
+        action.goTo(SCRIPT_OUTCOMES.OUTCOME);
+        return;
     }
-}
 
-function passwordCallback() {
-    var prompt = getString(properties.options.prompt);
-    var echoOn = getBoolean(properties.options.echoOn);
-    callbacksBuilder.passwordCallback(prompt, echoOn);
+    switch (properties.callback) {
+        case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: booleanAttributeInputCallback(); break;
+        case CALLBACKS.CHOICE_CALLBACK: choiceCallback(); break;
+        case CALLBACKS.CONFIRMATION_CALLBACK: confirmationCallback(); break;
+        case CALLBACKS.CONSENT_MAPPING_CALLBACK: consentMappingCallback(); break;
+        case CALLBACKS.DEVICE_PROFILE_CALLBACK: deviceProfileCallback(); break;
+        case CALLBACKS.HIDDEN_VALUE_CALLBACK: hiddenValueCallback(); break;
+        case CALLBACKS.HTTP_CALLBACK: httpCallback(); break;
+        case CALLBACKS.IDP_CALLBACK: idPCallback(); break;
+        case CALLBACKS.KBA_CREATE_CALLBACK: kbaCreateCallback(); break;
+        case CALLBACKS.LANGUAGE_CALLBACK: languageCallback(); break;
+        case CALLBACKS.METADATA_CALLBACK: metadataCallback(); break;
+        case CALLBACKS.NAME_CALLBACK: nameCallback(); break;
+        case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: numberAttributeInputCallback(); break;
+        case CALLBACKS.PASSWORD_CALLBACK: passwordCallback(); break;
+        case CALLBACKS.POLLING_WAIT_CALLBACK: pollingWaitCallback(); break;
+        case CALLBACKS.REDIRECT_CALLBACK: redirectCallback(); break;
+        case CALLBACKS.SCRIPT_TEXT_OUTPUT_CALLBACK: scriptTextOutputCallback(); break;
+        case CALLBACKS.SELECT_IDP_CALLBACK: selectIdPCallback(); break;
+        case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: stringAttributeInputCallback(); break;
+        case CALLBACKS.SUSPENDED_TEXT_OUTPUT_CALLBACK: suspendedTextOutputCallback(); break;
+        case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: termsAndConditionsCallback(); break;
+        case CALLBACKS.TEXT_INPUT_CALLBACK: textInputCallback(); break;
+        case CALLBACKS.TEXT_OUTPUT_CALLBACK: textOutputCallback(); break;
+        case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: validatedPasswordCallback(); break;
+        case CALLBACKS.VALIDATED_USERNAME_CALLBACK: validatedUsernameCallback(); break;
+        case CALLBACKS.X509_CERTIFICATE_CALLBACK: x509CertificateCallback(); break;
+        default: throw new Error('Unknown Callback'); // Should never reach this case
+    }
 }
 
-function pollingWaitCallback() {
-    var waitTime = getString(properties.options.waitTime);
-    var message = getString(properties.options.message);
-    callbacksBuilder.pollingWaitCallback(waitTime, message);
-}
+main();
+"
+`;
+
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Display-Callback.nodeTypes.json 1`] = `
+{
+  "nodeTypes": {
+    "ef81b1a52c914710b3388caebfe7233a-1": {
+      "_id": "ef81b1a52c914710b3388caebfe7233a-1",
+      "description": "Displays custom callback to the page",
+      "displayName": "Display Callback",
+      "errorOutcome": false,
+      "inputs": [],
+      "outcomes": [
+        "outcome",
+      ],
+      "outputs": [],
+      "properties": {
+        "callback": {
+          "description": "The callback to display",
+          "multivalued": false,
+          "options": {
+            "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK": "booleanAttributeInputCallback",
+            "CHOICE_CALLBACK": "choiceCallback",
+            "CONFIRMATION_CALLBACK": "confirmationCallback",
+            "CONSENT_MAPPING_CALLBACK": "consentMappingCallback",
+            "DEVICE_PROFILE_CALLBACK": "deviceProfileCallback",
+            "HIDDEN_VALUE_CALLBACK": "hiddenValueCallback",
+            "HTTP_CALLBACK": "httpCallback",
+            "IDP_CALLBACK": "idPCallback",
+            "KBA_CREATE_CALLBACK": "kbaCreateCallback",
+            "LANGUAGE_CALLBACK": "languageCallback",
+            "METADATA_CALLBACK": "metadataCallback",
+            "NAME_CALLBACK": "nameCallback",
+            "NUMBER_ATTRIBUTE_INPUT_CALLBACK": "numberAttributeInputCallback",
+            "PASSWORD_CALLBACK": "passwordCallback",
+            "POLLING_WAIT_CALLBACK": "pollingWaitCallback",
+            "REDIRECT_CALLBACK": "redirectCallback",
+            "SCRIPT_TEXT_OUTPUT_CALLBACK": "scriptTextOutputCallback",
+            "SELECT_IDP_CALLBACK": "selectIdPCallback",
+            "STRING_ATTRIBUTE_INPUT_CALLBACK": "stringAttributeInputCallback",
+            "SUSPENDED_TEXT_OUTPUT_CALLBACK": "suspendedTextOutputCallback",
+            "TERMS_AND_CONDITIONS_CALLBACK": "termsAndConditionsCallback",
+            "TEXT_INPUT_CALLBACK": "textInputCallback",
+            "TEXT_OUTPUT_CALLBACK": "textOutputCallback",
+            "VALIDATED_PASSWORD_CALLBACK": "validatedPasswordCallback",
+            "VALIDATED_USERNAME_CALLBACK": "validatedUsernameCallback",
+            "X509_CERTIFICATE_CALLBACK": "x509CertificateCallback",
+          },
+          "required": true,
+          "title": "Callback",
+          "type": "STRING",
+        },
+        "objectSharedProperty": {
+          "description": "The objectAttributes property on the shared state to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Object Attributes Shared Property",
+          "type": "STRING",
+        },
+        "objectTransientProperty": {
+          "description": "The objectAttributes property on the transient state to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Object Attributes Transient Property",
+          "type": "STRING",
+        },
+        "options": {
+          "description": "The options containing the parameters for the callback (see documentation for possible parameters: https://docs.pingidentity.com/pingoneaic/latest/am-scripting/scripting-api-node.html#scripting-api-node-callbacks). 
 
-function redirectCallback() {
-    throw new Error('Not Implemented');
-}
+For example, for textOutputCallback, the options could be: { messageType: 0, message: "Hello World!" }. 
 
-function scriptTextOutputCallback() {
-    var message = getString(properties.options.message);
-    callbacksBuilder.scriptTextOutputCallback(message);
+Note that for required parameters that are not specified in the options will use default values based on the type of the parameter ("" for Strings, [] for Arrays, {} for Objects, 0 for Ints, 0.0 for Doubles, and false for Booleans).",
+          "multivalued": false,
+          "required": true,
+          "title": "Options",
+          "type": "OBJECT",
+        },
+        "sharedProperty": {
+          "description": "The shared state property to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Shared State Property",
+          "type": "STRING",
+        },
+        "transientProperty": {
+          "description": "The transient state property to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Transient State Property",
+          "type": "STRING",
+        },
+      },
+      "script": "file://Display-Callback.nodeTypes.js",
+      "serviceName": "ef81b1a52c914710b3388caebfe7233a",
+      "tags": [
+        "callback",
+        "utilities",
+      ],
+    },
+  },
 }
+`;
 
-function selectIdPCallback() {
-    var providers = getObject(properties.options.providers);
-    callbacksBuilder.selectIdPCallback(providers);
-}
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Display-State.nodeTypes.js 1`] = `
+"var SCRIPT_OUTCOMES = {
+  OUTCOME: "outcome"
+};
 
-function stringAttributeInputCallback() {
-    var name = getString(properties.options.name);
-    var prompt = getString(properties.options.prompt);
-    var value = getString(properties.options.value);
-    var required = getBoolean(properties.options.required);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
-        if (isArrayPresent(failedPolicies)) {
-            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
+function main() {
+    if (!callbacks.isEmpty()) {
+        action.goTo(SCRIPT_OUTCOMES.OUTCOME);
+        return;
+    }
+    var keySet = nodeState.keys(); // Java Set<String>
+    var keys = Array.from(keySet); // Make it into JavaScript array
+    debugState = {};
+    for (var i in keys) {
+        var k = new String(keys[i]);
+        var item = nodeState.get(k);
+        if (typeof item === "object") {
+            debugState[k] = nodeState.getObject(k);
         } else {
-            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
+            debugState[k] = nodeState.get(k);
         }
-    } else if (isArrayPresent(failedPolicies)) {
-        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, failedPolicies);
-    } else {
-        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required);
     }
+    if (properties.displayFormat === "JSON") {
+        callbacksBuilder.textOutputCallback(0, \`<pre style="text-align: left;">\${JSON.stringify(debugState, null, 2)}</pre>\`);
+        return;
+    }
+    callbacksBuilder.textOutputCallback(0, \`<table><tr><td style="border: 1px solid black;">Key</td><td style="border: 1px solid black;">Value</td></tr>\${Array.from(Object.keys(debugState).map(k => \`<tr><td style="border: 1px solid black;"><pre style="text-align: left;">\${k}</pre></td><td style="border: 1px solid black;"><pre style="text-align: left;">\${debugState[k]}</pre></td></tr>\`))}</table>\`);
 }
 
-function suspendedTextOutputCallback() {
-    var messageType = getInt(properties.options.messageType);
-    var message = getString(properties.options.message);
-    callbacksBuilder.suspendedTextOutputCallback(messageType, message);
-}
-
-function termsAndConditionsCallback() {
-    var version = getString(properties.options.version);
-    var terms = getString(properties.options.terms);
-    var createDate = getString(properties.options.createDate);
-    callbacksBuilder.termsAndConditionsCallback(version, terms, createDate);
-}
+main();
+"
+`;
 
-function textInputCallback() {
-    var prompt = getString(properties.options.prompt);
-    var defaultText = getString(properties.options.defaultText);
-    if (isStringPresent(properties.options.defaultText)) {
-        callbacksBuilder.textInputCallback(prompt, defaultText);
-    } else {
-        callbacksBuilder.textInputCallback(prompt);
-    }
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Display-State.nodeTypes.json 1`] = `
+{
+  "nodeTypes": {
+    "8ab9f1aad4b4460a9c45d15fb148e221-1": {
+      "_id": "8ab9f1aad4b4460a9c45d15fb148e221-1",
+      "description": "Debug node that displays the shared and transient state of the journey for debugging purposes.",
+      "displayName": "Display State",
+      "errorOutcome": false,
+      "inputs": [],
+      "outcomes": [
+        "outcome",
+      ],
+      "outputs": [],
+      "properties": {
+        "displayFormat": {
+          "defaultValue": "TABLE",
+          "description": "The format in which to display the states.",
+          "multivalued": false,
+          "options": {
+            "JSON": "Raw JSON",
+            "TABLE": "HTML Table",
+          },
+          "required": true,
+          "title": "Display Format",
+          "type": "STRING",
+        },
+      },
+      "script": "file://Display-State.nodeTypes.js",
+      "serviceName": "8ab9f1aad4b4460a9c45d15fb148e221",
+      "tags": [
+        "debug",
+        "testing",
+      ],
+    },
+  },
 }
+`;
 
-function textOutputCallback() {
-    var messageType = getString(properties.options.messageType);
-    var message = getString(properties.options.message);
-    callbacksBuilder.textOutputCallback(messageType, message);
-}
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Generate-JWT.nodeTypes.js 1`] = `
+"var aud = properties.audience;
+var iss = properties.issuer;
+var validity = properties.validity;
+var esv = properties.signingkey;
 
-function validatedPasswordCallback() {
-    var prompt = getString(properties.options.prompt);
-    var echoOn = getBoolean(properties.options.echoOn);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isArrayPresent(properties.options.failedPolicies)) {
-        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly, failedPolicies);
-    } else {
-        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly);
-    }
-}
+var signingkey = systemEnv.getProperty(esv);
 
-function validatedUsernameCallback() {
-    var prompt = getString(properties.options.prompt);
-    var policies = getObject(properties.options.policies);
-    var validateOnly = getBoolean(properties.options.validateOnly);
-    var failedPolicies = getArray(properties.options.failedPolicies);
-    if (isArrayPresent(properties.options.failedPolicies)) {
-        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly, failedPolicies);
-    } else {
-        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly);
-    }
-}
+var username = nodeState.get("username");
 
-function x509CertificateCallback() {
-    throw new Error('Not Implemented');
-}
+var data = {
+  jwtType:"SIGNED",
+  jwsAlgorithm: "HS256",
+  issuer: iss,
+  subject: username,
+  audience: aud,
+  type: "JWT",
+  validityMinutes: validity,
+  signingKey: signingkey
+};
 
-function getBooleanAttributeInputCallback() {
-    setProperty(callbacks.getBooleanAttributeInputCallbacks().get(0));
-}
+var jwt = jwtAssertion.generateJwt(data);
 
-function getChoiceCallback() {
-    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);
-    var selections = callbacks.getChoiceCallbacks().get(0);
-    setProperty(multipleSelectionsAllowed ? selections : selections[0]);
+if (jwt !== null && jwt.length > 0) {
+  nodeState.putShared("assertionJwt" , jwt);
+  action.goTo("True");
+} else {
+  action.goTo("False");
 }
+"
+`;
 
-function getConfirmationCallback() {
-    setProperty(callbacks.getConfirmationCallbacks().get(0));
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Generate-JWT.nodeTypes.json 1`] = `
+{
+  "nodeTypes": {
+    "e5ad0110c8ee4dafaae983003cd05d4a-1": {
+      "_id": "e5ad0110c8ee4dafaae983003cd05d4a-1",
+      "description": "Generate a signed JWT using the HMAC SHA-256 algorithm.",
+      "displayName": "Generate JWT",
+      "errorOutcome": true,
+      "inputs": [],
+      "outcomes": [
+        "True",
+        "False",
+      ],
+      "outputs": [],
+      "properties": {
+        "audience": {
+          "description": "The audience (aud) claim",
+          "multivalued": false,
+          "required": true,
+          "title": "Audience",
+          "type": "STRING",
+        },
+        "issuer": {
+          "description": "The issuer (iss) claim",
+          "multivalued": false,
+          "required": true,
+          "title": "Issuer",
+          "type": "STRING",
+        },
+        "signingkey": {
+          "defaultValue": "esv.signing.key",
+          "description": "The secret label for the HMAC signing key",
+          "multivalued": false,
+          "required": true,
+          "title": "HMAC Signing Key",
+          "type": "STRING",
+        },
+        "validity": {
+          "defaultValue": 5,
+          "description": "",
+          "multivalued": false,
+          "required": true,
+          "title": "Validity (minutes)",
+          "type": "NUMBER",
+        },
+      },
+      "script": "file://Generate-JWT.nodeTypes.js",
+      "serviceName": "e5ad0110c8ee4dafaae983003cd05d4a",
+      "tags": [
+        "Utilities",
+        "utilities",
+      ],
+    },
+  },
 }
+`;
 
-function getConsentMappingCallback() {
-    setProperty(callbacks.getConsentMappingCallbacks().get(0));
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Has-Session.nodeTypes.js 1`] = `
+"var SCRIPT_OUTCOMES = {
+    TRUE: 'True',
+    FALSE: 'False'
 }
 
-function getDeviceProfileCallback() {
-    setProperty(callbacks.getDeviceProfileCallbacks().get(0));
+function main() {
+    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
 }
 
-function getHiddenValueCallback() {
-    var id = getString(properties.options.id);
-    setProperty(callbacks.getHiddenValueCallbacks().get(id));
-}
+main();
+"
+`;
 
-function getHttpCallback() {
-    setProperty(callbacks.getHttpCallbacks().get(0));
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Has-Session.nodeTypes.json 1`] = `
+{
+  "nodeTypes": {
+    "c605506774a848f7877b4d17a453bd39-1": {
+      "_id": "c605506774a848f7877b4d17a453bd39-1",
+      "description": "Checks if the user has a current session.",
+      "displayName": "Has Session",
+      "errorOutcome": false,
+      "inputs": [],
+      "outcomes": [
+        "True",
+        "False",
+      ],
+      "outputs": [],
+      "properties": {},
+      "script": "file://Has-Session.nodeTypes.js",
+      "serviceName": "c605506774a848f7877b4d17a453bd39",
+      "tags": [
+        "utilities",
+      ],
+    },
+  },
 }
+`;
 
-function getIdPCallback() {
-    setProperty(callbacks.getIdpCallbacks().get(0));
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Has-Session-AM.nodeTypes.js 1`] = `
+"var SCRIPT_OUTCOMES = {
+    TRUE: 'True',
+    FALSE: 'False'
 }
 
-function getKbaCreateCallback() {
-    setProperty(callbacks.getKbaCreateCallbacks().get(0));
+function main() {
+    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
 }
 
-function getLanguageCallback() {
-    setProperty(callbacks.getLanguageCallbacks().get(0));
-}
+main();
+"
+`;
 
-function getNameCallback() {
-    setProperty(callbacks.getNameCallbacks().get(0));
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Has-Session-AM.nodeTypes.json 1`] = `
+{
+  "nodeTypes": {
+    "session-1": {
+      "_id": "session-1",
+      "description": "Checks if the user has a current session.",
+      "displayName": "Has Session AM",
+      "errorOutcome": false,
+      "inputs": [],
+      "outcomes": [
+        "True",
+        "False",
+      ],
+      "outputs": [],
+      "properties": {},
+      "script": "file://Has-Session-AM.nodeTypes.js",
+      "serviceName": "session",
+      "tags": [
+        "utilities",
+      ],
+    },
+  },
 }
+`;
 
-function getNumberAttributeInputCallback() {
-    setProperty(callbacks.getNumberAttributeInputCallbacks().get(0));
-}
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Vector-ALU.nodeTypes.js 1`] = `
+"var SCRIPT_OUTCOMES = {
+    SUCCESS: 'Success'
+};
 
-function getPasswordCallback() {
-    setProperty(callbacks.getPasswordCallbacks().get(0));
+var OPERATORS = {
+    ADD: "ADD",
+    SUBTRACT: "SUBTRACT",
+    DOT: "DOT",
+    CROSS: "CROSS"
 }
 
-function getSelectIdPCallback() {
-    setProperty(callbacks.getSelectIdPCallbacks().get(0));
+function add(a, b) {
+    return a.map((v, i) => v + b[i]);
 }
 
-function getStringAttributeInputCallback() {
-    setProperty(callbacks.getStringAttributeInputCallbacks().get(0));
+function subtract(a, b) {
+    return a.map((v, i) => v - b[i]);
 }
 
-function getTermsAndConditionsCallback() {
-    setProperty(callbacks.getTermsAndConditionsCallbacks().get(0));
+function dot(a, b) {
+    return a.reduce((sum, v, i) => sum + v * b[i], 0);
 }
 
-function getTextInputCallback() {
-    setProperty(callbacks.getTextInputCallbacks().get(0));
+function cross(a, b) {
+    return [
+        a[1] * b[2] - a[2] * b[1],
+        a[2] * b[0] - a[0] * b[2],
+        a[0] * b[1] - a[1] * b[0]
+    ];
 }
 
-function getValidatedPasswordCallback() {
-    setProperty(callbacks.getValidatedPasswordCallbacks().get(0));
+function main() {
+    if (properties.a.length !== properties.b.length) throw new Error("Vectors not the same dimension.");
+    switch (properties.operator) {
+        case OPERATORS.ADD:
+            nodeState.putShared("c", add(properties.a, properties.b));
+            break;
+        case OPERATORS.SUBTRACT:
+            nodeState.putShared("c", subtract(properties.a, properties.b));
+            break;
+        case OPERATORS.DOT:
+            nodeState.putShared("c", dot(properties.a, properties.b));
+            break;
+        case OPERATORS.CROSS:
+            if (properties.a.length !== 3) throw new Error("Vectors not dimension 3 for cross product");
+            nodeState.putShared("c", cross(properties.a, properties.b));
+            break;
+        default: throw new Error("Unknown operator.");
+    }
+    action.goTo(SCRIPT_OUTCOMES.SUCCESS);
 }
 
-function getValidatedUsernameCallback() {
-    setProperty(callbacks.getValidatedUsernameCallbacks().get(0));
-}
+main();
+"
+`;
 
-function getX509CertificateCallback() {
-    setProperty(callbacks.getX509CertificateCallbacks().get(0));
+exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Vector-ALU.nodeTypes.json 1`] = `
+{
+  "nodeTypes": {
+    "c15e2efb3deb4d4ea338c74a6440b69f-1": {
+      "_id": "c15e2efb3deb4d4ea338c74a6440b69f-1",
+      "description": "Simple ALU that performs basic binary vector math operations. Outputs the result onto the shared state with key "c".",
+      "displayName": "Vector ALU",
+      "errorOutcome": true,
+      "inputs": [],
+      "outcomes": [
+        "Success",
+      ],
+      "outputs": [
+        "c",
+      ],
+      "properties": {
+        "a": {
+          "defaultValue": [
+            1,
+            2,
+            3,
+          ],
+          "description": "Left vector operand",
+          "multivalued": true,
+          "required": true,
+          "title": "A",
+          "type": "NUMBER",
+        },
+        "b": {
+          "defaultValue": [
+            4,
+            5,
+            6,
+          ],
+          "description": "Right vector operand",
+          "multivalued": true,
+          "required": true,
+          "title": "B",
+          "type": "NUMBER",
+        },
+        "operator": {
+          "defaultValue": "DOT",
+          "description": "The binary operation to perform on the vectors.",
+          "multivalued": false,
+          "options": {
+            "ADD": "+",
+            "CROSS": "X",
+            "DOT": ".",
+            "SUBTRACT": "-",
+          },
+          "required": true,
+          "title": "Operator",
+          "type": "STRING",
+        },
+      },
+      "script": "file://Vector-ALU.nodeTypes.js",
+      "serviceName": "c15e2efb3deb4d4ea338c74a6440b69f",
+      "tags": [
+        "math",
+        "vector",
+        "utilities",
+      ],
+    },
+  },
 }
+`;
 
-function main() {
-    if (!callbacks.isEmpty()) {
-        switch (properties.callback) {
-            case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: getBooleanAttributeInputCallback(); break;
-            case CALLBACKS.CHOICE_CALLBACK: getChoiceCallback(); break;
-            case CALLBACKS.CONFIRMATION_CALLBACK: getConfirmationCallback(); break;
-            case CALLBACKS.CONSENT_MAPPING_CALLBACK: getConsentMappingCallback(); break;
-            case CALLBACKS.DEVICE_PROFILE_CALLBACK: getDeviceProfileCallback(); break;
-            case CALLBACKS.HIDDEN_VALUE_CALLBACK: getHiddenValueCallback(); break;
-            case CALLBACKS.HTTP_CALLBACK: getHttpCallback(); break;
-            case CALLBACKS.IDP_CALLBACK: getIdPCallback(); break;
-            case CALLBACKS.KBA_CREATE_CALLBACK: getKbaCreateCallback(); break;
-            case CALLBACKS.LANGUAGE_CALLBACK: getLanguageCallback(); break;
-            case CALLBACKS.NAME_CALLBACK: getNameCallback(); break;
-            case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: getNumberAttributeInputCallback(); break;
-            case CALLBACKS.PASSWORD_CALLBACK: getPasswordCallback(); break;
-            case CALLBACKS.SELECT_IDP_CALLBACK: getSelectIdPCallback(); break;
-            case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: getStringAttributeInputCallback(); break;
-            case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: getTermsAndConditionsCallback(); break;
-            case CALLBACKS.TEXT_INPUT_CALLBACK: getTextInputCallback(); break;
-            case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: getValidatedPasswordCallback(); break;
-            case CALLBACKS.VALIDATED_USERNAME_CALLBACK: getValidatedUsernameCallback(); break;
-            case CALLBACKS.X509_CERTIFICATE_CALLBACK: getX509CertificateCallback(); break;
-            default: break;
-        }
-        action.goTo(SCRIPT_OUTCOMES.OUTCOME);
-        return;
-    }
+exports[`frodo node export "frodo node export -Nxi c605506774a848f7877b4d17a453bd39 -D customNodeExportDir1": should export custom node with service name "c605506774a848f7877b4d17a453bd39" to directory customNodeExportDir1 with no metadata and extracted script 1`] = `0`;
 
-    switch (properties.callback) {
-        case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: booleanAttributeInputCallback(); break;
-        case CALLBACKS.CHOICE_CALLBACK: choiceCallback(); break;
-        case CALLBACKS.CONFIRMATION_CALLBACK: confirmationCallback(); break;
-        case CALLBACKS.CONSENT_MAPPING_CALLBACK: consentMappingCallback(); break;
-        case CALLBACKS.DEVICE_PROFILE_CALLBACK: deviceProfileCallback(); break;
-        case CALLBACKS.HIDDEN_VALUE_CALLBACK: hiddenValueCallback(); break;
-        case CALLBACKS.HTTP_CALLBACK: httpCallback(); break;
-        case CALLBACKS.IDP_CALLBACK: idPCallback(); break;
-        case CALLBACKS.KBA_CREATE_CALLBACK: kbaCreateCallback(); break;
-        case CALLBACKS.LANGUAGE_CALLBACK: languageCallback(); break;
-        case CALLBACKS.METADATA_CALLBACK: metadataCallback(); break;
-        case CALLBACKS.NAME_CALLBACK: nameCallback(); break;
-        case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: numberAttributeInputCallback(); break;
-        case CALLBACKS.PASSWORD_CALLBACK: passwordCallback(); break;
-        case CALLBACKS.POLLING_WAIT_CALLBACK: pollingWaitCallback(); break;
-        case CALLBACKS.REDIRECT_CALLBACK: redirectCallback(); break;
-        case CALLBACKS.SCRIPT_TEXT_OUTPUT_CALLBACK: scriptTextOutputCallback(); break;
-        case CALLBACKS.SELECT_IDP_CALLBACK: selectIdPCallback(); break;
-        case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: stringAttributeInputCallback(); break;
-        case CALLBACKS.SUSPENDED_TEXT_OUTPUT_CALLBACK: suspendedTextOutputCallback(); break;
-        case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: termsAndConditionsCallback(); break;
-        case CALLBACKS.TEXT_INPUT_CALLBACK: textInputCallback(); break;
-        case CALLBACKS.TEXT_OUTPUT_CALLBACK: textOutputCallback(); break;
-        case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: validatedPasswordCallback(); break;
-        case CALLBACKS.VALIDATED_USERNAME_CALLBACK: validatedUsernameCallback(); break;
-        case CALLBACKS.X509_CERTIFICATE_CALLBACK: x509CertificateCallback(); break;
-        default: throw new Error('Unknown Callback'); // Should never reach this case
-    }
+exports[`frodo node export "frodo node export -Nxi c605506774a848f7877b4d17a453bd39 -D customNodeExportDir1": should export custom node with service name "c605506774a848f7877b4d17a453bd39" to directory customNodeExportDir1 with no metadata and extracted script 2`] = `""`;
+
+exports[`frodo node export "frodo node export -Nxi c605506774a848f7877b4d17a453bd39 -D customNodeExportDir1": should export custom node with service name "c605506774a848f7877b4d17a453bd39" to directory customNodeExportDir1 with no metadata and extracted script: customNodeExportDir1/c605506774a848f7877b4d17a453bd39.nodeTypes.json 1`] = `
+{
+  "nodeTypes": {
+    "c605506774a848f7877b4d17a453bd39-1": {
+      "_id": "c605506774a848f7877b4d17a453bd39-1",
+      "description": "Checks if the user has a current session.",
+      "displayName": "Has Session",
+      "errorOutcome": false,
+      "inputs": [],
+      "outcomes": [
+        "True",
+        "False",
+      ],
+      "outputs": [],
+      "properties": {},
+      "script": "var SCRIPT_OUTCOMES = {
+    TRUE: 'True',
+    FALSE: 'False'
+}
+
+function main() {
+    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
 }
 
 main();
 ",
-      "serviceName": "ef81b1a52c914710b3388caebfe7233a",
+      "serviceName": "c605506774a848f7877b4d17a453bd39",
       "tags": [
-        "callback",
         "utilities",
       ],
     },
@@ -3430,8 +3814,13 @@ main();
 }
 `;
 
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Display-State.nodeTypes.json 1`] = `
+exports[`frodo node export "frodo node export -a": should export all custom nodes to a single file 1`] = `0`;
+
+exports[`frodo node export "frodo node export -a": should export all custom nodes to a single file 2`] = `""`;
+
+exports[`frodo node export "frodo node export -a": should export all custom nodes to a single file: allCustomNodes.nodeTypes.json 1`] = `
 {
+  "meta": Any<Object>,
   "nodeTypes": {
     "8ab9f1aad4b4460a9c45d15fb148e221-1": {
       "_id": "8ab9f1aad4b4460a9c45d15fb148e221-1",
@@ -3482,24 +3871,230 @@ function main() {
         callbacksBuilder.textOutputCallback(0, \`<pre style="text-align: left;">\${JSON.stringify(debugState, null, 2)}</pre>\`);
         return;
     }
-    callbacksBuilder.textOutputCallback(0, \`<table><tr><td style="border: 1px solid black;">Key</td><td style="border: 1px solid black;">Value</td></tr>\${Array.from(Object.keys(debugState).map(k => \`<tr><td style="border: 1px solid black;"><pre style="text-align: left;">\${k}</pre></td><td style="border: 1px solid black;"><pre style="text-align: left;">\${debugState[k]}</pre></td></tr>\`))}</table>\`);
+    callbacksBuilder.textOutputCallback(0, \`<table><tr><td style="border: 1px solid black;">Key</td><td style="border: 1px solid black;">Value</td></tr>\${Array.from(Object.keys(debugState).map(k => \`<tr><td style="border: 1px solid black;"><pre style="text-align: left;">\${k}</pre></td><td style="border: 1px solid black;"><pre style="text-align: left;">\${debugState[k]}</pre></td></tr>\`))}</table>\`);
+}
+
+main();
+",
+      "serviceName": "8ab9f1aad4b4460a9c45d15fb148e221",
+      "tags": [
+        "debug",
+        "testing",
+      ],
+    },
+    "c15e2efb3deb4d4ea338c74a6440b69f-1": {
+      "_id": "c15e2efb3deb4d4ea338c74a6440b69f-1",
+      "description": "Simple ALU that performs basic binary vector math operations. Outputs the result onto the shared state with key "c".",
+      "displayName": "Vector ALU",
+      "errorOutcome": true,
+      "inputs": [],
+      "outcomes": [
+        "Success",
+      ],
+      "outputs": [
+        "c",
+      ],
+      "properties": {
+        "a": {
+          "defaultValue": [
+            1,
+            2,
+            3,
+          ],
+          "description": "Left vector operand",
+          "multivalued": true,
+          "required": true,
+          "title": "A",
+          "type": "NUMBER",
+        },
+        "b": {
+          "defaultValue": [
+            4,
+            5,
+            6,
+          ],
+          "description": "Right vector operand",
+          "multivalued": true,
+          "required": true,
+          "title": "B",
+          "type": "NUMBER",
+        },
+        "operator": {
+          "defaultValue": "DOT",
+          "description": "The binary operation to perform on the vectors.",
+          "multivalued": false,
+          "options": {
+            "ADD": "+",
+            "CROSS": "X",
+            "DOT": ".",
+            "SUBTRACT": "-",
+          },
+          "required": true,
+          "title": "Operator",
+          "type": "STRING",
+        },
+      },
+      "script": "var SCRIPT_OUTCOMES = {
+    SUCCESS: 'Success'
+};
+
+var OPERATORS = {
+    ADD: "ADD",
+    SUBTRACT: "SUBTRACT",
+    DOT: "DOT",
+    CROSS: "CROSS"
+}
+
+function add(a, b) {
+    return a.map((v, i) => v + b[i]);
+}
+
+function subtract(a, b) {
+    return a.map((v, i) => v - b[i]);
+}
+
+function dot(a, b) {
+    return a.reduce((sum, v, i) => sum + v * b[i], 0);
+}
+
+function cross(a, b) {
+    return [
+        a[1] * b[2] - a[2] * b[1],
+        a[2] * b[0] - a[0] * b[2],
+        a[0] * b[1] - a[1] * b[0]
+    ];
+}
+
+function main() {
+    if (properties.a.length !== properties.b.length) throw new Error("Vectors not the same dimension.");
+    switch (properties.operator) {
+        case OPERATORS.ADD:
+            nodeState.putShared("c", add(properties.a, properties.b));
+            break;
+        case OPERATORS.SUBTRACT:
+            nodeState.putShared("c", subtract(properties.a, properties.b));
+            break;
+        case OPERATORS.DOT:
+            nodeState.putShared("c", dot(properties.a, properties.b));
+            break;
+        case OPERATORS.CROSS:
+            if (properties.a.length !== 3) throw new Error("Vectors not dimension 3 for cross product");
+            nodeState.putShared("c", cross(properties.a, properties.b));
+            break;
+        default: throw new Error("Unknown operator.");
+    }
+    action.goTo(SCRIPT_OUTCOMES.SUCCESS);
+}
+
+main();
+",
+      "serviceName": "c15e2efb3deb4d4ea338c74a6440b69f",
+      "tags": [
+        "math",
+        "vector",
+        "utilities",
+      ],
+    },
+    "c605506774a848f7877b4d17a453bd39-1": {
+      "_id": "c605506774a848f7877b4d17a453bd39-1",
+      "description": "Checks if the user has a current session.",
+      "displayName": "Has Session",
+      "errorOutcome": false,
+      "inputs": [],
+      "outcomes": [
+        "True",
+        "False",
+      ],
+      "outputs": [],
+      "properties": {},
+      "script": "var SCRIPT_OUTCOMES = {
+    TRUE: 'True',
+    FALSE: 'False'
+}
+
+function main() {
+    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
+}
+
+main();
+",
+      "serviceName": "c605506774a848f7877b4d17a453bd39",
+      "tags": [
+        "utilities",
+      ],
+    },
+    "c6063fb2f5dc42dd9772bedc93898bd8-1": {
+      "_id": "c6063fb2f5dc42dd9772bedc93898bd8-1",
+      "description": "Simple ALU that performs basic binary math operations. Expects an "x" and "y" value on the shared state, and will produce a new "z" value on the shared state as output.",
+      "displayName": "ALU",
+      "errorOutcome": true,
+      "inputs": [
+        "x",
+        "y",
+      ],
+      "outcomes": [
+        "Success",
+      ],
+      "outputs": [
+        "z",
+      ],
+      "properties": {
+        "operator": {
+          "defaultValue": "ADD",
+          "description": "The operation to perform.",
+          "multivalued": false,
+          "options": {
+            "ADD": "+",
+            "DIVIDE": "/",
+            "MULTIPLY": "*",
+            "SUBTRACT": "-",
+          },
+          "required": true,
+          "title": "Operator",
+          "type": "STRING",
+        },
+      },
+      "script": "var SCRIPT_OUTCOMES = {
+    SUCCESS: 'Success'
+};
+
+var OPERATORS = {
+    ADD: "ADD",
+    SUBTRACT: "SUBTRACT",
+    MULTIPLY: "MULTIPLY",
+    DIVIDE: "DIVIDE"
+}
+
+function main() {
+    var a = Number(properties.a);
+    var b = Number(properties.b);
+    switch (properties.operator) {
+        case OPERATORS.ADD:
+            nodeState.putShared("z", a + b);
+            break;
+        case OPERATORS.SUBTRACT:
+            nodeState.putShared("z", a - b);
+            break;
+        case OPERATORS.MULTIPLY:
+            nodeState.putShared("z", a * b);
+            break;
+        case OPERATORS.DIVIDE:
+            if (b == 0) throw new Error("Cannot divide by 0");
+            nodeState.putShared("z", a / b);
+            break;
+        default: throw new Error("Unknown operator.");
+    }
+    action.goTo(SCRIPT_OUTCOMES.SUCCESS);
 }
 
 main();
 ",
-      "serviceName": "8ab9f1aad4b4460a9c45d15fb148e221",
+      "serviceName": "c6063fb2f5dc42dd9772bedc93898bd8",
       "tags": [
-        "debug",
-        "testing",
+        "math",
+        "utilities",
       ],
     },
-  },
-}
-`;
-
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Generate-JWT.nodeTypes.json 1`] = `
-{
-  "nodeTypes": {
     "e5ad0110c8ee4dafaae983003cd05d4a-1": {
       "_id": "e5ad0110c8ee4dafaae983003cd05d4a-1",
       "description": "Generate a signed JWT using the HMAC SHA-256 algorithm.",
@@ -3550,614 +4145,677 @@ var esv = properties.signingkey;
 
 var signingkey = systemEnv.getProperty(esv);
 
-var username = nodeState.get("username");
+var username = nodeState.get("username");
+
+var data = {
+  jwtType:"SIGNED",
+  jwsAlgorithm: "HS256",
+  issuer: iss,
+  subject: username,
+  audience: aud,
+  type: "JWT",
+  validityMinutes: validity,
+  signingKey: signingkey
+};
+
+var jwt = jwtAssertion.generateJwt(data);
+
+if (jwt !== null && jwt.length > 0) {
+  nodeState.putShared("assertionJwt" , jwt);
+  action.goTo("True");
+} else {
+  action.goTo("False");
+}",
+      "serviceName": "e5ad0110c8ee4dafaae983003cd05d4a",
+      "tags": [
+        "Utilities",
+        "utilities",
+      ],
+    },
+    "ef81b1a52c914710b3388caebfe7233a-1": {
+      "_id": "ef81b1a52c914710b3388caebfe7233a-1",
+      "description": "Displays custom callback to the page",
+      "displayName": "Display Callback",
+      "errorOutcome": false,
+      "inputs": [],
+      "outcomes": [
+        "outcome",
+      ],
+      "outputs": [],
+      "properties": {
+        "callback": {
+          "description": "The callback to display",
+          "multivalued": false,
+          "options": {
+            "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK": "booleanAttributeInputCallback",
+            "CHOICE_CALLBACK": "choiceCallback",
+            "CONFIRMATION_CALLBACK": "confirmationCallback",
+            "CONSENT_MAPPING_CALLBACK": "consentMappingCallback",
+            "DEVICE_PROFILE_CALLBACK": "deviceProfileCallback",
+            "HIDDEN_VALUE_CALLBACK": "hiddenValueCallback",
+            "HTTP_CALLBACK": "httpCallback",
+            "IDP_CALLBACK": "idPCallback",
+            "KBA_CREATE_CALLBACK": "kbaCreateCallback",
+            "LANGUAGE_CALLBACK": "languageCallback",
+            "METADATA_CALLBACK": "metadataCallback",
+            "NAME_CALLBACK": "nameCallback",
+            "NUMBER_ATTRIBUTE_INPUT_CALLBACK": "numberAttributeInputCallback",
+            "PASSWORD_CALLBACK": "passwordCallback",
+            "POLLING_WAIT_CALLBACK": "pollingWaitCallback",
+            "REDIRECT_CALLBACK": "redirectCallback",
+            "SCRIPT_TEXT_OUTPUT_CALLBACK": "scriptTextOutputCallback",
+            "SELECT_IDP_CALLBACK": "selectIdPCallback",
+            "STRING_ATTRIBUTE_INPUT_CALLBACK": "stringAttributeInputCallback",
+            "SUSPENDED_TEXT_OUTPUT_CALLBACK": "suspendedTextOutputCallback",
+            "TERMS_AND_CONDITIONS_CALLBACK": "termsAndConditionsCallback",
+            "TEXT_INPUT_CALLBACK": "textInputCallback",
+            "TEXT_OUTPUT_CALLBACK": "textOutputCallback",
+            "VALIDATED_PASSWORD_CALLBACK": "validatedPasswordCallback",
+            "VALIDATED_USERNAME_CALLBACK": "validatedUsernameCallback",
+            "X509_CERTIFICATE_CALLBACK": "x509CertificateCallback",
+          },
+          "required": true,
+          "title": "Callback",
+          "type": "STRING",
+        },
+        "objectSharedProperty": {
+          "description": "The objectAttributes property on the shared state to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Object Attributes Shared Property",
+          "type": "STRING",
+        },
+        "objectTransientProperty": {
+          "description": "The objectAttributes property on the transient state to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Object Attributes Transient Property",
+          "type": "STRING",
+        },
+        "options": {
+          "description": "The options containing the parameters for the callback (see documentation for possible parameters: https://docs.pingidentity.com/pingoneaic/latest/am-scripting/scripting-api-node.html#scripting-api-node-callbacks). 
+
+For example, for textOutputCallback, the options could be: { messageType: 0, message: "Hello World!" }. 
+
+Note that for required parameters that are not specified in the options will use default values based on the type of the parameter ("" for Strings, [] for Arrays, {} for Objects, 0 for Ints, 0.0 for Doubles, and false for Booleans).",
+          "multivalued": false,
+          "required": true,
+          "title": "Options",
+          "type": "OBJECT",
+        },
+        "sharedProperty": {
+          "description": "The shared state property to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Shared State Property",
+          "type": "STRING",
+        },
+        "transientProperty": {
+          "description": "The transient state property to put the callback input into (if applicable)",
+          "multivalued": false,
+          "required": false,
+          "title": "Transient State Property",
+          "type": "STRING",
+        },
+      },
+      "script": "var SCRIPT_OUTCOMES = {
+    OUTCOME: 'outcome'
+};
+
+var CALLBACKS = {
+	BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK",
+	CHOICE_CALLBACK: "CHOICE_CALLBACK",
+	CONFIRMATION_CALLBACK: "CONFIRMATION_CALLBACK",
+	CONSENT_MAPPING_CALLBACK: "CONSENT_MAPPING_CALLBACK",
+	DEVICE_PROFILE_CALLBACK: "DEVICE_PROFILE_CALLBACK",
+	HIDDEN_VALUE_CALLBACK: "HIDDEN_VALUE_CALLBACK",
+	HTTP_CALLBACK: "HTTP_CALLBACK",
+	IDP_CALLBACK: "IDP_CALLBACK",
+	KBA_CREATE_CALLBACK: "KBA_CREATE_CALLBACK",
+	LANGUAGE_CALLBACK: "LANGUAGE_CALLBACK",
+	METADATA_CALLBACK: "METADATA_CALLBACK",
+	NAME_CALLBACK: "NAME_CALLBACK",
+	NUMBER_ATTRIBUTE_INPUT_CALLBACK: "NUMBER_ATTRIBUTE_INPUT_CALLBACK",
+	PASSWORD_CALLBACK: "PASSWORD_CALLBACK",
+	POLLING_WAIT_CALLBACK: "POLLING_WAIT_CALLBACK",
+    REDIRECT_CALLBACK: "REDIRECT_CALLBACK",
+	SCRIPT_TEXT_OUTPUT_CALLBACK: "SCRIPT_TEXT_OUTPUT_CALLBACK",
+	SELECT_IDP_CALLBACK: "SELECT_IDP_CALLBACK",
+	STRING_ATTRIBUTE_INPUT_CALLBACK: "STRING_ATTRIBUTE_INPUT_CALLBACK",
+	SUSPENDED_TEXT_OUTPUT_CALLBACK: "SUSPENDED_TEXT_OUTPUT_CALLBACK",
+	TERMS_AND_CONDITIONS_CALLBACK: "TERMS_AND_CONDITIONS_CALLBACK",
+	TEXT_INPUT_CALLBACK: "TEXT_INPUT_CALLBACK",
+	TEXT_OUTPUT_CALLBACK: "TEXT_OUTPUT_CALLBACK",
+	VALIDATED_PASSWORD_CALLBACK: "VALIDATED_PASSWORD_CALLBACK",
+	VALIDATED_USERNAME_CALLBACK: "VALIDATED_USERNAME_CALLBACK",
+	X509_CERTIFICATE_CALLBACK: "X509_CERTIFICATE_CALLBACK"
+}
+
+function isStringPresent(value) {
+    return value;
+}
+
+function getString(value) {
+    return value || '';
+}
+
+function isArrayPresent(value) {
+    return value;
+}
+
+function getArray(value) {
+    return value ? JSON.parse(value) : [];
+}
+
+function isObjectPresent(value) {
+    return value;
+}
+
+function getObject(value) {
+    return value ? JSON.parse(value) : {};
+}
+
+function isIntPresent(value) {
+    return value;
+}
+
+function getInt(value) {
+    return value ? parseInt(value) : 0;
+}
+
+function isDoublePresent(value) {
+    return value;
+}
+
+function getDouble(value) {
+    return value ? parseFloat(value) : 0.0;
+}
+
+function isBooleanPresent(value) {
+    return value;
+}
+
+function getBoolean(value) {
+    return value ? value.toLowerCase() === 'true' : false;
+}
+
+function setProperty(value) {
+    if (properties.sharedProperty) nodeState.putShared(properties.sharedProperty, value);
+    if (properties.transientProperty) nodeState.putTransient(properties.transientProperty, value);
+    if (properties.objectSharedProperty) {
+        var attributes = {};
+        attributes[properties.objectSharedProperty] = value;
+        nodeState.mergeShared({
+            objectAttributes: attributes
+        });
+    }
+    if (properties.objectTransientProperty) {
+        var attributes = {};
+        attributes[properties.objectTransientProperty] = value;
+        nodeState.mergeTransient({
+            objectAttributes: attributes
+        });
+    }
+}
+
+function booleanAttributeInputCallback() {
+    var name = getString(properties.options.name);
+    var prompt = getString(properties.options.prompt);
+    var value = getBoolean(properties.options.value);
+    var required = getBoolean(properties.options.required);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
+        if (isArrayPresent(failedPolicies)) {
+            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
+        } else {
+            callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
+        }
+    } else if (isArrayPresent(failedPolicies)) {
+        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required, failedPolicies);
+    } else {
+        callbacksBuilder.booleanAttributeInputCallback(name, prompt, value, required);
+    }
+}
+
+function choiceCallback() {
+    var prompt = getString(properties.options.prompt);
+    var choices = getArray(properties.options.choices);
+    var defaultChoice = getInt(properties.options.defaultChoice);
+    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);
+    callbacksBuilder.choiceCallback(prompt, choices, defaultChoice, multipleSelectionsAllowed);
+}
 
-var data = {
-  jwtType:"SIGNED",
-  jwsAlgorithm: "HS256",
-  issuer: iss,
-  subject: username,
-  audience: aud,
-  type: "JWT",
-  validityMinutes: validity,
-  signingKey: signingkey
-};
+function confirmationCallback() {
+    var prompt = getString(properties.options.prompt);
+    var messageType = getInt(properties.options.messageType);
+    var options = getArray(properties.options.options);
+    var optionType = getInt(properties.options.optionType);
+    var defaultOption = getInt(properties.options.defaultOption);
+    if (isStringPresent(properties.options.prompt)) {
+        if (isIntPresent(properties.options.optionType)) {
+            callbacksBuilder.confirmationCallback(prompt, messageType, optionType, defaultOption);
+        } else {
+            callbacksBuilder.confirmationCallback(prompt, messageType, options, defaultOption);
+        }
+    } else {
+        if (isIntPresent(properties.options.optionType)) {
+            callbacksBuilder.confirmationCallback(messageType, optionType, defaultOption);
+        } else {
+            callbacksBuilder.confirmationCallback(messageType, options, defaultOption);
+        }
+    }
+}
 
-var jwt = jwtAssertion.generateJwt(data);
+function consentMappingCallback() {
+    var config = getObject(properties.options.config);
+    var message = getString(properties.options.message);
+    var isRequired = getBoolean(properties.options.isRequired);
+    var name = getString(properties.options.name);
+    var displayName = getString(properties.options.displayName);
+    var icon = getString(properties.options.icon);
+    var accessLevel = getString(properties.options.accessLevel);
+    var titles = getArray(properties.options.titles);
+    if (isObjectPresent(properties.options.prompt)) {
+        callbacksBuilder.consentMappingCallback(config, message, isRequired);
+    } else {
+        callbacksBuilder.consentMappingCallback(name, displayName, icon, accessLevel, titles, message, isRequired);
+    }
+}
 
-if (jwt !== null && jwt.length > 0) {
-  nodeState.putShared("assertionJwt" , jwt);
-  action.goTo("True");
-} else {
-  action.goTo("False");
-}",
-      "serviceName": "e5ad0110c8ee4dafaae983003cd05d4a",
-      "tags": [
-        "Utilities",
-        "utilities",
-      ],
-    },
-  },
+function deviceProfileCallback() {
+    var metadata = getBoolean(properties.options.metadata);
+    var location = getBoolean(properties.options.location);
+    var message = getString(properties.options.message);
+    callbacksBuilder.deviceProfileCallback(metadata, location, message);
 }
-`;
 
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Has-Session.nodeTypes.json 1`] = `
-{
-  "nodeTypes": {
-    "c605506774a848f7877b4d17a453bd39-1": {
-      "_id": "c605506774a848f7877b4d17a453bd39-1",
-      "description": "Checks if the user has a current session.",
-      "displayName": "Has Session",
-      "errorOutcome": false,
-      "inputs": [],
-      "outcomes": [
-        "True",
-        "False",
-      ],
-      "outputs": [],
-      "properties": {},
-      "script": "var SCRIPT_OUTCOMES = {
-    TRUE: 'True',
-    FALSE: 'False'
+function hiddenValueCallback() {
+    var id = getString(properties.options.id);
+    var value = getString(properties.options.value);
+    callbacksBuilder.hiddenValueCallback(id, value);
 }
 
-function main() {
-    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
+function httpCallback() {
+    var authorizationHeader = getString(properties.options.authorizationHeader);
+    var negotiationHeader = getString(properties.options.negotiationHeader);
+    var authRHeader = getString(properties.options.authRHeader);
+    var negoName = getString(properties.options.negoName);
+    var negoValue = getString(properties.options.negoValue);
+    if (isStringPresent(properties.options.authorizationHeader) || isStringPresent(properties.options.negotiationHeader)) {
+        var errorCode = getString(properties.options.errorCode);
+        callbacksBuilder.httpCallback(authorizationHeader, negotiationHeader, errorCode);
+    } else {
+        var errorCode = getInt(properties.options.errorCode);
+        callbacksBuilder.httpCallback(authRHeader, negoName, negoValue, errorCode);
+    }
 }
 
-main();
-",
-      "serviceName": "c605506774a848f7877b4d17a453bd39",
-      "tags": [
-        "utilities",
-      ],
-    },
-  },
+function idPCallback() {
+    var provider = getString(properties.options.provider);
+    var clientId = getString(properties.options.clientId);
+    var redirectUri = getString(properties.options.redirectUri);
+    var scope = getArray(properties.options.scope);
+    var nonce = getString(properties.options.nonce);
+    var request = getString(properties.options.request);
+    var requestUri = getString(properties.options.requestUri);
+    var acrValues = getArray(properties.options.acrValues);
+    var requestNativeAppForUserInfo = getBoolean(properties.options.requestNativeAppForUserInfo);
+    var token = getString(properties.options.token);
+    var tokenType = getString(properties.options.tokenType);
+    if (isStringPresent(properties.options.token) || isStringPresent(properties.options.tokenType)) {
+        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo, token, tokenType);
+    } else {
+        callbacksBuilder.idPCallback(provider, clientId, redirectUri, scope, nonce, request, requestUri, acrValues, requestNativeAppForUserInfo);
+    }
 }
-`;
 
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Has-Session-AM.nodeTypes.json 1`] = `
-{
-  "nodeTypes": {
-    "session-1": {
-      "_id": "session-1",
-      "description": "Checks if the user has a current session.",
-      "displayName": "Has Session AM",
-      "errorOutcome": false,
-      "inputs": [],
-      "outcomes": [
-        "True",
-        "False",
-      ],
-      "outputs": [],
-      "properties": {},
-      "script": "var SCRIPT_OUTCOMES = {
-    TRUE: 'True',
-    FALSE: 'False'
+function kbaCreateCallback() {
+    var prompt = getString(properties.options.prompt);
+    var predefinedQuestions = getArray(properties.options.predefinedQuestions);
+    var allowUserDefinedQuestions = getBoolean(properties.options.allowUserDefinedQuestions);
+    callbacksBuilder.kbaCreateCallback(prompt, predefinedQuestions, allowUserDefinedQuestions);
 }
 
-function main() {
-    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
+function languageCallback() {
+    var language = getString(properties.options.language);
+    var country = getString(properties.options.country);
+    callbacksBuilder.languageCallback(language, country);
 }
 
-main();
-",
-      "serviceName": "session",
-      "tags": [
-        "utilities",
-      ],
-    },
-  },
+function metadataCallback() {
+    var outputValue = getObject(properties.options.outputValue);
+    callbacksBuilder.metadataCallback(outputValue);
 }
-`;
 
-exports[`frodo node export "frodo node export -AND customNodeExportDir4": should export all nodes into separate files with no metadata in the directory customNodeExportDir4: customNodeExportDir4/Vector-ALU.nodeTypes.json 1`] = `
-{
-  "nodeTypes": {
-    "c15e2efb3deb4d4ea338c74a6440b69f-1": {
-      "_id": "c15e2efb3deb4d4ea338c74a6440b69f-1",
-      "description": "Simple ALU that performs basic binary vector math operations. Outputs the result onto the shared state with key "c".",
-      "displayName": "Vector ALU",
-      "errorOutcome": true,
-      "inputs": [],
-      "outcomes": [
-        "Success",
-      ],
-      "outputs": [
-        "c",
-      ],
-      "properties": {
-        "a": {
-          "defaultValue": [
-            1,
-            2,
-            3,
-          ],
-          "description": "Left vector operand",
-          "multivalued": true,
-          "required": true,
-          "title": "A",
-          "type": "NUMBER",
-        },
-        "b": {
-          "defaultValue": [
-            4,
-            5,
-            6,
-          ],
-          "description": "Right vector operand",
-          "multivalued": true,
-          "required": true,
-          "title": "B",
-          "type": "NUMBER",
-        },
-        "operator": {
-          "defaultValue": "DOT",
-          "description": "The binary operation to perform on the vectors.",
-          "multivalued": false,
-          "options": {
-            "ADD": "+",
-            "CROSS": "X",
-            "DOT": ".",
-            "SUBTRACT": "-",
-          },
-          "required": true,
-          "title": "Operator",
-          "type": "STRING",
-        },
-      },
-      "script": "var SCRIPT_OUTCOMES = {
-    SUCCESS: 'Success'
-};
+function nameCallback() {
+    var prompt = getString(properties.options.prompt);
+    var defaultName = getString(properties.options.defaultName);
+    if (isStringPresent(properties.options.defaultName)) {
+        callbacksBuilder.nameCallback(prompt, defaultName);
+    } else {
+        callbacksBuilder.nameCallback(prompt);
+    }
+}
 
-var OPERATORS = {
-    ADD: "ADD",
-    SUBTRACT: "SUBTRACT",
-    DOT: "DOT",
-    CROSS: "CROSS"
+function numberAttributeInputCallback() {
+    var name = getString(properties.options.name);
+    var prompt = getString(properties.options.prompt);
+    var value = getDouble(properties.options.value);
+    var required = getBoolean(properties.options.required);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
+        if (isArrayPresent(failedPolicies)) {
+            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
+        } else {
+            callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
+        }
+    } else if (isArrayPresent(failedPolicies)) {
+        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required, failedPolicies);
+    } else {
+        callbacksBuilder.numberAttributeInputCallback(name, prompt, value, required);
+    }
 }
 
-function add(a, b) {
-    return a.map((v, i) => v + b[i]);
+function passwordCallback() {
+    var prompt = getString(properties.options.prompt);
+    var echoOn = getBoolean(properties.options.echoOn);
+    callbacksBuilder.passwordCallback(prompt, echoOn);
 }
 
-function subtract(a, b) {
-    return a.map((v, i) => v - b[i]);
+function pollingWaitCallback() {
+    var waitTime = getString(properties.options.waitTime);
+    var message = getString(properties.options.message);
+    callbacksBuilder.pollingWaitCallback(waitTime, message);
 }
 
-function dot(a, b) {
-    return a.reduce((sum, v, i) => sum + v * b[i], 0);
+function redirectCallback() {
+    throw new Error('Not Implemented');
 }
 
-function cross(a, b) {
-    return [
-        a[1] * b[2] - a[2] * b[1],
-        a[2] * b[0] - a[0] * b[2],
-        a[0] * b[1] - a[1] * b[0]
-    ];
+function scriptTextOutputCallback() {
+    var message = getString(properties.options.message);
+    callbacksBuilder.scriptTextOutputCallback(message);
 }
 
-function main() {
-    if (properties.a.length !== properties.b.length) throw new Error("Vectors not the same dimension.");
-    switch (properties.operator) {
-        case OPERATORS.ADD:
-            nodeState.putShared("c", add(properties.a, properties.b));
-            break;
-        case OPERATORS.SUBTRACT:
-            nodeState.putShared("c", subtract(properties.a, properties.b));
-            break;
-        case OPERATORS.DOT:
-            nodeState.putShared("c", dot(properties.a, properties.b));
-            break;
-        case OPERATORS.CROSS:
-            if (properties.a.length !== 3) throw new Error("Vectors not dimension 3 for cross product");
-            nodeState.putShared("c", cross(properties.a, properties.b));
-            break;
-        default: throw new Error("Unknown operator.");
+function selectIdPCallback() {
+    var providers = getObject(properties.options.providers);
+    callbacksBuilder.selectIdPCallback(providers);
+}
+
+function stringAttributeInputCallback() {
+    var name = getString(properties.options.name);
+    var prompt = getString(properties.options.prompt);
+    var value = getString(properties.options.value);
+    var required = getBoolean(properties.options.required);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isBooleanPresent(properties.options.validateOnly) || isObjectPresent(properties.options.policies)) {
+        if (isArrayPresent(failedPolicies)) {
+            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly, failedPolicies);
+        } else {
+            callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, policies, validateOnly);
+        }
+    } else if (isArrayPresent(failedPolicies)) {
+        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required, failedPolicies);
+    } else {
+        callbacksBuilder.stringAttributeInputCallback(name, prompt, value, required);
     }
-    action.goTo(SCRIPT_OUTCOMES.SUCCESS);
 }
 
-main();
-",
-      "serviceName": "c15e2efb3deb4d4ea338c74a6440b69f",
-      "tags": [
-        "math",
-        "vector",
-        "utilities",
-      ],
-    },
-  },
+function suspendedTextOutputCallback() {
+    var messageType = getInt(properties.options.messageType);
+    var message = getString(properties.options.message);
+    callbacksBuilder.suspendedTextOutputCallback(messageType, message);
 }
-`;
 
-exports[`frodo node export "frodo node export -Nxi c605506774a848f7877b4d17a453bd39 -D customNodeExportDir1": should export custom node with service name "c605506774a848f7877b4d17a453bd39" to directory customNodeExportDir1 with no metadata and extracted script 1`] = `0`;
+function termsAndConditionsCallback() {
+    var version = getString(properties.options.version);
+    var terms = getString(properties.options.terms);
+    var createDate = getString(properties.options.createDate);
+    callbacksBuilder.termsAndConditionsCallback(version, terms, createDate);
+}
 
-exports[`frodo node export "frodo node export -Nxi c605506774a848f7877b4d17a453bd39 -D customNodeExportDir1": should export custom node with service name "c605506774a848f7877b4d17a453bd39" to directory customNodeExportDir1 with no metadata and extracted script 2`] = `""`;
+function textInputCallback() {
+    var prompt = getString(properties.options.prompt);
+    var defaultText = getString(properties.options.defaultText);
+    if (isStringPresent(properties.options.defaultText)) {
+        callbacksBuilder.textInputCallback(prompt, defaultText);
+    } else {
+        callbacksBuilder.textInputCallback(prompt);
+    }
+}
 
-exports[`frodo node export "frodo node export -Nxi c605506774a848f7877b4d17a453bd39 -D customNodeExportDir1": should export custom node with service name "c605506774a848f7877b4d17a453bd39" to directory customNodeExportDir1 with no metadata and extracted script: customNodeExportDir1/c605506774a848f7877b4d17a453bd39.nodeTypes.json 1`] = `
-{
-  "nodeTypes": {
-    "c605506774a848f7877b4d17a453bd39-1": {
-      "_id": "c605506774a848f7877b4d17a453bd39-1",
-      "description": "Checks if the user has a current session.",
-      "displayName": "Has Session",
-      "errorOutcome": false,
-      "inputs": [],
-      "outcomes": [
-        "True",
-        "False",
-      ],
-      "outputs": [],
-      "properties": {},
-      "script": "file://c605506774a848f7877b4d17a453bd39.nodeTypes.js",
-      "serviceName": "c605506774a848f7877b4d17a453bd39",
-      "tags": [
-        "utilities",
-      ],
-    },
-  },
+function textOutputCallback() {
+    var messageType = getString(properties.options.messageType);
+    var message = getString(properties.options.message);
+    callbacksBuilder.textOutputCallback(messageType, message);
 }
-`;
 
-exports[`frodo node export "frodo node export -a": should export all custom nodes to a single file 1`] = `0`;
+function validatedPasswordCallback() {
+    var prompt = getString(properties.options.prompt);
+    var echoOn = getBoolean(properties.options.echoOn);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isArrayPresent(properties.options.failedPolicies)) {
+        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly, failedPolicies);
+    } else {
+        callbacksBuilder.validatedPasswordCallback(prompt, echoOn, policies, validateOnly);
+    }
+}
 
-exports[`frodo node export "frodo node export -a": should export all custom nodes to a single file 2`] = `""`;
+function validatedUsernameCallback() {
+    var prompt = getString(properties.options.prompt);
+    var policies = getObject(properties.options.policies);
+    var validateOnly = getBoolean(properties.options.validateOnly);
+    var failedPolicies = getArray(properties.options.failedPolicies);
+    if (isArrayPresent(properties.options.failedPolicies)) {
+        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly, failedPolicies);
+    } else {
+        callbacksBuilder.validatedUsernameCallback(prompt, policies, validateOnly);
+    }
+}
 
-exports[`frodo node export "frodo node export -a": should export all custom nodes to a single file: allCustomNodes.nodeTypes.json 1`] = `
-{
-  "meta": Any<Object>,
-  "nodeTypes": {
-    "8ab9f1aad4b4460a9c45d15fb148e221-1": {
-      "_id": "8ab9f1aad4b4460a9c45d15fb148e221-1",
-      "description": "Debug node that displays the shared and transient state of the journey for debugging purposes.",
-      "displayName": "Display State",
-      "errorOutcome": false,
-      "inputs": [],
-      "outcomes": [
-        "outcome",
-      ],
-      "outputs": [],
-      "properties": {
-        "displayFormat": {
-          "defaultValue": "TABLE",
-          "description": "The format in which to display the states.",
-          "multivalued": false,
-          "options": {
-            "JSON": "Raw JSON",
-            "TABLE": "HTML Table",
-          },
-          "required": true,
-          "title": "Display Format",
-          "type": "STRING",
-        },
-      },
-      "script": "var SCRIPT_OUTCOMES = {
-  OUTCOME: "outcome"
-};
+function x509CertificateCallback() {
+    throw new Error('Not Implemented');
+}
 
-function main() {
-    if (!callbacks.isEmpty()) {
-        action.goTo(SCRIPT_OUTCOMES.OUTCOME);
-        return;
-    }
-    var keySet = nodeState.keys(); // Java Set<String>
-    var keys = Array.from(keySet); // Make it into JavaScript array
-    debugState = {};
-    for (var i in keys) {
-        var k = new String(keys[i]);
-        var item = nodeState.get(k);
-        if (typeof item === "object") {
-            debugState[k] = nodeState.getObject(k);
-        } else {
-            debugState[k] = nodeState.get(k);
-        }
-    }
-    if (properties.displayFormat === "JSON") {
-        callbacksBuilder.textOutputCallback(0, \`<pre style="text-align: left;">\${JSON.stringify(debugState, null, 2)}</pre>\`);
-        return;
-    }
-    callbacksBuilder.textOutputCallback(0, \`<table><tr><td style="border: 1px solid black;">Key</td><td style="border: 1px solid black;">Value</td></tr>\${Array.from(Object.keys(debugState).map(k => \`<tr><td style="border: 1px solid black;"><pre style="text-align: left;">\${k}</pre></td><td style="border: 1px solid black;"><pre style="text-align: left;">\${debugState[k]}</pre></td></tr>\`))}</table>\`);
+function getBooleanAttributeInputCallback() {
+    setProperty(callbacks.getBooleanAttributeInputCallbacks().get(0));
+}
+
+function getChoiceCallback() {
+    var multipleSelectionsAllowed = getBoolean(properties.options.multipleSelectionsAllowed);
+    var selections = callbacks.getChoiceCallbacks().get(0);
+    setProperty(multipleSelectionsAllowed ? selections : selections[0]);
+}
+
+function getConfirmationCallback() {
+    setProperty(callbacks.getConfirmationCallbacks().get(0));
+}
+
+function getConsentMappingCallback() {
+    setProperty(callbacks.getConsentMappingCallbacks().get(0));
+}
+
+function getDeviceProfileCallback() {
+    setProperty(callbacks.getDeviceProfileCallbacks().get(0));
+}
+
+function getHiddenValueCallback() {
+    var id = getString(properties.options.id);
+    setProperty(callbacks.getHiddenValueCallbacks().get(id));
 }
 
-main();
-",
-      "serviceName": "8ab9f1aad4b4460a9c45d15fb148e221",
-      "tags": [
-        "debug",
-        "testing",
-      ],
-    },
-    "c15e2efb3deb4d4ea338c74a6440b69f-1": {
-      "_id": "c15e2efb3deb4d4ea338c74a6440b69f-1",
-      "description": "Simple ALU that performs basic binary vector math operations. Outputs the result onto the shared state with key "c".",
-      "displayName": "Vector ALU",
-      "errorOutcome": true,
-      "inputs": [],
-      "outcomes": [
-        "Success",
-      ],
-      "outputs": [
-        "c",
-      ],
-      "properties": {
-        "a": {
-          "defaultValue": [
-            1,
-            2,
-            3,
-          ],
-          "description": "Left vector operand",
-          "multivalued": true,
-          "required": true,
-          "title": "A",
-          "type": "NUMBER",
-        },
-        "b": {
-          "defaultValue": [
-            4,
-            5,
-            6,
-          ],
-          "description": "Right vector operand",
-          "multivalued": true,
-          "required": true,
-          "title": "B",
-          "type": "NUMBER",
-        },
-        "operator": {
-          "defaultValue": "DOT",
-          "description": "The binary operation to perform on the vectors.",
-          "multivalued": false,
-          "options": {
-            "ADD": "+",
-            "CROSS": "X",
-            "DOT": ".",
-            "SUBTRACT": "-",
-          },
-          "required": true,
-          "title": "Operator",
-          "type": "STRING",
-        },
-      },
-      "script": "var SCRIPT_OUTCOMES = {
-    SUCCESS: 'Success'
-};
+function getHttpCallback() {
+    setProperty(callbacks.getHttpCallbacks().get(0));
+}
 
-var OPERATORS = {
-    ADD: "ADD",
-    SUBTRACT: "SUBTRACT",
-    DOT: "DOT",
-    CROSS: "CROSS"
+function getIdPCallback() {
+    setProperty(callbacks.getIdpCallbacks().get(0));
 }
 
-function add(a, b) {
-    return a.map((v, i) => v + b[i]);
+function getKbaCreateCallback() {
+    setProperty(callbacks.getKbaCreateCallbacks().get(0));
 }
 
-function subtract(a, b) {
-    return a.map((v, i) => v - b[i]);
+function getLanguageCallback() {
+    setProperty(callbacks.getLanguageCallbacks().get(0));
 }
 
-function dot(a, b) {
-    return a.reduce((sum, v, i) => sum + v * b[i], 0);
+function getNameCallback() {
+    setProperty(callbacks.getNameCallbacks().get(0));
 }
 
-function cross(a, b) {
-    return [
-        a[1] * b[2] - a[2] * b[1],
-        a[2] * b[0] - a[0] * b[2],
-        a[0] * b[1] - a[1] * b[0]
-    ];
+function getNumberAttributeInputCallback() {
+    setProperty(callbacks.getNumberAttributeInputCallbacks().get(0));
 }
 
-function main() {
-    if (properties.a.length !== properties.b.length) throw new Error("Vectors not the same dimension.");
-    switch (properties.operator) {
-        case OPERATORS.ADD:
-            nodeState.putShared("c", add(properties.a, properties.b));
-            break;
-        case OPERATORS.SUBTRACT:
-            nodeState.putShared("c", subtract(properties.a, properties.b));
-            break;
-        case OPERATORS.DOT:
-            nodeState.putShared("c", dot(properties.a, properties.b));
-            break;
-        case OPERATORS.CROSS:
-            if (properties.a.length !== 3) throw new Error("Vectors not dimension 3 for cross product");
-            nodeState.putShared("c", cross(properties.a, properties.b));
-            break;
-        default: throw new Error("Unknown operator.");
-    }
-    action.goTo(SCRIPT_OUTCOMES.SUCCESS);
+function getPasswordCallback() {
+    setProperty(callbacks.getPasswordCallbacks().get(0));
 }
 
-main();
-",
-      "serviceName": "c15e2efb3deb4d4ea338c74a6440b69f",
-      "tags": [
-        "math",
-        "vector",
-        "utilities",
-      ],
-    },
-    "c605506774a848f7877b4d17a453bd39-1": {
-      "_id": "c605506774a848f7877b4d17a453bd39-1",
-      "description": "Checks if the user has a current session.",
-      "displayName": "Has Session",
-      "errorOutcome": false,
-      "inputs": [],
-      "outcomes": [
-        "True",
-        "False",
-      ],
-      "outputs": [],
-      "properties": {},
-      "script": "var SCRIPT_OUTCOMES = {
-    TRUE: 'True',
-    FALSE: 'False'
+function getSelectIdPCallback() {
+    setProperty(callbacks.getSelectIdPCallbacks().get(0));
 }
 
-function main() {
-    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
+function getStringAttributeInputCallback() {
+    setProperty(callbacks.getStringAttributeInputCallbacks().get(0));
 }
 
-main();
-",
-      "serviceName": "c605506774a848f7877b4d17a453bd39",
-      "tags": [
-        "utilities",
-      ],
-    },
-    "c6063fb2f5dc42dd9772bedc93898bd8-1": {
-      "_id": "c6063fb2f5dc42dd9772bedc93898bd8-1",
-      "description": "Simple ALU that performs basic binary math operations. Expects an "x" and "y" value on the shared state, and will produce a new "z" value on the shared state as output.",
-      "displayName": "ALU",
-      "errorOutcome": true,
-      "inputs": [
-        "x",
-        "y",
-      ],
-      "outcomes": [
-        "Success",
-      ],
-      "outputs": [
-        "z",
-      ],
-      "properties": {
-        "operator": {
-          "defaultValue": "ADD",
-          "description": "The operation to perform.",
-          "multivalued": false,
-          "options": {
-            "ADD": "+",
-            "DIVIDE": "/",
-            "MULTIPLY": "*",
-            "SUBTRACT": "-",
-          },
-          "required": true,
-          "title": "Operator",
-          "type": "STRING",
-        },
-      },
-      "script": "var SCRIPT_OUTCOMES = {
-    SUCCESS: 'Success'
-};
+function getTermsAndConditionsCallback() {
+    setProperty(callbacks.getTermsAndConditionsCallbacks().get(0));
+}
 
-var OPERATORS = {
-    ADD: "ADD",
-    SUBTRACT: "SUBTRACT",
-    MULTIPLY: "MULTIPLY",
-    DIVIDE: "DIVIDE"
+function getTextInputCallback() {
+    setProperty(callbacks.getTextInputCallbacks().get(0));
+}
+
+function getValidatedPasswordCallback() {
+    setProperty(callbacks.getValidatedPasswordCallbacks().get(0));
+}
+
+function getValidatedUsernameCallback() {
+    setProperty(callbacks.getValidatedUsernameCallbacks().get(0));
+}
+
+function getX509CertificateCallback() {
+    setProperty(callbacks.getX509CertificateCallbacks().get(0));
 }
 
 function main() {
-    var a = Number(properties.a);
-    var b = Number(properties.b);
-    switch (properties.operator) {
-        case OPERATORS.ADD:
-            nodeState.putShared("z", a + b);
-            break;
-        case OPERATORS.SUBTRACT:
-            nodeState.putShared("z", a - b);
-            break;
-        case OPERATORS.MULTIPLY:
-            nodeState.putShared("z", a * b);
-            break;
-        case OPERATORS.DIVIDE:
-            if (b == 0) throw new Error("Cannot divide by 0");
-            nodeState.putShared("z", a / b);
-            break;
-        default: throw new Error("Unknown operator.");
+    if (!callbacks.isEmpty()) {
+        switch (properties.callback) {
+            case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: getBooleanAttributeInputCallback(); break;
+            case CALLBACKS.CHOICE_CALLBACK: getChoiceCallback(); break;
+            case CALLBACKS.CONFIRMATION_CALLBACK: getConfirmationCallback(); break;
+            case CALLBACKS.CONSENT_MAPPING_CALLBACK: getConsentMappingCallback(); break;
+            case CALLBACKS.DEVICE_PROFILE_CALLBACK: getDeviceProfileCallback(); break;
+            case CALLBACKS.HIDDEN_VALUE_CALLBACK: getHiddenValueCallback(); break;
+            case CALLBACKS.HTTP_CALLBACK: getHttpCallback(); break;
+            case CALLBACKS.IDP_CALLBACK: getIdPCallback(); break;
+            case CALLBACKS.KBA_CREATE_CALLBACK: getKbaCreateCallback(); break;
+            case CALLBACKS.LANGUAGE_CALLBACK: getLanguageCallback(); break;
+            case CALLBACKS.NAME_CALLBACK: getNameCallback(); break;
+            case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: getNumberAttributeInputCallback(); break;
+            case CALLBACKS.PASSWORD_CALLBACK: getPasswordCallback(); break;
+            case CALLBACKS.SELECT_IDP_CALLBACK: getSelectIdPCallback(); break;
+            case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: getStringAttributeInputCallback(); break;
+            case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: getTermsAndConditionsCallback(); break;
+            case CALLBACKS.TEXT_INPUT_CALLBACK: getTextInputCallback(); break;
+            case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: getValidatedPasswordCallback(); break;
+            case CALLBACKS.VALIDATED_USERNAME_CALLBACK: getValidatedUsernameCallback(); break;
+            case CALLBACKS.X509_CERTIFICATE_CALLBACK: getX509CertificateCallback(); break;
+            default: break;
+        }
+        action.goTo(SCRIPT_OUTCOMES.OUTCOME);
+        return;
+    }
+
+    switch (properties.callback) {
+        case CALLBACKS.BOOLEAN_ATTRIBUTE_INPUT_CALLBACK: booleanAttributeInputCallback(); break;
+        case CALLBACKS.CHOICE_CALLBACK: choiceCallback(); break;
+        case CALLBACKS.CONFIRMATION_CALLBACK: confirmationCallback(); break;
+        case CALLBACKS.CONSENT_MAPPING_CALLBACK: consentMappingCallback(); break;
+        case CALLBACKS.DEVICE_PROFILE_CALLBACK: deviceProfileCallback(); break;
+        case CALLBACKS.HIDDEN_VALUE_CALLBACK: hiddenValueCallback(); break;
+        case CALLBACKS.HTTP_CALLBACK: httpCallback(); break;
+        case CALLBACKS.IDP_CALLBACK: idPCallback(); break;
+        case CALLBACKS.KBA_CREATE_CALLBACK: kbaCreateCallback(); break;
+        case CALLBACKS.LANGUAGE_CALLBACK: languageCallback(); break;
+        case CALLBACKS.METADATA_CALLBACK: metadataCallback(); break;
+        case CALLBACKS.NAME_CALLBACK: nameCallback(); break;
+        case CALLBACKS.NUMBER_ATTRIBUTE_INPUT_CALLBACK: numberAttributeInputCallback(); break;
+        case CALLBACKS.PASSWORD_CALLBACK: passwordCallback(); break;
+        case CALLBACKS.POLLING_WAIT_CALLBACK: pollingWaitCallback(); break;
+        case CALLBACKS.REDIRECT_CALLBACK: redirectCallback(); break;
+        case CALLBACKS.SCRIPT_TEXT_OUTPUT_CALLBACK: scriptTextOutputCallback(); break;
+        case CALLBACKS.SELECT_IDP_CALLBACK: selectIdPCallback(); break;
+        case CALLBACKS.STRING_ATTRIBUTE_INPUT_CALLBACK: stringAttributeInputCallback(); break;
+        case CALLBACKS.SUSPENDED_TEXT_OUTPUT_CALLBACK: suspendedTextOutputCallback(); break;
+        case CALLBACKS.TERMS_AND_CONDITIONS_CALLBACK: termsAndConditionsCallback(); break;
+        case CALLBACKS.TEXT_INPUT_CALLBACK: textInputCallback(); break;
+        case CALLBACKS.TEXT_OUTPUT_CALLBACK: textOutputCallback(); break;
+        case CALLBACKS.VALIDATED_PASSWORD_CALLBACK: validatedPasswordCallback(); break;
+        case CALLBACKS.VALIDATED_USERNAME_CALLBACK: validatedUsernameCallback(); break;
+        case CALLBACKS.X509_CERTIFICATE_CALLBACK: x509CertificateCallback(); break;
+        default: throw new Error('Unknown Callback'); // Should never reach this case
     }
-    action.goTo(SCRIPT_OUTCOMES.SUCCESS);
 }
 
 main();
 ",
-      "serviceName": "c6063fb2f5dc42dd9772bedc93898bd8",
+      "serviceName": "ef81b1a52c914710b3388caebfe7233a",
       "tags": [
-        "math",
+        "callback",
         "utilities",
       ],
     },
-    "e5ad0110c8ee4dafaae983003cd05d4a-1": {
-      "_id": "e5ad0110c8ee4dafaae983003cd05d4a-1",
-      "description": "Generate a signed JWT using the HMAC SHA-256 algorithm.",
-      "displayName": "Generate JWT",
-      "errorOutcome": true,
+    "session-1": {
+      "_id": "session-1",
+      "description": "Checks if the user has a current session.",
+      "displayName": "Has Session AM",
+      "errorOutcome": false,
       "inputs": [],
       "outcomes": [
         "True",
         "False",
       ],
       "outputs": [],
-      "properties": {
-        "audience": {
-          "description": "The audience (aud) claim",
-          "multivalued": false,
-          "required": true,
-          "title": "Audience",
-          "type": "STRING",
-        },
-        "issuer": {
-          "description": "The issuer (iss) claim",
-          "multivalued": false,
-          "required": true,
-          "title": "Issuer",
-          "type": "STRING",
-        },
-        "signingkey": {
-          "defaultValue": "esv.signing.key",
-          "description": "The secret label for the HMAC signing key",
-          "multivalued": false,
-          "required": true,
-          "title": "HMAC Signing Key",
-          "type": "STRING",
-        },
-        "validity": {
-          "defaultValue": 5,
-          "description": "",
-          "multivalued": false,
-          "required": true,
-          "title": "Validity (minutes)",
-          "type": "NUMBER",
-        },
-      },
-      "script": "var aud = properties.audience;
-var iss = properties.issuer;
-var validity = properties.validity;
-var esv = properties.signingkey;
-
-var signingkey = systemEnv.getProperty(esv);
-
-var username = nodeState.get("username");
-
-var data = {
-  jwtType:"SIGNED",
-  jwsAlgorithm: "HS256",
-  issuer: iss,
-  subject: username,
-  audience: aud,
-  type: "JWT",
-  validityMinutes: validity,
-  signingKey: signingkey
-};
+      "properties": {},
+      "script": "var SCRIPT_OUTCOMES = {
+    TRUE: 'True',
+    FALSE: 'False'
+}
 
-var jwt = jwtAssertion.generateJwt(data);
+function main() {
+    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
+}
 
-if (jwt !== null && jwt.length > 0) {
-  nodeState.putShared("assertionJwt" , jwt);
-  action.goTo("True");
-} else {
-  action.goTo("False");
-}",
-      "serviceName": "e5ad0110c8ee4dafaae983003cd05d4a",
+main();
+",
+      "serviceName": "session",
       "tags": [
-        "Utilities",
         "utilities",
       ],
     },
+  },
+}
+`;
+
+exports[`frodo node export "frodo node export -xn 'Display Callback' -D customNodeExportDir2": should export the custom node with display name "Display Callback" to the directory customNodeExportDir2 with extracted script 1`] = `0`;
+
+exports[`frodo node export "frodo node export -xn 'Display Callback' -D customNodeExportDir2": should export the custom node with display name "Display Callback" to the directory customNodeExportDir2 with extracted script 2`] = `""`;
+
+exports[`frodo node export "frodo node export -xn 'Display Callback' -D customNodeExportDir2": should export the custom node with display name "Display Callback" to the directory customNodeExportDir2 with extracted script: customNodeExportDir2/Display-Callback.nodeTypes.json 1`] = `
+{
+  "meta": Any<Object>,
+  "nodeTypes": {
     "ef81b1a52c914710b3388caebfe7233a-1": {
       "_id": "ef81b1a52c914710b3388caebfe7233a-1",
       "description": "Displays custom callback to the page",
@@ -4762,139 +5420,6 @@ main();
         "utilities",
       ],
     },
-    "session-1": {
-      "_id": "session-1",
-      "description": "Checks if the user has a current session.",
-      "displayName": "Has Session AM",
-      "errorOutcome": false,
-      "inputs": [],
-      "outcomes": [
-        "True",
-        "False",
-      ],
-      "outputs": [],
-      "properties": {},
-      "script": "var SCRIPT_OUTCOMES = {
-    TRUE: 'True',
-    FALSE: 'False'
-}
-
-function main() {
-    action.goTo(typeof existingSession === "undefined" ? SCRIPT_OUTCOMES.FALSE : SCRIPT_OUTCOMES.TRUE);
-}
-
-main();
-",
-      "serviceName": "session",
-      "tags": [
-        "utilities",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo node export "frodo node export -xn 'Display Callback' -D customNodeExportDir2": should export the custom node with display name "Display Callback" to the directory customNodeExportDir2 with extracted script 1`] = `0`;
-
-exports[`frodo node export "frodo node export -xn 'Display Callback' -D customNodeExportDir2": should export the custom node with display name "Display Callback" to the directory customNodeExportDir2 with extracted script 2`] = `""`;
-
-exports[`frodo node export "frodo node export -xn 'Display Callback' -D customNodeExportDir2": should export the custom node with display name "Display Callback" to the directory customNodeExportDir2 with extracted script: customNodeExportDir2/Display-Callback.nodeTypes.json 1`] = `
-{
-  "meta": Any<Object>,
-  "nodeTypes": {
-    "ef81b1a52c914710b3388caebfe7233a-1": {
-      "_id": "ef81b1a52c914710b3388caebfe7233a-1",
-      "description": "Displays custom callback to the page",
-      "displayName": "Display Callback",
-      "errorOutcome": false,
-      "inputs": [],
-      "outcomes": [
-        "outcome",
-      ],
-      "outputs": [],
-      "properties": {
-        "callback": {
-          "description": "The callback to display",
-          "multivalued": false,
-          "options": {
-            "BOOLEAN_ATTRIBUTE_INPUT_CALLBACK": "booleanAttributeInputCallback",
-            "CHOICE_CALLBACK": "choiceCallback",
-            "CONFIRMATION_CALLBACK": "confirmationCallback",
-            "CONSENT_MAPPING_CALLBACK": "consentMappingCallback",
-            "DEVICE_PROFILE_CALLBACK": "deviceProfileCallback",
-            "HIDDEN_VALUE_CALLBACK": "hiddenValueCallback",
-            "HTTP_CALLBACK": "httpCallback",
-            "IDP_CALLBACK": "idPCallback",
-            "KBA_CREATE_CALLBACK": "kbaCreateCallback",
-            "LANGUAGE_CALLBACK": "languageCallback",
-            "METADATA_CALLBACK": "metadataCallback",
-            "NAME_CALLBACK": "nameCallback",
-            "NUMBER_ATTRIBUTE_INPUT_CALLBACK": "numberAttributeInputCallback",
-            "PASSWORD_CALLBACK": "passwordCallback",
-            "POLLING_WAIT_CALLBACK": "pollingWaitCallback",
-            "REDIRECT_CALLBACK": "redirectCallback",
-            "SCRIPT_TEXT_OUTPUT_CALLBACK": "scriptTextOutputCallback",
-            "SELECT_IDP_CALLBACK": "selectIdPCallback",
-            "STRING_ATTRIBUTE_INPUT_CALLBACK": "stringAttributeInputCallback",
-            "SUSPENDED_TEXT_OUTPUT_CALLBACK": "suspendedTextOutputCallback",
-            "TERMS_AND_CONDITIONS_CALLBACK": "termsAndConditionsCallback",
-            "TEXT_INPUT_CALLBACK": "textInputCallback",
-            "TEXT_OUTPUT_CALLBACK": "textOutputCallback",
-            "VALIDATED_PASSWORD_CALLBACK": "validatedPasswordCallback",
-            "VALIDATED_USERNAME_CALLBACK": "validatedUsernameCallback",
-            "X509_CERTIFICATE_CALLBACK": "x509CertificateCallback",
-          },
-          "required": true,
-          "title": "Callback",
-          "type": "STRING",
-        },
-        "objectSharedProperty": {
-          "description": "The objectAttributes property on the shared state to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Object Attributes Shared Property",
-          "type": "STRING",
-        },
-        "objectTransientProperty": {
-          "description": "The objectAttributes property on the transient state to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Object Attributes Transient Property",
-          "type": "STRING",
-        },
-        "options": {
-          "description": "The options containing the parameters for the callback (see documentation for possible parameters: https://docs.pingidentity.com/pingoneaic/latest/am-scripting/scripting-api-node.html#scripting-api-node-callbacks). 
-
-For example, for textOutputCallback, the options could be: { messageType: 0, message: "Hello World!" }. 
-
-Note that for required parameters that are not specified in the options will use default values based on the type of the parameter ("" for Strings, [] for Arrays, {} for Objects, 0 for Ints, 0.0 for Doubles, and false for Booleans).",
-          "multivalued": false,
-          "required": true,
-          "title": "Options",
-          "type": "OBJECT",
-        },
-        "sharedProperty": {
-          "description": "The shared state property to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Shared State Property",
-          "type": "STRING",
-        },
-        "transientProperty": {
-          "description": "The transient state property to put the callback input into (if applicable)",
-          "multivalued": false,
-          "required": false,
-          "title": "Transient State Property",
-          "type": "STRING",
-        },
-      },
-      "script": "file://Display-Callback.nodeTypes.js",
-      "serviceName": "ef81b1a52c914710b3388caebfe7233a",
-      "tags": [
-        "callback",
-        "utilities",
-      ],
-    },
   },
 }
 `;
diff --git a/test/e2e/__snapshots__/script-export.e2e.test.js.snap b/test/e2e/__snapshots__/script-export.e2e.test.js.snap
index 3d4ba38f4..adf66938d 100644
--- a/test/e2e/__snapshots__/script-export.e2e.test.js.snap
+++ b/test/e2e/__snapshots__/script-export.e2e.test.js.snap
@@ -3445,266 +3445,11 @@ exports[`frodo script export "frodo script export --all": should export all scri
 }
 `;
 
-exports[`frodo script export "frodo script export --extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries 1`] = `0`;
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4 1`] = `0`;
 
-exports[`frodo script export "frodo script export --extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries 2`] = `""`;
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4 2`] = `""`;
 
-exports[`frodo script export "frodo script export --extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries: scriptExportTestDir5/2c38c998-aec0-4e56-8d46-bff6e24a704e.script.js 1`] = `
-"var i = 0;
-
-function add(j) {i += j};
-function logTotal(log) { log.info("Total: " + i) };
-
-// export constant
-exports.MSG = 'Final sum';
-
-// export functions
-exports.add = add;
-exports.logTotal = logTotal;
-
-//direct export using an inline declaration
-exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);
-"
-`;
-
-exports[`frodo script export "frodo script export --extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries: scriptExportTestDir5/6c49bebe-3a62-11ed-a261-0242ac120002.script.js 1`] = `
-"/*
- * Copyright 2022-2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This is an example library script with methods that can be used in other scripts.
- * To reference it, use the following:
- *
- * var library = require("Library Script");
- *
- * library.logError(logger, "Error message");
- * library.logDebug(logger, "Debug message");
- */
-
-function logError(log, errorMessage) {
-  log.error(errorMessage);
-}
-
-function logWarning(log, warningMessage) {
-  log.warn(warningMessage);
-}
-
-exports.logError = logError;
-exports.logWarning = logWarning;
-
-// Alternatively, exports can be declared using an inline arrow function
-
-exports.logInfo = (log, infoMessage) => log.info(infoMessage);
-exports.logDebug = (log, debugMessage) => log.debug(debugMessage);
-"
-`;
-
-exports[`frodo script export "frodo script export --extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries: scriptExportTestDir5/bb393d07-a121-47e2-9d24-1a1066f39ec0.script.js 1`] = `
-"/**
- * Testing library scripts
- */
-var mylib = require('My Example Library');
-var loggers = require('Library Script');
-
-mylib.add(1);
-mylib.logTotal(logger);
-mylib.add(3);
-mylib.logTotalWithMessage(logger, mylib.MSG);
-
-outcome = 'true';
-"
-`;
-
-exports[`frodo script export "frodo script export --extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries: scriptExportTestDir5/bb393d07-a121-47e2-9d24-1a1066f39ec0.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
-      "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Library",
-      "evaluatorVersion": "2.0",
-      "exports": [
-        {
-          "id": "MSG",
-          "type": "String",
-        },
-        {
-          "arity": 1,
-          "id": "add",
-          "type": "Function",
-        },
-        {
-          "arity": 1,
-          "id": "logTotal",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logTotalWithMessage",
-          "type": "Function",
-        },
-      ],
-      "language": "JAVASCRIPT",
-      "name": "My Example Library",
-      "script": "file://2c38c998-aec0-4e56-8d46-bff6e24a704e.script.js",
-    },
-    "6c49bebe-3a62-11ed-a261-0242ac120002": {
-      "_id": "6c49bebe-3a62-11ed-a261-0242ac120002",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global library script to be referenced from other scripts",
-      "evaluatorVersion": "2.0",
-      "exports": [
-        {
-          "arity": 2,
-          "id": "logError",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logWarning",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logInfo",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logDebug",
-          "type": "Function",
-        },
-      ],
-      "language": "JAVASCRIPT",
-      "name": "Library Script",
-      "script": "file://6c49bebe-3a62-11ed-a261-0242ac120002.script.js",
-    },
-    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
-      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Script Using Libraries",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "name": "My Example Script Using Libraries",
-      "script": "file://bb393d07-a121-47e2-9d24-1a1066f39ec0.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4 1`] = `0`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4 2`] = `""`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ADFS-Profile-Normalization-(JS).script.js 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script returns the social identity profile information for the authenticating user
- * in a standard form expected by the Social Provider Handler Node.
- *
- * Defined variables:
- * rawProfile - The social identity provider profile information for the authenticating user.
- *              JsonValue (1).
- * logger - The debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- * realm - String (primitive).
- *         The name of the realm the user is authenticating to.
- * requestHeaders - TreeMap (2).
- *                  The object that provides methods for accessing headers in the login request:
- *                  https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.
- * requestParameters - TreeMap (2).
- *                     The object that contains the authentication request parameters.
- * selectedIdp - String (primitive).
- *               The social identity provider name. For example: google.
- * sharedState - LinkedHashMap (3).
- *               The object that holds the state of the authentication tree and allows data exchange between the stateless nodes:
- *               https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.
- * transientState - LinkedHashMap (3).
- *                  The object for storing sensitive information that must not leave the server unencrypted,
- *                  and that may not need to persist between authentication requests during the authentication session:
- *                  https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.
- *
- * Return - a JsonValue (1).
- *          The result of the last statement in the script is returned to the server.
- *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
- *          is the last (and only) statement in this script, and its return value will become the script result.
- *          Do not use "return variable" statement outside of a function definition.
- *
- *          This script's last statement should result in a JsonValue (1) with the following keys:
- *          {
- *              {"displayName": "corresponding-social-identity-provider-value"},
- *              {"email": "corresponding-social-identity-provider-value"},
- *              {"familyName": "corresponding-social-identity-provider-value"},
- *              {"givenName": "corresponding-social-identity-provider-value"},
- *              {"id": "corresponding-social-identity-provider-value"},
- *              {"locale": "corresponding-social-identity-provider-value"},
- *              {"photoUrl": "corresponding-social-identity-provider-value"},
- *              {"username": "corresponding-social-identity-provider-value"}
- *          }
- *
- *          The consumer of this data defines which keys are required and which are optional.
- *          For example, the script associated with the Social Provider Handler Node and,
- *          ultimately, the managed object created/updated with this data
- *          will expect certain keys to be populated.
- *          In some common default configurations, the following keys are required to be not empty:
- *          username, givenName, familyName, email.
- *
- *          From RFC4517: A value of the Directory String syntax is a string of one or more
- *          arbitrary characters from the Universal Character Set (UCS).
- *          A zero-length character string is not permitted.
- *
- * (1) JsonValue - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/json/JsonValue.html.
- * (2) TreeMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/TreeMap.html.
- * (3) LinkedHashMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- */
-
-(function () {
-    var frJava = JavaImporter(
-        org.forgerock.json.JsonValue
-    );
-
-    var normalizedProfileData = frJava.JsonValue.json(frJava.JsonValue.object());
-  
-      //logger.message('Seguin rawProfile: '+rawProfile);
-
-    normalizedProfileData.put('id', rawProfile.get('sub').asString());
-    normalizedProfileData.put('displayName', rawProfile.get('givenName').asString() + ' ' + rawProfile.get('sn').asString());
-    normalizedProfileData.put('email', rawProfile.get('mail').asString());
-    normalizedProfileData.put('givenName', rawProfile.get('givenName').asString());
-    normalizedProfileData.put('familyName', rawProfile.get('sn').asString());
-    normalizedProfileData.put('username', rawProfile.get('upn').asString());
-    normalizedProfileData.put('roles', rawProfile.get('roles').asString());
-  
-      //logger.message('Seguin normalizedProfileData: '+normalizedProfileData);
-
-    return normalizedProfileData;
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ADFS-Profile-Normalization-(JS).script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ADFS-Profile-Normalization-(JS).script.json 1`] = `
 {
   "script": {
     "dbe0bf9a-72aa-49d5-8483-9db147985a47": {
@@ -3719,152 +3464,103 @@ exports[`frodo script export "frodo script export --modified-properties --all-se
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
       "name": "ADFS Profile Normalization (JS)",
-      "script": "file://ADFS-Profile-Normalization-(JS).script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-OAuth2-Access-Token-Modification-Script.script.js 1`] = `
-"/*
- * Copyright 2019-2021 ForgeRock AS. All Rights Reserved.
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script lets you modify information associated with an OAuth2 access token
- * with methods provided by the AccessToken (1) interface.
- * The changes made to OAuth2 access tokens will directly impact the size of the CTS tokens,
- * and, similarly, the size of the JWTs if client-based OAuth2 tokens are utilized.
- * When adding/updating fields make sure that the token size remains within client/user-agent limits.
- *
- * Defined variables:
- * accessToken - AccessToken (1).
- *               The access token to be updated.
- *               Mutable object, all changes to the access token will be reflected.
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *
- * Return - no value is expected, changes shall be made to the accessToken parameter directly.
- *
- * Class reference:
- * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
- */
-
-/* EXAMPLE
-(function () {
-    var frJava = JavaImporter(
-        org.forgerock.http.protocol.Request,
-        org.forgerock.http.protocol.Response
-    );
-
-    // Always includes this field in the token.
-    accessToken.setField('key1', 'value1');
-
-    // Receives and adds to the access token additional values by performing a REST call to an external service.
-    // WARNING: Below, you will find a reference to a third-party site, which is provided only as an example.
-    var uri = 'https://jsonplaceholder.typicode.com/posts';
-
-    try {
-        var request = new frJava.Request();
-
-        // You can chain methods that return the request object.
-        request.setUri(uri)
-            .setMethod('POST')
-            .setEntity(JSON.stringify({
-                updatedFields: {
-                    key2: 'value2',
-                    key3: 'value3'
-                }
-            }));
-
-        // You can call a method when chaining is not possible.
-        request.getHeaders().add('Content-Type', 'application/json; charset=UTF-8');
-
-        // Sends the request and receives the response.
-        var response = httpClient.send(request).getOrThrow();
-
-        // Checks if the response status is as expected.
-        if (response.getStatus() === org.forgerock.http.protocol.Status.CREATED) {
-            var result = JSON.parse(response.getEntity().getString());
-
-            // Set multiple token fields at once.
-            accessToken.setFields(result.updatedFields);
-        } else {
-            logger.error('Unable to obtain access token modifications. Status: ' + response.getStatus() + '. Content: ' + response.getEntity().getString());
-        }
-    } catch (e) {
-        logger.error('The request processing was interrupted. ' + e);
-
-        // The access token request fails with the HTTP 500 error in this case.
-        throw ('Unable to obtain response from: ' + uri);
-    }
-
-    // Adds new fields containing identity attribute values to the access token.
-    accessToken.setField('mail', identity.getAttribute('mail'));
-    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);
-
-    // Adds new fields containing the session property values.
-    // NOTE: session may not be available for non-interactive authorization grants.
-    if (session) {
-        try {
-            accessToken.setField('ipAddress', session.getProperty('Host'));
-        } catch (e) {
-            logger.error('Unable to retrieve session property value. ' + e);
-        }
-    }
-
-    // Removes a native field from the token entry, that was set by AM.
-    // WARNING: removing native fields from the token may result in loss of functionality.
-    // accessToken.removeTokenName()
-
-    // No return value is expected. Let it be undefined.
-}());
-*/
-"
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script returns the social identity profile information for the authenticating user",
+        " * in a standard form expected by the Social Provider Handler Node.",
+        " *",
+        " * Defined variables:",
+        " * rawProfile - The social identity provider profile information for the authenticating user.",
+        " *              JsonValue (1).",
+        " * logger - The debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " * realm - String (primitive).",
+        " *         The name of the realm the user is authenticating to.",
+        " * requestHeaders - TreeMap (2).",
+        " *                  The object that provides methods for accessing headers in the login request:",
+        " *                  https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.",
+        " * requestParameters - TreeMap (2).",
+        " *                     The object that contains the authentication request parameters.",
+        " * selectedIdp - String (primitive).",
+        " *               The social identity provider name. For example: google.",
+        " * sharedState - LinkedHashMap (3).",
+        " *               The object that holds the state of the authentication tree and allows data exchange between the stateless nodes:",
+        " *               https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
+        " * transientState - LinkedHashMap (3).",
+        " *                  The object for storing sensitive information that must not leave the server unencrypted,",
+        " *                  and that may not need to persist between authentication requests during the authentication session:",
+        " *                  https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
+        " *",
+        " * Return - a JsonValue (1).",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *",
+        " *          This script's last statement should result in a JsonValue (1) with the following keys:",
+        " *          {",
+        " *              {"displayName": "corresponding-social-identity-provider-value"},",
+        " *              {"email": "corresponding-social-identity-provider-value"},",
+        " *              {"familyName": "corresponding-social-identity-provider-value"},",
+        " *              {"givenName": "corresponding-social-identity-provider-value"},",
+        " *              {"id": "corresponding-social-identity-provider-value"},",
+        " *              {"locale": "corresponding-social-identity-provider-value"},",
+        " *              {"photoUrl": "corresponding-social-identity-provider-value"},",
+        " *              {"username": "corresponding-social-identity-provider-value"}",
+        " *          }",
+        " *",
+        " *          The consumer of this data defines which keys are required and which are optional.",
+        " *          For example, the script associated with the Social Provider Handler Node and,",
+        " *          ultimately, the managed object created/updated with this data",
+        " *          will expect certain keys to be populated.",
+        " *          In some common default configurations, the following keys are required to be not empty:",
+        " *          username, givenName, familyName, email.",
+        " *",
+        " *          From RFC4517: A value of the Directory String syntax is a string of one or more",
+        " *          arbitrary characters from the Universal Character Set (UCS).",
+        " *          A zero-length character string is not permitted.",
+        " *",
+        " * (1) JsonValue - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/json/JsonValue.html.",
+        " * (2) TreeMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/TreeMap.html.",
+        " * (3) LinkedHashMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " */",
+        "",
+        "(function () {",
+        "    var frJava = JavaImporter(",
+        "        org.forgerock.json.JsonValue",
+        "    );",
+        "",
+        "    var normalizedProfileData = frJava.JsonValue.json(frJava.JsonValue.object());",
+        "  ",
+        "      //logger.message('Seguin rawProfile: '+rawProfile);",
+        "",
+        "    normalizedProfileData.put('id', rawProfile.get('sub').asString());",
+        "    normalizedProfileData.put('displayName', rawProfile.get('givenName').asString() + ' ' + rawProfile.get('sn').asString());",
+        "    normalizedProfileData.put('email', rawProfile.get('mail').asString());",
+        "    normalizedProfileData.put('givenName', rawProfile.get('givenName').asString());",
+        "    normalizedProfileData.put('familyName', rawProfile.get('sn').asString());",
+        "    normalizedProfileData.put('username', rawProfile.get('upn').asString());",
+        "    normalizedProfileData.put('roles', rawProfile.get('roles').asString());",
+        "  ",
+        "      //logger.message('Seguin normalizedProfileData: '+normalizedProfileData);",
+        "",
+        "    return normalizedProfileData;",
+        "}());",
+      ],
+    },
+  },
+}
 `;
 
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
 {
   "script": {
     "39c08084-1238-43e8-857f-2e11005eac49": {
@@ -3879,9130 +3575,1463 @@ exports[`frodo script export "frodo script export --modified-properties --all-se
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
       "name": "Alpha OAuth2 Access Token Modification Script",
-      "script": "file://Alpha-OAuth2-Access-Token-Modification-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-OIDC-Claims-Script.script.js 1`] = `
-"/*
- * Copyright 2014-2021 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.
- * The claim values are computed for:
- * the claims derived from the requested scopes,
- * the claims provided by the authorization server,
- * and the claims requested by the client via the claims parameter.
- *
- * In the CONFIGURATION AND CUSTOMIZATION section, you can
- * define the scope-to-claims mapping, and
- * assign to each claim a resolver function that will compute the claim value.
- *
- * Defined variables (class references are provided below):
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * claims - Map<String, Object> (5).
- *          Always present, default server provided claims.
- * claimObjects - List<Claim> (7, 2).
- *                Always present, the default server provided claims.
- * requestedClaims - Map<String, Set<String>> (5).
- *                   Always present, not empty if the request contains the claims parameter and the server has enabled
- *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;
- *                   requested claims with no requested values will have a key but no value in the map. A key with
- *                   a single value in its Set (6) indicates that this is the only value that should be returned.
- * requestedTypedClaims - List<Claim> (7, 2).
- *                        Always present, the requested claims.
- *                        Requested claims with no requested values will have a claim with no values.
- *                        A claim with a single value indicates this is the only value that should be returned.
- * claimsLocales - List<String> (7).
- *                 The values from the 'claims_locales' parameter.
- *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *              In order to use the client, you may need to add
- *              org.forgerock.http.Client,
- *              org.forgerock.http.protocol.*,
- *              and org.forgerock.util.promise.PromiseImpl
- *              to the allowed Java classes in the scripting engine configuration, as described in:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html
- *
- * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.
- *          The result of the last statement in the script is returned to the server.
- *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
- *          is the last (and only) statement in this script, and its return value will become the script result.
- *          Do not use "return variable" statement outside of a function definition.
- *          See RESULTS section for additional details.
- *
- * Class reference:
- * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.
- * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).
- *         An instance of org.forgerock.openidconnect.Claim has methods to access
- *         the claim name, requested values, locale, and whether the claim is essential.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
-*/
-
-(function () {
-    // SETUP
-
-    /**
-     * Claim processing utilities.
-     * An object that contains reusable functions for processing claims.
-     * @see CLAIM PROCESSING UTILITIES section for details.
-     */
-    var utils = getUtils();
-
-    // CONFIGURATION AND CUSTOMIZATION
-
-    /**
-     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a scope value to an array of claim names
-     * to specify which claims need to be processed and returned for the requested scopes.
-     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}
-     * for the scope values that could be used to request claims as defined in the OIDC specification.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     *
-     * CUSTOMIZATION
-     * You can choose the claim names returned for a scope.
-     */
-    utils.setScopeClaimsMap({
-        profile: [
-            'name',
-            'family_name',
-            'given_name',
-            'zoneinfo',
-            'locale'
-        ],
-        email: ['email'],
-        address: ['address'],
-        phone: ['phone_number']
-    });
+      "script": [
+        "/*",
+        " * Copyright 2019-2021 ForgeRock AS. All Rights Reserved.",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script lets you modify information associated with an OAuth2 access token",
+        " * with methods provided by the AccessToken (1) interface.",
+        " * The changes made to OAuth2 access tokens will directly impact the size of the CTS tokens,",
+        " * and, similarly, the size of the JWTs if client-based OAuth2 tokens are utilized.",
+        " * When adding/updating fields make sure that the token size remains within client/user-agent limits.",
+        " *",
+        " * Defined variables:",
+        " * accessToken - AccessToken (1).",
+        " *               The access token to be updated.",
+        " *               Mutable object, all changes to the access token will be reflected.",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *",
+        " * Return - no value is expected, changes shall be made to the accessToken parameter directly.",
+        " *",
+        " * Class reference:",
+        " * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        " */",
+        "",
+        "/* EXAMPLE",
+        "(function () {",
+        "    var frJava = JavaImporter(",
+        "        org.forgerock.http.protocol.Request,",
+        "        org.forgerock.http.protocol.Response",
+        "    );",
+        "",
+        "    // Always includes this field in the token.",
+        "    accessToken.setField('key1', 'value1');",
+        "",
+        "    // Receives and adds to the access token additional values by performing a REST call to an external service.",
+        "    // WARNING: Below, you will find a reference to a third-party site, which is provided only as an example.",
+        "    var uri = 'https://jsonplaceholder.typicode.com/posts';",
+        "",
+        "    try {",
+        "        var request = new frJava.Request();",
+        "",
+        "        // You can chain methods that return the request object.",
+        "        request.setUri(uri)",
+        "            .setMethod('POST')",
+        "            .setEntity(JSON.stringify({",
+        "                updatedFields: {",
+        "                    key2: 'value2',",
+        "                    key3: 'value3'",
+        "                }",
+        "            }));",
+        "",
+        "        // You can call a method when chaining is not possible.",
+        "        request.getHeaders().add('Content-Type', 'application/json; charset=UTF-8');",
+        "",
+        "        // Sends the request and receives the response.",
+        "        var response = httpClient.send(request).getOrThrow();",
+        "",
+        "        // Checks if the response status is as expected.",
+        "        if (response.getStatus() === org.forgerock.http.protocol.Status.CREATED) {",
+        "            var result = JSON.parse(response.getEntity().getString());",
+        "",
+        "            // Set multiple token fields at once.",
+        "            accessToken.setFields(result.updatedFields);",
+        "        } else {",
+        "            logger.error('Unable to obtain access token modifications. Status: ' + response.getStatus() + '. Content: ' + response.getEntity().getString());",
+        "        }",
+        "    } catch (e) {",
+        "        logger.error('The request processing was interrupted. ' + e);",
+        "",
+        "        // The access token request fails with the HTTP 500 error in this case.",
+        "        throw ('Unable to obtain response from: ' + uri);",
+        "    }",
+        "",
+        "    // Adds new fields containing identity attribute values to the access token.",
+        "    accessToken.setField('mail', identity.getAttribute('mail'));",
+        "    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);",
+        "",
+        "    // Adds new fields containing the session property values.",
+        "    // NOTE: session may not be available for non-interactive authorization grants.",
+        "    if (session) {",
+        "        try {",
+        "            accessToken.setField('ipAddress', session.getProperty('Host'));",
+        "        } catch (e) {",
+        "            logger.error('Unable to retrieve session property value. ' + e);",
+        "        }",
+        "    }",
+        "",
+        "    // Removes a native field from the token entry, that was set by AM.",
+        "    // WARNING: removing native fields from the token may result in loss of functionality.",
+        "    // accessToken.removeTokenName()",
+        "",
+        "    // No return value is expected. Let it be undefined.",
+        "}());",
+        "*/",
+        "",
+      ],
+    },
+  },
+}
+`;
 
-    /**
-     * In this script, each claim
-     * derived from the requested scopes,
-     * provided by the authorization server, and
-     * requested by the client via the claims parameter
-     * will be processed by a function associated with the claim name.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a claim name to a resolver function,
-     * which will be automatically executed for each claim processed by the script.
-     *
-     * The claim resolver function will receive the requested claim information
-     * in an instance of org.forgerock.openidconnect.Claim as the first argument.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}
-     * for details on the Claim class.
-     *
-     * If the claim resolver function returns a value,
-     * other than undefined or null,
-     * the claim will be included in the script's results.
-     *
-     * The Claim instance provides methods to check
-     * what the name of the claim is,
-     * which values the claim request contains,
-     * whether the claim is essential, and
-     * which locale the claim is associated with.
-     * The resolver function can consider this information when computing and returning the claim value.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),
-     * is called to return a claim resolver function based on a user profile attribute.
-     * @see CLAIM RESOLVERS section for the implementation details and examples.
-     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.
-     *
-     * CUSTOMIZATION
-     * You can reuse the predefined utils methods with your custom arguments.
-     * You can also specify a custom resolver function for a claim name,
-     * that will compute and return the claim value—as shown in the commented out example below.
-     */
-    utils.setClaimResolvers({
-        /*
-        // An example of a simple claim resolver function that is defined for a claim
-        // directly in the configuration object:
-        custom-claim-name: function (requestedClaim) {
-            // In this case, initially, the claim value comes straight from a user profile attribute value:
-            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]
-
-            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.
-            // You can use:
-            // requestedClaim.getName()
-            // requestedClaim.getValues()
-            // requestedClaim.getLocale()
-            // requestedClaim.isEssential()
-
-            return claimValue
-        },
-        */
-        /**
-         * The use of utils.getUserProfileClaimResolver shows how
-         * an argument passed to a function that returns a claim resolver
-         * becomes available to the resolver function (via its lexical context).
-         */
-        name: utils.getUserProfileClaimResolver('cn'),
-        family_name: utils.getUserProfileClaimResolver('sn'),
-        given_name: utils.getUserProfileClaimResolver('givenname'),
-        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),
-        locale: utils.getUserProfileClaimResolver('preferredlocale'),
-        email: utils.getUserProfileClaimResolver('mail'),
-        address: utils.getAddressClaimResolver(
-            /**
-             * The passed in user profile claim resolver function
-             * can be used by the address claim resolver function
-             * to obtain the claim value to be formatted as per the OIDC specification:
-             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.
-             */
-            utils.getUserProfileClaimResolver('postaladdress')
-        ),
-        phone_number: utils.getUserProfileClaimResolver('telephonenumber')
-    });
-
-    // CLAIM PROCESSING UTILITIES
-
-    /**
-     * @returns {object} An object that contains reusable claim processing utilities.
-     * @see PUBLIC METHODS section and the return statement for the list of exported functions.
-     */
-    function getUtils () {
-        // IMPORT JAVA
-
-        /**
-         * Provides Java scripting functionality.
-         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.
-         */
-        var frJava = JavaImporter(
-            org.forgerock.oauth2.core.exceptions.InvalidRequestException,
-            org.forgerock.oauth2.core.UserInfoClaims,
-            org.forgerock.openidconnect.Claim,
-
-            java.util.LinkedHashMap,
-            java.util.ArrayList
-        );
-
-        // SET UP CONFIGURATION
-
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported scope values (scopes)
-         * and the corresponding claim names for each scope value.
-         */
-        var scopeClaimsMap;
-
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported claim names
-         * and the resolver functions returning the claim value.
-         */
-        var claimResolvers;
-
-        /**
-         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps each supported scope value to an array of claim names,
-         * in order to specify which claims need to be processed for the requested scopes.
-         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.
-         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.
-         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.
-         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.
-         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.
-         * @returns {undefined}
-         */
-        function setScopeClaimsMap(params) {
-            scopeClaimsMap = params;
-        }
-
-        /**
-         * A (public) method that accepts an object that maps the supported claim names
-         * and the resolver functions returning the claim value,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps
-         * each supported claim name to a function that computes and returns the claim value.
-         */
-        function setClaimResolvers(params) {
-            claimResolvers = params;
-        }
-
-        // CLAIM RESOLVERS
-
-        /**
-         * Claim resolvers are functions that return a claim value.
-         * @param {*}
-         * @returns {*}
-         */
-
-        /**
-         * Defines a claim resolver based on a user profile attribute.
-         * @param {string} attributeName - Name of the user profile attribute.
-         * @returns {function} A function that will determine the claim value
-         * based on the user profile attribute and the (requested) claim properties.
-         */
-        function getUserProfileClaimResolver (attributeName) {
-            /**
-             * Resolves a claim with a user profile attribute value.
-             * Returns undefined if the identity attribute is not populated,
-             * OR if the claim has requested values that do not contain the identity attribute value.
-             * ATTENTION: the aforementioned comparison is case-sensitive.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {string|HashSet|undefined}
-             */
-            function resolveClaim(claim) {
-                var userProfileValue;
-
-                if (identity) {
-                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));
-
-                    if (userProfileValue && !userProfileValue.isEmpty()) {
-                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {
-                            return userProfileValue;
-                        }
-                    }
-                }
-            }
-
-            return resolveClaim;
-        }
-
-        /**
-         * Returns an address claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional formatting to the value before returning it.
-         */
-        function getAddressClaimResolver (resolveClaim) {
-            /**
-             * Creates an address claim object from a value returned by a claim resolver,
-             * and returns the address claim object as the claim value.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.
-             */
-            function resolveAddressClaim(claim) {
-                var claimValue = resolveClaim(claim);
-                var addressObject;
-
-                if (isClaimValueValid(claimValue)) {
-                    addressObject = new frJava.LinkedHashMap();
-
-                    addressObject.put('formatted', claimValue);
-
-                    return addressObject;
-                }
-            }
-
-            return resolveAddressClaim;
-        }
-
-        /**
-         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional logic for essential claims.
-         */
-        function getEssentialClaimResolver (resolveClaim) {
-            /**
-             * Returns a claim value or throws an error.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * Throws an exception if the claim is essential and no value is returned for the claim.
-             *
-             * Use of this resolver is optional.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:
-             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,
-             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,
-             * unless otherwise specified in the description of the specific claim."
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*}
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             */
-            function resolveEssentialClaim(claim) {
-                var claimValue = resolveClaim(claim);
-
-                if (claim.isEssential() && !isClaimValueValid(claimValue)) {
-                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());
-                }
-
-                return claimValue;
-            }
-
-            return resolveEssentialClaim;
-        }
-
-        /**
-         * Provides default resolution for a claim.
-         * Use it if a claim-specific resolver is not defined in the configuration.
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @returns {*} A single value associated with this claim.
-         */
-        function resolveAnyClaim (claim) {
-            if (claim.getValues().size() === 1) {
-                return claim.getValues().toArray()[0];
-            }
-        }
-
-        // UTILITIES
-
-        /**
-         * Returns claim value from a set.
-         * If the set contains a single value, returns the value.
-         * If the set contains multiple values, returns the set.
-         * Otherwise, returns undefined.
-         *
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.
-         * @returns {string|java.util.HashSet|undefined}
-         */
-        function getClaimValueFromSet (claim, set) {
-            if (set && set.size()) {
-                if (set.size() === 1) {
-                    return set.toArray()[0];
-                } else {
-                    return set;
-                }
-            } else if (logger.warningEnabled()) {
-                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());
-            }
-        }
-
-        function isClaimValueValid (claimValue) {
-            if (typeof claimValue === 'undefined' || claimValue === null) {
-                return false;
-            }
-
-            return true;
-        }
-
-        // CLAIM PROCESSING
-
-        /**
-         * Constructs and returns an object populated with the computed claim values
-         * and the requested scopes mapped to the claim names.
-         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-         * @see RESULTS section for the use of this function.
-         */
-        function getUserInfoClaims () {
-            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());
-        }
-
-        /**
-         * Creates a map of (requested) claim names populated with the computed claim values.
-         * @returns {java.util.LinkedHashMap}
-         * A map of the requested claim names and the corresponding claim values.
-         */
-        function getComputedClaims () {
-            /**
-             * Creates a complete list of claim objects from:
-             * the claims derived from the scopes,
-             * the claims provided by the authorization server,
-             * and the claims requested by the client.
-             * @returns {java.util.ArrayList}
-             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-             */
-            function getClaims() {
-                /**
-                 * Returns a list of claim objects for the requested scopes.
-                 * Uses the scopeClaimsMap configuration option to derive the claim names;
-                 * no other properties of a claim derived from a scope are populated.
-                 * @returns {java.util.ArrayList}
-                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.
-                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-                 */
-                function convertScopeToClaims() {
-                    var claims = new frJava.ArrayList();
-
-                    scopes.toArray().forEach(function (scope) {
-                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {
-                            scopeClaimsMap[scope].forEach(function (claimName) {
-                                claims.add(new frJava.Claim(claimName));
-                            });
-                        }
-                    });
-
-                    return claims;
-                }
-
-                var claims = new frJava.ArrayList();
-
-                claims.addAll(convertScopeToClaims());
-                claims.addAll(claimObjects);
-                claims.addAll(requestedTypedClaims);
-
-                return claims;
-            }
-
-            /**
-             * Computes and returns a claim value.
-             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.
-             * @see claimResolvers
-             * If no resolver function is found, uses the default claim resolver function.
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*} Claim value.
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             * Rethrows this exception if a claim resolver throws it.
-             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver
-             * if you want to terminate the claim processing.
-             */
-            function computeClaim(claim) {
-                var resolveClaim;
-                var message;
-
-                try {
-                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;
-
-                    return resolveClaim(claim);
-                } catch (e) {
-                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;
-
-                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {
-                        throw e;
-                    }
-
-                    if (logger.warningEnabled()) {
-                        logger.warning(message);
-                    }
-                }
-            }
-
-            var computedClaims = new frJava.LinkedHashMap();
-
-            getClaims().toArray().forEach(function (claim) {
-                var claimValue = computeClaim(claim);
-
-                if (isClaimValueValid(claimValue)) {
-                    computedClaims.put(claim.getName(), claimValue);
-                } else {
-                    /**
-                     * If a claim has been processed, but appears in the list again,
-                     * and its value cannot be computed under the new conditions,
-                     * the claim is removed from the final result.
-                     *
-                     * For example, a claim could be mapped to a scope and found in the user profile,
-                     * but also requested by the client with required values that don't match the computed one.
-                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.
-                     * for the relevant OIDC specification details.
-                     */
-                    computedClaims.remove(claim.getName());
-                }
-            });
-
-            return computedClaims;
-        }
-
-        /**
-         * Creates a map of requested scopes and the corresponding claim names.
-         * @returns {java.util.LinkedHashMap}
-         */
-        function getCompositeScopes () {
-            var compositeScopes = new frJava.LinkedHashMap();
-
-            scopes.toArray().forEach(function (scope) {
-                var scopeClaims = new frJava.ArrayList();
-
-                if (scopeClaimsMap[scope]) {
-                    scopeClaimsMap[scope].forEach(function (claimName) {
-                        scopeClaims.add(claimName);
-                    });
-                }
-
-                if (scopeClaims.size()) {
-                    compositeScopes.put(scope, scopeClaims);
-                }
-            });
-
-            return compositeScopes;
-        }
-
-        // PUBLIC METHODS
-
-        return {
-            setScopeClaimsMap: setScopeClaimsMap,
-            setClaimResolvers: setClaimResolvers,
-            getUserProfileClaimResolver: getUserProfileClaimResolver,
-            getAddressClaimResolver: getAddressClaimResolver,
-            getEssentialClaimResolver: getEssentialClaimResolver,
-            getUserInfoClaims: getUserInfoClaims
-        };
-    }
-
-    // RESULTS
-
-    /**
-     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class
-     * populated with the computed claim values and
-     * the requested scopes mapped to the claim names.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-     *
-     * Assigning it to a variable gives you an opportunity
-     * to log the content of the returned value during development.
-     */
-    var userInfoClaims = utils.getUserInfoClaims();
-
-    /*
-    logger.error(scriptName + ' results:')
-    logger.error('Values: ' + userInfoClaims.getValues())
-    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())
-    */
-
-    return userInfoClaims;
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-OIDC-Claims-Script.script.json 1`] = `
-{
-  "script": {
-    "cf3515f0-8278-4ee3-a530-1bad7424c416": {
-      "_id": "cf3515f0-8278-4ee3-a530-1bad7424c416",
-      "context": "OIDC_CLAIMS",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Default alpha realm script for OIDC claims",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Alpha OIDC Claims Script",
-      "script": "file://Alpha-OIDC-Claims-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.js 1`] = `
-"(function () {
-  if (scopes.contains('fr:autoaccess:*') || scopes.contains('fr:iga:*') || scopes.contains('fr:idc:analytics:*')) {
-    var fr = JavaImporter(
-      com.sun.identity.idm.IdType
-    );
-    var groups = [];
-    identity.getMemberships(fr.IdType.GROUP).toArray().forEach(function (group) {
-      groups.push(group.getAttribute('cn').toArray()[0]);
-    });
-    accessToken.setField('groups', groups);
-  }
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
-{
-  "script": {
-    "e232cff3-2460-47cd-80b2-36c86c0d0f06": {
-      "_id": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Used by endUserUIClient",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Alpha endUserUIClient OAuth2 Access Token Modification Script",
-      "script": "file://Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-endUserUIClient-OIDC-Claims-Script.script.js 1`] = `
-"/*
- * Copyright 2014-2021 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.
- * The claim values are computed for:
- * the claims derived from the requested scopes,
- * the claims provided by the authorization server,
- * and the claims requested by the client via the claims parameter.
- *
- * In the CONFIGURATION AND CUSTOMIZATION section, you can
- * define the scope-to-claims mapping, and
- * assign to each claim a resolver function that will compute the claim value.
- *
- * Defined variables (class references are provided below):
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * claims - Map<String, Object> (5).
- *          Always present, default server provided claims.
- * claimObjects - List<Claim> (7, 2).
- *                Always present, the default server provided claims.
- * requestedClaims - Map<String, Set<String>> (5).
- *                   Always present, not empty if the request contains the claims parameter and the server has enabled
- *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;
- *                   requested claims with no requested values will have a key but no value in the map. A key with
- *                   a single value in its Set (6) indicates that this is the only value that should be returned.
- * requestedTypedClaims - List<Claim> (7, 2).
- *                        Always present, the requested claims.
- *                        Requested claims with no requested values will have a claim with no values.
- *                        A claim with a single value indicates this is the only value that should be returned.
- * claimsLocales - List<String> (7).
- *                 The values from the 'claims_locales' parameter.
- *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *              In order to use the client, you may need to add
- *              org.forgerock.http.Client,
- *              org.forgerock.http.protocol.*,
- *              and org.forgerock.util.promise.PromiseImpl
- *              to the allowed Java classes in the scripting engine configuration, as described in:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html
- *
- * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.
- *          The result of the last statement in the script is returned to the server.
- *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
- *          is the last (and only) statement in this script, and its return value will become the script result.
- *          Do not use "return variable" statement outside of a function definition.
- *          See RESULTS section for additional details.
- *
- * Class reference:
- * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.
- * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).
- *         An instance of org.forgerock.openidconnect.Claim has methods to access
- *         the claim name, requested values, locale, and whether the claim is essential.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
-*/
-
-(function () {
-    // SETUP
-
-    /**
-     * Claim processing utilities.
-     * An object that contains reusable functions for processing claims.
-     * @see CLAIM PROCESSING UTILITIES section for details.
-     */
-    var utils = getUtils();
-
-    // CONFIGURATION AND CUSTOMIZATION
-
-    /**
-     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a scope value to an array of claim names
-     * to specify which claims need to be processed and returned for the requested scopes.
-     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}
-     * for the scope values that could be used to request claims as defined in the OIDC specification.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     *
-     * CUSTOMIZATION
-     * You can choose the claim names returned for a scope.
-     */
-    utils.setScopeClaimsMap({
-        profile: [
-            'name',
-            'family_name',
-            'given_name',
-            'zoneinfo',
-            'locale'
-        ],
-        email: ['email'],
-        address: ['address'],
-        phone: ['phone_number']
-    });
-
-    /**
-     * In this script, each claim
-     * derived from the requested scopes,
-     * provided by the authorization server, and
-     * requested by the client via the claims parameter
-     * will be processed by a function associated with the claim name.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a claim name to a resolver function,
-     * which will be automatically executed for each claim processed by the script.
-     *
-     * The claim resolver function will receive the requested claim information
-     * in an instance of org.forgerock.openidconnect.Claim as the first argument.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}
-     * for details on the Claim class.
-     *
-     * If the claim resolver function returns a value,
-     * other than undefined or null,
-     * the claim will be included in the script's results.
-     *
-     * The Claim instance provides methods to check
-     * what the name of the claim is,
-     * which values the claim request contains,
-     * whether the claim is essential, and
-     * which locale the claim is associated with.
-     * The resolver function can consider this information when computing and returning the claim value.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),
-     * is called to return a claim resolver function based on a user profile attribute.
-     * @see CLAIM RESOLVERS section for the implementation details and examples.
-     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.
-     *
-     * CUSTOMIZATION
-     * You can reuse the predefined utils methods with your custom arguments.
-     * You can also specify a custom resolver function for a claim name,
-     * that will compute and return the claim value—as shown in the commented out example below.
-     */
-    utils.setClaimResolvers({
-        /*
-        // An example of a simple claim resolver function that is defined for a claim
-        // directly in the configuration object:
-        custom-claim-name: function (requestedClaim) {
-            // In this case, initially, the claim value comes straight from a user profile attribute value:
-            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]
-
-            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.
-            // You can use:
-            // requestedClaim.getName()
-            // requestedClaim.getValues()
-            // requestedClaim.getLocale()
-            // requestedClaim.isEssential()
-
-            return claimValue
-        },
-        */
-        /**
-         * The use of utils.getUserProfileClaimResolver shows how
-         * an argument passed to a function that returns a claim resolver
-         * becomes available to the resolver function (via its lexical context).
-         */
-        name: utils.getUserProfileClaimResolver('cn'),
-        family_name: utils.getUserProfileClaimResolver('sn'),
-        given_name: utils.getUserProfileClaimResolver('givenname'),
-        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),
-        locale: utils.getUserProfileClaimResolver('preferredlocale'),
-        email: utils.getUserProfileClaimResolver('mail'),
-        address: utils.getAddressClaimResolver(
-            /**
-             * The passed in user profile claim resolver function
-             * can be used by the address claim resolver function
-             * to obtain the claim value to be formatted as per the OIDC specification:
-             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.
-             */
-            utils.getUserProfileClaimResolver('postaladdress')
-        ),
-        phone_number: utils.getUserProfileClaimResolver('telephonenumber')
-    });
-
-    // CLAIM PROCESSING UTILITIES
-
-    /**
-     * @returns {object} An object that contains reusable claim processing utilities.
-     * @see PUBLIC METHODS section and the return statement for the list of exported functions.
-     */
-    function getUtils () {
-        // IMPORT JAVA
-
-        /**
-         * Provides Java scripting functionality.
-         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.
-         */
-        var frJava = JavaImporter(
-            org.forgerock.oauth2.core.exceptions.InvalidRequestException,
-            org.forgerock.oauth2.core.UserInfoClaims,
-            org.forgerock.openidconnect.Claim,
-
-            java.util.LinkedHashMap,
-            java.util.ArrayList
-        );
-
-        // SET UP CONFIGURATION
-
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported scope values (scopes)
-         * and the corresponding claim names for each scope value.
-         */
-        var scopeClaimsMap;
-
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported claim names
-         * and the resolver functions returning the claim value.
-         */
-        var claimResolvers;
-
-        /**
-         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps each supported scope value to an array of claim names,
-         * in order to specify which claims need to be processed for the requested scopes.
-         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.
-         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.
-         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.
-         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.
-         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.
-         * @returns {undefined}
-         */
-        function setScopeClaimsMap(params) {
-            scopeClaimsMap = params;
-        }
-
-        /**
-         * A (public) method that accepts an object that maps the supported claim names
-         * and the resolver functions returning the claim value,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps
-         * each supported claim name to a function that computes and returns the claim value.
-         */
-        function setClaimResolvers(params) {
-            claimResolvers = params;
-        }
-
-        // CLAIM RESOLVERS
-
-        /**
-         * Claim resolvers are functions that return a claim value.
-         * @param {*}
-         * @returns {*}
-         */
-
-        /**
-         * Defines a claim resolver based on a user profile attribute.
-         * @param {string} attributeName - Name of the user profile attribute.
-         * @returns {function} A function that will determine the claim value
-         * based on the user profile attribute and the (requested) claim properties.
-         */
-        function getUserProfileClaimResolver (attributeName) {
-            /**
-             * Resolves a claim with a user profile attribute value.
-             * Returns undefined if the identity attribute is not populated,
-             * OR if the claim has requested values that do not contain the identity attribute value.
-             * ATTENTION: the aforementioned comparison is case-sensitive.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {string|HashSet|undefined}
-             */
-            function resolveClaim(claim) {
-                var userProfileValue;
-
-                if (identity) {
-                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));
-
-                    if (userProfileValue && !userProfileValue.isEmpty()) {
-                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {
-                            return userProfileValue;
-                        }
-                    }
-                }
-            }
-
-            return resolveClaim;
-        }
-
-        /**
-         * Returns an address claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional formatting to the value before returning it.
-         */
-        function getAddressClaimResolver (resolveClaim) {
-            /**
-             * Creates an address claim object from a value returned by a claim resolver,
-             * and returns the address claim object as the claim value.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.
-             */
-            function resolveAddressClaim(claim) {
-                var claimValue = resolveClaim(claim);
-                var addressObject;
-
-                if (isClaimValueValid(claimValue)) {
-                    addressObject = new frJava.LinkedHashMap();
-
-                    addressObject.put('formatted', claimValue);
-
-                    return addressObject;
-                }
-            }
-
-            return resolveAddressClaim;
-        }
-
-        /**
-         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional logic for essential claims.
-         */
-        function getEssentialClaimResolver (resolveClaim) {
-            /**
-             * Returns a claim value or throws an error.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * Throws an exception if the claim is essential and no value is returned for the claim.
-             *
-             * Use of this resolver is optional.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:
-             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,
-             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,
-             * unless otherwise specified in the description of the specific claim."
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*}
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             */
-            function resolveEssentialClaim(claim) {
-                var claimValue = resolveClaim(claim);
-
-                if (claim.isEssential() && !isClaimValueValid(claimValue)) {
-                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());
-                }
-
-                return claimValue;
-            }
-
-            return resolveEssentialClaim;
-        }
-
-        /**
-         * Provides default resolution for a claim.
-         * Use it if a claim-specific resolver is not defined in the configuration.
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @returns {*} A single value associated with this claim.
-         */
-        function resolveAnyClaim (claim) {
-            if (claim.getValues().size() === 1) {
-                return claim.getValues().toArray()[0];
-            }
-        }
-
-        // UTILITIES
-
-        /**
-         * Returns claim value from a set.
-         * If the set contains a single value, returns the value.
-         * If the set contains multiple values, returns the set.
-         * Otherwise, returns undefined.
-         *
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.
-         * @returns {string|java.util.HashSet|undefined}
-         */
-        function getClaimValueFromSet (claim, set) {
-            if (set && set.size()) {
-                if (set.size() === 1) {
-                    return set.toArray()[0];
-                } else {
-                    return set;
-                }
-            } else if (logger.warningEnabled()) {
-                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());
-            }
-        }
-
-        function isClaimValueValid (claimValue) {
-            if (typeof claimValue === 'undefined' || claimValue === null) {
-                return false;
-            }
-
-            return true;
-        }
-
-        // CLAIM PROCESSING
-
-        /**
-         * Constructs and returns an object populated with the computed claim values
-         * and the requested scopes mapped to the claim names.
-         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-         * @see RESULTS section for the use of this function.
-         */
-        function getUserInfoClaims () {
-            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());
-        }
-
-        /**
-         * Creates a map of (requested) claim names populated with the computed claim values.
-         * @returns {java.util.LinkedHashMap}
-         * A map of the requested claim names and the corresponding claim values.
-         */
-        function getComputedClaims () {
-            /**
-             * Creates a complete list of claim objects from:
-             * the claims derived from the scopes,
-             * the claims provided by the authorization server,
-             * and the claims requested by the client.
-             * @returns {java.util.ArrayList}
-             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-             */
-            function getClaims() {
-                /**
-                 * Returns a list of claim objects for the requested scopes.
-                 * Uses the scopeClaimsMap configuration option to derive the claim names;
-                 * no other properties of a claim derived from a scope are populated.
-                 * @returns {java.util.ArrayList}
-                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.
-                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-                 */
-                function convertScopeToClaims() {
-                    var claims = new frJava.ArrayList();
-
-                    scopes.toArray().forEach(function (scope) {
-                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {
-                            scopeClaimsMap[scope].forEach(function (claimName) {
-                                claims.add(new frJava.Claim(claimName));
-                            });
-                        }
-                    });
-
-                    return claims;
-                }
-
-                var claims = new frJava.ArrayList();
-
-                claims.addAll(convertScopeToClaims());
-                claims.addAll(claimObjects);
-                claims.addAll(requestedTypedClaims);
-
-                return claims;
-            }
-
-            /**
-             * Computes and returns a claim value.
-             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.
-             * @see claimResolvers
-             * If no resolver function is found, uses the default claim resolver function.
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*} Claim value.
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             * Rethrows this exception if a claim resolver throws it.
-             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver
-             * if you want to terminate the claim processing.
-             */
-            function computeClaim(claim) {
-                var resolveClaim;
-                var message;
-
-                try {
-                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;
-
-                    return resolveClaim(claim);
-                } catch (e) {
-                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;
-
-                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {
-                        throw e;
-                    }
-
-                    if (logger.warningEnabled()) {
-                        logger.warning(message);
-                    }
-                }
-            }
-
-            var computedClaims = new frJava.LinkedHashMap();
-
-            getClaims().toArray().forEach(function (claim) {
-                var claimValue = computeClaim(claim);
-
-                if (isClaimValueValid(claimValue)) {
-                    computedClaims.put(claim.getName(), claimValue);
-                } else {
-                    /**
-                     * If a claim has been processed, but appears in the list again,
-                     * and its value cannot be computed under the new conditions,
-                     * the claim is removed from the final result.
-                     *
-                     * For example, a claim could be mapped to a scope and found in the user profile,
-                     * but also requested by the client with required values that don't match the computed one.
-                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.
-                     * for the relevant OIDC specification details.
-                     */
-                    computedClaims.remove(claim.getName());
-                }
-            });
-
-            return computedClaims;
-        }
-
-        /**
-         * Creates a map of requested scopes and the corresponding claim names.
-         * @returns {java.util.LinkedHashMap}
-         */
-        function getCompositeScopes () {
-            var compositeScopes = new frJava.LinkedHashMap();
-
-            scopes.toArray().forEach(function (scope) {
-                var scopeClaims = new frJava.ArrayList();
-
-                if (scopeClaimsMap[scope]) {
-                    scopeClaimsMap[scope].forEach(function (claimName) {
-                        scopeClaims.add(claimName);
-                    });
-                }
-
-                if (scopeClaims.size()) {
-                    compositeScopes.put(scope, scopeClaims);
-                }
-            });
-
-            return compositeScopes;
-        }
-
-        // PUBLIC METHODS
-
-        return {
-            setScopeClaimsMap: setScopeClaimsMap,
-            setClaimResolvers: setClaimResolvers,
-            getUserProfileClaimResolver: getUserProfileClaimResolver,
-            getAddressClaimResolver: getAddressClaimResolver,
-            getEssentialClaimResolver: getEssentialClaimResolver,
-            getUserInfoClaims: getUserInfoClaims
-        };
-    }
-
-    // RESULTS
-
-    /**
-     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class
-     * populated with the computed claim values and
-     * the requested scopes mapped to the claim names.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-     *
-     * Assigning it to a variable gives you an opportunity
-     * to log the content of the returned value during development.
-     */
-    var userInfoClaims = utils.getUserInfoClaims();
-
-    /*
-    logger.error(scriptName + ' results:')
-    logger.error('Values: ' + userInfoClaims.getValues())
-    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())
-    */
-
-    return userInfoClaims;
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-endUserUIClient-OIDC-Claims-Script.script.json 1`] = `
-{
-  "script": {
-    "e1db8a0a-0329-4962-a5bf-ecffaca376ae": {
-      "_id": "e1db8a0a-0329-4962-a5bf-ecffaca376ae",
-      "context": "OIDC_CLAIMS",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Used by endUserUIClient",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Alpha endUserUIClient OIDC Claims Script",
-      "script": "file://Alpha-endUserUIClient-OIDC-Claims-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Amazon-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.user_id),
-        field("displayName", rawProfile.name),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Amazon-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "6b3cfd48-62d3-48ff-a96f-fe8f3a22ab30": {
-      "_id": "6b3cfd48-62d3-48ff-a96f-fe8f3a22ab30",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Amazon",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Amazon Profile Normalization",
-      "script": "file://Amazon-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Apple-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- *
- * In some common default configurations, the following keys are required to be not empty:
- * username, givenName, familyName, email.
- *
- * From RFC4517: A value of the Directory String syntax is a string of one or more
- * arbitrary characters from the Universal Character Set (UCS).
- * A zero-length character string is not permitted.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-String email = "change@me.com"
-String subjectId = rawProfile.sub
-String firstName = " "
-String lastName = " "
-String username = subjectId
-String name
-
-if (rawProfile.isDefined("email") && rawProfile.email.isNotNull()){ // User can elect to not share their email
-    email = rawProfile.email.asString()
-    username = email
-}
-if (rawProfile.isDefined("name") && rawProfile.name.isNotNull()) {
-    if (rawProfile.name.isDefined("firstName") && rawProfile.name.firstName.isNotNull()) {
-        firstName = rawProfile.name.firstName.asString()
-    }
-    if (rawProfile.name.isDefined("lastName") && rawProfile.name.lastName.isNotNull()) {
-        lastName = rawProfile.name.lastName.asString()
-    }
-}
-
-name = (firstName?.trim() ? firstName : "") + (lastName?.trim() ? ((firstName?.trim() ? " " : "") + lastName) : "")
-name =  (!name?.trim()) ? " " : name
-
-return json(object(
-        field("id", subjectId),
-        field("displayName", name),
-        field("email", email),
-        field("givenName", firstName),
-        field("familyName", lastName),
-        field("username", username)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Apple-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "484e6246-dbc6-4288-97e6-54e55431402e": {
-      "_id": "484e6246-dbc6-4288-97e6-54e55431402e",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Apple",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Apple Profile Normalization",
-      "script": "file://Apple-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Authentication-Tree-Decision-Node-Script.script.js 1`] = `
-"/*
-  - Data made available by nodes that have already executed are available in the sharedState variable.
-  - The script should set outcome to either "true" or "false".
- */
-
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Authentication-Tree-Decision-Node-Script.script.json 1`] = `
-{
-  "script": {
-    "01e1a3c0-038b-4c16-956a-6c9d89328cff": {
-      "_id": "01e1a3c0-038b-4c16-956a-6c9d89328cff",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for a scripted decision node",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Authentication Tree Decision Node Script",
-      "script": "file://Authentication-Tree-Decision-Node-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Check-Username.script.js 1`] = `
-"/* Check Username
- *
- * Author: volker.scheuber@forgerock.com
- * 
- * Check if username has already been collected.
- * Return "known" if yes, "unknown" otherwise.
- * 
- * This script does not need to be parametrized. It will work properly as is.
- * 
- * The Scripted Decision Node needs the following outcomes defined:
- * - known
- * - unknown
- */
-(function () {
-    if (null != sharedState.get("username")) {
-        outcome = "known";
-    }
-    else {
-        outcome = "unknown";
-    }
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Check-Username.script.json 1`] = `
-{
-  "script": {
-    "739bdc48-fd24-4c52-b353-88706d75558a": {
-      "_id": "739bdc48-fd24-4c52-b353-88706d75558a",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Check if username has already been collected.",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Check Username",
-      "script": "file://Check-Username.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Config-Provider-Node-Script.script.js 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/**
- * The following script is a simplified template for understanding how to build
- * up a config Map object with custom values. The Config Provider Node will then
- * provide this config Map to the desired node type. It is important that the Map
- * you build here is named 'config'.
- *
- * Defined variables:
- *
- * nodeState - Node State (1)
- *           Always present, this represents the current values stored in the node state.
- *
- * idRepository - Profile Data (2)
- *           Always present, a repository to retrieve user information.
- *
- * secrets - Credentials and Secrets (3)
- *           Always present, an interface to access the Secrets API from a scripting context.
- *
- * requestHeaders (4) - Map (5)
- *           Always present, an object that provides methods for accessing headers in the login request.
- *
- * logger - Debug Logging (6)
- *          Always present, the debug logger instance.
- *
- * httpClient - HTTP Client (7)
- *          Always present, the HTTP client that can be used to make external HTTP requests.
- *
- * realm - String (primitive).
- *          Always present, the name of the realm the user is authenticating to.
- *
- * existingSession - Map<String, String> (5)
- *          Present if the request contains the session cookie, the user's session object. The returned map from
- *          SSOToken.getProperties() (8)
- *
- * requestParameters - Map (5)
- *          Always present, the object that contains the authentication request parameters.
- *
- *
- * Outputs:
- *
- * config - Map (5)
- *           Define and fill a Map object named 'config' with custom values, this will define the configuration for the
- *           associated node selected in the ConfigProviderNode.
- *
- * Reference:
- * (1) Node State - https://backstage.forgerock.com/docs/idcloud-am/latest/authentication-guide/scripting-api-node.html#scripting-api-node-nodeState
- * (2) Profile Data - https://backstage.forgerock.com/docs/am/7.1/authentication-guide/scripting-api-node.html#scripting-api-node-id-repo
- * (3) Credentials and Secrets - https://backstage.forgerock.com/docs/am/7.1/authentication-guide/scripting-api-node.html#scripting-api-authn-secrets
- * (4) Request Headers - https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/Map.html
- * (6) Debug Logging - https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- * (7) HTTP Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
- * (8) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- */
-
-config = {
-    "key0": {"subKey": "value0"},
-    "key1": "value1"
-};
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Config-Provider-Node-Script.script.json 1`] = `
-{
-  "script": {
-    "5e854779-6ec1-4c39-aeba-0477e0986646": {
-      "_id": "5e854779-6ec1-4c39-aeba-0477e0986646",
-      "context": "CONFIG_PROVIDER_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Script to provide values for a config provider node",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Config Provider Node Script",
-      "script": "file://Config-Provider-Node-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Custom-Device-Match-Script.script.js 1`] = `
-"/*
- * Custom Device Match Script
- */
-
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Custom-Device-Match-Script.script.json 1`] = `
-{
-  "script": {
-    "d58977ed-0542-4147-8197-973ef7300191": {
-      "_id": "d58977ed-0542-4147-8197-973ef7300191",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Custom Device Match Script",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Custom Device Match Script",
-      "script": "file://Custom-Device-Match-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Id-(Match)-Client-Side.script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-var fontDetector = (function () {
-    /**
-     * JavaScript code to detect available availability of a
-     * particular font in a browser using JavaScript and CSS.
-     *
-     * Author : Lalit Patel
-     * Website: http://www.lalit.org/lab/javascript-css-font-detect/
-     * License: Apache Software License 2.0
-     *          http://www.apache.org/licenses/LICENSE-2.0
-     * Version: 0.15 (21 Sep 2009)
-     *          Changed comparision font to default from sans-default-default,
-     *          as in FF3.0 font of child element didn't fallback
-     *          to parent element if the font is missing.
-     * Version: 0.2 (04 Mar 2012)
-     *          Comparing font against all the 3 generic font families ie,
-     *          'monospace', 'sans-serif' and 'sans'. If it doesn't match all 3
-     *          then that font is 100% not available in the system
-     * Version: 0.3 (24 Mar 2012)
-     *          Replaced sans with serif in the list of baseFonts
-     */
-    /*
-     * Portions Copyrighted 2013 ForgeRock AS.
-     */
-    var detector = {}, baseFonts, testString, testSize, h, s, defaultWidth = {}, defaultHeight = {}, index;
-
-    // a font will be compared against all the three default fonts.
-    // and if it doesn't match all 3 then that font is not available.
-    baseFonts = ['monospace', 'sans-serif', 'serif'];
-
-    //we use m or w because these two characters take up the maximum width.
-    // And we use a LLi so that the same matching fonts can get separated
-    testString = "mmmmmmmmmmlli";
-
-    //we test using 72px font size, we may use any size. I guess larger the better.
-    testSize = '72px';
-
-    h = document.getElementsByTagName("body")[0];
-
-    // create a SPAN in the document to get the width of the text we use to test
-    s = document.createElement("span");
-    s.style.fontSize = testSize;
-    s.innerHTML = testString;
-    for (index in baseFonts) {
-        //get the default width for the three base fonts
-        s.style.fontFamily = baseFonts[index];
-        h.appendChild(s);
-        defaultWidth[baseFonts[index]] = s.offsetWidth; //width for the default font
-        defaultHeight[baseFonts[index]] = s.offsetHeight; //height for the defualt font
-        h.removeChild(s);
-    }
-
-    detector.detect = function(font) {
-        var detected = false, index, matched;
-        for (index in baseFonts) {
-            s.style.fontFamily = font + ',' + baseFonts[index]; // name of the font along with the base font for fallback.
-            h.appendChild(s);
-            matched = (s.offsetWidth !== defaultWidth[baseFonts[index]] || s.offsetHeight !== defaultHeight[baseFonts[index]]);
-            h.removeChild(s);
-            detected = detected || matched;
-        }
-        return detected;
-    };
-
-    return detector;
-}());
-/*
- * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
- *
- * Copyright (c) 2009 Sun Microsystems Inc. All Rights Reserved
- *
- * The contents of this file are subject to the terms
- * of the Common Development and Distribution License
- * (the License). You may not use this file except in
- * compliance with the License.
- *
- * You can obtain a copy of the License at
- * https://opensso.dev.java.net/public/CDDLv1.0.html or
- * opensso/legal/CDDLv1.0.txt
- * See the License for the specific language governing
- * permission and limitations under the License.
- *
- * When distributing Covered Code, include this CDDL
- * Header Notice in each file and include the License file
- * at opensso/legal/CDDLv1.0.txt.
- * If applicable, add the following below the CDDL Header,
- * with the fields enclosed by brackets [] replaced by
- * your own identifying information:
- * "Portions Copyrighted [year] [name of copyright owner]"
- *
- */
-/*
- * Portions Copyrighted 2013 Syntegrity.
- * Portions Copyrighted 2013-2014 ForgeRock AS.
- */
-
-var collectScreenInfo = function () {
-        var screenInfo = {};
-        if (screen) {
-            if (screen.width) {
-                screenInfo.screenWidth = screen.width;
-            }
-
-            if (screen.height) {
-                screenInfo.screenHeight = screen.height;
-            }
-
-            if (screen.pixelDepth) {
-                screenInfo.screenColourDepth = screen.pixelDepth;
-            }
-        } else {
-            console.warn("Cannot collect screen information. screen is not defined.");
-        }
-        return screenInfo;
-    },
-    collectTimezoneInfo = function () {
-        var timezoneInfo =  {}, offset = new Date().getTimezoneOffset();
-
-        if (offset) {
-            timezoneInfo.timezone = offset;
-        } else {
-            console.warn("Cannot collect timezone information. timezone is not defined.");
-        }
-
-        return timezoneInfo;
-    },
-    collectBrowserPluginsInfo = function () {
-
-        if (navigator && navigator.plugins) {
-            var pluginsInfo = {}, i, plugins = navigator.plugins;
-            pluginsInfo.installedPlugins = "";
-
-            for (i = 0; i < plugins.length; i++) {
-                pluginsInfo.installedPlugins = pluginsInfo.installedPlugins + plugins[i].filename + ";";
-            }
-
-            return pluginsInfo;
-        } else {
-            console.warn("Cannot collect browser plugin information. navigator.plugins is not defined.");
-            return {};
-        }
-
-    },
-// Getting geolocation takes some time and is done asynchronously, hence need a callback which is called once geolocation is retrieved.
-    collectGeolocationInfo = function (callback) {
-        var geolocationInfo = {},
-            successCallback = function(position) {
-                geolocationInfo.longitude = position.coords.longitude;
-                geolocationInfo.latitude = position.coords.latitude;
-                callback(geolocationInfo);
-            }, errorCallback = function(error) {
-                console.warn("Cannot collect geolocation information. " + error.code + ": " + error.message);
-                callback(geolocationInfo);
-            };
-        if (navigator && navigator.geolocation) {
-            // NB: If user chooses 'Not now' on Firefox neither callback gets called
-            //     https://bugzilla.mozilla.org/show_bug.cgi?id=675533
-            navigator.geolocation.getCurrentPosition(successCallback, errorCallback);
-        } else {
-            console.warn("Cannot collect geolocation information. navigator.geolocation is not defined.");
-            callback(geolocationInfo);
-        }
-    },
-    collectBrowserFontsInfo = function () {
-        var fontsInfo = {}, i, fontsList = ["cursive","monospace","serif","sans-serif","fantasy","default","Arial","Arial Black",
-            "Arial Narrow","Arial Rounded MT Bold","Bookman Old Style","Bradley Hand ITC","Century","Century Gothic",
-            "Comic Sans MS","Courier","Courier New","Georgia","Gentium","Impact","King","Lucida Console","Lalit",
-            "Modena","Monotype Corsiva","Papyrus","Tahoma","TeX","Times","Times New Roman","Trebuchet MS","Verdana",
-            "Verona"];
-        fontsInfo.installedFonts = "";
-
-        for (i = 0; i < fontsList.length; i++) {
-            if (fontDetector.detect(fontsList[i])) {
-                fontsInfo.installedFonts = fontsInfo.installedFonts + fontsList[i] + ";";
-            }
-        }
-        return fontsInfo;
-    },
-    devicePrint = {};
-
-devicePrint.screen = collectScreenInfo();
-devicePrint.timezone = collectTimezoneInfo();
-devicePrint.plugins = collectBrowserPluginsInfo();
-devicePrint.fonts = collectBrowserFontsInfo();
-
-if (navigator.userAgent) {
-    devicePrint.userAgent = navigator.userAgent;
-}
-if (navigator.appName) {
-    devicePrint.appName = navigator.appName;
-}
-if (navigator.appCodeName) {
-    devicePrint.appCodeName = navigator.appCodeName;
-}
-if (navigator.appVersion) {
-    devicePrint.appVersion = navigator.appVersion;
-}
-if (navigator.appMinorVersion) {
-    devicePrint.appMinorVersion = navigator.appMinorVersion;
-}
-if (navigator.buildID) {
-    devicePrint.buildID = navigator.buildID;
-}
-if (navigator.platform) {
-    devicePrint.platform = navigator.platform;
-}
-if (navigator.cpuClass) {
-    devicePrint.cpuClass = navigator.cpuClass;
-}
-if (navigator.oscpu) {
-    devicePrint.oscpu = navigator.oscpu;
-}
-if (navigator.product) {
-    devicePrint.product = navigator.product;
-}
-if (navigator.productSub) {
-    devicePrint.productSub = navigator.productSub;
-}
-if (navigator.vendor) {
-    devicePrint.vendor = navigator.vendor;
-}
-if (navigator.vendorSub) {
-    devicePrint.vendorSub = navigator.vendorSub;
-}
-if (navigator.language) {
-    devicePrint.language = navigator.language;
-}
-if (navigator.userLanguage) {
-    devicePrint.userLanguage = navigator.userLanguage;
-}
-if (navigator.browserLanguage) {
-    devicePrint.browserLanguage = navigator.browserLanguage;
-}
-if (navigator.systemLanguage) {
-    devicePrint.systemLanguage = navigator.systemLanguage;
-}
-
-// Attempt to collect geo-location information and return this with the data collected so far.
-// Otherwise, if geo-location fails or takes longer than 30 seconds, auto-submit the data collected so far.
-autoSubmitDelay = 30000;
-output.value = JSON.stringify(devicePrint);
-collectGeolocationInfo(function(geolocationInfo) {
-    devicePrint.geolocation = geolocationInfo;
-    output.value = JSON.stringify(devicePrint);
-    submit();
-});
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Id-(Match)-Client-Side.script.json 1`] = `
-{
-  "script": {
-    "157298c0-7d31-4059-a95b-eeb08473b7e5": {
-      "_id": "157298c0-7d31-4059-a95b-eeb08473b7e5",
-      "context": "AUTHENTICATION_CLIENT_SIDE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for client side Device Id (Match) Authentication Module",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Device Id (Match) - Client Side",
-      "script": "file://Device-Id-(Match)-Client-Side.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Id-(Match)-Server-Side.script.js 1`] = `
-"/*
- * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
- *
- * Copyright (c) 2009 Sun Microsystems Inc. All Rights Reserved
- *
- * The contents of this file are subject to the terms
- * of the Common Development and Distribution License
- * (the License). You may not use this file except in
- * compliance with the License.
- *
- * You can obtain a copy of the License at
- * https://opensso.dev.java.net/public/CDDLv1.0.html or
- * opensso/legal/CDDLv1.0.txt
- * See the License for the specific language governing
- * permission and limitations under the License.
- *
- * When distributing Covered Code, include this CDDL
- * Header Notice in each file and include the License file
- * at opensso/legal/CDDLv1.0.txt.
- * If applicable, add the following below the CDDL Header,
- * with the fields enclosed by brackets [] replaced by
- * your own identifying information:
- * "Portions Copyrighted [year] [name of copyright owner]"
- *
- */
-/*
- * Portions Copyrighted 2013 Syntegrity.
- * Portions Copyrighted 2013-2023 ForgeRock AS.
- */
-
-var ScalarComparator = {}, ScreenComparator = {}, MultiValueComparator = {}, UserAgentComparator = {}, GeolocationComparator = {};
-
-var config = {
-    profileExpiration: 30,              //in days
-    maxProfilesAllowed: 5,
-    maxPenaltyPoints: 0,
-    attributes: {
-        screen: {
-            required: true,
-            comparator: ScreenComparator,
-            args: {
-                penaltyPoints: 50
-            }
-        },
-        plugins: {
-            installedPlugins: {
-                required: false,
-                comparator: MultiValueComparator,
-                args: {
-                    maxPercentageDifference: 10,
-                    maxDifferences: 5,
-                    penaltyPoints: 100
-                }
-            }
-        },
-        fonts: {
-            installedFonts: {
-                required: false,
-                comparator: MultiValueComparator,
-                args: {
-                    maxPercentageDifference: 10,
-                    maxDifferences: 5,
-                    penaltyPoints: 100
-                }
-            }
-        },
-        timezone: {
-            timezone: {
-                required: false,
-                comparator: ScalarComparator,
-                args: {
-                    penaltyPoints: 100
-                }
-            }
-        },
-        userAgent: {
-            required: true,
-            comparator: UserAgentComparator,
-            args: {
-                ignoreVersion: true,
-                penaltyPoints: 100
-            }
-        },
-        geolocation: {
-            required: false,
-            comparator: GeolocationComparator,
-            args: {
-                allowedRange: 100,            //in miles
-                penaltyPoints: 100
-            }
-        }
-    }
-};
-
-//---------------------------------------------------------------------------//
-//                           Comparator functions                            //
-//---------------------------------------------------------------------------//
-
-var all, any, calculateDistance, calculateIntersection, calculatePercentage, nullOrUndefined, splitAndTrim,
-    undefinedLocation;
-
-// ComparisonResult
-
-/**
- * Constructs an instance of a ComparisonResult with the given penalty points.
- *
- * @param penaltyPoints (Number) The penalty points for the comparison (defaults to 0).
- * @param additionalInfoInCurrentValue (boolean) Whether the current value contains more information
- *                                               than the stored value (defaults to false).
- */
-function ComparisonResult() {
-
-    var penaltyPoints = 0,
-        additionalInfoInCurrentValue = false;
-
-    if (arguments[0] !== undefined && arguments[1] !== undefined) {
-        penaltyPoints = arguments[0];
-        additionalInfoInCurrentValue = arguments[1];
-    }
-
-    if (arguments[0] !== undefined && arguments[1] === undefined) {
-        if (typeof(arguments[0]) === "boolean") {
-            additionalInfoInCurrentValue = arguments[0];
-        } else {
-            penaltyPoints = arguments[0];
-        }
-    }
-
-    this.penaltyPoints = penaltyPoints;
-    this.additionalInfoInCurrentValue = additionalInfoInCurrentValue;
-
-}
-
-ComparisonResult.ZERO_PENALTY_POINTS = new ComparisonResult(0);
-
-/**
- * Static method for functional programming.
- *
- * @return boolean true if comparisonResult.isSuccessful().
- */
-ComparisonResult.isSuccessful =  function(comparisonResult) {
-    return comparisonResult.isSuccessful();
-};
-
-
-/**
- * Static method for functional programming.
- *
- * @return boolean true if comparisonResult.additionalInfoInCurrentValue.
- */
-ComparisonResult.additionalInfoInCurrentValue =  function(comparisonResult) {
-    return comparisonResult.additionalInfoInCurrentValue;
-};
-
-/**
- * Comparison function that can be provided as an argument to array.sort
- */
-ComparisonResult.compare = function(first, second) {
-    if (nullOrUndefined(first) && nullOrUndefined(second)) {
-        return 0;
-    } else if (nullOrUndefined(first)) {
-        return -1;
-    } else if (nullOrUndefined(second)) {
-        return 1;
-    } else {
-        if (first.penaltyPoints !== second.penaltyPoints) {
-            return first.penaltyPoints - second.penaltyPoints;
-        } else {
-            return (first.additionalInfoInCurrentValue ? 1 : 0) - (second.additionalInfoInCurrentValue ? 1 : 0);
-        }
-    }
-};
-
-/**
- * Amalgamates the given ComparisonResult into this ComparisonResult.
- *
- * @param comparisonResult The ComparisonResult to include.
- */
-ComparisonResult.prototype.addComparisonResult = function(comparisonResult) {
-    this.penaltyPoints += comparisonResult.penaltyPoints;
-    if (comparisonResult.additionalInfoInCurrentValue) {
-        this.additionalInfoInCurrentValue = comparisonResult.additionalInfoInCurrentValue;
-    }
-};
-
-/**
- * Returns true if no penalty points have been assigned for the comparison.
- *
- * @return boolean true if the comparison was successful.
- */
-ComparisonResult.prototype.isSuccessful = function() {
-    return nullOrUndefined(this.penaltyPoints) || this.penaltyPoints === 0;
-};
-
-/**
- * Compares two simple objects (String|Number) and if they are equal then returns a ComparisonResult with zero
- * penalty points assigned, otherwise returns a ComparisonResult with the given number of penalty points assigned.
- *
- * @param currentValue (String|Number) The current value.
- * @param storedValue (String|Number) The stored value.
- * @param config: {
- *            "penaltyPoints": (Number) The number of penalty points.
- *        }
- * @return ComparisonResult.
- */
-ScalarComparator.compare = function (currentValue, storedValue, config) {
-    if (logger.messageEnabled()) {
-        logger.message("StringComparator.compare:currentValue: " + JSON.stringify(currentValue));
-        logger.message("StringComparator.compare:storedValue: " + JSON.stringify(storedValue));
-        logger.message("StringComparator.compare:config: " + JSON.stringify(config));
-    }
-    if (config.penaltyPoints === 0) {
-        return ComparisonResult.ZERO_PENALTY_POINTS;
-    }
-
-    if (!nullOrUndefined(storedValue)) {
-        if (nullOrUndefined(currentValue) || currentValue !== storedValue) {
-            return new ComparisonResult(config.penaltyPoints);
-        }
-    } else if (!nullOrUndefined(currentValue)) {
-        return new ComparisonResult(true);
-    }
-
-    return ComparisonResult.ZERO_PENALTY_POINTS;
-};
-
-/**
- * Compares two screens and if they are equal then returns a ComparisonResult with zero penalty points assigned,
- * otherwise returns a ComparisonResult with the given number of penalty points assigned.
- *
- * @param currentValue: {
- *            "screenWidth": (Number) The current client screen width.
- *            "screenHeight": (Number) The current client screen height.
- *            "screenColourDepth": (Number) The current client screen colour depth.
- *        }
- * @param storedValue: {
- *            "screenWidth": (Number) The stored client screen width.
- *            "screenHeight": (Number) The stored client screen height.
- *            "screenColourDepth": (Number) The stored client screen colour depth.
- *        }
- * @param config: {
- *            "penaltyPoints": (Number) The number of penalty points.
- *        }
- * @return ComparisonResult
- */
-ScreenComparator.compare = function (currentValue, storedValue, config) {
-    if (logger.messageEnabled()) {
-        logger.message("ScreenComparator.compare:currentValue: " + JSON.stringify(currentValue));
-        logger.message("ScreenComparator.compare:storedValue: " + JSON.stringify(storedValue));
-        logger.message("ScreenComparator.compare:config: " + JSON.stringify(config));
-    }
-
-    if (nullOrUndefined(currentValue)) {
-        currentValue = {screenWidth: null, screenHeight: null, screenColourDepth: null};
-    }
-    if (nullOrUndefined(storedValue)) {
-        storedValue = {screenWidth: null, screenHeight: null, screenColourDepth: null};
-    }
-
-    var comparisonResults = [
-        ScalarComparator.compare(currentValue.screenWidth, storedValue.screenWidth, config),
-        ScalarComparator.compare(currentValue.screenHeight, storedValue.screenHeight, config),
-        ScalarComparator.compare(currentValue.screenColourDepth, storedValue.screenColourDepth, config)];
-
-    if (all(comparisonResults, ComparisonResult.isSuccessful)) {
-        return new ComparisonResult(any(comparisonResults, ComparisonResult.additionalInfoInCurrentValue));
-    } else {
-        return new ComparisonResult(config.penaltyPoints);
-    }
-};
-
-/**
- * Splits both values using delimiter, trims every value and compares collections of values.
- * Returns zero-result for same multi-value attributes.
- *
- * If collections are not same checks if number of differences is less or equal maxDifferences or
- * percentage of difference is less or equal maxPercentageDifference.
- *
- * If yes then returns zero-result with additional info, else returns penaltyPoints-result.
- *
- * @param currentValue: (String) The current value.
- * @param storedValue: (String) The stored value.
- * @param config: {
- *            "maxPercentageDifference": (Number) The max difference percentage in the values,
- *                                                before the penalty is assigned.
- *            "maxDifferences": (Number) The max number of differences in the values,
- *                                       before the penalty points are assigned.
- *            "penaltyPoints": (Number) The number of penalty points.
-  *        }
- * @return ComparisonResult
- */
-MultiValueComparator.compare = function (currentValue, storedValue, config) {
-    if (logger.messageEnabled()) {
-        logger.message("MultiValueComparator.compare:currentValue: " + JSON.stringify(currentValue));
-        logger.message("MultiValueComparator.compare:storedValue: " + JSON.stringify(storedValue));
-        logger.message("MultiValueComparator.compare:config: " + JSON.stringify(config));
-    }
-
-    var delimiter = ";",
-        currentValues = splitAndTrim(currentValue, delimiter),
-        storedValues = splitAndTrim(storedValue, delimiter),
-        maxNumberOfElements = Math.max(currentValues.length, storedValues.length),
-        numberOfTheSameElements = calculateIntersection(currentValues, storedValues).length,
-        numberOfDifferences = maxNumberOfElements - numberOfTheSameElements,
-        percentageOfDifferences = calculatePercentage(numberOfDifferences, maxNumberOfElements);
-
-    if (nullOrUndefined(storedValue) && !nullOrUndefined(currentValue)) {
-        return new ComparisonResult(true);
-    }
-
-    if (logger.messageEnabled()) {
-        logger.message(numberOfTheSameElements + " of " + maxNumberOfElements + " are same");
-    }
-
-    if (maxNumberOfElements === 0) {
-        logger.message("Ignored because no attributes found in both profiles");
-        return ComparisonResult.ZERO_PENALTY_POINTS;
-    }
-
-    if (numberOfTheSameElements === maxNumberOfElements) {
-        logger.message("Ignored because all attributes are same");
-        return ComparisonResult.ZERO_PENALTY_POINTS;
-    }
-
-    if (numberOfDifferences > config.maxDifferences) {
-        if (logger.messageEnabled()) {
-            logger.message("Would be ignored if not more than " + config.maxDifferences + " differences");
-        }
-        return new ComparisonResult(config.penaltyPoints);
-    }
-
-    if (percentageOfDifferences > config.maxPercentageDifference) {
-        if (logger.messageEnabled()) {
-            logger.message(percentageOfDifferences + " percents are different");
-            logger.message("Would be ignored if not more than " + config.maxPercentageDifference + " percent");
-        }
-        return new ComparisonResult(config.penaltyPoints);
-    }
-
-    if (logger.messageEnabled()) {
-        logger.message("Ignored because number of differences(" + numberOfDifferences + ") not more than "
-            + config.maxDifferences);
-        logger.message(percentageOfDifferences + " percents are different");
-        logger.message("Ignored because not more than " + config.maxPercentageDifference + " percent");
-    }
-    return new ComparisonResult(true);
-};
-
-/**
- * Compares two User Agent Strings and if they are equal then returns a ComparisonResult with zero penalty
- * points assigned, otherwise returns a ComparisonResult with the given number of penalty points assigned.
- *
- * @param currentValue (String) The current value.
- * @param storedValue (String) The stored value.
- * @param config: {
- *            "ignoreVersion": (boolean) If the version numbers in the User Agent Strings should be ignore
- *                                       in the comparison.
- *            "penaltyPoints": (Number) The number of penalty points.
- *        }
- * @return A ComparisonResult.
- */
-UserAgentComparator.compare = function (currentValue, storedValue, config) {
-    if (logger.messageEnabled()) {
-        logger.message("UserAgentComparator.compare:currentValue: " + JSON.stringify(currentValue));
-        logger.message("UserAgentComparator.compare:storedValue: " + JSON.stringify(storedValue));
-        logger.message("UserAgentComparator.compare:config: " + JSON.stringify(config));
-    }
-
-    if (config.ignoreVersion) {
-        // remove version number
-        currentValue = nullOrUndefined(currentValue) ? null : currentValue.replace(/[\\d\\.]+/g, "").trim();
-        storedValue = nullOrUndefined(storedValue) ? null : storedValue.replace(/[\\d\\.]+/g, "").trim();
-    }
-
-    return ScalarComparator.compare(currentValue, storedValue, config);
-};
-
-/**
- * Compares two locations, taking into account a degree of difference.
- *
- * @param currentValue: {
- *            "latitude": (Number) The current latitude.
- *            "longitude": (Number) The current longitude.
- *        }
- * @param storedValue: {
- *            "latitude": (Number) The stored latitude.
- *            "longitude": (Number) The stored longitude.
- *        }
- * @param config: {
- *            "allowedRange": (Number) The max difference allowed in the two locations, before the penalty is assigned.
- *            "penaltyPoints": (Number) The number of penalty points.
-*         }
- * @return ComparisonResult
- */
-GeolocationComparator.compare = function (currentValue, storedValue, config) {
-    if (logger.messageEnabled()) {
-        logger.message("GeolocationComparator.compare:currentValue: " + JSON.stringify(currentValue));
-        logger.message("GeolocationComparator.compare:storedValue: " + JSON.stringify(storedValue));
-        logger.message("GeolocationComparator.compare:config: " + JSON.stringify(config));
-    }
-
-    // Check for undefined stored or current locations
-
-    if (undefinedLocation(currentValue) && undefinedLocation(storedValue)) {
-        return ComparisonResult.ZERO_PENALTY_POINTS;
-    }
-    if (undefinedLocation(currentValue) && !undefinedLocation(storedValue)) {
-        return new ComparisonResult(config.penaltyPoints);
-    }
-    if (!undefinedLocation(currentValue) && undefinedLocation(storedValue)) {
-        return new ComparisonResult(true);
-    }
-
-    // Both locations defined, therefore perform comparison
-
-    var distance = calculateDistance(currentValue, storedValue);
-
-    if (logger.messageEnabled()) {
-        logger.message("Distance between (" + currentValue.latitude + "," + currentValue.longitude + ") and (" +
-            storedValue.latitude + "," + storedValue.longitude + ") is " + distance + " miles");
-    }
-
-    if (parseFloat(distance.toPrecision(5)) === 0) {
-        logger.message("Location is the same");
-        return ComparisonResult.ZERO_PENALTY_POINTS;
-    }
-
-    if (distance <= config.allowedRange) {
-        if (logger.messageEnabled()) {
-            logger.message("Tolerated because distance not more then " + config.allowedRange);
-        }
-        return new ComparisonResult(true);
-    } else {
-        if (logger.messageEnabled()) {
-            logger.message("Would be ignored if distance not more then " + config.allowedRange);
-        }
-        return new ComparisonResult(config.penaltyPoints);
-    }
-};
-
-
-//---------------------------------------------------------------------------//
-//                    Device Print Logic - DO NOT MODIFY                     //
-//---------------------------------------------------------------------------//
-
-// Utility functions
-
-/**
- * Returns true if evaluating function f on each element of the Array a returns true.
- *
- * @param a: (Array) The array of elements to evaluate
- * @param f: (Function) A single argument function for mapping elements of the array to boolean.
- * @return boolean.
- */
-all = function(a, f) {
-    var i;
-    for (i = 0; i < a.length; i++) {
-        if (f(a[i]) === false) {
-            return false;
-        }
-    }
-    return true;
-};
-
-/**
- * Returns true if evaluating function f on any element of the Array a returns true.
- *
- * @param a: (Array) The array of elements to evaluate
- * @param f: (Function) A single argument function for mapping elements of the array to boolean.
- * @return boolean.
- */
-any = function(a, f) {
-    var i;
-    for (i = 0; i < a.length; i++) {
-        if (f(a[i]) === true) {
-            return true;
-        }
-    }
-    return false;
-};
-
-/**
- * Returns true if the provided location is null or has undefined longitude or latitude values.
- *
- * @param location: {
- *            "latitude": (Number) The latitude.
- *            "longitude": (Number) The longitude.
- *        }
- * @return boolean
- */
-undefinedLocation = function(location) {
-    return nullOrUndefined(location) || nullOrUndefined(location.latitude) || nullOrUndefined(location.longitude);
-};
-
-/**
- * Returns true if the provided value is null or undefined.
- *
- * @param value: a value of any type
- * @return boolean
- */
-nullOrUndefined = function(value) {
-    return value === null || value === undefined;
-};
-
-/**
- * Calculates the distances between the two locations.
- *
- * @param first: {
- *            "latitude": (Number) The first latitude.
- *            "longitude": (Number) The first longitude.
- *        }
- * @param second: {
- *            "latitude": (Number) The second latitude.
- *            "longitude": (Number) The second longitude.
- *        }
- * @return Number The distance between the two locations.
- */
-calculateDistance = function(first, second) {
-    var factor = (Math.PI / 180),
-        theta,
-        dist;
-    function degreesToRadians(degrees) {
-        return degrees * factor;
-    }
-    function radiansToDegrees(radians) {
-        return radians / factor;
-    }
-    theta = first.longitude - second.longitude;
-    dist = Math.sin(degreesToRadians(first.latitude)) * Math.sin(degreesToRadians(second.latitude))
-        + Math.cos(degreesToRadians(first.latitude)) * Math.cos(degreesToRadians(second.latitude))
-        * Math.cos(degreesToRadians(theta));
-    dist = Math.acos(dist);
-    dist = radiansToDegrees(dist);
-    dist = dist * 60 * 1.1515;
-    return dist;
-};
-
-/**
- * Converts a String holding a delimited sequence of values into an array.
- *
- * @param text (String) The String representation of a delimited sequence of values.
- * @param delimiter (String) The character delimiting values within the text String.
- * @return (Array) The comma separated values.
- */
-splitAndTrim = function(text, delimiter) {
-
-    var results = [],
-        i,
-        values,
-        value;
-    if (text === null) {
-        return results;
-    }
-
-    values = text.split(delimiter);
-    for (i = 0; i < values.length; i++) {
-        value = values[i].trim();
-        if (value !== "") {
-            results.push(value);
-        }
-    }
-
-    return results;
-};
-
-/**
- * Converts value to a percentage of range.
- *
- * @param value (Number) The actual number to be converted to a percentage.
- * @param range (Number) The total number of values (i.e. represents 100%).
- * @return (Number) The percentage.
- */
-calculatePercentage = function(value, range) {
-    if (range === 0) {
-        return 0;
-    }
-    return parseFloat((value / range).toPrecision(2)) * 100;
-};
-
-/**
- * Creates a new array containing only those elements found in both arrays received as arguments.
- *
- * @param first (Array) The first array.
- * @param second (Array) The second array.
- * @return (Array) The elements that found in first and second.
- */
-calculateIntersection = function(first, second) {
-    return first.filter(function(element) {
-        return second.indexOf(element) !== -1;
-    });
-};
-
-function getValue(obj, attributePath) {
-    var value = obj,
-        i;
-    for (i = 0; i < attributePath.length; i++) {
-        if (value === undefined) {
-            return null;
-        }
-        value = value[attributePath[i]];
-    }
-    return value;
-}
-
-
-function isLeafNode(attributeConfig) {
-    return attributeConfig.comparator !== undefined;
-}
-
-function getAttributePaths(attributeConfig, attributePath) {
-
-    var attributePaths = [],
-        attributeName,
-        attrPaths,
-        attrPath,
-        i;
-
-    for (attributeName in attributeConfig) {
-        if (attributeConfig.hasOwnProperty(attributeName)) {
-
-            if (isLeafNode(attributeConfig[attributeName])) {
-                attrPath = attributePath.slice();
-                attrPath.push(attributeName);
-                attributePaths.push(attrPath);
-            } else {
-                attrPath = attributePath.slice();
-                attrPath.push(attributeName);
-                attrPaths = getAttributePaths(attributeConfig[attributeName], attrPath);
-                for (i = 0; i < attrPaths.length; i++) {
-                    attributePaths.push(attrPaths[i]);
-                }
-            }
-        }
-    }
-
-    return attributePaths;
-}
-
-function getDevicePrintAttributePaths(attributeConfig) {
-    return getAttributePaths(attributeConfig, []);
-}
-
-function hasRequiredAttributes(devicePrint, attributeConfig) {
-
-    var attributePaths = getDevicePrintAttributePaths(attributeConfig),
-        i,
-        attrValue,
-        attrConfig;
-
-    for (i = 0; i < attributePaths.length; i++) {
-
-        attrValue = getValue(devicePrint, attributePaths[i]);
-        attrConfig = getValue(attributeConfig, attributePaths[i]);
-
-        if (attrConfig.required && attrValue === undefined) {
-            logger.warning("Device Print profile missing required attribute, " + attributePaths[i]);
-            return false;
-        }
-    }
-
-    logger.message("device print has required attributes");
-    return true;
-}
-
-function compareDevicePrintProfiles(attributeConfig, devicePrint, devicePrintProfiles, maxPenaltyPoints) {
-
-    var attributePaths = getDevicePrintAttributePaths(attributeConfig),
-        dao = sharedState.get('_DeviceIdDao'),
-        results,
-        j,
-        aggregatedComparisonResult,
-        i,
-        currentValue,
-        storedValue,
-        attrConfig,
-        comparisonResult,
-        selectedComparisonResult,
-        selectedProfile,
-        curDevicePrintProfile,
-        vals;
-
-    results = [];
-    for (j = 0; j < devicePrintProfiles.length; j++) {
-        curDevicePrintProfile = JSON.parse(org.forgerock.json.JsonValue.json(devicePrintProfiles[j]));
-        aggregatedComparisonResult = new ComparisonResult();
-        for (i = 0; i < attributePaths.length; i++) {
-
-            currentValue = getValue(devicePrint, attributePaths[i]);
-            storedValue = getValue(curDevicePrintProfile.devicePrint, attributePaths[i]);
-            attrConfig = getValue(attributeConfig, attributePaths[i]);
-
-            if (storedValue === null) {
-                comparisonResult = new ComparisonResult(attrConfig.penaltyPoints);
-            } else {
-                comparisonResult = attrConfig.comparator.compare(currentValue, storedValue, attrConfig.args);
-            }
-
-            if (logger.messageEnabled()) {
-                logger.message("Comparing attribute path: " + attributePaths[i]
-                    + ", Comparison result: successful=" + comparisonResult.isSuccessful() + ", penaltyPoints="
-                    + comparisonResult.penaltyPoints + ", additionalInfoInCurrentValue="
-                    + comparisonResult.additionalInfoInCurrentValue);
-            }
-            aggregatedComparisonResult.addComparisonResult(comparisonResult);
-        }
-        if (logger.messageEnabled()) {
-            logger.message("Aggregated comparison result: successful="
-                + aggregatedComparisonResult.isSuccessful() + ", penaltyPoints="
-                + aggregatedComparisonResult.penaltyPoints + ", additionalInfoInCurrentValue="
-                + aggregatedComparisonResult.additionalInfoInCurrentValue);
-        }
-
-        results.push({
-            key: aggregatedComparisonResult,
-            value: devicePrintProfiles[j]
-        });
-    }
-
-    if (results.length === 0) {
-        return null;
-    }
-
-    results.sort(function(a, b) {
-        return ComparisonResult.compare(a.key, b.key);
-    });
-    selectedComparisonResult = results[0].key;
-    if (logger.messageEnabled()) {
-        logger.message("Selected comparison result: successful=" + selectedComparisonResult.isSuccessful()
-            + ", penaltyPoints=" + selectedComparisonResult.penaltyPoints + ", additionalInfoInCurrentValue="
-            + selectedComparisonResult.additionalInfoInCurrentValue);
-    }
-
-    selectedProfile = null;
-    if (selectedComparisonResult.penaltyPoints <= maxPenaltyPoints) {
-        selectedProfile = results[0].value;
-        if (logger.messageEnabled()) {
-            logger.message("Selected profile: " + selectedProfile +
-                " with " + selectedComparisonResult.penaltyPoints + " penalty points");
-        }
-    }
-
-    if (selectedProfile === null) {
-        return false;
-    }
-
-    /* update profile */
-    selectedProfile.put("selectionCounter",
-        java.lang.Integer.valueOf(parseInt(selectedProfile.get("selectionCounter"), 10) + 1));
-    selectedProfile.put("lastSelectedDate", java.lang.Long.valueOf(new Date().getTime()));
-    selectedProfile.put("devicePrint", devicePrint);
-
-    vals = [];
-    for (i = 0; i < devicePrintProfiles.length; i++) {
-        vals.push(org.forgerock.json.JsonValue.json(devicePrintProfiles[i]));
-    }
-
-    dao.saveDeviceProfiles(username, realm, vals);
-
-    return true;
-}
-
-function matchDevicePrint() {
-
-    if (!username) {
-        logger.error("Username not set. Cannot compare user's device print profiles.");
-        authState = FAILED;
-    } else {
-
-        if (logger.messageEnabled()) {
-            logger.message("client devicePrint: " + clientScriptOutputData);
-        }
-
-        var getProfiles = function () {
-
-                function isExpiredProfile(devicePrintProfile) {
-                    var expirationDate = new Date(),
-                        lastSelectedDate;
-                    expirationDate.setDate(expirationDate.getDate() - config.profileExpiration);
-
-                    lastSelectedDate = new Date(devicePrintProfile.lastSelectedDate);
-
-                    return lastSelectedDate < expirationDate;
-                }
-
-                function getNotExpiredProfiles() {
-                    var profile,
-                        dao = sharedState.get('_DeviceIdDao'),
-                        results = [],
-                        profiles,
-                        iter;
-
-                    profiles = dao.getDeviceProfiles(username, realm);
-
-                    if (profiles) {
-                        iter = profiles.iterator();
-
-                        while (iter.hasNext()) {
-                            profile = iter.next().getObject();
-                            if (!isExpiredProfile(profile)) {
-                                results.push(profile);
-                            }
-                        }
-                    }
-                    if (logger.messageEnabled()) {
-                        logger.message("stored non-expired profiles: " + results);
-                    }
-                    return results;
-                }
-
-                return getNotExpiredProfiles();
-            },
-            devicePrint = JSON.parse(clientScriptOutputData),
-            devicePrintProfiles = getProfiles();
-
-        if (!hasRequiredAttributes(devicePrint, config.attributes)) {
-            logger.message("devicePrint.hasRequiredAttributes: false");
-            // Will fail this module but fall-through to next module. Which should be OTP.
-            authState = FAILED;
-        } else if (compareDevicePrintProfiles(config.attributes, devicePrint, devicePrintProfiles, config.maxPenaltyPoints)) {
-            logger.message("devicePrint.hasValidProfile: true");
-            authState = SUCCESS;
-        } else {
-            logger.message("devicePrint.hasValidProfile: false");
-            sharedState.put('devicePrintProfile', JSON.stringify(devicePrint));
-            // Will fail this module but fall-through to next module. Which should be OTP.
-            authState = FAILED;
-        }
-    }
-}
-
-matchDevicePrint();
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Id-(Match)-Server-Side.script.json 1`] = `
-{
-  "script": {
-    "703dab1a-1921-4981-98dd-b8e5349d8548": {
-      "_id": "703dab1a-1921-4981-98dd-b8e5349d8548",
-      "context": "AUTHENTICATION_SERVER_SIDE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for server side Device Id (Match) Authentication Module",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Device Id (Match) - Server Side",
-      "script": "file://Device-Id-(Match)-Server-Side.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Profile-Match-Template-Decision-Node-Script.script.js 1`] = `
-"/*
- * Copyright 2020-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/** ******************************************************************
- *
- * The following script is a simplified template for understanding
- * the basics of device matching. _This is not functionally complete._
- * For a functionally complete script as well as a development toolkit,
- * visit https://github.com/ForgeRock/forgerock-device-match-script.
- *
- * Global node variables accessible within this scope:
- * 1. \`sharedState\` provides access to incoming request
- * 2. \`deviceProfilesDao\` provides access to stored profiles
- * 3. \`outcome\` variable maps to auth tree node outcomes; values are
- *    'true', 'false', or 'unknownDevice' (notice _all_ are strings).
- * ******************************************************************/
-
-/**
- * Get the incoming request's device profile.
- * Returns serialized JSON (type string); parsing this will result a
- * native JS object.
- */
-var incomingJson = sharedState.get('forgeRock.device.profile').toString();
-var incoming = JSON.parse(incomingJson);
-
-/**
- * Get the incoming user's username and realm.
- * Notice the use of \`.asString()\`.
- */
-var username = sharedState.get("username").asString();
-var realm = sharedState.get("realm").asString();
-
-/**
- * Get the user's stored profiles for appropriate realm.
- * Returns a _special_ object with methods for profile data
- */
-var storedProfiles = deviceProfilesDao.getDeviceProfiles(username, realm);
-
-// Default to \`outcome\` of 'unknownDevice'
-outcome = 'unknownDevice';
-
-if (storedProfiles) {
-    var i = 0;
-    // NOTE: \`.size()\` method returns the number of stored profiles
-    var len = storedProfiles.size();
-
-    for (i; i < len; i++) {
-        /**
-         * Get the stored profile.
-         * Returns serialized JSON (type string); parsing this will result
-         * a native JS object.
-         */
-        var storedJson = storedProfiles.get(i);
-        var stored = JSON.parse(storedJson);
-
-        /**
-         * Find a stored profile with the same identifier.
-         */
-        if (incoming.identifier === stored.identifier) {
-
-            /**
-             * Now that you've found the appropriate profile, you will perform
-             * the logic here to match the values of the \`incoming\` profile
-             * with that of the \`stored\` profile.
-             *
-             * The result of the matching logic is assigned to \`outcome\`. Since
-             * we have profiles of the same identifier, the value (type string)
-             * should now be either 'true' or 'false' (properties matched or not).
-             *
-             * For more information about this topic, visit this Github repo:
-             * https://github.com/ForgeRock/forgerock-device-match-script
-             */
-            outcome = 'false';
-        }
-    }
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Profile-Match-Template-Decision-Node-Script.script.json 1`] = `
-{
-  "script": {
-    "13e3f263-9cd3-4844-8d1c-040fd0dd02eb": {
-      "_id": "13e3f263-9cd3-4844-8d1c-040fd0dd02eb",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script template for Device Profile Match decision node script for Authentication Tree",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Device Profile Match Template - Decision Node Script",
-      "script": "file://Device-Profile-Match-Template-Decision-Node-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Dummy.script.js 1`] = `
-"
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Dummy.script.json 1`] = `
-{
-  "script": {
-    "4c963bb3-7084-43d0-bcdc-a47482cf1825": {
-      "_id": "4c963bb3-7084-43d0-bcdc-a47482cf1825",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Dummy",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Dummy",
-      "script": "file://Dummy.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/EmailAsUsername.script.js 1`] = `
-"objectAttributes = sharedState.get("objectAttributes")
-userName = objectAttributes.get("userName")
-
-if(userName){
-  //Form Fill
-  objectAttributes.put("mail", userName)
-} else {
-  //Social
-  objectAttributes.put("userName", objectAttributes.get("mail"))
-}
-
-
-sharedState.put("objectAttributes", objectAttributes);
-//sharedState.put("username", mail)
-
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/EmailAsUsername.script.json 1`] = `
-{
-  "script": {
-    "e5c302c8-f838-4698-87cc-d7225fc82454": {
-      "_id": "e5c302c8-f838-4698-87cc-d7225fc82454",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "EmailAsUsername",
-      "script": "file://EmailAsUsername.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Facebook-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Facebook-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "bae1d54a-e97d-4997-aa5d-c027f21af82c": {
-      "_id": "bae1d54a-e97d-4997-aa5d-c027f21af82c",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Facebook",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Facebook Profile Normalization",
-      "script": "file://Facebook-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ForgeRock-Internal-OAuth2-Access-Token-Modification-Script.script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-// Script is intentionally empty
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ForgeRock-Internal-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
-{
-  "script": {
-    "c234ba0b-58a1-4cfd-9567-09edde980745": {
-      "_id": "c234ba0b-58a1-4cfd-9567-09edde980745",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
-      "createdBy": "null",
-      "creationDate": 1433147666269,
-      "default": true,
-      "description": "Internal token modification script",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "ForgeRock Internal: OAuth2 Access Token Modification Script",
-      "script": "file://ForgeRock-Internal-OAuth2-Access-Token-Modification-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ForgeRock-Internal-OIDC-Claims-Script.script.js 1`] = `
-"/*
- * Copyright 2014-2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.
- * The claim values are computed for:
- * the claims derived from the requested scopes,
- * the claims provided by the authorization server,
- * and the claims requested by the client via the claims parameter.
- *
- * In the CONFIGURATION AND CUSTOMIZATION section, you can
- * define the scope-to-claims mapping, and
- * assign to each claim a resolver function that will compute the claim value.
- *
- * Defined variables (class references are provided below):
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * claims - Map<String, Object> (5).
- *          Always present, default server provided claims.
- * claimObjects - List<Claim> (7, 2).
- *                Always present, the default server provided claims.
- * requestedClaims - Map<String, Set<String>> (5).
- *                   Always present, not empty if the request contains the claims parameter and the server has enabled
- *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;
- *                   requested claims with no requested values will have a key but no value in the map. A key with
- *                   a single value in its Set (6) indicates that this is the only value that should be returned.
- * requestedTypedClaims - List<Claim> (7, 2).
- *                        Always present, the requested claims.
- *                        Requested claims with no requested values will have a claim with no values.
- *                        A claim with a single value indicates this is the only value that should be returned.
- * claimsLocales - List<String> (7).
- *                 The values from the 'claims_locales' parameter.
- *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *              In order to use the client, you may need to add
- *              org.forgerock.http.Client,
- *              org.forgerock.http.protocol.*,
- *              and org.forgerock.util.promise.PromiseImpl
- *              to the allowed Java classes in the scripting engine configuration, as described in:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html
- *
- * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.
- *          The result of the last statement in the script is returned to the server.
- *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
- *          is the last (and only) statement in this script, and its return value will become the script result.
- *          Do not use "return variable" statement outside of a function definition.
- *          See RESULTS section for additional details.
- *
- * Class reference:
- * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.
- * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).
- *         An instance of org.forgerock.openidconnect.Claim has methods to access
- *         the claim name, requested values, locale, and whether the claim is essential.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
-*/
-
-(function () {
-    // SETUP
-
-    /**
-     * Claim processing utilities.
-     * An object that contains reusable functions for processing claims.
-     * @see CLAIM PROCESSING UTILITIES section for details.
-     */
-    var utils = getUtils();
-
-    // CONFIGURATION AND CUSTOMIZATION
-
-    /**
-     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a scope value to an array of claim names
-     * to specify which claims need to be processed and returned for the requested scopes.
-     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}
-     * for the scope values that could be used to request claims as defined in the OIDC specification.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     *
-     * CUSTOMIZATION
-     * You can choose the claim names returned for a scope.
-     */
-    utils.setScopeClaimsMap({
-        profile: [
-            'name',
-            'family_name',
-            'given_name',
-            'zoneinfo',
-            'locale'
-        ],
-        email: ['email'],
-        address: ['address'],
-        phone: ['phone_number']
-    });
-
-    /**
-     * In this script, each claim
-     * derived from the requested scopes,
-     * provided by the authorization server, and
-     * requested by the client via the claims parameter
-     * will be processed by a function associated with the claim name.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a claim name to a resolver function,
-     * which will be automatically executed for each claim processed by the script.
-     *
-     * The claim resolver function will receive the requested claim information
-     * in an instance of org.forgerock.openidconnect.Claim as the first argument.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}
-     * for details on the Claim class.
-     *
-     * If the claim resolver function returns a value,
-     * other than undefined or null,
-     * the claim will be included in the script's results.
-     *
-     * The Claim instance provides methods to check
-     * what the name of the claim is,
-     * which values the claim request contains,
-     * whether the claim is essential, and
-     * which locale the claim is associated with.
-     * The resolver function can consider this information when computing and returning the claim value.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),
-     * is called to return a claim resolver function based on a user profile attribute.
-     * @see CLAIM RESOLVERS section for the implementation details and examples.
-     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.
-     *
-     * CUSTOMIZATION
-     * You can reuse the predefined utils methods with your custom arguments.
-     * You can also specify a custom resolver function for a claim name,
-     * that will compute and return the claim value—as shown in the commented out example below.
-     */
-    utils.setClaimResolvers({
-        /*
-        // An example of a simple claim resolver function that is defined for a claim
-        // directly in the configuration object:
-        custom-claim-name: function (requestedClaim) {
-            // In this case, initially, the claim value comes straight from a user profile attribute value:
-            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]
-
-            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.
-            // You can use:
-            // requestedClaim.getName()
-            // requestedClaim.getValues()
-            // requestedClaim.getLocale()
-            // requestedClaim.isEssential()
-
-            return claimValue
-        },
-        */
-        /**
-         * The use of utils.getUserProfileClaimResolver shows how
-         * an argument passed to a function that returns a claim resolver
-         * becomes available to the resolver function (via its lexical context).
-         */
-        name: utils.getUserProfileClaimResolver('cn'),
-        family_name: utils.getUserProfileClaimResolver('sn'),
-        given_name: utils.getUserProfileClaimResolver('givenname'),
-        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),
-        locale: utils.getUserProfileClaimResolver('preferredlocale'),
-        email: utils.getUserProfileClaimResolver('mail'),
-        address: utils.getAddressClaimResolver(
-            /**
-             * The passed in user profile claim resolver function
-             * can be used by the address claim resolver function
-             * to obtain the claim value to be formatted as per the OIDC specification:
-             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.
-             */
-            utils.getUserProfileClaimResolver('postaladdress')
-        ),
-        phone_number: utils.getUserProfileClaimResolver('telephonenumber')
-    });
-
-    // CLAIM PROCESSING UTILITIES
-
-    /**
-     * @returns {object} An object that contains reusable claim processing utilities.
-     * @see PUBLIC METHODS section and the return statement for the list of exported functions.
-     */
-    function getUtils () {
-        // IMPORT JAVA
-
-        /**
-         * Provides Java scripting functionality.
-         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.
-         */
-        var frJava = JavaImporter(
-            org.forgerock.oauth2.core.exceptions.InvalidRequestException,
-            org.forgerock.oauth2.core.UserInfoClaims,
-            org.forgerock.openidconnect.Claim,
-
-            java.util.LinkedHashMap,
-            java.util.ArrayList
-        );
-
-        // SET UP CONFIGURATION
-
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported scope values (scopes)
-         * and the corresponding claim names for each scope value.
-         */
-        var scopeClaimsMap;
-
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported claim names
-         * and the resolver functions returning the claim value.
-         */
-        var claimResolvers;
-
-        /**
-         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps each supported scope value to an array of claim names,
-         * in order to specify which claims need to be processed for the requested scopes.
-         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.
-         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.
-         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.
-         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.
-         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.
-         * @returns {undefined}
-         */
-        function setScopeClaimsMap(params) {
-            scopeClaimsMap = params;
-        }
-
-        /**
-         * A (public) method that accepts an object that maps the supported claim names
-         * and the resolver functions returning the claim value,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps
-         * each supported claim name to a function that computes and returns the claim value.
-         */
-        function setClaimResolvers(params) {
-            claimResolvers = params;
-        }
-
-        // CLAIM RESOLVERS
-
-        /**
-         * Claim resolvers are functions that return a claim value.
-         * @param {*}
-         * @returns {*}
-         */
-
-        /**
-         * Defines a claim resolver based on a user profile attribute.
-         * @param {string} attributeName - Name of the user profile attribute.
-         * @returns {function} A function that will determine the claim value
-         * based on the user profile attribute and the (requested) claim properties.
-         */
-        function getUserProfileClaimResolver (attributeName) {
-            /**
-             * Resolves a claim with a user profile attribute value.
-             * Returns undefined if the identity attribute is not populated,
-             * OR if the claim has requested values that do not contain the identity attribute value.
-             * ATTENTION: the aforementioned comparison is case-sensitive.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {string|HashSet|undefined}
-             */
-            function resolveClaim(claim) {
-                var userProfileValue;
-
-                if (identity) {
-                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));
-
-                    if (userProfileValue && !userProfileValue.isEmpty()) {
-                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {
-                            return userProfileValue;
-                        }
-                    }
-                }
-            }
-
-            return resolveClaim;
-        }
-
-        /**
-         * Returns an address claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional formatting to the value before returning it.
-         */
-        function getAddressClaimResolver (resolveClaim) {
-            /**
-             * Creates an address claim object from a value returned by a claim resolver,
-             * and returns the address claim object as the claim value.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.
-             */
-            function resolveAddressClaim(claim) {
-                var claimValue = resolveClaim(claim);
-                var addressObject;
-
-                if (isClaimValueValid(claimValue)) {
-                    addressObject = new frJava.LinkedHashMap();
-
-                    addressObject.put('formatted', claimValue);
-
-                    return addressObject;
-                }
-            }
-
-            return resolveAddressClaim;
-        }
-
-        /**
-         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional logic for essential claims.
-         */
-        function getEssentialClaimResolver (resolveClaim) {
-            /**
-             * Returns a claim value or throws an error.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * Throws an exception if the claim is essential and no value is returned for the claim.
-             *
-             * Use of this resolver is optional.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:
-             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,
-             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,
-             * unless otherwise specified in the description of the specific claim."
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*}
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             */
-            function resolveEssentialClaim(claim) {
-                var claimValue = resolveClaim(claim);
-
-                if (claim.isEssential() && !isClaimValueValid(claimValue)) {
-                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());
-                }
-
-                return claimValue;
-            }
-
-            return resolveEssentialClaim;
-        }
-
-        /**
-         * Provides default resolution for a claim.
-         * Use it if a claim-specific resolver is not defined in the configuration.
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @returns {*} A single value associated with this claim.
-         */
-        function resolveAnyClaim (claim) {
-            if (claim.getValues().size() === 1) {
-                return claim.getValues().toArray()[0];
-            }
-        }
-
-        // UTILITIES
-
-        /**
-         * Returns claim value from a set.
-         * If the set contains a single value, returns the value.
-         * If the set contains multiple values, returns the set.
-         * Otherwise, returns undefined.
-         *
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.
-         * @returns {string|java.util.HashSet|undefined}
-         */
-        function getClaimValueFromSet (claim, set) {
-            if (set && set.size()) {
-                if (set.size() === 1) {
-                    return set.toArray()[0];
-                } else {
-                    return set;
-                }
-            } else if (logger.warningEnabled()) {
-                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());
-            }
-        }
-
-        function isClaimValueValid (claimValue) {
-            if (typeof claimValue === 'undefined' || claimValue === null) {
-                return false;
-            }
-
-            return true;
-        }
-
-        // CLAIM PROCESSING
-
-        /**
-         * Constructs and returns an object populated with the computed claim values
-         * and the requested scopes mapped to the claim names.
-         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-         * @see RESULTS section for the use of this function.
-         */
-        function getUserInfoClaims () {
-            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());
-        }
-
-        /**
-         * Creates a map of (requested) claim names populated with the computed claim values.
-         * @returns {java.util.LinkedHashMap}
-         * A map of the requested claim names and the corresponding claim values.
-         */
-        function getComputedClaims () {
-            /**
-             * Creates a complete list of claim objects from:
-             * the claims derived from the scopes,
-             * the claims provided by the authorization server,
-             * and the claims requested by the client.
-             * @returns {java.util.ArrayList}
-             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-             */
-            function getClaims() {
-                /**
-                 * Returns a list of claim objects for the requested scopes.
-                 * Uses the scopeClaimsMap configuration option to derive the claim names;
-                 * no other properties of a claim derived from a scope are populated.
-                 * @returns {java.util.ArrayList}
-                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.
-                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-                 */
-                function convertScopeToClaims() {
-                    var claims = new frJava.ArrayList();
-
-                    scopes.toArray().forEach(function (scope) {
-                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {
-                            scopeClaimsMap[scope].forEach(function (claimName) {
-                                claims.add(new frJava.Claim(claimName));
-                            });
-                        }
-                    });
-
-                    return claims;
-                }
-
-                var claims = new frJava.ArrayList();
-
-                claims.addAll(convertScopeToClaims());
-                claims.addAll(claimObjects);
-                claims.addAll(requestedTypedClaims);
-
-                return claims;
-            }
-
-            /**
-             * Computes and returns a claim value.
-             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.
-             * @see claimResolvers
-             * If no resolver function is found, uses the default claim resolver function.
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*} Claim value.
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             * Rethrows this exception if a claim resolver throws it.
-             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver
-             * if you want to terminate the claim processing.
-             */
-            function computeClaim(claim) {
-                var resolveClaim;
-                var message;
-
-                try {
-                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;
-
-                    return resolveClaim(claim);
-                } catch (e) {
-                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;
-
-                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {
-                        throw e;
-                    }
-
-                    if (logger.warningEnabled()) {
-                        logger.warning(message);
-                    }
-                }
-            }
-
-            var computedClaims = new frJava.LinkedHashMap();
-
-            getClaims().toArray().forEach(function (claim) {
-                var claimValue = computeClaim(claim);
-
-                if (isClaimValueValid(claimValue)) {
-                    computedClaims.put(claim.getName(), claimValue);
-                } else {
-                    /**
-                     * If a claim has been processed, but appears in the list again,
-                     * and its value cannot be computed under the new conditions,
-                     * the claim is removed from the final result.
-                     *
-                     * For example, a claim could be mapped to a scope and found in the user profile,
-                     * but also requested by the client with required values that don't match the computed one.
-                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.
-                     * for the relevant OIDC specification details.
-                     */
-                    computedClaims.remove(claim.getName());
-                }
-            });
-
-            return computedClaims;
-        }
-
-        /**
-         * Creates a map of requested scopes and the corresponding claim names.
-         * @returns {java.util.LinkedHashMap}
-         */
-        function getCompositeScopes () {
-            var compositeScopes = new frJava.LinkedHashMap();
-
-            scopes.toArray().forEach(function (scope) {
-                var scopeClaims = new frJava.ArrayList();
-
-                if (scopeClaimsMap[scope]) {
-                    scopeClaimsMap[scope].forEach(function (claimName) {
-                        scopeClaims.add(claimName);
-                    });
-                }
-
-                if (scopeClaims.size()) {
-                    compositeScopes.put(scope, scopeClaims);
-                }
-            });
-
-            return compositeScopes;
-        }
-
-        // PUBLIC METHODS
-
-        return {
-            setScopeClaimsMap: setScopeClaimsMap,
-            setClaimResolvers: setClaimResolvers,
-            getUserProfileClaimResolver: getUserProfileClaimResolver,
-            getAddressClaimResolver: getAddressClaimResolver,
-            getEssentialClaimResolver: getEssentialClaimResolver,
-            getUserInfoClaims: getUserInfoClaims
-        };
-    }
-
-    // RESULTS
-
-    /**
-     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class
-     * populated with the computed claim values and
-     * the requested scopes mapped to the claim names.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-     *
-     * Assigning it to a variable gives you an opportunity
-     * to log the content of the returned value during development.
-     */
-    var userInfoClaims = utils.getUserInfoClaims();
-
-    /*
-    logger.error(scriptName + ' results:')
-    logger.error('Values: ' + userInfoClaims.getValues())
-    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())
-    */
-
-    return userInfoClaims;
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ForgeRock-Internal-OIDC-Claims-Script.script.json 1`] = `
-{
-  "script": {
-    "1f389a3d-21cf-417c-a6d3-42ea620071f0": {
-      "_id": "1f389a3d-21cf-417c-a6d3-42ea620071f0",
-      "context": "OIDC_CLAIMS",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Internal OIDC Claims script",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "ForgeRock Internal: OIDC Claims Script",
-      "script": "file://ForgeRock-Internal-OIDC-Claims-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Format-Username.script.js 1`] = `
-"var username = sharedState.get("username");
-
-sharedState.put("displayName", username);
-outcome = "continue";
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Format-Username.script.json 1`] = `
-{
-  "script": {
-    "223739f3-9c54-43b7-9572-3c5338786145": {
-      "_id": "223739f3-9c54-43b7-9572-3c5338786145",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Format Username",
-      "script": "file://Format-Username.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter.script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOnRequest
- *      - preSingleSignOnProcess
- *      - postSingleSignOnSuccess
- *      - postSingleSignOnFailure
- *      - postNewNameIDSuccess
- *      - postTerminateNameIDSuccess
- *      - preSingleLogoutProcess
- *      - postSingleLogoutSuccess
- *
- * Please see the JavaDoc for the interface for more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpEntityId - String
- *     The entity ID for the Identity Provider for which the sign-on request will be sent.
- * request - HttpServletRequest (1)
- *     Servlet request object
- * response - HttpServletResponse (2)
- *     Servlet response object
- * authnRequest - AuthnRequest (3)
- *     The authentication request sent that is sent from the Service Provider.
- * session - SSOToken (4)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * res - Response (5)
- *     The SSO Response received from the Identity Provider.
- * profile - String
- *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
- *          - SAML2Constants.HTTP_POST
- *          - SAML2Constants.HTTP_ARTIFACT
- *          - SAML2Constants.PAOS
- * out - PrintWriter (7)
- *     The PrintWriter that can be used to write to.
- * isFederation - boolean
- *     Set to true if using federation, otherwise false.
- * failureCode - int
- *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
- * userId - String
- *     The unique universal ID of the user with whom the new name identifier request was performed.
- * idRequest - ManageNameIDRequest (8)
- *     The new name identifier request, this will be null if the request object is not available
- * idResponse - ManageNameIDResponse (9)
- *     The new name identifier response, this will be null if the response object is not available
- * binding - String
- *     The binding used for the new name identifier request. This will be one of the following values:
- *          - SAML2Constants.SOAP
- *          - SAML2Constants.HTTP_REDIRECT
- * logoutRequest - LogoutRequest (10)
- *     The single logout request.
- * logoutResponse - LogoutResponse (11)
- *     The single logout response.
- * spAdapterScriptHelper - SpAdapterScriptHelper (12)
- *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (13):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
- * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
- * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
- * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
- * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
- * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
- * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
- * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
- * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 SP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOnRequest:
- *     hostedEntityId
- *     idpEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnRequest() {
-}
-
-/*
- * Available variables for preSingleSignOnProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnProcess() {
-}
-
-/*
- * Available variables for postSingleSignOnSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     out
- *     session
- *     authnRequest
- *     res
- *     profile
- *     isFederation
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnSuccess() {
-    return false;
-}
-
-/*
- * Available variables for postSingleSignOnFailure:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     failureCode
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnFailure() {
-    return false;
-}
-
-/*
- * Available variables for postNewNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postNewNameIDSuccess() {
-}
-
-/*
- * Available variables for postTerminateNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postTerminateNameIDSuccess() {
-}
-
-/*
- * Available variables for preSingleLogoutProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleLogoutProcess() {
-}
-
-/*
- * Available variables for postSingleLogoutSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postSingleLogoutSuccess() {
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter.script.json 1`] = `
-{
-  "script": {
-    "07ee6240-d106-4e25-a781-5fcabc477d22": {
-      "_id": "07ee6240-d106-4e25-a781-5fcabc477d22",
-      "context": "SAML2_SP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "FrodoSPAdapter",
-      "script": "file://FrodoSPAdapter.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter-imported-(1).script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOnRequest
- *      - preSingleSignOnProcess
- *      - postSingleSignOnSuccess
- *      - postSingleSignOnFailure
- *      - postNewNameIDSuccess
- *      - postTerminateNameIDSuccess
- *      - preSingleLogoutProcess
- *      - postSingleLogoutSuccess
- *
- * Please see the JavaDoc for the interface for more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpEntityId - String
- *     The entity ID for the Identity Provider for which the sign-on request will be sent.
- * request - HttpServletRequest (1)
- *     Servlet request object
- * response - HttpServletResponse (2)
- *     Servlet response object
- * authnRequest - AuthnRequest (3)
- *     The authentication request sent that is sent from the Service Provider.
- * session - SSOToken (4)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * res - Response (5)
- *     The SSO Response received from the Identity Provider.
- * profile - String
- *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
- *          - SAML2Constants.HTTP_POST
- *          - SAML2Constants.HTTP_ARTIFACT
- *          - SAML2Constants.PAOS
- * out - PrintWriter (7)
- *     The PrintWriter that can be used to write to.
- * isFederation - boolean
- *     Set to true if using federation, otherwise false.
- * failureCode - int
- *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
- * userId - String
- *     The unique universal ID of the user with whom the new name identifier request was performed.
- * idRequest - ManageNameIDRequest (8)
- *     The new name identifier request, this will be null if the request object is not available
- * idResponse - ManageNameIDResponse (9)
- *     The new name identifier response, this will be null if the response object is not available
- * binding - String
- *     The binding used for the new name identifier request. This will be one of the following values:
- *          - SAML2Constants.SOAP
- *          - SAML2Constants.HTTP_REDIRECT
- * logoutRequest - LogoutRequest (10)
- *     The single logout request.
- * logoutResponse - LogoutResponse (11)
- *     The single logout response.
- * spAdapterScriptHelper - SpAdapterScriptHelper (12)
- *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (13):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
- * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
- * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
- * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
- * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
- * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
- * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
- * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
- * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 SP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOnRequest:
- *     hostedEntityId
- *     idpEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnRequest() {
-}
-
-/*
- * Available variables for preSingleSignOnProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnProcess() {
-}
-
-/*
- * Available variables for postSingleSignOnSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     out
- *     session
- *     authnRequest
- *     res
- *     profile
- *     isFederation
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnSuccess() {
-    return false;
-}
-
-/*
- * Available variables for postSingleSignOnFailure:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     failureCode
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnFailure() {
-    return false;
-}
-
-/*
- * Available variables for postNewNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postNewNameIDSuccess() {
-}
-
-/*
- * Available variables for postTerminateNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postTerminateNameIDSuccess() {
-}
-
-/*
- * Available variables for preSingleLogoutProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleLogoutProcess() {
-}
-
-/*
- * Available variables for postSingleLogoutSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postSingleLogoutSuccess() {
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter-imported-(1).script.json 1`] = `
-{
-  "script": {
-    "5ce0d38a-154c-4be5-bd22-f9879c77e895": {
-      "_id": "5ce0d38a-154c-4be5-bd22-f9879c77e895",
-      "context": "SAML2_SP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "FrodoSPAdapter - imported (1)",
-      "script": "file://FrodoSPAdapter-imported-(1).script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter-imported-(2).script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOnRequest
- *      - preSingleSignOnProcess
- *      - postSingleSignOnSuccess
- *      - postSingleSignOnFailure
- *      - postNewNameIDSuccess
- *      - postTerminateNameIDSuccess
- *      - preSingleLogoutProcess
- *      - postSingleLogoutSuccess
- *
- * Please see the JavaDoc for the interface for more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpEntityId - String
- *     The entity ID for the Identity Provider for which the sign-on request will be sent.
- * request - HttpServletRequest (1)
- *     Servlet request object
- * response - HttpServletResponse (2)
- *     Servlet response object
- * authnRequest - AuthnRequest (3)
- *     The authentication request sent that is sent from the Service Provider.
- * session - SSOToken (4)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * res - Response (5)
- *     The SSO Response received from the Identity Provider.
- * profile - String
- *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
- *          - SAML2Constants.HTTP_POST
- *          - SAML2Constants.HTTP_ARTIFACT
- *          - SAML2Constants.PAOS
- * out - PrintWriter (7)
- *     The PrintWriter that can be used to write to.
- * isFederation - boolean
- *     Set to true if using federation, otherwise false.
- * failureCode - int
- *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
- * userId - String
- *     The unique universal ID of the user with whom the new name identifier request was performed.
- * idRequest - ManageNameIDRequest (8)
- *     The new name identifier request, this will be null if the request object is not available
- * idResponse - ManageNameIDResponse (9)
- *     The new name identifier response, this will be null if the response object is not available
- * binding - String
- *     The binding used for the new name identifier request. This will be one of the following values:
- *          - SAML2Constants.SOAP
- *          - SAML2Constants.HTTP_REDIRECT
- * logoutRequest - LogoutRequest (10)
- *     The single logout request.
- * logoutResponse - LogoutResponse (11)
- *     The single logout response.
- * spAdapterScriptHelper - SpAdapterScriptHelper (12)
- *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (13):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
- * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
- * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
- * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
- * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
- * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
- * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
- * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
- * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 SP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOnRequest:
- *     hostedEntityId
- *     idpEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnRequest() {
-}
-
-/*
- * Available variables for preSingleSignOnProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnProcess() {
-}
-
-/*
- * Available variables for postSingleSignOnSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     out
- *     session
- *     authnRequest
- *     res
- *     profile
- *     isFederation
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnSuccess() {
-    return false;
-}
-
-/*
- * Available variables for postSingleSignOnFailure:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     failureCode
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnFailure() {
-    return false;
-}
-
-/*
- * Available variables for postNewNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postNewNameIDSuccess() {
-}
-
-/*
- * Available variables for postTerminateNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postTerminateNameIDSuccess() {
-}
-
-/*
- * Available variables for preSingleLogoutProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleLogoutProcess() {
-}
-
-/*
- * Available variables for postSingleLogoutSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postSingleLogoutSuccess() {
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter-imported-(2).script.json 1`] = `
-{
-  "script": {
-    "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd": {
-      "_id": "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd",
-      "context": "SAML2_SP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "FrodoSPAdapter - imported (2)",
-      "script": "file://FrodoSPAdapter-imported-(2).script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("username", rawProfile.login)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "a7a78773-445b-4eca-bb93-409e86bced81": {
-      "_id": "a7a78773-445b-4eca-bb93-409e86bced81",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "GitHub Profile Normalization",
-      "script": "file://GitHub-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS).script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("GitHub rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS).script.json 1`] = `
-{
-  "script": {
-    "23143919-6b78-40c3-b25e-beca19b229e0": {
-      "_id": "23143919-6b78-40c3-b25e-beca19b229e0",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "GitHub Profile Normalization (VS)",
-      "script": "file://GitHub-Profile-Normalization-(VS).script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS)-imported-(1).script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("GitHub rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS)-imported-(1).script.json 1`] = `
-{
-  "script": {
-    "207f172f-ffb5-439d-b7df-e8e80408830b": {
-      "_id": "207f172f-ffb5-439d-b7df-e8e80408830b",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "GitHub Profile Normalization (VS) - imported (1)",
-      "script": "file://GitHub-Profile-Normalization-(VS)-imported-(1).script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS)-imported-(2).script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("GitHub rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS)-imported-(2).script.json 1`] = `
-{
-  "script": {
-    "fdb60c75-d58b-409f-bef2-ce4ebb04c77c": {
-      "_id": "fdb60c75-d58b-409f-bef2-ce4ebb04c77c",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "GitHub Profile Normalization (VS) - imported (2)",
-      "script": "file://GitHub-Profile-Normalization-(VS)-imported-(2).script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Google-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.sub),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.given_name),
-        field("familyName", rawProfile.family_name),
-        field("photoUrl", rawProfile.picture),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email),
-        field("locale", rawProfile.locale)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Google-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "58d29080-4563-480b-89bb-1e7719776a21": {
-      "_id": "58d29080-4563-480b-89bb-1e7719776a21",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Google",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Google Profile Normalization",
-      "script": "file://Google-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Inactive-Device-Match-Script.script.js 1`] = `
-"/*
- * Inactive Device Match Script
- */
-
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Inactive-Device-Match-Script.script.json 1`] = `
-{
-  "script": {
-    "3bd13a46-61c4-4974-8efb-1700c80c64e3": {
-      "_id": "3bd13a46-61c4-4974-8efb-1700c80c64e3",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Inactive Device Match Script",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Inactive Device Match Script",
-      "script": "file://Inactive-Device-Match-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Instagram-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.id),
-        field("username", rawProfile.username)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Instagram-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "1244e639-4a31-401d-ab61-d75133d8dc9e": {
-      "_id": "1244e639-4a31-401d-ab61-d75133d8dc9e",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Instagram",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Instagram Profile Normalization",
-      "script": "file://Instagram-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Itsme-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020-2021 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-import org.forgerock.json.JsonValue
-
-JsonValue managedUser = json(object(
-        field("id", rawProfile.sub),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.given_name),
-        field("familyName", rawProfile.family_name),
-        field("username", rawProfile.email),
-        field("email", rawProfile.email)))
-return managedUser
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Itsme-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "3d97c436-42c0-4dd0-a571-ea6f34f752b3": {
-      "_id": "3d97c436-42c0-4dd0-a571-ea6f34f752b3",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Itsme",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Itsme Profile Normalization",
-      "script": "file://Itsme-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/LINE-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2024 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-// LINE does not return the email from the userInfo endpoint but should return it from the token endpoint and therefore
-// it should be set in the shared state
-var email = "change@me.com"
-var subjectId = rawProfile.sub
-var username = subjectId
-var firstName = " "
-var lastName = " "
-
-if (sharedState.get("claims_set") != null && sharedState.get("claims_set").email != null) {
-    email = sharedState.get("claims_set").email
-    username = email
-}
-
-if (rawProfile.isDefined("name") && rawProfile.name.isNotNull()) {
-    var splitName = rawProfile.name.asString().split(" ")
-    firstName = splitName[0]
-    lastName = splitName[-1]
-}
-
-return json(object(
-        field("id", rawProfile.sub),
-        field("displayName", rawProfile.name),
-        field("photoUrl", rawProfile.picture),
-        field("email", email),
-        field("givenName", firstName),
-        field("familyName", lastName),
-        field("username", username)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/LINE-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "60609c1a-4cef-4729-a417-354aafdebf3f": {
-      "_id": "60609c1a-4cef-4729-a417-354aafdebf3f",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org",
-      "creationDate": 1433147666269,
-      "default": true,
-      "description": "Normalizes raw profile data from LINE",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org",
-      "lastModifiedDate": 1433147666269,
-      "name": "LINE Profile Normalization",
-      "script": "file://LINE-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Library-Script.script.js 1`] = `
-"/*
- * Copyright 2022-2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This is an example library script with methods that can be used in other scripts.
- * To reference it, use the following:
- *
- * var library = require("Library Script");
- *
- * library.logError(logger, "Error message");
- * library.logDebug(logger, "Debug message");
- */
-
-function logError(log, errorMessage) {
-  log.error(errorMessage);
-}
-
-function logWarning(log, warningMessage) {
-  log.warn(warningMessage);
-}
-
-exports.logError = logError;
-exports.logWarning = logWarning;
-
-// Alternatively, exports can be declared using an inline arrow function
-
-exports.logInfo = (log, infoMessage) => log.info(infoMessage);
-exports.logDebug = (log, debugMessage) => log.debug(debugMessage);
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Library-Script.script.json 1`] = `
-{
-  "script": {
-    "6c49bebe-3a62-11ed-a261-0242ac120002": {
-      "_id": "6c49bebe-3a62-11ed-a261-0242ac120002",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global library script to be referenced from other scripts",
-      "evaluatorVersion": "2.0",
-      "exports": [
-        {
-          "arity": 2,
-          "id": "logError",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logWarning",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logInfo",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logDebug",
-          "type": "Function",
-        },
-      ],
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Library Script",
-      "script": "file://Library-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/LinkedIn-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.id),
-        field("givenName", rawProfile.firstName.localized.get(0)),
-        field("familyName", rawProfile.lastName.localized.get(0)),
-        field("photoUrl", rawProfile.profilePicture.displayImage),
-        field("email", rawProfile.elements.get(0).get("handle~").emailAddress),
-        field("username", rawProfile.elements.get(0).get("handle~").emailAddress)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/LinkedIn-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "8862ca8f-7770-4af5-a888-ac0df0947f36": {
-      "_id": "8862ca8f-7770-4af5-a888-ac0df0947f36",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from LinkedIn",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "LinkedIn Profile Normalization",
-      "script": "file://LinkedIn-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Microsoft-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
-{
-    "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users/$entity",
-    "@odata.id": "https://graph.microsoft.com/v2/711ffa9c-5972-4713-ace3-688c9732614a/directoryObjects/7d7759e2-36d8-4e64-b173-3f890d7d46d6/Microsoft.DirectoryServices.User",
-    "businessPhones": [
-        "18014735451"
-    ],
-    "displayName": "Volker Scheuber",
-    "givenName": "Volker",
-    "jobTitle": null,
-    "mail": "vscheuber@vscheuber.onmicrosoft.com",
-    "mobilePhone": null,
-    "officeLocation": null,
-    "preferredLanguage": null,
-    "surname": "Scheuber",
-    "userPrincipalName": "vscheuber@vscheuber.onmicrosoft.com",
-    "id": "7d7759e2-36d8-4e64-b173-3f890d7d46d6"
-}
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.message("Kauai Microsoft Profile Normalization: rawProfile={}", rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.displayName),
-        field("givenName", rawProfile.givenName),
-        field("familyName", rawProfile.surname),
-        field("email", rawProfile.userPrincipalName),
-        field("username", rawProfile.userPrincipalName),
-        field("groups", rawProfile.groups)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Microsoft-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "73cecbfc-dad0-4395-be6a-6858ee3a80e5": {
-      "_id": "73cecbfc-dad0-4395-be6a-6858ee3a80e5",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Microsoft",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Microsoft Profile Normalization",
-      "script": "file://Microsoft-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Example-Library.script.js 1`] = `
-"var i = 0;
-
-function add(j) {i += j};
-function logTotal(log) { log.info("Total: " + i) };
-
-// export constant
-exports.MSG = 'Final sum';
-
-// export functions
-exports.add = add;
-exports.logTotal = logTotal;
-
-//direct export using an inline declaration
-exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Example-Library.script.json 1`] = `
-{
-  "script": {
-    "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
-      "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Library",
-      "evaluatorVersion": "2.0",
-      "exports": [
-        {
-          "id": "MSG",
-          "type": "String",
-        },
-        {
-          "arity": 1,
-          "id": "add",
-          "type": "Function",
-        },
-        {
-          "arity": 1,
-          "id": "logTotal",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logTotalWithMessage",
-          "type": "Function",
-        },
-      ],
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "My Example Library",
-      "script": "file://My-Example-Library.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Example-Script-Using-Libraries.script.js 1`] = `
-"/**
- * Testing library scripts
- */
-var mylib = require('My Example Library');
-var loggers = require('Library Script');
-
-mylib.add(1);
-mylib.logTotal(logger);
-mylib.add(3);
-mylib.logTotalWithMessage(logger, mylib.MSG);
-
-outcome = 'true';
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Example-Script-Using-Libraries.script.json 1`] = `
-{
-  "script": {
-    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
-      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Script Using Libraries",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "My Example Script Using Libraries",
-      "script": "file://My-Example-Script-Using-Libraries.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Other-Example-Library-Script.script.js 1`] = `
-"console.log("hi there");
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Other-Example-Library-Script.script.json 1`] = `
-{
-  "script": {
-    "4e053815-adde-46ac-9fe2-d3ae93517c14": {
-      "_id": "4e053815-adde-46ac-9fe2-d3ae93517c14",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "2.0",
-      "exports": [],
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "My Other Example Library Script",
-      "script": "file://My-Other-Example-Library-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Normalized-Profile-to-Identity.script.groovy 1`] = `
-"/*
- * Copyright 2021 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-import org.forgerock.json.JsonValue
-
-JsonValue identity = json(object(
-        field("givenName", normalizedProfile.givenName),
-        field("sn", normalizedProfile.familyName),
-        field("mail", normalizedProfile.email),
-        field("cn", normalizedProfile.displayName),
-        field("userName", normalizedProfile.username),
-        field("iplanet-am-user-alias-list", selectedIdp + '-' + normalizedProfile.id.asString())))
-
-return identity
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Normalized-Profile-to-Identity.script.json 1`] = `
-{
-  "script": {
-    "ed685f9f-5909-4726-86e8-22bd38b47663": {
-      "_id": "ed685f9f-5909-4726-86e8-22bd38b47663",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Converts a normalized social profile into an Identity",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Normalized Profile to Identity",
-      "script": "file://Normalized-Profile-to-Identity.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Normalized-Profile-to-Managed-User.script.groovy 1`] = `
-""/*\\n * Copyright 2020 ForgeRock AS. All Rights Reserved\\n *\\n * Use of this code requires a commercial software license with ForgeRock AS.\\n * or with one of its affiliates. All use shall be exclusively subject\\n * to such license between the licensee and ForgeRock AS.\\n */\\n\\nimport static org.forgerock.json.JsonValue.field\\nimport static org.forgerock.json.JsonValue.json\\nimport static org.forgerock.json.JsonValue.object\\n\\nimport org.forgerock.json.JsonValue\\n\\nJsonValue managedUser = json(object(\\n        field(\\"givenName\\", normalizedProfile.givenName),\\n        field(\\"sn\\", normalizedProfile.familyName),\\n        field(\\"mail\\", normalizedProfile.email),\\n        field(\\"userName\\", normalizedProfile.username)))\\n\\nif (normalizedProfile.postalAddress.isNotNull()) managedUser.put(\\"postalAddress\\", normalizedProfile.postalAddress)\\nif (normalizedProfile.addressLocality.isNotNull()) managedUser.put(\\"city\\", normalizedProfile.addressLocality)\\nif (normalizedProfile.addressRegion.isNotNull()) managedUser.put(\\"stateProvince\\", normalizedProfile.addressRegion)\\nif (normalizedProfile.postalCode.isNotNull()) managedUser.put(\\"postalCode\\", normalizedProfile.postalCode)\\nif (normalizedProfile.country.isNotNull()) managedUser.put(\\"country\\", normalizedProfile.country)\\nif (normalizedProfile.phone.isNotNull()) managedUser.put(\\"telephoneNumber\\", normalizedProfile.phone)\\n\\n// if the givenName and familyName is null or empty\\n// then add a boolean flag to the shared state to indicate names are not present\\n// this could be used elsewhere\\n// for eg. this could be used in a scripted decision node to by-pass patching\\n// the user object with blank values when givenName  and familyName is not present\\nboolean noGivenName = normalizedProfile.givenName.isNull() || (!normalizedProfile.givenName.asString()?.trim())\\nboolean noFamilyName = normalizedProfile.familyName.isNull() || (!normalizedProfile.familyName.asString()?.trim())\\nsharedState.put(\\"nameEmptyOrNull\\", noGivenName && noFamilyName)\\n\\nreturn managedUser\\n"
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Normalized-Profile-to-Managed-User.script.json 1`] = `
-{
-  "script": {
-    "58c824ae-84ed-4724-82cd-db128fc3f6c": {
-      "_id": "58c824ae-84ed-4724-82cd-db128fc3f6c",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Converts a normalized social profile into a managed user",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Normalized Profile to Managed User",
-      "script": "file://Normalized-Profile-to-Managed-User.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Access-Token-Modification-Script.script.js 1`] = `
-"/*
- * Copyright 2019-2023 ForgeRock AS. All Rights Reserved.
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script lets you modify information associated with an OAuth2 access token
- * with methods provided by the AccessToken (1) interface.
- * The changes made to OAuth2 access tokens will directly impact the size of the CTS tokens,
- * and, similarly, the size of the JWTs if client-based OAuth2 tokens are utilized.
- * When adding/updating fields make sure that the token size remains within client/user-agent limits.
- *
- * Defined variables:
- * accessToken - AccessToken (1).
- *               The access token to be updated.
- *               Mutable object, all changes to the access token will be reflected.
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *
- * Return - no value is expected, changes shall be made to the accessToken parameter directly.
- *
- * Class reference:
- * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
- */
-
-/* EXAMPLE
-(function () {
-    var frJava = JavaImporter(
-        org.forgerock.http.protocol.Request,
-        org.forgerock.http.protocol.Response
-    );
-
-    // Always includes this field in the token.
-    accessToken.setField('key1', 'value1');
-
-    // Receives and adds to the access token additional values by performing a REST call to an external service.
-    // WARNING: Below, you will find a reference to a third-party site, which is provided only as an example.
-    var uri = 'https://jsonplaceholder.typicode.com/posts';
-
-    try {
-        var request = new frJava.Request();
-
-        // You can chain methods that return the request object.
-        request.setUri(uri)
-            .setMethod('POST')
-            .setEntity(JSON.stringify({
-                updatedFields: {
-                    key2: 'value2',
-                    key3: 'value3'
-                }
-            }));
-
-        // You can call a method when chaining is not possible.
-        request.getHeaders().add('Content-Type', 'application/json; charset=UTF-8');
-
-        // Sends the request and receives the response.
-        var response = httpClient.send(request).getOrThrow();
-
-        // Checks if the response status is as expected.
-        if (response.getStatus() === org.forgerock.http.protocol.Status.CREATED) {
-            var result = JSON.parse(response.getEntity().getString());
-
-            // Set multiple token fields at once.
-            accessToken.setFields(result.updatedFields);
-        } else {
-            logger.error('Unable to obtain access token modifications. Status: ' + response.getStatus() + '. Content: ' + response.getEntity().getString());
-        }
-    } catch (e) {
-        logger.error('The request processing was interrupted. ' + e);
-
-        // The access token request fails with the HTTP 500 error in this case.
-        throw ('Unable to obtain response from: ' + uri);
-    }
-
-    // Adds new fields containing identity attribute values to the access token.
-    accessToken.setField('mail', identity.getAttribute('mail'));
-    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);
-
-    // Adds new fields containing the session property values.
-    // NOTE: session may not be available for non-interactive authorization grants.
-    if (session) {
-        try {
-            accessToken.setField('ipAddress', session.getProperty('Host'));
-        } catch (e) {
-            logger.error('Unable to retrieve session property value. ' + e);
-        }
-    }
-
-    // Removes a native field from the token entry, that was set by AM.
-    // WARNING: removing native fields from the token may result in loss of functionality.
-    // accessToken.removeTokenName()
-
-    // No return value is expected. Let it be undefined.
-}());
-*/
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Access-Token-Modification-Script.script.json 1`] = `
-{
-  "script": {
-    "d22f9a0c-426a-4466-b95e-d0f125b0d5fa": {
-      "_id": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for OAuth2 Access Token Modification",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "OAuth2 Access Token Modification Script",
-      "script": "file://OAuth2-Access-Token-Modification-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Authorize-Endpoint-Data-Provider-Script.script.js 1`] = `
-"/*
- * Copyright 2021 ForgeRock AS. All Rights Reserved
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script lets you return additional data when authorize request is called.
- *
- * Defined variables:
- *
- * session - SSOToken (1)
- *           Present if the request contains the session cookie, the user's session object.
- *
- * httpClient - HTTP Client (2).
- *              Always present, the HTTP client that can be used to make external HTTP requests
- *
- * logger - Debug (3)
- *          Always present, the "ScriptedAuthorizeEndpointDataProvider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding log files will be prefixed with: scripts.OAUTH2_AUTHORIZE_ENDPOINT_DATA_PROVIDER.
- *
- * scriptName - String (primitive).
- *              Always present, the display name of the script
- *
- * Return - a Map<String, String> of additional data (4).
- *
- * Class reference:
- * (1) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (2) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
- * (3) Debug - https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- * (4) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html.
- */
-
-/**
- * Default authorize endpoint data provider script to use as a template for new scripts.
- */
-
-/* EXAMPLE
-var map = new java.util.HashMap();
-
-function addAdditionalData() {
-
-    //If constant data needs to be returned
-    map.put("hello", "world");
-
-    //If some data needs to be returned from third party service
-    addAdditionalDataFromExternalService();
-
-    //If there is a need to return some user session data
-    addAdditionalDataFromSessionProperties()
-
-    return map;
-};
-
-function addAdditionalDataFromExternalService() {
-  var frJava = JavaImporter(
-        org.forgerock.oauth2.core.exceptions.ServerException
-    );
-  try {
-        //Obtain additional data by performing a REST call to an external service
-        var request = new org.forgerock.http.protocol.Request();
-        request.setUri("https://third.party.app/hello.jsp");
-        request.setMethod("POST");
-        //request.setEntity("foo=bar&hello=world");
-        request.setEntity(json(object(
-                    field("foo", "bar"))));
-        var response = httpClient.send(request).getOrThrow();
-        logResponse(response);
-        var result = JSON.parse(response.getEntity());
-        map.put("someKey",result.get("someKey"));
-  } catch (err) {
-     throw new frJava.ServerException(err);
-  }
-};
-
-function addAdditionalDataFromSessionProperties() {
-  //Add additional data from session property values
-   if (session != null) { // session is not available for resource owner password credentials grant
-     map.put("ipAddress", session.getProperty("Host"))
-   }
-};
-
-function logResponse(response) {
-    logger.message("User REST Call. Status: " + response.getStatus() + ", Body: " + response.getEntity());
-};
-
-addAdditionalData();
-*/
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Authorize-Endpoint-Data-Provider-Script.script.json 1`] = `
-{
-  "script": {
-    "3f93ef6e-e54a-4393-aba1-f322656db28a": {
-      "_id": "3f93ef6e-e54a-4393-aba1-f322656db28a",
-      "context": "OAUTH2_AUTHORIZE_ENDPOINT_DATA_PROVIDER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for OAuth2 Authorize Endpoint Data Provider",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "OAuth2 Authorize Endpoint Data Provider Script",
-      "script": "file://OAuth2-Authorize-Endpoint-Data-Provider-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Evaluate-Scope-Script.script.js 1`] = `
-"/*
- * Copyright 2021 ForgeRock AS. All Rights Reserved
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script lets you populate the scopes with profile attribute values when the tokeninfo endpoint is called.
- * For example, if one of the scopes is mail, AM sets mail to the resource owner's email address in the token information returned.
- *
- * Defined variables:
- * accessToken - AccessToken (1).
- *               The access token to be updated.
- *               Mutable object, all changes to the access token will be reflected.
- * identity - AMIdentity (2).
- *            The client's identity if present or the resource owner's identity. Can be null.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding log files will be prefixed with: scripts.OAUTH2_EVALUATE_SCOPE
- * httpClient - HTTP Client (3).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *
- * Return - a Map<String, Object> of the access token's information (4).
- *
- * Class reference:
- * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.
- * (2) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (3) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
- * (4) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html.
- */
-
-/**
- * Default evaluate scope script to use as a template for new scripts.
- */
-
-(function () {
-    var map = new java.util.HashMap();
-    if (identity !== null) {
-        var scopes = accessToken.getScope().toArray();
-        scopes.forEach(function (scope) {
-            var attributes = identity.getAttribute(scope).toArray();
-            map.put(scope, attributes.join(","));
-        });
-    } else {
-        logger.error('identity is null');
-    }
-    return map;
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Evaluate-Scope-Script.script.json 1`] = `
-{
-  "script": {
-    "da56fe60-8b38-4c46-a405-d6b306d4b336": {
-      "_id": "da56fe60-8b38-4c46-a405-d6b306d4b336",
-      "context": "OAUTH2_EVALUATE_SCOPE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for OAuth2 Scope Evaluation",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "OAuth2 Evaluate Scope Script",
-      "script": "file://OAuth2-Evaluate-Scope-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-JWT-Issuer-Script.script.js 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script lets you to derive the configuration for a dynamic JWT issuer from the issuer string.
- * A JWT issuer is made up of the following:
- *   - issuer - the identifier of the entity that issues JWTs
- *   - resource owner subject claim - the name of the claim in the JWT that identifies the resource owner
- *   - consented scope claim - the name of the claim in the JWT that represents scope that the resource owner
- *                             has already consented to externally
- *   - authorized subjects - the set of principal identifiers that are authorized to be used as resource owners
- *                           by the issuer
- *   - JWKs - either a set of JWKs or connection details for obtaining that set, that are the public keys that
- *            can verify the signature on the issued JWTs.
- *
- * Defined variables:
- * issuer - String
- *          The issuer from the bearer JWT.
- * realm - String
- *         The path of the realm that is handling the request.
- * scriptName - String.
- *              Always present, the display name of the script.
- * logger - Always present, the script debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding log files will be prefixed with: scripts.OAUTH2_SCRIPTED_JWT_ISSUER.
- * httpClient - HTTP Client (1).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- * idRepository - Identity Repository (2). Always present.
- * secrets - Secrets accessor (3). Always present.
- *
- * Return - org.forgerock.oauth2.core.TrustedJwtIssuerConfig (4) - the configuration of the trusted JWT issuer.
- *
- * Class reference:
- * (1) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
- * (2) ScriptedIdentityRepository - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openam/scripting/api/identity/ScriptedIdentityRepository.html.
- * (3) ScriptedSecrets - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openam/scripting/api/secrets/ScriptedSecrets.html.
- * (4) TrustedJwtIssuerConfig - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/TrustedJwtIssuerConfig.html.
- */
-
-/* EXAMPLE
-(function () {
-    var frJava = JavaImporter(
-        org.forgerock.oauth2.core.TrustedJwtIssuerConfig,
-        java.util.Collections
-    );
-
-    var iss = idRepository.getIdentity(issuer);
-    if (iss == null) {
-        logger.message('No issuer found for: '+issuer);
-        return null;
-    }
-    logger.message('Found issuer: '+iss);
-    // in this example either a JWK set or a URI to a JWK set are in the postalAddress attribute
-    var jwksAttrs = iss.getAttributeValues('postalAddress');
-    var jwkSet = jwksAttrs.length === 0 ? null : jwksAttrs[0];
-    var config = new frJava.TrustedJwtIssuerConfig(
-        issuer,
-        'sub',
-        'scope',
-        // in this example, valid subjects are stored in the mail attribute
-        iss.getAttributeValues('mail'),
-        jwkSet.startsWith('{') ? jwkSet : null,
-        jwkSet.startsWith('http') ? jwkSet : null,
-        '5 minutes',
-        '1 minute'
-    );
-    return config;
-}());
-*/
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-JWT-Issuer-Script.script.json 1`] = `
-{
-  "script": {
-    "400e48ba-3f13-4144-ac7b-f824ea8e98c5": {
-      "_id": "400e48ba-3f13-4144-ac7b-f824ea8e98c5",
-      "context": "OAUTH2_SCRIPTED_JWT_ISSUER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for scripted JWT Issuers",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "OAuth2 JWT Issuer Script",
-      "script": "file://OAuth2-JWT-Issuer-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-May-Act-Script.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/**
- * Defined variables:
- * token - The access token to be updated. Mutable object, all changes to the access token will be reflected.
- * logger - always present, corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.
- * scriptName - always present, the display name of the script
- * session - present if the request contains the session cookie, the user's session object
- * requestProperties - always present, contains a map of request properties:
- *                     requestUri - the request URI
- *                     realm - the realm that the request relates to
- *                     requestParams - a map of the request params and/or posted data. Each value is a list of one or
- *                     more properties. Please note that these should be handled in accordance with OWASP best
- *                     practices.
- * clientProperties - present if the client specified in the request was identified, contains a map of client
- *                    properties:
- *                    clientId - the client's Uri for the request locale
- *                    allowedGrantTypes - list of the allowed grant types (org.forgerock.oauth2.core.GrantType)
- *                                        for the client
- *                    allowedResponseTypes - list of the allowed response types for the client
- *                    allowedScopes - list of the allowed scopes for the client
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps, e.g:
- *                                       testMap[Key1]=Value1 will be returned as testmap -> Key1 -> Value1
- *
- * identity - always present, the identity of the resource owner
- * scopes - always present, the requested scopes
- */
-/*
-import org.forgerock.json.JsonValue
-
-token.setMayAct(
-    JsonValue.json(JsonValue.object(
-        JsonValue.field("client_id", "myClient"), 
-        JsonValue.field("sub", "(usr!myActor)"))))
-*/
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-May-Act-Script.script.json 1`] = `
-{
-  "script": {
-    "c735de08-f8f2-4e69-aa4a-2d8d3d438323": {
-      "_id": "c735de08-f8f2-4e69-aa4a-2d8d3d438323",
-      "context": "OAUTH2_MAY_ACT",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for OAuth2 May Act",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "OAuth2 May Act Script",
-      "script": "file://OAuth2-May-Act-Script.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Validate-Scope-Script.script.js 1`] = `
-"/*
- * Copyright 2021 ForgeRock AS. All Rights Reserved
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script validates the requested scopes against the allowed scopes.
- * If no scopes are requested, default scopes are assumed.
- * The script has four top level functions that could be executed during the different OAuth2 flows:
- *      - validateAuthorizationScope
- *      - validateAccessTokenScope
- *      - validateRefreshTokenScope
- *      - validateBackChannelAuthorizationScope
- *
- * Defined variables:
- * requestedScopes - Set<String> (1).
- *          The set of requested scopes.
- * defaultScopes - Set<String> (1).
- *                 The set of default scopes.
- * allowedScopes - Set<String> (1).
- *                 The set of allowed scopes.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding log files will be prefixed with: scripts.OAUTH2_VALIDATE_SCOPE
- * httpClient - HTTP Client (2).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *
- * Throws InvalidScopeException:
- *      - if there are no scopes requested and default scopes are empty
- *      - if a requested scope is not allowed
- *
- * Return - a Set<String> of validated scopes (1).
- *
- * Class reference:
- * (1) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (2) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
- */
-
-/**
- * Default validate scope script.
- */
-function validateScopes () {
-    var frJava = JavaImporter(
-        org.forgerock.oauth2.core.exceptions.InvalidScopeException
-    );
-
-    var scopes;
-    if (requestedScopes == null || requestedScopes.isEmpty()) {
-        scopes = defaultScopes;
-    } else {
-        scopes = new java.util.HashSet(allowedScopes);
-        scopes.retainAll(requestedScopes);
-        if (requestedScopes.size() > scopes.size()) {
-            var invalidScopes = new java.util.HashSet(requestedScopes);
-            invalidScopes.removeAll(allowedScopes);
-            throw new frJava.InvalidScopeException('Unknown/invalid scope(s)');
-        }
-    }
-
-    if (scopes == null || scopes.isEmpty()) {
-        throw new frJava.InvalidScopeException('No scope requested and no default scope configured');
-    }
-    return scopes;
-}
-
-function validateAuthorizationScope () {
-    return validateScopes();
-}
-
-function validateAccessTokenScope () {
-    return validateScopes();
-}
-
-function validateRefreshTokenScope () {
-    return validateScopes();
-}
-
-function validateBackChannelAuthorizationScope () {
-    return validateScopes();
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Validate-Scope-Script.script.json 1`] = `
-{
-  "script": {
-    "25e6c06d-cf70-473b-bd28-26931edc476b": {
-      "_id": "25e6c06d-cf70-473b-bd28-26931edc476b",
-      "context": "OAUTH2_VALIDATE_SCOPE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for OAuth2 Scope Validation",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "OAuth2 Validate Scope Script",
-      "script": "file://OAuth2-Validate-Scope-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OIDC-Claims-Script.script.js 1`] = `
-"/*
- * Copyright 2014-2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.
- * The claim values are computed for:
- * the claims derived from the requested scopes,
- * the claims provided by the authorization server,
- * and the claims requested by the client via the claims parameter.
- *
- * In the CONFIGURATION AND CUSTOMIZATION section, you can
- * define the scope-to-claims mapping, and
- * assign to each claim a resolver function that will compute the claim value.
- *
- * Defined variables (class references are provided below):
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * claims - Map<String, Object> (5).
- *          Always present, default server provided claims.
- * claimObjects - List<Claim> (7, 2).
- *                Always present, the default server provided claims.
- * requestedClaims - Map<String, Set<String>> (5).
- *                   Always present, not empty if the request contains the claims parameter and the server has enabled
- *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;
- *                   requested claims with no requested values will have a key but no value in the map. A key with
- *                   a single value in its Set (6) indicates that this is the only value that should be returned.
- * requestedTypedClaims - List<Claim> (7, 2).
- *                        Always present, the requested claims.
- *                        Requested claims with no requested values will have a claim with no values.
- *                        A claim with a single value indicates this is the only value that should be returned.
- * claimsLocales - List<String> (7).
- *                 The values from the 'claims_locales' parameter.
- *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *              In order to use the client, you may need to add
- *              org.forgerock.http.Client,
- *              org.forgerock.http.protocol.*,
- *              and org.forgerock.util.promise.PromiseImpl
- *              to the allowed Java classes in the scripting engine configuration, as described in:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html
- *
- * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.
- *          The result of the last statement in the script is returned to the server.
- *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
- *          is the last (and only) statement in this script, and its return value will become the script result.
- *          Do not use "return variable" statement outside of a function definition.
- *          See RESULTS section for additional details.
- *
- * Class reference:
- * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.
- * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).
- *         An instance of org.forgerock.openidconnect.Claim has methods to access
- *         the claim name, requested values, locale, and whether the claim is essential.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
-*/
-
-(function () {
-    // SETUP
-
-    /**
-     * Claim processing utilities.
-     * An object that contains reusable functions for processing claims.
-     * @see CLAIM PROCESSING UTILITIES section for details.
-     */
-    var utils = getUtils();
-
-    // CONFIGURATION AND CUSTOMIZATION
-
-    /**
-     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a scope value to an array of claim names
-     * to specify which claims need to be processed and returned for the requested scopes.
-     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}
-     * for the scope values that could be used to request claims as defined in the OIDC specification.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     *
-     * CUSTOMIZATION
-     * You can choose the claim names returned for a scope.
-     */
-    utils.setScopeClaimsMap({
-        profile: [
-            'name',
-            'family_name',
-            'given_name',
-            'zoneinfo',
-            'locale'
-        ],
-        email: ['email'],
-        address: ['address'],
-        phone: ['phone_number']
-    });
-
-    /**
-     * In this script, each claim
-     * derived from the requested scopes,
-     * provided by the authorization server, and
-     * requested by the client via the claims parameter
-     * will be processed by a function associated with the claim name.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a claim name to a resolver function,
-     * which will be automatically executed for each claim processed by the script.
-     *
-     * The claim resolver function will receive the requested claim information
-     * in an instance of org.forgerock.openidconnect.Claim as the first argument.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}
-     * for details on the Claim class.
-     *
-     * If the claim resolver function returns a value,
-     * other than undefined or null,
-     * the claim will be included in the script's results.
-     *
-     * The Claim instance provides methods to check
-     * what the name of the claim is,
-     * which values the claim request contains,
-     * whether the claim is essential, and
-     * which locale the claim is associated with.
-     * The resolver function can consider this information when computing and returning the claim value.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),
-     * is called to return a claim resolver function based on a user profile attribute.
-     * @see CLAIM RESOLVERS section for the implementation details and examples.
-     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.
-     *
-     * CUSTOMIZATION
-     * You can reuse the predefined utils methods with your custom arguments.
-     * You can also specify a custom resolver function for a claim name,
-     * that will compute and return the claim value—as shown in the commented out example below.
-     */
-    utils.setClaimResolvers({
-        /*
-        // An example of a simple claim resolver function that is defined for a claim
-        // directly in the configuration object:
-        custom-claim-name: function (requestedClaim) {
-            // In this case, initially, the claim value comes straight from a user profile attribute value:
-            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]
-
-            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.
-            // You can use:
-            // requestedClaim.getName()
-            // requestedClaim.getValues()
-            // requestedClaim.getLocale()
-            // requestedClaim.isEssential()
-
-            return claimValue
-        },
-        */
-        /**
-         * The use of utils.getUserProfileClaimResolver shows how
-         * an argument passed to a function that returns a claim resolver
-         * becomes available to the resolver function (via its lexical context).
-         */
-        name: utils.getUserProfileClaimResolver('cn'),
-        family_name: utils.getUserProfileClaimResolver('sn'),
-        given_name: utils.getUserProfileClaimResolver('givenname'),
-        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),
-        locale: utils.getUserProfileClaimResolver('preferredlocale'),
-        email: utils.getUserProfileClaimResolver('mail'),
-        address: utils.getAddressClaimResolver(
-            /**
-             * The passed in user profile claim resolver function
-             * can be used by the address claim resolver function
-             * to obtain the claim value to be formatted as per the OIDC specification:
-             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.
-             */
-            utils.getUserProfileClaimResolver('postaladdress')
-        ),
-        phone_number: utils.getUserProfileClaimResolver('telephonenumber')
-    });
-
-    // CLAIM PROCESSING UTILITIES
-
-    /**
-     * @returns {object} An object that contains reusable claim processing utilities.
-     * @see PUBLIC METHODS section and the return statement for the list of exported functions.
-     */
-    function getUtils () {
-        // IMPORT JAVA
-
-        /**
-         * Provides Java scripting functionality.
-         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.
-         */
-        var frJava = JavaImporter(
-            org.forgerock.oauth2.core.exceptions.InvalidRequestException,
-            org.forgerock.oauth2.core.UserInfoClaims,
-            org.forgerock.openidconnect.Claim,
-
-            java.util.LinkedHashMap,
-            java.util.ArrayList
-        );
-
-        // SET UP CONFIGURATION
-
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported scope values (scopes)
-         * and the corresponding claim names for each scope value.
-         */
-        var scopeClaimsMap;
-
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported claim names
-         * and the resolver functions returning the claim value.
-         */
-        var claimResolvers;
-
-        /**
-         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps each supported scope value to an array of claim names,
-         * in order to specify which claims need to be processed for the requested scopes.
-         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.
-         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.
-         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.
-         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.
-         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.
-         * @returns {undefined}
-         */
-        function setScopeClaimsMap(params) {
-            scopeClaimsMap = params;
-        }
-
-        /**
-         * A (public) method that accepts an object that maps the supported claim names
-         * and the resolver functions returning the claim value,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps
-         * each supported claim name to a function that computes and returns the claim value.
-         */
-        function setClaimResolvers(params) {
-            claimResolvers = params;
-        }
-
-        // CLAIM RESOLVERS
-
-        /**
-         * Claim resolvers are functions that return a claim value.
-         * @param {*}
-         * @returns {*}
-         */
-
-        /**
-         * Defines a claim resolver based on a user profile attribute.
-         * @param {string} attributeName - Name of the user profile attribute.
-         * @returns {function} A function that will determine the claim value
-         * based on the user profile attribute and the (requested) claim properties.
-         */
-        function getUserProfileClaimResolver (attributeName) {
-            /**
-             * Resolves a claim with a user profile attribute value.
-             * Returns undefined if the identity attribute is not populated,
-             * OR if the claim has requested values that do not contain the identity attribute value.
-             * ATTENTION: the aforementioned comparison is case-sensitive.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {string|HashSet|undefined}
-             */
-            function resolveClaim(claim) {
-                var userProfileValue;
-
-                if (identity) {
-                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));
-
-                    if (userProfileValue && !userProfileValue.isEmpty()) {
-                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {
-                            return userProfileValue;
-                        }
-                    }
-                }
-            }
-
-            return resolveClaim;
-        }
-
-        /**
-         * Returns an address claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional formatting to the value before returning it.
-         */
-        function getAddressClaimResolver (resolveClaim) {
-            /**
-             * Creates an address claim object from a value returned by a claim resolver,
-             * and returns the address claim object as the claim value.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.
-             */
-            function resolveAddressClaim(claim) {
-                var claimValue = resolveClaim(claim);
-                var addressObject;
-
-                if (isClaimValueValid(claimValue)) {
-                    addressObject = new frJava.LinkedHashMap();
-
-                    addressObject.put('formatted', claimValue);
-
-                    return addressObject;
-                }
-            }
-
-            return resolveAddressClaim;
-        }
-
-        /**
-         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional logic for essential claims.
-         */
-        function getEssentialClaimResolver (resolveClaim) {
-            /**
-             * Returns a claim value or throws an error.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * Throws an exception if the claim is essential and no value is returned for the claim.
-             *
-             * Use of this resolver is optional.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:
-             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,
-             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,
-             * unless otherwise specified in the description of the specific claim."
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*}
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             */
-            function resolveEssentialClaim(claim) {
-                var claimValue = resolveClaim(claim);
-
-                if (claim.isEssential() && !isClaimValueValid(claimValue)) {
-                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());
-                }
-
-                return claimValue;
-            }
-
-            return resolveEssentialClaim;
-        }
-
-        /**
-         * Provides default resolution for a claim.
-         * Use it if a claim-specific resolver is not defined in the configuration.
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @returns {*} A single value associated with this claim.
-         */
-        function resolveAnyClaim (claim) {
-            if (claim.getValues().size() === 1) {
-                return claim.getValues().toArray()[0];
-            }
-        }
-
-        // UTILITIES
-
-        /**
-         * Returns claim value from a set.
-         * If the set contains a single value, returns the value.
-         * If the set contains multiple values, returns the set.
-         * Otherwise, returns undefined.
-         *
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.
-         * @returns {string|java.util.HashSet|undefined}
-         */
-        function getClaimValueFromSet (claim, set) {
-            if (set && set.size()) {
-                if (set.size() === 1) {
-                    return set.toArray()[0];
-                } else {
-                    return set;
-                }
-            } else if (logger.warningEnabled()) {
-                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());
-            }
-        }
-
-        function isClaimValueValid (claimValue) {
-            if (typeof claimValue === 'undefined' || claimValue === null) {
-                return false;
-            }
-
-            return true;
-        }
-
-        // CLAIM PROCESSING
-
-        /**
-         * Constructs and returns an object populated with the computed claim values
-         * and the requested scopes mapped to the claim names.
-         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-         * @see RESULTS section for the use of this function.
-         */
-        function getUserInfoClaims () {
-            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());
-        }
-
-        /**
-         * Creates a map of (requested) claim names populated with the computed claim values.
-         * @returns {java.util.LinkedHashMap}
-         * A map of the requested claim names and the corresponding claim values.
-         */
-        function getComputedClaims () {
-            /**
-             * Creates a complete list of claim objects from:
-             * the claims derived from the scopes,
-             * the claims provided by the authorization server,
-             * and the claims requested by the client.
-             * @returns {java.util.ArrayList}
-             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-             */
-            function getClaims() {
-                /**
-                 * Returns a list of claim objects for the requested scopes.
-                 * Uses the scopeClaimsMap configuration option to derive the claim names;
-                 * no other properties of a claim derived from a scope are populated.
-                 * @returns {java.util.ArrayList}
-                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.
-                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-                 */
-                function convertScopeToClaims() {
-                    var claims = new frJava.ArrayList();
-
-                    scopes.toArray().forEach(function (scope) {
-                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {
-                            scopeClaimsMap[scope].forEach(function (claimName) {
-                                claims.add(new frJava.Claim(claimName));
-                            });
-                        }
-                    });
-
-                    return claims;
-                }
-
-                var claims = new frJava.ArrayList();
-
-                claims.addAll(convertScopeToClaims());
-                claims.addAll(claimObjects);
-                claims.addAll(requestedTypedClaims);
-
-                return claims;
-            }
-
-            /**
-             * Computes and returns a claim value.
-             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.
-             * @see claimResolvers
-             * If no resolver function is found, uses the default claim resolver function.
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*} Claim value.
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             * Rethrows this exception if a claim resolver throws it.
-             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver
-             * if you want to terminate the claim processing.
-             */
-            function computeClaim(claim) {
-                var resolveClaim;
-                var message;
-
-                try {
-                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;
-
-                    return resolveClaim(claim);
-                } catch (e) {
-                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;
-
-                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {
-                        throw e;
-                    }
-
-                    if (logger.warningEnabled()) {
-                        logger.warning(message);
-                    }
-                }
-            }
-
-            var computedClaims = new frJava.LinkedHashMap();
-
-            getClaims().toArray().forEach(function (claim) {
-                var claimValue = computeClaim(claim);
-
-                if (isClaimValueValid(claimValue)) {
-                    computedClaims.put(claim.getName(), claimValue);
-                } else {
-                    /**
-                     * If a claim has been processed, but appears in the list again,
-                     * and its value cannot be computed under the new conditions,
-                     * the claim is removed from the final result.
-                     *
-                     * For example, a claim could be mapped to a scope and found in the user profile,
-                     * but also requested by the client with required values that don't match the computed one.
-                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.
-                     * for the relevant OIDC specification details.
-                     */
-                    computedClaims.remove(claim.getName());
-                }
-            });
-
-            return computedClaims;
-        }
-
-        /**
-         * Creates a map of requested scopes and the corresponding claim names.
-         * @returns {java.util.LinkedHashMap}
-         */
-        function getCompositeScopes () {
-            var compositeScopes = new frJava.LinkedHashMap();
-
-            scopes.toArray().forEach(function (scope) {
-                var scopeClaims = new frJava.ArrayList();
-
-                if (scopeClaimsMap[scope]) {
-                    scopeClaimsMap[scope].forEach(function (claimName) {
-                        scopeClaims.add(claimName);
-                    });
-                }
-
-                if (scopeClaims.size()) {
-                    compositeScopes.put(scope, scopeClaims);
-                }
-            });
-
-            return compositeScopes;
-        }
-
-        // PUBLIC METHODS
-
-        return {
-            setScopeClaimsMap: setScopeClaimsMap,
-            setClaimResolvers: setClaimResolvers,
-            getUserProfileClaimResolver: getUserProfileClaimResolver,
-            getAddressClaimResolver: getAddressClaimResolver,
-            getEssentialClaimResolver: getEssentialClaimResolver,
-            getUserInfoClaims: getUserInfoClaims
-        };
-    }
-
-    // RESULTS
-
-    /**
-     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class
-     * populated with the computed claim values and
-     * the requested scopes mapped to the claim names.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-     *
-     * Assigning it to a variable gives you an opportunity
-     * to log the content of the returned value during development.
-     */
-    var userInfoClaims = utils.getUserInfoClaims();
-
-    /*
-    logger.error(scriptName + ' results:')
-    logger.error('Values: ' + userInfoClaims.getValues())
-    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())
-    */
-
-    return userInfoClaims;
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OIDC-Claims-Script.script.json 1`] = `
-{
-  "script": {
-    "36863ffb-40ec-48b9-94b1-9a99f71cc3b5": {
-      "_id": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
-      "context": "OIDC_CLAIMS",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for OIDC claims",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "OIDC Claims Script",
-      "script": "file://OIDC-Claims-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("Okta rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.preferred_username)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "6325cf19-a49b-471e-8d26-7e4df76df0e2": {
-      "_id": "6325cf19-a49b-471e-8d26-7e4df76df0e2",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Okta Profile Normalization",
-      "script": "file://Okta-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization-imported-(1).script.groovy 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("Okta rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.preferred_username)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization-imported-(1).script.json 1`] = `
-{
-  "script": {
-    "6002c349-f1d0-4317-baa2-a18590fc3cff": {
-      "_id": "6002c349-f1d0-4317-baa2-a18590fc3cff",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Okta Profile Normalization - imported (1)",
-      "script": "file://Okta-Profile-Normalization-imported-(1).script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization-imported-(2).script.groovy 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("Okta rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.preferred_username)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization-imported-(2).script.json 1`] = `
-{
-  "script": {
-    "647f2a33-9211-4315-a83f-a521d8b77d7b": {
-      "_id": "647f2a33-9211-4315-a83f-a521d8b77d7b",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Okta Profile Normalization - imported (2)",
-      "script": "file://Okta-Profile-Normalization-imported-(2).script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Remove-Button.script.js 1`] = `
-"/* Remove Button
- *
- * Author: volker.scheuber@forgerock.com
- * 
- * Hide buttons on the journey page.
- * 
- * This script does not need to be parametrized. It will work properly as is.
- * 
- * The Scripted Decision Node needs the following outcomes defined:
- * - true
- */
-(function () {
-    var script = "Array.prototype.slice.call(document.getElementsByTagName('button')).forEach(function (e) {e.style.display = 'none'})"
-    var fr = JavaImporter(
-        org.forgerock.openam.auth.node.api.Action,
-        javax.security.auth.callback.TextOutputCallback,
-        com.sun.identity.authentication.callbacks.ScriptTextOutputCallback
-    )
-    var message = " "
-    if (callbacks.isEmpty()) {
-        action = fr.Action.send(
-            new fr.TextOutputCallback(
-                fr.TextOutputCallback.INFORMATION,
-                message
-            ),
-            new fr.ScriptTextOutputCallback(script)
-        ).build()
-    }
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Remove-Button.script.json 1`] = `
-{
-  "script": {
-    "9535446c-0ff6-4a76-8576-616599119d64": {
-      "_id": "9535446c-0ff6-4a76-8576-616599119d64",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Remove button from page.",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Remove Button",
-      "script": "file://Remove-Button.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-IDP-Adapter-Script.script.js 1`] = `
-"/*
- * Copyright 2021-2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOn
- *      - preAuthentication
- *      - preSendResponse
- *      - preSignResponse
- *      - preSendFailureResponse
- *
- * Please see the javadoc for the interface definition and more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
- *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * request - HttpServletRequest (2)
- *     Servlet request object
- * response - HttpServletResponse (3)
- *     Servlet response object
- * authnRequest - AuthnRequest (4)
- *     The original authentication request sent from SP
- * reqId - String
- *     The id to use for continuation of processing if the adapter redirects
- * res - Response (5)
- *     The SAML Response
- * session - SSOToken (6)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * relayState - String
- *     The relayState that will be used in the redirect
- * faultCode - String
- *     the fault code that will be returned in the SAML response
- * faultDetail - String
- *     the fault detail that will be returned in the SAML response
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7.3/scripting-guide/scripting-api-global-logger.html.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (7):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
- * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html.
- * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
- * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 IDP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOn:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preSingleSignOn () {
-    return false;
-}
-
-/*
- * Available variables for preAuthentication:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preAuthentication () {
-    return false;
-}
-
-/*
- * Available variables for preSendResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection happened after processing, false otherwise. Default to false.
- */
-function preSendResponse () {
-    return false;
-}
-
-/*
- * Available variables for preSignResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     session
- *     relayState
- *     res
- *     logger
- */
-function preSignResponse () {
-}
-
-/*
- * Available variables for preSendFailureResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     response
- *     faultCode
- *     faultDetail
- *     logger
- */
-function preSendFailureResponse () {
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-IDP-Adapter-Script.script.json 1`] = `
-{
-  "script": {
-    "248b8a56-df81-4b1b-b4ba-45d994f6504c": {
-      "_id": "248b8a56-df81-4b1b-b4ba-45d994f6504c",
-      "context": "SAML2_IDP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for SAML2 IDP Adapter",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "SAML2 IDP Adapter Script",
-      "script": "file://SAML2-IDP-Adapter-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-IDP-Attribute-Mapper-Script.script.js 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script returns a list of SAML Attribute objects for the IDP framework to insert into the generated Assertion.
- *
- * Defined variables:
- * session - SSOToken (1)
- *           The single sign-on session.
- * hostedEntityId - String (primitive).
- *                  The hosted entity ID.
- * remoteEntityId - String (primitive).
- *                  The remote entity ID.
- * realm - String (primitive).
- *         The name of the realm the user is authenticating to.
- * logger - Always present, the debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding log files will be prefixed with: scripts.SAML2_IDP_ATTRIBUTE_MAPPER
- * idpAttributeMapperScriptHelper - IdpAttributeMapperScriptHelper (2)
- *                                - An IdpAttributeMapperScriptHelper instance containing methods used for IDP attribute mapping.
- *
- * Throws SAML2Exception:
- *      - on failing to map the IDP attributes.
- *
- * Return - a list of SAML Attribute (3) objects.
- *
- * Class reference:
- * (1) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (2) IdpAttributeMapperScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAttributeMapperScriptHelper.html.
- * (3) Attribute - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/saml2/assertion/Attribute.html.
- */
-
-/**
- * Default SAML2 IDP Attribute Mapper.
- */
-function getAttributes() {
-    var frJava = JavaImporter(
-        com.sun.identity.saml2.common.SAML2Exception
-    );
-
-    const debugMethod = "ScriptedIDPAttributeMapper.getAttributes:: ";
-
-    try {
-
-        if (!idpAttributeMapperScriptHelper.isSessionValid(session)) {
-            logger.error(debugMethod + "Invalid session.");
-            return null;
-        }
-
-        var configMap = idpAttributeMapperScriptHelper.getRemoteSPConfigAttributeMap(realm, remoteEntityId);
-        logger.message(debugMethod + "Remote SP attribute map = {}", configMap);
-        if (configMap == null || configMap.isEmpty()) {
-            configMap = idpAttributeMapperScriptHelper.getHostedIDPConfigAttributeMap(realm, hostedEntityId);
-            if (configMap == null || configMap.isEmpty()) {
-                logger.message(debugMethod + "Configuration map is not defined.");
-                return null;
-            }
-            logger.message(debugMethod + "Hosted IDP attribute map = {}", configMap);
-        }
-
-        var attributes = new java.util.ArrayList();
-        var stringValueMap = new java.util.HashSet();
-        var binaryValueMap;
-        var localAttribute;
-
-        // Don't try to read the attributes from the datastore if the ignored profile is enabled in this realm.
-        if (!idpAttributeMapperScriptHelper.isIgnoredProfile(session, realm)) {
-            try {
-                // Resolve attributes to be read from the datastore.
-                var stringAttributes = new java.util.HashSet();
-                var binaryAttributes = new java.util.HashSet();
-                var keyIter = configMap.keySet().iterator();
-                while (keyIter.hasNext()) {
-                    var key = keyIter.next();
-                    localAttribute = configMap.get(key);
-                    if (!idpAttributeMapperScriptHelper.isStaticAttribute(localAttribute)) {
-                        if (idpAttributeMapperScriptHelper.isBinaryAttribute(localAttribute)) {
-                            // add it to the list of attributes to treat as being binary
-                            binaryAttributes.add(idpAttributeMapperScriptHelper.removeBinaryAttributeFlag(localAttribute));
-                        } else {
-                            stringAttributes.add(localAttribute);
-                        }
-                    }
-                }
-
-                if (!stringAttributes.isEmpty()) {
-                    stringValueMap = idpAttributeMapperScriptHelper.getAttributes(session, stringAttributes);
-                }
-                if (!binaryAttributes.isEmpty()) {
-                    binaryValueMap = idpAttributeMapperScriptHelper.getBinaryAttributes(session, binaryAttributes);
-                }
-            } catch (error) {
-                logger.error(debugMethod + "Error accessing the datastore. " + error);
-                //continue to check in ssotoken.
-            }
-        }
-
-        var keyIter = configMap.keySet().iterator();
-        while (keyIter.hasNext()) {
-            var key = keyIter.next()
-            var nameFormat = null;
-            var samlAttribute = key;
-            localAttribute = configMap.get(key);
-            // check if samlAttribute has format nameFormat|samlAttribute
-            var samlAttributes = String(new java.lang.String(samlAttribute));
-            var tokens = samlAttributes.split('|');
-
-            if (tokens.length > 1) {
-                nameFormat = tokens[0];
-                samlAttribute = tokens[1];
-            }
-
-            var attributeValues = new java.util.HashSet();
-            if (idpAttributeMapperScriptHelper.isStaticAttribute(localAttribute)) {
-                // Remove the static flag before using it as the static value
-                localAttribute = idpAttributeMapperScriptHelper.removeStaticAttributeFlag(localAttribute);
-                attributeValues = new java.util.HashSet([localAttribute]);
-                logger.message(debugMethod + "Adding static value {} for attribute named {}", localAttribute, samlAttribute);
-            } else {
-                if (idpAttributeMapperScriptHelper.isBinaryAttribute(localAttribute)) {
-                    // Remove the flag as not used for lookup
-                    localAttribute = idpAttributeMapperScriptHelper.removeBinaryAttributeFlag(localAttribute);
-                    attributeValues = idpAttributeMapperScriptHelper.getBinaryAttributeValues(samlAttribute, localAttribute,
-                        binaryValueMap);
-                } else {
-                    if (stringValueMap != null && !stringValueMap.isEmpty()) {
-                        attributeValues = stringValueMap.get(localAttribute);
-                    } else {
-                        logger.message(debugMethod + "{} string value map was empty or null.", localAttribute);
-                    }
-                }
-
-                // If all else fails, try to get the value from the users ssoToken
-                if (attributeValues == null || attributeValues.isEmpty()) {
-                    logger.message(debugMethod + "User profile does not have value for {}, checking SSOToken.", localAttribute);
-                    attributeValues = new java.util.HashSet(idpAttributeMapperScriptHelper.getPropertySet(session, localAttribute));
-                }
-            }
-
-            if (attributeValues == null || attributeValues.isEmpty()) {
-                logger.message(debugMethod + "{} not found in user profile or SSOToken.", localAttribute);
-            } else {
-                attributes.add(idpAttributeMapperScriptHelper.createSAMLAttribute(samlAttribute, nameFormat, attributeValues));
-            }
-        }
-
-        return attributes;
-
-    } catch (error) {
-        logger.error(debugMethod + "Error mapping IDP attributes. " + error);
-        throw new frJava.SAML2Exception(error);
-    }
-}
-
-getAttributes();
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-IDP-Attribute-Mapper-Script.script.json 1`] = `
-{
-  "script": {
-    "c4f22465-2368-4e27-8013-e6399974fd48": {
-      "_id": "c4f22465-2368-4e27-8013-e6399974fd48",
-      "context": "SAML2_IDP_ATTRIBUTE_MAPPER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for SAML2 IDP Attribute Mapper",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "SAML2 IDP Attribute Mapper Script",
-      "script": "file://SAML2-IDP-Attribute-Mapper-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-NameID-Mapper-Script.script.js 1`] = `
-"/*
- * Copyright 2024 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This is an example SAML2 NameID Mapper script.
- * This script should return a string value representing the SAML2 NameID identifier.
- * The example script delegates to the configured java plugin via the nameIDScriptHelper binding.
- */
-nameIDScriptHelper.getNameIDValue();
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-NameID-Mapper-Script.script.json 1`] = `
-{
-  "script": {
-    "4a171d3a-056b-4ab7-a19f-d7e93ddf7ae5": {
-      "_id": "4a171d3a-056b-4ab7-a19f-d7e93ddf7ae5",
-      "context": "SAML2_NAMEID_MAPPER",
-      "createdBy": "id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org",
-      "creationDate": 1433147666269,
-      "default": true,
-      "description": "Default global script for SAML2 NameID Mapper",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org",
-      "lastModifiedDate": 1433147666269,
-      "name": "SAML2 NameID Mapper Script",
-      "script": "file://SAML2-NameID-Mapper-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-SP-Adapter-Script.script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOnRequest
- *      - preSingleSignOnProcess
- *      - postSingleSignOnSuccess
- *      - postSingleSignOnFailure
- *      - postNewNameIDSuccess
- *      - postTerminateNameIDSuccess
- *      - preSingleLogoutProcess
- *      - postSingleLogoutSuccess
- *
- * Please see the JavaDoc for the interface for more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpEntityId - String
- *     The entity ID for the Identity Provider for which the sign-on request will be sent.
- * request - HttpServletRequest (1)
- *     Servlet request object
- * response - HttpServletResponse (2)
- *     Servlet response object
- * authnRequest - AuthnRequest (3)
- *     The authentication request sent that is sent from the Service Provider.
- * session - SSOToken (4)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * res - Response (5)
- *     The SSO Response received from the Identity Provider.
- * profile - String
- *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
- *          - SAML2Constants.HTTP_POST
- *          - SAML2Constants.HTTP_ARTIFACT
- *          - SAML2Constants.PAOS
- * out - PrintWriter (7)
- *     The PrintWriter that can be used to write to.
- * isFederation - boolean
- *     Set to true if using federation, otherwise false.
- * failureCode - int
- *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
- * userId - String
- *     The unique universal ID of the user with whom the new name identifier request was performed.
- * idRequest - ManageNameIDRequest (8)
- *     The new name identifier request, this will be null if the request object is not available
- * idResponse - ManageNameIDResponse (9)
- *     The new name identifier response, this will be null if the response object is not available
- * binding - String
- *     The binding used for the new name identifier request. This will be one of the following values:
- *          - SAML2Constants.SOAP
- *          - SAML2Constants.HTTP_REDIRECT
- * logoutRequest - LogoutRequest (10)
- *     The single logout request.
- * logoutResponse - LogoutResponse (11)
- *     The single logout response.
- * spAdapterScriptHelper - SpAdapterScriptHelper (12)
- *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (13):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
- * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
- * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
- * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
- * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
- * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
- * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
- * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
- * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 SP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOnRequest:
- *     hostedEntityId
- *     idpEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnRequest() {
-}
-
-/*
- * Available variables for preSingleSignOnProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnProcess() {
-}
-
-/*
- * Available variables for postSingleSignOnSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     out
- *     session
- *     authnRequest
- *     res
- *     profile
- *     isFederation
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnSuccess() {
-    return false;
-}
-
-/*
- * Available variables for postSingleSignOnFailure:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     failureCode
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnFailure() {
-    return false;
-}
-
-/*
- * Available variables for postNewNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postNewNameIDSuccess() {
-}
-
-/*
- * Available variables for postTerminateNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postTerminateNameIDSuccess() {
-}
-
-/*
- * Available variables for preSingleLogoutProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleLogoutProcess() {
-}
-
-/*
- * Available variables for postSingleLogoutSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postSingleLogoutSuccess() {
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-SP-Adapter-Script.script.json 1`] = `
-{
-  "script": {
-    "69f06e63-128c-4e2f-af52-079a8a6f448b": {
-      "_id": "69f06e63-128c-4e2f-af52-079a8a6f448b",
-      "context": "SAML2_SP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for SAML2 SP Adapter",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "SAML2 SP Adapter Script",
-      "script": "file://SAML2-SP-Adapter-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Salesforce-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.user_id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.given_name),
-        field("familyName", rawProfile.family_name),
-        field("photoUrl", rawProfile.picture),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email),
-        field("locale", rawProfile.zoneInfo)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Salesforce-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "312e951f-70c5-49d2-a9ae-93aef909d5df": {
-      "_id": "312e951f-70c5-49d2-a9ae-93aef909d5df",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Salesforce",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Salesforce Profile Normalization",
-      "script": "file://Salesforce-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth.script.js 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOn
- *      - preAuthentication
- *      - preSendResponse
- *      - preSignResponse
- *      - preSendFailureResponse
- *
- * Please see the javadoc for the interface definition and more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
- *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * request - HttpServletRequest (2)
- *     Servlet request object
- * response - HttpServletResponse (3)
- *     Servlet response object
- * authnRequest - AuthnRequest (4)
- *     The original authentication request sent from SP
- * reqId - String
- *     The id to use for continuation of processing if the adapter redirects
- * res - Response (5)
- *     The SAML Response
- * session - SSOToken (6)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * relayState - String
- *     The relayState that will be used in the redirect
- * faultCode - String
- *     the fault code that will be returned in the SAML response
- * faultDetail - String
- *     the fault detail that will be returned in the SAML response
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (7):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
- * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
- * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
- * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 IDP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOn:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preSingleSignOn () {
-      logger.error("Chicago: preSingleSignOn");
-    return true;
-}
-
-/*
- * Available variables for preAuthentication:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preAuthentication () {
-      logger.error("Chicago: preAuthentication");
-    return true;
-}
-
-/*
- * Available variables for preSendResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection happened after processing, false otherwise. Default to false.
- */
-function preSendResponse () {
-      logger.error("Chicago: preSendResponse");
-      logger.error("Chicago: authnRequest: "+authnRequest);
-      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
-    return true;
-}
-
-/*
- * Available variables for preSignResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     session
- *     relayState
- *     res
- *     logger
- */
-function preSignResponse () {
-      logger.error("Chicago: preSignResponse");
-}
-
-/*
- * Available variables for preSendFailureResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     response
- *     faultCode
- *     faultDetail
- *     logger
- */
-function preSendFailureResponse () {
-      logger.error("Chicago: preSendFailureResponse");
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth.script.json 1`] = `
-{
-  "script": {
-    "85523e71-2d77-4577-b078-6f9674cc54e2": {
-      "_id": "85523e71-2d77-4577-b078-6f9674cc54e2",
-      "context": "SAML2_IDP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Always redirect browser pre-auth",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Saml2 IDP Adapter Always Auth",
-      "script": "file://Saml2-IDP-Adapter-Always-Auth.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth-imported-(1).script.js 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOn
- *      - preAuthentication
- *      - preSendResponse
- *      - preSignResponse
- *      - preSendFailureResponse
- *
- * Please see the javadoc for the interface definition and more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
- *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * request - HttpServletRequest (2)
- *     Servlet request object
- * response - HttpServletResponse (3)
- *     Servlet response object
- * authnRequest - AuthnRequest (4)
- *     The original authentication request sent from SP
- * reqId - String
- *     The id to use for continuation of processing if the adapter redirects
- * res - Response (5)
- *     The SAML Response
- * session - SSOToken (6)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * relayState - String
- *     The relayState that will be used in the redirect
- * faultCode - String
- *     the fault code that will be returned in the SAML response
- * faultDetail - String
- *     the fault detail that will be returned in the SAML response
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (7):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
- * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
- * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
- * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 IDP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOn:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preSingleSignOn () {
-      logger.error("Chicago: preSingleSignOn");
-    return true;
-}
-
-/*
- * Available variables for preAuthentication:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preAuthentication () {
-      logger.error("Chicago: preAuthentication");
-    return true;
-}
-
-/*
- * Available variables for preSendResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection happened after processing, false otherwise. Default to false.
- */
-function preSendResponse () {
-      logger.error("Chicago: preSendResponse");
-      logger.error("Chicago: authnRequest: "+authnRequest);
-      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
-    return true;
-}
-
-/*
- * Available variables for preSignResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     session
- *     relayState
- *     res
- *     logger
- */
-function preSignResponse () {
-      logger.error("Chicago: preSignResponse");
-}
-
-/*
- * Available variables for preSendFailureResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     response
- *     faultCode
- *     faultDetail
- *     logger
- */
-function preSendFailureResponse () {
-      logger.error("Chicago: preSendFailureResponse");
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth-imported-(1).script.json 1`] = `
-{
-  "script": {
-    "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1": {
-      "_id": "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1",
-      "context": "SAML2_IDP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Always redirect browser pre-auth",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Saml2 IDP Adapter Always Auth - imported (1)",
-      "script": "file://Saml2-IDP-Adapter-Always-Auth-imported-(1).script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth-imported-(2).script.js 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOn
- *      - preAuthentication
- *      - preSendResponse
- *      - preSignResponse
- *      - preSendFailureResponse
- *
- * Please see the javadoc for the interface definition and more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
- *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * request - HttpServletRequest (2)
- *     Servlet request object
- * response - HttpServletResponse (3)
- *     Servlet response object
- * authnRequest - AuthnRequest (4)
- *     The original authentication request sent from SP
- * reqId - String
- *     The id to use for continuation of processing if the adapter redirects
- * res - Response (5)
- *     The SAML Response
- * session - SSOToken (6)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * relayState - String
- *     The relayState that will be used in the redirect
- * faultCode - String
- *     the fault code that will be returned in the SAML response
- * faultDetail - String
- *     the fault detail that will be returned in the SAML response
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (7):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
- * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
- * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
- * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 IDP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOn:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preSingleSignOn () {
-      logger.error("Chicago: preSingleSignOn");
-    return true;
-}
-
-/*
- * Available variables for preAuthentication:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preAuthentication () {
-      logger.error("Chicago: preAuthentication");
-    return true;
-}
-
-/*
- * Available variables for preSendResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection happened after processing, false otherwise. Default to false.
- */
-function preSendResponse () {
-      logger.error("Chicago: preSendResponse");
-      logger.error("Chicago: authnRequest: "+authnRequest);
-      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
-    return true;
-}
-
-/*
- * Available variables for preSignResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     session
- *     relayState
- *     res
- *     logger
- */
-function preSignResponse () {
-      logger.error("Chicago: preSignResponse");
-}
-
-/*
- * Available variables for preSendFailureResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     response
- *     faultCode
- *     faultDetail
- *     logger
- */
-function preSendFailureResponse () {
-      logger.error("Chicago: preSendFailureResponse");
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth-imported-(2).script.json 1`] = `
-{
-  "script": {
-    "994a4e8f-2741-424a-83e7-3c5f78da01f5": {
-      "_id": "994a4e8f-2741-424a-83e7-3c5f78da01f5",
-      "context": "SAML2_IDP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Always redirect browser pre-auth",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Saml2 IDP Adapter Always Auth - imported (2)",
-      "script": "file://Saml2-IDP-Adapter-Always-Auth-imported-(2).script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Module-Client-Side.script.js 1`] = `
-"/*
- * Copyright 2016-2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-/* Default Authentication client side script to use as a template for new scripts */
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Module-Client-Side.script.json 1`] = `
-{
-  "script": {
-    "c827d2b4-3608-4693-868e-bbcf86bd87c7": {
-      "_id": "c827d2b4-3608-4693-868e-bbcf86bd87c7",
-      "context": "AUTHENTICATION_CLIENT_SIDE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for client side Scripted Authentication Module",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Scripted Module - Client Side",
-      "script": "file://Scripted-Module-Client-Side.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Module-Server-Side.script.js 1`] = `
-"/*
- * Copyright 2015-2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-var START_TIME = 9;  // 9am
-var END_TIME   = 17; // 5pm
-var longitude, latitude;
-var localTime;
-
-logger.message("Starting scripted authentication");
-logger.message("User: " + username);
-
-var userPostalAddress = getUserPostalAddress();
-logger.message("User address: " + userPostalAddress);
-
-getLongitudeLatitudeFromUserPostalAddress();
-getLocalTime();
-
-logger.message("Current time at the users location: " + localTime.getHours());
-if (localTime.getHours() < START_TIME || localTime.getHours() > END_TIME) {
-    logger.error("Login forbidden outside work hours!");
-    authState = FAILED;
-} else {
-    logger.message("Authentication allowed!");
-    authState = SUCCESS;
-}
-
-function getLongitudeLatitudeFromUserPostalAddress() {
-
-    var request = new org.forgerock.http.protocol.Request();
-    request.setUri("http://maps.googleapis.com/maps/api/geocode/json?address=" + encodeURIComponent(userPostalAddress));
-      request.setMethod("GET");
-      //the above URI has to be extended with an API_KEY if used in a frequent manner
-      //see documentation: https://developers.google.com/maps/documentation/geocoding/intro
-
-    var response = httpClient.send(request).get();
-    logResponse(response);
-
-    var geocode = JSON.parse(response.getEntity().getString());
-    var i;
-    for (i = 0; i < geocode.results.length; i++) {
-        var result = geocode.results[i];
-        latitude = result.geometry.location.lat;
-        longitude = result.geometry.location.lng;
-
-           logger.message("latitude:" + latitude + " longitude:" + longitude);
-    }
-}
-
-function getLocalTime() {
-
-    var now = new Date().getTime() / 1000;
-    var location = "location=" + latitude + "," + longitude;
-    var timestamp = "timestamp=" + now;
-
-    var request = new org.forgerock.http.protocol.Request();
-    request.setUri("https://maps.googleapis.com/maps/api/timezone/json?" + location + "&" + timestamp);
-      request.setMethod("GET");
-      //the above URI has to be extended with an API_KEY if used in a frequent manner
-      //see documentation: https://developers.google.com/maps/documentation/timezone/intro
-
-    var response = httpClient.send(request).get();
-    logResponse(response);
-
-    var timezone = JSON.parse(response.getEntity().getString());
-    var localTimestamp = parseInt(now) + parseInt(timezone.dstOffset) + parseInt(timezone.rawOffset);
-    localTime = new Date(localTimestamp*1000);
-}
-
-function getUserPostalAddress() {
-    var userAddressSet = idRepository.getAttribute(username, "postalAddress");
-    if (userAddressSet == null || userAddressSet.isEmpty()) {
-        logger.warning("No address specified for user: " + username);
-        return false;
-    }
-    return userAddressSet.iterator().next()
-}
-
-function logResponse(response) {
-    logger.message("User REST Call. Status: " + response.getStatus() + ", Body: " + response.getEntity().getString());
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Module-Server-Side.script.json 1`] = `
-{
-  "script": {
-    "7e3d7067-d50f-4674-8c76-a3e13a810c33": {
-      "_id": "7e3d7067-d50f-4674-8c76-a3e13a810c33",
-      "context": "AUTHENTICATION_SERVER_SIDE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for server side Scripted Authentication Module",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Scripted Module - Server Side",
-      "script": "file://Scripted-Module-Server-Side.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Policy-Condition.script.js 1`] = `
-"/*
- * Copyright 2015-2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-/**
- * This is a Policy Condition example script. It demonstrates how to access a user's information,
- * use that information in external HTTP calls and make a policy decision based on the outcome.
- */
-
-var userAddress, userIP, resourceHost;
-
-if (validateAndInitializeParameters()) {
-
-    var countryFromUserAddress = getCountryFromUserAddress();
-    logger.message("Country retrieved from user's address: " + countryFromUserAddress);
-    var countryFromUserIP = getCountryFromUserIP();
-    logger.message("Country retrieved from user's IP: " + countryFromUserIP);
-    var countryFromResourceURI = getCountryFromResourceURI();
-    logger.message("Country retrieved from resource URI: " + countryFromResourceURI);
-
-    if (countryFromUserAddress === countryFromUserIP && countryFromUserAddress === countryFromResourceURI) {
-        logger.message("Authorization Succeeded");
-        responseAttributes.put("countryOfOrigin", [countryFromUserAddress]);
-        authorized = true;
-    } else {
-        logger.message("Authorization Failed");
-        authorized = false;
-    }
-
-} else {
-    logger.message("Required parameters not found. Authorization Failed.");
-    authorized = false;
-}
-
-/**
- * Use the user's address to lookup their country of residence.
- *
- * @returns {*} The user's country of residence.
- */
-function getCountryFromUserAddress() {
-
-    var request = new org.forgerock.http.protocol.Request();
-    request.setUri("http://maps.googleapis.com/maps/api/geocode/json?address=" + encodeURIComponent(userAddress));
-      request.setMethod("GET");
-
-    var response = httpClient.send(request).get();
-    logResponse(response);
-
-    var geocode = JSON.parse(response.getEntity().getString());
-    var i;
-    for (i = 0; i < geocode.results.length; i++) {
-        var result = geocode.results[i];
-        var j;
-        for (j = 0; j < result.address_components.length; i++) {
-            if (result.address_components[i].types[0] == "country") {
-                return result.address_components[i].long_name;
-            }
-        }
-    }
-}
-
-/**
- * Use the user's IP to lookup the country from which the request originated.
- *
- * @returns {*} The country from which the request originated.
- */
-function getCountryFromUserIP() {
-    var request = new org.forgerock.http.protocol.Request();
-    request.setUri("http://ip-api.com/json/" + userIP);
-      request.setMethod("GET");
-
-    var response = httpClient.send(request).get();
-    logResponse(response);
-
-    var result = JSON.parse(response.getEntity().getString());
-    if (result) {
-        return result.country;
-    }
-}
-
-/**
- * Use the requested resource's host name to lookup the country where the resource is hosted.
- *
- * @returns {*} The country in which the resource is hosted.
- */
-function getCountryFromResourceURI() {
-    var request = new org.forgerock.http.protocol.Request();
-    request.setUri("http://ip-api.com/json/" + encodeURIComponent(resourceHost));
-      request.setMethod("GET");
-
-    var response = httpClient.send(request).get();
-    logResponse(response);
-
-    var result = JSON.parse(response.getEntity().getString());
-    if (result) {
-        return result.country;
-    }
-}
-
-/**
- * Retrieve and validate the variables required to make the external HTTP calls.
- *
- * @returns {boolean} Will be true if validation was successful.
- */
-function validateAndInitializeParameters() {
-    var userAddressSet = identity.getAttribute("postalAddress");
-    if (userAddressSet == null || userAddressSet.isEmpty()) {
-        logger.warning("No address specified for user: " + username);
-        return false;
-    }
-    userAddress = userAddressSet.iterator().next();
-    logger.message("User address: " + userAddress);
-
-    if (!environment) {
-        logger.warning("No environment parameters specified in the evaluation request.");
-        return false;
-    }
-
-    var ipSet = environment.get("IP");
-    if (ipSet == null || ipSet.isEmpty()) {
-        logger.warning("No IP specified in the evaluation request environment parameters.");
-        return false;
-    }
-    userIP = ipSet.iterator().next();
-    logger.message("User IP: " + userIP);
-
-    if (!resourceURI) {
-        logger.warning("No resource URI specified.");
-        return false;
-    }
-    resourceHost = resourceURI.match(/^(.*:\\/\\/)(www\\.)?([A-Za-z0-9\\-\\.]+)(:[0-9]+)?(.*)$/)[3];
-    logger.message("Resource host: " + resourceHost);
-
-    return true;
-}
-
-function logResponse(response) {
-    logger.message("User REST Call. Status: " + response.getStatus() + ", Body: " + response.getEntity().getString());
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Policy-Condition.script.json 1`] = `
-{
-  "script": {
-    "9de3eb62-f131-4fac-a294-7bd170fd4acb": {
-      "_id": "9de3eb62-f131-4fac-a294-7bd170fd4acb",
-      "context": "POLICY_CONDITION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for Scripted Policy Conditions",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Scripted Policy Condition",
-      "script": "file://Scripted-Policy-Condition.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Social-Identity-Provider-Profile-Transformation-Script.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/* Default Social Identity Provider Profile Transformation script to use as a template for new scripts */
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Social-Identity-Provider-Profile-Transformation-Script.script.json 1`] = `
-{
-  "script": {
-    "1d475815-72cb-42eb-aafd-4026989d28a7": {
-      "_id": "1d475815-72cb-42eb-aafd-4026989d28a7",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Default global script for Social Identity Provider Profile Transformation",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Social Identity Provider Profile Transformation Script",
-      "script": "file://Social-Identity-Provider-Profile-Transformation-Script.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Twitter-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.id_str),
-        field("displayName", rawProfile.name),
-        field("photoUrl", rawProfile.profile_image_url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.screen_name)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Twitter-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "8e298710-b55e-4085-a464-88a375a4004b": {
-      "_id": "8e298710-b55e-4085-a464-88a375a4004b",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Twitter",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Twitter Profile Normalization",
-      "script": "file://Twitter-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/VKontakte-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.first_name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.photo_50),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/VKontakte-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "403cf226-6051-4368-8b72-9ba14f9a5140": {
-      "_id": "403cf226-6051-4368-8b72-9ba14f9a5140",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from VKontakte",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "VKontakte Profile Normalization",
-      "script": "file://VKontakte-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/WeChat-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.openid),
-        field("displayName", rawProfile.nickname),
-        field("photoUrl", rawProfile.headimgurl),
-        field("username", rawProfile.nickname)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/WeChat-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "472534ec-a25f-468d-a606-3fb1935190df": {
-      "_id": "472534ec-a25f-468d-a606-3fb1935190df",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from WeChat",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "WeChat Profile Normalization",
-      "script": "file://WeChat-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/WordPress-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.username),
-        field("displayName", rawProfile.display_name),
-        field("photoUrl", rawProfile.avatar_URL),
-        field("email", rawProfile.email),
-        field("username", rawProfile.username)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/WordPress-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "91d197de-5916-4dca-83b5-9a4df26e7159": {
-      "_id": "91d197de-5916-4dca-83b5-9a4df26e7159",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from WordPress",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "WordPress Profile Normalization",
-      "script": "file://WordPress-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Yahoo-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-return json(object(
-        field("id", rawProfile.sub),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.given_name),
-        field("familyName", rawProfile.family_name),
-        field("photoUrl", rawProfile.picture),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email),
-        field("locale", rawProfile.locale)))
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Yahoo-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "424da748-82cc-4b54-be6f-82bd64d82a74": {
-      "_id": "424da748-82cc-4b54-be6f-82bd64d82a74",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from Yahoo",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Yahoo Profile Normalization",
-      "script": "file://Yahoo-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/debug.script.js 1`] = `
-"/* debug
- *
- * Author: volker.scheuber@forgerock.com
- * 
- * Display sharedState, transientState, and headers.
- * 
- * This script does not need to be parametrized. It will work properly as is.
- * 
- * The Scripted Decision Node needs the following outcomes defined:
- * - true
- */
-var anchor = "anchor-".concat(generateNumericToken('xxx'));
-var halign = "left";
-var message = "<p><b>Shared State</b>:<br/>".concat(
-      sharedState.toString()).concat("</p>").concat(
-    "<p><b>Transient State</b>:<br/>").concat(
-      transientState.toString()).concat("</p>").concat(
-    "<p><b>Request Headers</b>:<br/>").concat(
-      requestHeaders.toString()).concat("</p>")
-var script = "Array.prototype.slice.call(\\n".concat(
-  "document.getElementsByClassName('callback-component')).forEach(\\n").concat(
-  "function (e) {\\n").concat(
-  "  var message = e.firstElementChild;\\n").concat(
-  "  if (message.firstChild && message.firstChild.nodeName == '#text' && message.firstChild.nodeValue.trim() == '").concat(anchor).concat("') {\\n").concat(
-  "    message.className = \\"text-left\\";\\n").concat(
-  "    message.align = \\"").concat(halign).concat("\\";\\n").concat(
-  "    message.innerHTML = '").concat(message).concat("';\\n").concat(
-  "  }\\n").concat(
-  "})")
-var fr = JavaImporter(
-    org.forgerock.openam.auth.node.api.Action,
-    javax.security.auth.callback.TextOutputCallback,
-    com.sun.identity.authentication.callbacks.ScriptTextOutputCallback
-)
-if (message.length && callbacks.isEmpty()) {
-    action = fr.Action.send(
-        new fr.TextOutputCallback(
-            fr.TextOutputCallback.INFORMATION,
-            anchor
-        ),
-        new fr.ScriptTextOutputCallback(script)
-    ).build()
-}
-else {
-  action = fr.Action.goTo("true").build();
-}
-
- /*
-  * Generate a token in the desired format. All 'x' characters will be replaced with a random number 0-9.
-  * 
-  * Example:
-  * 'xxxxx' produces '28535'
-  * 'xxx-xxx' produces '432-521'
-  */
-function generateNumericToken(format) {
-    return format.replace(/[x]/g, function(c) {
-        var r = Math.random()*10|0;
-        var v = r;
-        return v.toString(10);
-    });
-}
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/debug.script.json 1`] = `
-{
-  "script": {
-    "3cb43516-ae69-433a-8787-501d45db14e9": {
-      "_id": "3cb43516-ae69-433a-8787-501d45db14e9",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Display sharedState, transientState, and headers.",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "debug",
-      "script": "file://debug.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/level.script.js 1`] = `
-"(function () {
-  outcome = 'true';
-  var level = nodeState.get('level').asInteger();
-  sharedState.put('level' + level + 'Value', 'Level ' + level + ': This is a longer string value set at each level of the nested journeys. It contains an indicator in which level it was set.');
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/level.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-OIDC-Claims-Script.script.json 1`] = `
 {
   "script": {
-    "41c24257-d7fc-4654-8b46-c2666dc5b56d": {
-      "_id": "41c24257-d7fc-4654-8b46-c2666dc5b56d",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+    "cf3515f0-8278-4ee3-a530-1bad7424c416": {
+      "_id": "cf3515f0-8278-4ee3-a530-1bad7424c416",
+      "context": "OIDC_CLAIMS",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "set per level shared state variable",
+      "description": "Default alpha realm script for OIDC claims",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "level",
-      "script": "file://level.script.js",
+      "name": "Alpha OIDC Claims Script",
+      "script": [
+        "/*",
+        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
+        " * The claim values are computed for:",
+        " * the claims derived from the requested scopes,",
+        " * the claims provided by the authorization server,",
+        " * and the claims requested by the client via the claims parameter.",
+        " *",
+        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
+        " * define the scope-to-claims mapping, and",
+        " * assign to each claim a resolver function that will compute the claim value.",
+        " *",
+        " * Defined variables (class references are provided below):",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * claims - Map<String, Object> (5).",
+        " *          Always present, default server provided claims.",
+        " * claimObjects - List<Claim> (7, 2).",
+        " *                Always present, the default server provided claims.",
+        " * requestedClaims - Map<String, Set<String>> (5).",
+        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
+        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
+        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
+        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
+        " * requestedTypedClaims - List<Claim> (7, 2).",
+        " *                        Always present, the requested claims.",
+        " *                        Requested claims with no requested values will have a claim with no values.",
+        " *                        A claim with a single value indicates this is the only value that should be returned.",
+        " * claimsLocales - List<String> (7).",
+        " *                 The values from the 'claims_locales' parameter.",
+        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *              In order to use the client, you may need to add",
+        " *              org.forgerock.http.Client,",
+        " *              org.forgerock.http.protocol.*,",
+        " *              and org.forgerock.util.promise.PromiseImpl",
+        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
+        " *",
+        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *          See RESULTS section for additional details.",
+        " *",
+        " * Class reference:",
+        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
+        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
+        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
+        " *         the claim name, requested values, locale, and whether the claim is essential.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        "*/",
+        "",
+        "(function () {",
+        "    // SETUP",
+        "",
+        "    /**",
+        "     * Claim processing utilities.",
+        "     * An object that contains reusable functions for processing claims.",
+        "     * @see CLAIM PROCESSING UTILITIES section for details.",
+        "     */",
+        "    var utils = getUtils();",
+        "",
+        "    // CONFIGURATION AND CUSTOMIZATION",
+        "",
+        "    /**",
+        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a scope value to an array of claim names",
+        "     * to specify which claims need to be processed and returned for the requested scopes.",
+        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
+        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can choose the claim names returned for a scope.",
+        "     */",
+        "    utils.setScopeClaimsMap({",
+        "        profile: [",
+        "            'name',",
+        "            'family_name',",
+        "            'given_name',",
+        "            'zoneinfo',",
+        "            'locale'",
+        "        ],",
+        "        email: ['email'],",
+        "        address: ['address'],",
+        "        phone: ['phone_number']",
+        "    });",
+        "",
+        "    /**",
+        "     * In this script, each claim",
+        "     * derived from the requested scopes,",
+        "     * provided by the authorization server, and",
+        "     * requested by the client via the claims parameter",
+        "     * will be processed by a function associated with the claim name.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a claim name to a resolver function,",
+        "     * which will be automatically executed for each claim processed by the script.",
+        "     *",
+        "     * The claim resolver function will receive the requested claim information",
+        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
+        "     * for details on the Claim class.",
+        "     *",
+        "     * If the claim resolver function returns a value,",
+        "     * other than undefined or null,",
+        "     * the claim will be included in the script's results.",
+        "     *",
+        "     * The Claim instance provides methods to check",
+        "     * what the name of the claim is,",
+        "     * which values the claim request contains,",
+        "     * whether the claim is essential, and",
+        "     * which locale the claim is associated with.",
+        "     * The resolver function can consider this information when computing and returning the claim value.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
+        "     * is called to return a claim resolver function based on a user profile attribute.",
+        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
+        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can reuse the predefined utils methods with your custom arguments.",
+        "     * You can also specify a custom resolver function for a claim name,",
+        "     * that will compute and return the claim value—as shown in the commented out example below.",
+        "     */",
+        "    utils.setClaimResolvers({",
+        "        /*",
+        "        // An example of a simple claim resolver function that is defined for a claim",
+        "        // directly in the configuration object:",
+        "        custom-claim-name: function (requestedClaim) {",
+        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
+        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "",
+        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
+        "            // You can use:",
+        "            // requestedClaim.getName()",
+        "            // requestedClaim.getValues()",
+        "            // requestedClaim.getLocale()",
+        "            // requestedClaim.isEssential()",
+        "",
+        "            return claimValue",
+        "        },",
+        "        */",
+        "        /**",
+        "         * The use of utils.getUserProfileClaimResolver shows how",
+        "         * an argument passed to a function that returns a claim resolver",
+        "         * becomes available to the resolver function (via its lexical context).",
+        "         */",
+        "        name: utils.getUserProfileClaimResolver('cn'),",
+        "        family_name: utils.getUserProfileClaimResolver('sn'),",
+        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
+        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
+        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
+        "        email: utils.getUserProfileClaimResolver('mail'),",
+        "        address: utils.getAddressClaimResolver(",
+        "            /**",
+        "             * The passed in user profile claim resolver function",
+        "             * can be used by the address claim resolver function",
+        "             * to obtain the claim value to be formatted as per the OIDC specification:",
+        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             */",
+        "            utils.getUserProfileClaimResolver('postaladdress')",
+        "        ),",
+        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
+        "    });",
+        "",
+        "    // CLAIM PROCESSING UTILITIES",
+        "",
+        "    /**",
+        "     * @returns {object} An object that contains reusable claim processing utilities.",
+        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
+        "     */",
+        "    function getUtils () {",
+        "        // IMPORT JAVA",
+        "",
+        "        /**",
+        "         * Provides Java scripting functionality.",
+        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
+        "         */",
+        "        var frJava = JavaImporter(",
+        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
+        "            org.forgerock.oauth2.core.UserInfoClaims,",
+        "            org.forgerock.openidconnect.Claim,",
+        "",
+        "            java.util.LinkedHashMap,",
+        "            java.util.ArrayList",
+        "        );",
+        "",
+        "        // SET UP CONFIGURATION",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported scope values (scopes)",
+        "         * and the corresponding claim names for each scope value.",
+        "         */",
+        "        var scopeClaimsMap;",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value.",
+        "         */",
+        "        var claimResolvers;",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
+        "         * in order to specify which claims need to be processed for the requested scopes.",
+        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
+        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
+        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
+        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
+        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
+        "         * @returns {undefined}",
+        "         */",
+        "        function setScopeClaimsMap(params) {",
+        "            scopeClaimsMap = params;",
+        "        }",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps",
+        "         * each supported claim name to a function that computes and returns the claim value.",
+        "         */",
+        "        function setClaimResolvers(params) {",
+        "            claimResolvers = params;",
+        "        }",
+        "",
+        "        // CLAIM RESOLVERS",
+        "",
+        "        /**",
+        "         * Claim resolvers are functions that return a claim value.",
+        "         * @param {*}",
+        "         * @returns {*}",
+        "         */",
+        "",
+        "        /**",
+        "         * Defines a claim resolver based on a user profile attribute.",
+        "         * @param {string} attributeName - Name of the user profile attribute.",
+        "         * @returns {function} A function that will determine the claim value",
+        "         * based on the user profile attribute and the (requested) claim properties.",
+        "         */",
+        "        function getUserProfileClaimResolver (attributeName) {",
+        "            /**",
+        "             * Resolves a claim with a user profile attribute value.",
+        "             * Returns undefined if the identity attribute is not populated,",
+        "             * OR if the claim has requested values that do not contain the identity attribute value.",
+        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {string|HashSet|undefined}",
+        "             */",
+        "            function resolveClaim(claim) {",
+        "                var userProfileValue;",
+        "",
+        "                if (identity) {",
+        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "",
+        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
+        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
+        "                            return userProfileValue;",
+        "                        }",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            return resolveClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional formatting to the value before returning it.",
+        "         */",
+        "        function getAddressClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Creates an address claim object from a value returned by a claim resolver,",
+        "             * and returns the address claim object as the claim value.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
+        "             */",
+        "            function resolveAddressClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "                var addressObject;",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    addressObject = new frJava.LinkedHashMap();",
+        "",
+        "                    addressObject.put('formatted', claimValue);",
+        "",
+        "                    return addressObject;",
+        "                }",
+        "            }",
+        "",
+        "            return resolveAddressClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional logic for essential claims.",
+        "         */",
+        "        function getEssentialClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Returns a claim value or throws an error.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
+        "             *",
+        "             * Use of this resolver is optional.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
+        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
+        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
+        "             * unless otherwise specified in the description of the specific claim."",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*}",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             */",
+        "            function resolveEssentialClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "",
+        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
+        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
+        "                }",
+        "",
+        "                return claimValue;",
+        "            }",
+        "",
+        "            return resolveEssentialClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Provides default resolution for a claim.",
+        "         * Use it if a claim-specific resolver is not defined in the configuration.",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @returns {*} A single value associated with this claim.",
+        "         */",
+        "        function resolveAnyClaim (claim) {",
+        "            if (claim.getValues().size() === 1) {",
+        "                return claim.getValues().toArray()[0];",
+        "            }",
+        "        }",
+        "",
+        "        // UTILITIES",
+        "",
+        "        /**",
+        "         * Returns claim value from a set.",
+        "         * If the set contains a single value, returns the value.",
+        "         * If the set contains multiple values, returns the set.",
+        "         * Otherwise, returns undefined.",
+        "         *",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
+        "         * @returns {string|java.util.HashSet|undefined}",
+        "         */",
+        "        function getClaimValueFromSet (claim, set) {",
+        "            if (set && set.size()) {",
+        "                if (set.size() === 1) {",
+        "                    return set.toArray()[0];",
+        "                } else {",
+        "                    return set;",
+        "                }",
+        "            } else if (logger.warningEnabled()) {",
+        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            }",
+        "        }",
+        "",
+        "        function isClaimValueValid (claimValue) {",
+        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
+        "                return false;",
+        "            }",
+        "",
+        "            return true;",
+        "        }",
+        "",
+        "        // CLAIM PROCESSING",
+        "",
+        "        /**",
+        "         * Constructs and returns an object populated with the computed claim values",
+        "         * and the requested scopes mapped to the claim names.",
+        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "         * @see RESULTS section for the use of this function.",
+        "         */",
+        "        function getUserInfoClaims () {",
+        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of (requested) claim names populated with the computed claim values.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         * A map of the requested claim names and the corresponding claim values.",
+        "         */",
+        "        function getComputedClaims () {",
+        "            /**",
+        "             * Creates a complete list of claim objects from:",
+        "             * the claims derived from the scopes,",
+        "             * the claims provided by the authorization server,",
+        "             * and the claims requested by the client.",
+        "             * @returns {java.util.ArrayList}",
+        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "             */",
+        "            function getClaims() {",
+        "                /**",
+        "                 * Returns a list of claim objects for the requested scopes.",
+        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
+        "                 * no other properties of a claim derived from a scope are populated.",
+        "                 * @returns {java.util.ArrayList}",
+        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
+        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "                 */",
+        "                function convertScopeToClaims() {",
+        "                    var claims = new frJava.ArrayList();",
+        "",
+        "                    scopes.toArray().forEach(function (scope) {",
+        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
+        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                                claims.add(new frJava.Claim(claimName));",
+        "                            });",
+        "                        }",
+        "                    });",
+        "",
+        "                    return claims;",
+        "                }",
+        "",
+        "                var claims = new frJava.ArrayList();",
+        "",
+        "                claims.addAll(convertScopeToClaims());",
+        "                claims.addAll(claimObjects);",
+        "                claims.addAll(requestedTypedClaims);",
+        "",
+        "                return claims;",
+        "            }",
+        "",
+        "            /**",
+        "             * Computes and returns a claim value.",
+        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
+        "             * @see claimResolvers",
+        "             * If no resolver function is found, uses the default claim resolver function.",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*} Claim value.",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             * Rethrows this exception if a claim resolver throws it.",
+        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
+        "             * if you want to terminate the claim processing.",
+        "             */",
+        "            function computeClaim(claim) {",
+        "                var resolveClaim;",
+        "                var message;",
+        "",
+        "                try {",
+        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "",
+        "                    return resolveClaim(claim);",
+        "                } catch (e) {",
+        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "",
+        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
+        "                        throw e;",
+        "                    }",
+        "",
+        "                    if (logger.warningEnabled()) {",
+        "                        logger.warning(message);",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            var computedClaims = new frJava.LinkedHashMap();",
+        "",
+        "            getClaims().toArray().forEach(function (claim) {",
+        "                var claimValue = computeClaim(claim);",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    computedClaims.put(claim.getName(), claimValue);",
+        "                } else {",
+        "                    /**",
+        "                     * If a claim has been processed, but appears in the list again,",
+        "                     * and its value cannot be computed under the new conditions,",
+        "                     * the claim is removed from the final result.",
+        "                     *",
+        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
+        "                     * but also requested by the client with required values that don't match the computed one.",
+        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
+        "                     * for the relevant OIDC specification details.",
+        "                     */",
+        "                    computedClaims.remove(claim.getName());",
+        "                }",
+        "            });",
+        "",
+        "            return computedClaims;",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of requested scopes and the corresponding claim names.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         */",
+        "        function getCompositeScopes () {",
+        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "",
+        "            scopes.toArray().forEach(function (scope) {",
+        "                var scopeClaims = new frJava.ArrayList();",
+        "",
+        "                if (scopeClaimsMap[scope]) {",
+        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                        scopeClaims.add(claimName);",
+        "                    });",
+        "                }",
+        "",
+        "                if (scopeClaims.size()) {",
+        "                    compositeScopes.put(scope, scopeClaims);",
+        "                }",
+        "            });",
+        "",
+        "            return compositeScopes;",
+        "        }",
+        "",
+        "        // PUBLIC METHODS",
+        "",
+        "        return {",
+        "            setScopeClaimsMap: setScopeClaimsMap,",
+        "            setClaimResolvers: setClaimResolvers,",
+        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
+        "            getAddressClaimResolver: getAddressClaimResolver,",
+        "            getEssentialClaimResolver: getEssentialClaimResolver,",
+        "            getUserInfoClaims: getUserInfoClaims",
+        "        };",
+        "    }",
+        "",
+        "    // RESULTS",
+        "",
+        "    /**",
+        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
+        "     * populated with the computed claim values and",
+        "     * the requested scopes mapped to the claim names.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "     *",
+        "     * Assigning it to a variable gives you an opportunity",
+        "     * to log the content of the returned value during development.",
+        "     */",
+        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "",
+        "    /*",
+        "    logger.error(scriptName + ' results:')",
+        "    logger.error('Values: ' + userInfoClaims.getValues())",
+        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
+        "    */",
+        "",
+        "    return userInfoClaims;",
+        "}());",
+        "",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/mode.script.js 1`] = `
-"/* mode
- *
- * Author: volker.scheuber@forgerock.com
- * 
- * Collect mode if not already set and set outcome to mode.
- * 
- * This script does not need to be parametrized. It will work properly as is.
- * 
- * The Scripted Decision Node needs the following outcomes defined:
- * - 'shared and level'
- * - 'shared only'
- * - 'level only'
- * - 'none'
- */
-(function () {
-  var mode = nodeState.get('mode');
-  if (mode) {
-    outcome = mode.asString();
-    var level = nodeState.get('level').asInteger() + 1;
-    logger.error('mode: mode=' + mode.asString() + ', level=' + level);
-    sharedState.put('level', level);
-  }
-  else {
-    var choices = ['shared and level', 'shared only', 'level only', 'none'];
-  
-    var fr = JavaImporter(
-      org.forgerock.openam.auth.node.api.Action,
-      javax.security.auth.callback.ChoiceCallback
-    )
-
-    if (callbacks.isEmpty()) {
-      action = fr.Action.send([
-        new fr.ChoiceCallback('Choose test mode', choices, 0, false)
-      ]).build();
-    } else {
-      var choice = parseInt(callbacks.get(0).getSelectedIndexes()[0]);
-      nodeState.putShared('mode', choices[choice]);
-      nodeState.putShared('level', 0);
-      action = fr.Action.goTo(choices[choice]).build();
-    }
-  }
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/mode.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
 {
   "script": {
-    "5bbdaeff-ddee-44b9-b608-8d413d7d65a6": {
-      "_id": "5bbdaeff-ddee-44b9-b608-8d413d7d65a6",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+    "e232cff3-2460-47cd-80b2-36c86c0d0f06": {
+      "_id": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Check if mode has already been set.",
+      "description": "Used by endUserUIClient",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "mode",
-      "script": "file://mode.script.js",
+      "name": "Alpha endUserUIClient OAuth2 Access Token Modification Script",
+      "script": [
+        "(function () {",
+        "  if (scopes.contains('fr:autoaccess:*') || scopes.contains('fr:iga:*') || scopes.contains('fr:idc:analytics:*')) {",
+        "    var fr = JavaImporter(",
+        "      com.sun.identity.idm.IdType",
+        "    );",
+        "    var groups = [];",
+        "    identity.getMemberships(fr.IdType.GROUP).toArray().forEach(function (group) {",
+        "      groups.push(group.getAttribute('cn').toArray()[0]);",
+        "    });",
+        "    accessToken.setField('groups', groups);",
+        "  }",
+        "}());",
+        "",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/shared.script.js 1`] = `
-"(function () {
-  outcome = 'true';
-  var level = nodeState.get('level').asInteger();
-  sharedState.put('sharedValue', 'Level ' + level + ': This is a longer string value shared across all nested journeys. It contains an indicator in which level it was last set.');
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/shared.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Alpha-endUserUIClient-OIDC-Claims-Script.script.json 1`] = `
 {
   "script": {
-    "1b52a7e0-4019-40fa-958a-15a49870e901": {
-      "_id": "1b52a7e0-4019-40fa-958a-15a49870e901",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+    "e1db8a0a-0329-4962-a5bf-ecffaca376ae": {
+      "_id": "e1db8a0a-0329-4962-a5bf-ecffaca376ae",
+      "context": "OIDC_CLAIMS",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "set the same shared state variable",
+      "description": "Used by endUserUIClient",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "shared",
-      "script": "file://shared.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/test-script-with-secrets-and-variables.script.js 1`] = `
-"console.log(\`pi: \${systemEnv.getProperty("esv.test.var.pi")}\`);
-console.log(\`pi secret: \${systemEnv.getProperty("esv.test.secret.pi")}\`);
-console.log(\`speed of light: \${systemEnv.getProperty("esv.test.variable.light")}\`);
-console.log(\`euler's number: \${systemEnv.getProperty("esv.test.secret.euler")}\`);
-console.log(\`Area of circle with radius 7: \${7 * 7 * systemEnv.getProperty("esv.test.var.pi")}\`);
-console.log(\`Volume of sphere with radius 7: \${4 * 7 * 7 * 7 * systemEnv.getProperty("esv.test.secret.pi") / 3}\`);
-"
-`;
-
-exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/test-script-with-secrets-and-variables.script.json 1`] = `
-{
-  "script": {
-    "da7a96a8-7969-4dab-9c6e-a812938cc76d": {
-      "_id": "da7a96a8-7969-4dab-9c6e-a812938cc76d",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Script that uses secrets and variables",
-      "evaluatorVersion": "2.0",
-      "exports": [],
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "test-script-with-secrets-and-variables",
-      "script": "file://test-script-with-secrets-and-variables.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --no-deps -i 'bb393d07-a121-47e2-9d24-1a1066f39ec0'": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" 1`] = `0`;
-
-exports[`frodo script export "frodo script export --no-deps -i 'bb393d07-a121-47e2-9d24-1a1066f39ec0'": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" 2`] = `""`;
-
-exports[`frodo script export "frodo script export --no-deps -i 'bb393d07-a121-47e2-9d24-1a1066f39ec0'": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0": bb393d07-a121-47e2-9d24-1a1066f39ec0.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
-      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Script Using Libraries",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "name": "My Example Script Using Libraries",
+      "name": "Alpha endUserUIClient OIDC Claims Script",
       "script": [
-        "/**",
-        " * Testing library scripts",
+        "/*",
+        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
         " */",
-        "var mylib = require('My Example Library');",
-        "var loggers = require('Library Script');",
         "",
-        "mylib.add(1);",
-        "mylib.logTotal(logger);",
-        "mylib.add(3);",
-        "mylib.logTotalWithMessage(logger, mylib.MSG);",
+        "/*",
+        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
+        " * The claim values are computed for:",
+        " * the claims derived from the requested scopes,",
+        " * the claims provided by the authorization server,",
+        " * and the claims requested by the client via the claims parameter.",
+        " *",
+        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
+        " * define the scope-to-claims mapping, and",
+        " * assign to each claim a resolver function that will compute the claim value.",
+        " *",
+        " * Defined variables (class references are provided below):",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * claims - Map<String, Object> (5).",
+        " *          Always present, default server provided claims.",
+        " * claimObjects - List<Claim> (7, 2).",
+        " *                Always present, the default server provided claims.",
+        " * requestedClaims - Map<String, Set<String>> (5).",
+        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
+        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
+        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
+        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
+        " * requestedTypedClaims - List<Claim> (7, 2).",
+        " *                        Always present, the requested claims.",
+        " *                        Requested claims with no requested values will have a claim with no values.",
+        " *                        A claim with a single value indicates this is the only value that should be returned.",
+        " * claimsLocales - List<String> (7).",
+        " *                 The values from the 'claims_locales' parameter.",
+        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *              In order to use the client, you may need to add",
+        " *              org.forgerock.http.Client,",
+        " *              org.forgerock.http.protocol.*,",
+        " *              and org.forgerock.util.promise.PromiseImpl",
+        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
+        " *",
+        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *          See RESULTS section for additional details.",
+        " *",
+        " * Class reference:",
+        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
+        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
+        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
+        " *         the claim name, requested values, locale, and whether the claim is essential.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        "*/",
+        "",
+        "(function () {",
+        "    // SETUP",
+        "",
+        "    /**",
+        "     * Claim processing utilities.",
+        "     * An object that contains reusable functions for processing claims.",
+        "     * @see CLAIM PROCESSING UTILITIES section for details.",
+        "     */",
+        "    var utils = getUtils();",
+        "",
+        "    // CONFIGURATION AND CUSTOMIZATION",
+        "",
+        "    /**",
+        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a scope value to an array of claim names",
+        "     * to specify which claims need to be processed and returned for the requested scopes.",
+        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
+        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can choose the claim names returned for a scope.",
+        "     */",
+        "    utils.setScopeClaimsMap({",
+        "        profile: [",
+        "            'name',",
+        "            'family_name',",
+        "            'given_name',",
+        "            'zoneinfo',",
+        "            'locale'",
+        "        ],",
+        "        email: ['email'],",
+        "        address: ['address'],",
+        "        phone: ['phone_number']",
+        "    });",
+        "",
+        "    /**",
+        "     * In this script, each claim",
+        "     * derived from the requested scopes,",
+        "     * provided by the authorization server, and",
+        "     * requested by the client via the claims parameter",
+        "     * will be processed by a function associated with the claim name.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a claim name to a resolver function,",
+        "     * which will be automatically executed for each claim processed by the script.",
+        "     *",
+        "     * The claim resolver function will receive the requested claim information",
+        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
+        "     * for details on the Claim class.",
+        "     *",
+        "     * If the claim resolver function returns a value,",
+        "     * other than undefined or null,",
+        "     * the claim will be included in the script's results.",
+        "     *",
+        "     * The Claim instance provides methods to check",
+        "     * what the name of the claim is,",
+        "     * which values the claim request contains,",
+        "     * whether the claim is essential, and",
+        "     * which locale the claim is associated with.",
+        "     * The resolver function can consider this information when computing and returning the claim value.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
+        "     * is called to return a claim resolver function based on a user profile attribute.",
+        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
+        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can reuse the predefined utils methods with your custom arguments.",
+        "     * You can also specify a custom resolver function for a claim name,",
+        "     * that will compute and return the claim value—as shown in the commented out example below.",
+        "     */",
+        "    utils.setClaimResolvers({",
+        "        /*",
+        "        // An example of a simple claim resolver function that is defined for a claim",
+        "        // directly in the configuration object:",
+        "        custom-claim-name: function (requestedClaim) {",
+        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
+        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "",
+        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
+        "            // You can use:",
+        "            // requestedClaim.getName()",
+        "            // requestedClaim.getValues()",
+        "            // requestedClaim.getLocale()",
+        "            // requestedClaim.isEssential()",
+        "",
+        "            return claimValue",
+        "        },",
+        "        */",
+        "        /**",
+        "         * The use of utils.getUserProfileClaimResolver shows how",
+        "         * an argument passed to a function that returns a claim resolver",
+        "         * becomes available to the resolver function (via its lexical context).",
+        "         */",
+        "        name: utils.getUserProfileClaimResolver('cn'),",
+        "        family_name: utils.getUserProfileClaimResolver('sn'),",
+        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
+        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
+        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
+        "        email: utils.getUserProfileClaimResolver('mail'),",
+        "        address: utils.getAddressClaimResolver(",
+        "            /**",
+        "             * The passed in user profile claim resolver function",
+        "             * can be used by the address claim resolver function",
+        "             * to obtain the claim value to be formatted as per the OIDC specification:",
+        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             */",
+        "            utils.getUserProfileClaimResolver('postaladdress')",
+        "        ),",
+        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
+        "    });",
+        "",
+        "    // CLAIM PROCESSING UTILITIES",
+        "",
+        "    /**",
+        "     * @returns {object} An object that contains reusable claim processing utilities.",
+        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
+        "     */",
+        "    function getUtils () {",
+        "        // IMPORT JAVA",
+        "",
+        "        /**",
+        "         * Provides Java scripting functionality.",
+        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
+        "         */",
+        "        var frJava = JavaImporter(",
+        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
+        "            org.forgerock.oauth2.core.UserInfoClaims,",
+        "            org.forgerock.openidconnect.Claim,",
+        "",
+        "            java.util.LinkedHashMap,",
+        "            java.util.ArrayList",
+        "        );",
+        "",
+        "        // SET UP CONFIGURATION",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported scope values (scopes)",
+        "         * and the corresponding claim names for each scope value.",
+        "         */",
+        "        var scopeClaimsMap;",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value.",
+        "         */",
+        "        var claimResolvers;",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
+        "         * in order to specify which claims need to be processed for the requested scopes.",
+        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
+        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
+        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
+        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
+        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
+        "         * @returns {undefined}",
+        "         */",
+        "        function setScopeClaimsMap(params) {",
+        "            scopeClaimsMap = params;",
+        "        }",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps",
+        "         * each supported claim name to a function that computes and returns the claim value.",
+        "         */",
+        "        function setClaimResolvers(params) {",
+        "            claimResolvers = params;",
+        "        }",
+        "",
+        "        // CLAIM RESOLVERS",
+        "",
+        "        /**",
+        "         * Claim resolvers are functions that return a claim value.",
+        "         * @param {*}",
+        "         * @returns {*}",
+        "         */",
+        "",
+        "        /**",
+        "         * Defines a claim resolver based on a user profile attribute.",
+        "         * @param {string} attributeName - Name of the user profile attribute.",
+        "         * @returns {function} A function that will determine the claim value",
+        "         * based on the user profile attribute and the (requested) claim properties.",
+        "         */",
+        "        function getUserProfileClaimResolver (attributeName) {",
+        "            /**",
+        "             * Resolves a claim with a user profile attribute value.",
+        "             * Returns undefined if the identity attribute is not populated,",
+        "             * OR if the claim has requested values that do not contain the identity attribute value.",
+        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {string|HashSet|undefined}",
+        "             */",
+        "            function resolveClaim(claim) {",
+        "                var userProfileValue;",
+        "",
+        "                if (identity) {",
+        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "",
+        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
+        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
+        "                            return userProfileValue;",
+        "                        }",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            return resolveClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional formatting to the value before returning it.",
+        "         */",
+        "        function getAddressClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Creates an address claim object from a value returned by a claim resolver,",
+        "             * and returns the address claim object as the claim value.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
+        "             */",
+        "            function resolveAddressClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "                var addressObject;",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    addressObject = new frJava.LinkedHashMap();",
+        "",
+        "                    addressObject.put('formatted', claimValue);",
+        "",
+        "                    return addressObject;",
+        "                }",
+        "            }",
+        "",
+        "            return resolveAddressClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional logic for essential claims.",
+        "         */",
+        "        function getEssentialClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Returns a claim value or throws an error.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
+        "             *",
+        "             * Use of this resolver is optional.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
+        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
+        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
+        "             * unless otherwise specified in the description of the specific claim."",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*}",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             */",
+        "            function resolveEssentialClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "",
+        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
+        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
+        "                }",
         "",
-        "outcome = 'true';",
+        "                return claimValue;",
+        "            }",
         "",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export --script-name 'GitHub Profile Normalization'": should export the script named "GitHub Profile Normalization" 1`] = `0`;
-
-exports[`frodo script export "frodo script export --script-name 'GitHub Profile Normalization'": should export the script named "GitHub Profile Normalization" 2`] = `""`;
-
-exports[`frodo script export "frodo script export --script-name 'GitHub Profile Normalization'": should export the script named "GitHub Profile Normalization": GitHub-Profile-Normalization.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "a7a78773-445b-4eca-bb93-409e86bced81": {
-      "_id": "a7a78773-445b-4eca-bb93-409e86bced81",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "GitHub Profile Normalization",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "            return resolveEssentialClaim;",
+        "        }",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "        /**",
+        "         * Provides default resolution for a claim.",
+        "         * Use it if a claim-specific resolver is not defined in the configuration.",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @returns {*} A single value associated with this claim.",
+        "         */",
+        "        function resolveAnyClaim (claim) {",
+        "            if (claim.getValues().size() === 1) {",
+        "                return claim.getValues().toArray()[0];",
+        "            }",
+        "        }",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("username", rawProfile.login)))",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files 1`] = `0`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files 2`] = `""`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: ADFS-Profile-Normalization-(JS).script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "dbe0bf9a-72aa-49d5-8483-9db147985a47": {
-      "_id": "dbe0bf9a-72aa-49d5-8483-9db147985a47",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from ADFS",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "ADFS Profile Normalization (JS)",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "        // UTILITIES",
         "",
-        "/*",
-        " * This script returns the social identity profile information for the authenticating user",
-        " * in a standard form expected by the Social Provider Handler Node.",
-        " *",
-        " * Defined variables:",
-        " * rawProfile - The social identity provider profile information for the authenticating user.",
-        " *              JsonValue (1).",
-        " * logger - The debug logger instance:",
-        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " * realm - String (primitive).",
-        " *         The name of the realm the user is authenticating to.",
-        " * requestHeaders - TreeMap (2).",
-        " *                  The object that provides methods for accessing headers in the login request:",
-        " *                  https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.",
-        " * requestParameters - TreeMap (2).",
-        " *                     The object that contains the authentication request parameters.",
-        " * selectedIdp - String (primitive).",
-        " *               The social identity provider name. For example: google.",
-        " * sharedState - LinkedHashMap (3).",
-        " *               The object that holds the state of the authentication tree and allows data exchange between the stateless nodes:",
-        " *               https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
-        " * transientState - LinkedHashMap (3).",
-        " *                  The object for storing sensitive information that must not leave the server unencrypted,",
-        " *                  and that may not need to persist between authentication requests during the authentication session:",
-        " *                  https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
-        " *",
-        " * Return - a JsonValue (1).",
-        " *          The result of the last statement in the script is returned to the server.",
-        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
-        " *          is the last (and only) statement in this script, and its return value will become the script result.",
-        " *          Do not use "return variable" statement outside of a function definition.",
-        " *",
-        " *          This script's last statement should result in a JsonValue (1) with the following keys:",
-        " *          {",
-        " *              {"displayName": "corresponding-social-identity-provider-value"},",
-        " *              {"email": "corresponding-social-identity-provider-value"},",
-        " *              {"familyName": "corresponding-social-identity-provider-value"},",
-        " *              {"givenName": "corresponding-social-identity-provider-value"},",
-        " *              {"id": "corresponding-social-identity-provider-value"},",
-        " *              {"locale": "corresponding-social-identity-provider-value"},",
-        " *              {"photoUrl": "corresponding-social-identity-provider-value"},",
-        " *              {"username": "corresponding-social-identity-provider-value"}",
-        " *          }",
-        " *",
-        " *          The consumer of this data defines which keys are required and which are optional.",
-        " *          For example, the script associated with the Social Provider Handler Node and,",
-        " *          ultimately, the managed object created/updated with this data",
-        " *          will expect certain keys to be populated.",
-        " *          In some common default configurations, the following keys are required to be not empty:",
-        " *          username, givenName, familyName, email.",
-        " *",
-        " *          From RFC4517: A value of the Directory String syntax is a string of one or more",
-        " *          arbitrary characters from the Universal Character Set (UCS).",
-        " *          A zero-length character string is not permitted.",
-        " *",
-        " * (1) JsonValue - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/json/JsonValue.html.",
-        " * (2) TreeMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/TreeMap.html.",
-        " * (3) LinkedHashMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
-        " */",
+        "        /**",
+        "         * Returns claim value from a set.",
+        "         * If the set contains a single value, returns the value.",
+        "         * If the set contains multiple values, returns the set.",
+        "         * Otherwise, returns undefined.",
+        "         *",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
+        "         * @returns {string|java.util.HashSet|undefined}",
+        "         */",
+        "        function getClaimValueFromSet (claim, set) {",
+        "            if (set && set.size()) {",
+        "                if (set.size() === 1) {",
+        "                    return set.toArray()[0];",
+        "                } else {",
+        "                    return set;",
+        "                }",
+        "            } else if (logger.warningEnabled()) {",
+        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            }",
+        "        }",
         "",
-        "(function () {",
-        "    var frJava = JavaImporter(",
-        "        org.forgerock.json.JsonValue",
-        "    );",
+        "        function isClaimValueValid (claimValue) {",
+        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
+        "                return false;",
+        "            }",
+        "",
+        "            return true;",
+        "        }",
+        "",
+        "        // CLAIM PROCESSING",
+        "",
+        "        /**",
+        "         * Constructs and returns an object populated with the computed claim values",
+        "         * and the requested scopes mapped to the claim names.",
+        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "         * @see RESULTS section for the use of this function.",
+        "         */",
+        "        function getUserInfoClaims () {",
+        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of (requested) claim names populated with the computed claim values.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         * A map of the requested claim names and the corresponding claim values.",
+        "         */",
+        "        function getComputedClaims () {",
+        "            /**",
+        "             * Creates a complete list of claim objects from:",
+        "             * the claims derived from the scopes,",
+        "             * the claims provided by the authorization server,",
+        "             * and the claims requested by the client.",
+        "             * @returns {java.util.ArrayList}",
+        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "             */",
+        "            function getClaims() {",
+        "                /**",
+        "                 * Returns a list of claim objects for the requested scopes.",
+        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
+        "                 * no other properties of a claim derived from a scope are populated.",
+        "                 * @returns {java.util.ArrayList}",
+        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
+        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "                 */",
+        "                function convertScopeToClaims() {",
+        "                    var claims = new frJava.ArrayList();",
+        "",
+        "                    scopes.toArray().forEach(function (scope) {",
+        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
+        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                                claims.add(new frJava.Claim(claimName));",
+        "                            });",
+        "                        }",
+        "                    });",
         "",
-        "    var normalizedProfileData = frJava.JsonValue.json(frJava.JsonValue.object());",
-        "  ",
-        "      //logger.message('Seguin rawProfile: '+rawProfile);",
+        "                    return claims;",
+        "                }",
         "",
-        "    normalizedProfileData.put('id', rawProfile.get('sub').asString());",
-        "    normalizedProfileData.put('displayName', rawProfile.get('givenName').asString() + ' ' + rawProfile.get('sn').asString());",
-        "    normalizedProfileData.put('email', rawProfile.get('mail').asString());",
-        "    normalizedProfileData.put('givenName', rawProfile.get('givenName').asString());",
-        "    normalizedProfileData.put('familyName', rawProfile.get('sn').asString());",
-        "    normalizedProfileData.put('username', rawProfile.get('upn').asString());",
-        "    normalizedProfileData.put('roles', rawProfile.get('roles').asString());",
-        "  ",
-        "      //logger.message('Seguin normalizedProfileData: '+normalizedProfileData);",
+        "                var claims = new frJava.ArrayList();",
         "",
-        "    return normalizedProfileData;",
-        "}());",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "39c08084-1238-43e8-857f-2e11005eac49": {
-      "_id": "39c08084-1238-43e8-857f-2e11005eac49",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Default alpha realm script for OAuth2 Access Token Modification",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Alpha OAuth2 Access Token Modification Script",
-      "script": [
-        "/*",
-        " * Copyright 2019-2021 ForgeRock AS. All Rights Reserved.",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "                claims.addAll(convertScopeToClaims());",
+        "                claims.addAll(claimObjects);",
+        "                claims.addAll(requestedTypedClaims);",
         "",
-        "/*",
-        " * This script lets you modify information associated with an OAuth2 access token",
-        " * with methods provided by the AccessToken (1) interface.",
-        " * The changes made to OAuth2 access tokens will directly impact the size of the CTS tokens,",
-        " * and, similarly, the size of the JWTs if client-based OAuth2 tokens are utilized.",
-        " * When adding/updating fields make sure that the token size remains within client/user-agent limits.",
-        " *",
-        " * Defined variables:",
-        " * accessToken - AccessToken (1).",
-        " *               The access token to be updated.",
-        " *               Mutable object, all changes to the access token will be reflected.",
-        " * scopes - Set<String> (6).",
-        " *          Always present, the requested scopes.",
-        " * requestProperties - Unmodifiable Map (5).",
-        " *                     Always present, contains a map of request properties:",
-        " *                     requestUri - The request URI.",
-        " *                     realm - The realm that the request relates to.",
-        " *                     requestParams - A map of the request params and/or posted data.",
-        " *                                     Each value is a list of one or more properties.",
-        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
-        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
-        " * clientProperties - Unmodifiable Map (5).",
-        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
-        " *                    clientId - The client's URI for the request locale.",
-        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
-        " *                    allowedResponseTypes - List of the allowed response types for the client.",
-        " *                    allowedScopes - List of the allowed scopes for the client.",
-        " *                    customProperties - A map of the custom properties of the client.",
-        " *                                       Lists or maps will be included as sub-maps; for example:",
-        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
-        " *                                       To add custom properties to a client, update the Custom Properties field",
-        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
-        " * identity - AMIdentity (3).",
-        " *            Always present, the identity of the resource owner.",
-        " * session - SSOToken (4).",
-        " *           Present if the request contains the session cookie, the user's session object.",
-        " * scriptName - String (primitive).",
-        " *              Always present, the display name of the script.",
-        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
-        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *          Corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.",
-        " * httpClient - HTTP Client (8).",
-        " *              Always present, the HTTP Client instance:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
-        " *",
-        " * Return - no value is expected, changes shall be made to the accessToken parameter directly.",
-        " *",
-        " * Class reference:",
-        " * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.",
-        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
-        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
-        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
-        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
-        " */",
+        "                return claims;",
+        "            }",
         "",
-        "/* EXAMPLE",
-        "(function () {",
-        "    var frJava = JavaImporter(",
-        "        org.forgerock.http.protocol.Request,",
-        "        org.forgerock.http.protocol.Response",
-        "    );",
+        "            /**",
+        "             * Computes and returns a claim value.",
+        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
+        "             * @see claimResolvers",
+        "             * If no resolver function is found, uses the default claim resolver function.",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*} Claim value.",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             * Rethrows this exception if a claim resolver throws it.",
+        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
+        "             * if you want to terminate the claim processing.",
+        "             */",
+        "            function computeClaim(claim) {",
+        "                var resolveClaim;",
+        "                var message;",
         "",
-        "    // Always includes this field in the token.",
-        "    accessToken.setField('key1', 'value1');",
+        "                try {",
+        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
         "",
-        "    // Receives and adds to the access token additional values by performing a REST call to an external service.",
-        "    // WARNING: Below, you will find a reference to a third-party site, which is provided only as an example.",
-        "    var uri = 'https://jsonplaceholder.typicode.com/posts';",
+        "                    return resolveClaim(claim);",
+        "                } catch (e) {",
+        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
         "",
-        "    try {",
-        "        var request = new frJava.Request();",
+        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
+        "                        throw e;",
+        "                    }",
         "",
-        "        // You can chain methods that return the request object.",
-        "        request.setUri(uri)",
-        "            .setMethod('POST')",
-        "            .setEntity(JSON.stringify({",
-        "                updatedFields: {",
-        "                    key2: 'value2',",
-        "                    key3: 'value3'",
+        "                    if (logger.warningEnabled()) {",
+        "                        logger.warning(message);",
+        "                    }",
         "                }",
-        "            }));",
+        "            }",
         "",
-        "        // You can call a method when chaining is not possible.",
-        "        request.getHeaders().add('Content-Type', 'application/json; charset=UTF-8');",
+        "            var computedClaims = new frJava.LinkedHashMap();",
         "",
-        "        // Sends the request and receives the response.",
-        "        var response = httpClient.send(request).getOrThrow();",
+        "            getClaims().toArray().forEach(function (claim) {",
+        "                var claimValue = computeClaim(claim);",
         "",
-        "        // Checks if the response status is as expected.",
-        "        if (response.getStatus() === org.forgerock.http.protocol.Status.CREATED) {",
-        "            var result = JSON.parse(response.getEntity().getString());",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    computedClaims.put(claim.getName(), claimValue);",
+        "                } else {",
+        "                    /**",
+        "                     * If a claim has been processed, but appears in the list again,",
+        "                     * and its value cannot be computed under the new conditions,",
+        "                     * the claim is removed from the final result.",
+        "                     *",
+        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
+        "                     * but also requested by the client with required values that don't match the computed one.",
+        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
+        "                     * for the relevant OIDC specification details.",
+        "                     */",
+        "                    computedClaims.remove(claim.getName());",
+        "                }",
+        "            });",
         "",
-        "            // Set multiple token fields at once.",
-        "            accessToken.setFields(result.updatedFields);",
-        "        } else {",
-        "            logger.error('Unable to obtain access token modifications. Status: ' + response.getStatus() + '. Content: ' + response.getEntity().getString());",
+        "            return computedClaims;",
         "        }",
-        "    } catch (e) {",
-        "        logger.error('The request processing was interrupted. ' + e);",
         "",
-        "        // The access token request fails with the HTTP 500 error in this case.",
-        "        throw ('Unable to obtain response from: ' + uri);",
-        "    }",
+        "        /**",
+        "         * Creates a map of requested scopes and the corresponding claim names.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         */",
+        "        function getCompositeScopes () {",
+        "            var compositeScopes = new frJava.LinkedHashMap();",
         "",
-        "    // Adds new fields containing identity attribute values to the access token.",
-        "    accessToken.setField('mail', identity.getAttribute('mail'));",
-        "    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);",
+        "            scopes.toArray().forEach(function (scope) {",
+        "                var scopeClaims = new frJava.ArrayList();",
         "",
-        "    // Adds new fields containing the session property values.",
-        "    // NOTE: session may not be available for non-interactive authorization grants.",
-        "    if (session) {",
-        "        try {",
-        "            accessToken.setField('ipAddress', session.getProperty('Host'));",
-        "        } catch (e) {",
-        "            logger.error('Unable to retrieve session property value. ' + e);",
+        "                if (scopeClaimsMap[scope]) {",
+        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                        scopeClaims.add(claimName);",
+        "                    });",
+        "                }",
+        "",
+        "                if (scopeClaims.size()) {",
+        "                    compositeScopes.put(scope, scopeClaims);",
+        "                }",
+        "            });",
+        "",
+        "            return compositeScopes;",
         "        }",
+        "",
+        "        // PUBLIC METHODS",
+        "",
+        "        return {",
+        "            setScopeClaimsMap: setScopeClaimsMap,",
+        "            setClaimResolvers: setClaimResolvers,",
+        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
+        "            getAddressClaimResolver: getAddressClaimResolver,",
+        "            getEssentialClaimResolver: getEssentialClaimResolver,",
+        "            getUserInfoClaims: getUserInfoClaims",
+        "        };",
         "    }",
         "",
-        "    // Removes a native field from the token entry, that was set by AM.",
-        "    // WARNING: removing native fields from the token may result in loss of functionality.",
-        "    // accessToken.removeTokenName()",
+        "    // RESULTS",
+        "",
+        "    /**",
+        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
+        "     * populated with the computed claim values and",
+        "     * the requested scopes mapped to the claim names.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "     *",
+        "     * Assigning it to a variable gives you an opportunity",
+        "     * to log the content of the returned value during development.",
+        "     */",
+        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "",
+        "    /*",
+        "    logger.error(scriptName + ' results:')",
+        "    logger.error('Values: ' + userInfoClaims.getValues())",
+        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
+        "    */",
         "",
-        "    // No return value is expected. Let it be undefined.",
+        "    return userInfoClaims;",
         "}());",
-        "*/",
         "",
       ],
     },
@@ -13010,1317 +5039,1426 @@ exports[`frodo script export "frodo script export -A": should export all scripts
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-OIDC-Claims-Script.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Amazon-Profile-Normalization.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "cf3515f0-8278-4ee3-a530-1bad7424c416": {
-      "_id": "cf3515f0-8278-4ee3-a530-1bad7424c416",
-      "context": "OIDC_CLAIMS",
+    "6b3cfd48-62d3-48ff-a96f-fe8f3a22ab30": {
+      "_id": "6b3cfd48-62d3-48ff-a96f-fe8f3a22ab30",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "Default alpha realm script for OIDC claims",
+      "default": true,
+      "description": "Normalizes raw profile data from Amazon",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Alpha OIDC Claims Script",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Amazon Profile Normalization",
       "script": [
         "/*",
-        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
         " * or with one of its affiliates. All use shall be exclusively subject",
         " * to such license between the licensee and ForgeRock AS.",
         " */",
         "",
-        "/*",
-        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
-        " * The claim values are computed for:",
-        " * the claims derived from the requested scopes,",
-        " * the claims provided by the authorization server,",
-        " * and the claims requested by the client via the claims parameter.",
-        " *",
-        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
-        " * define the scope-to-claims mapping, and",
-        " * assign to each claim a resolver function that will compute the claim value.",
-        " *",
-        " * Defined variables (class references are provided below):",
-        " * scopes - Set<String> (6).",
-        " *          Always present, the requested scopes.",
-        " * claims - Map<String, Object> (5).",
-        " *          Always present, default server provided claims.",
-        " * claimObjects - List<Claim> (7, 2).",
-        " *                Always present, the default server provided claims.",
-        " * requestedClaims - Map<String, Set<String>> (5).",
-        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
-        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
-        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
-        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
-        " * requestedTypedClaims - List<Claim> (7, 2).",
-        " *                        Always present, the requested claims.",
-        " *                        Requested claims with no requested values will have a claim with no values.",
-        " *                        A claim with a single value indicates this is the only value that should be returned.",
-        " * claimsLocales - List<String> (7).",
-        " *                 The values from the 'claims_locales' parameter.",
-        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
-        " * requestProperties - Unmodifiable Map (5).",
-        " *                     Always present, contains a map of request properties:",
-        " *                     requestUri - The request URI.",
-        " *                     realm - The realm that the request relates to.",
-        " *                     requestParams - A map of the request params and/or posted data.",
-        " *                                     Each value is a list of one or more properties.",
-        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
-        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
-        " * clientProperties - Unmodifiable Map (5).",
-        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
-        " *                    clientId - The client's URI for the request locale.",
-        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
-        " *                    allowedResponseTypes - List of the allowed response types for the client.",
-        " *                    allowedScopes - List of the allowed scopes for the client.",
-        " *                    customProperties - A map of the custom properties of the client.",
-        " *                                       Lists or maps will be included as sub-maps; for example:",
-        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
-        " *                                       To add custom properties to a client, update the Custom Properties field",
-        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
-        " * identity - AMIdentity (3).",
-        " *            Always present, the identity of the resource owner.",
-        " * session - SSOToken (4).",
-        " *           Present if the request contains the session cookie, the user's session object.",
-        " * scriptName - String (primitive).",
-        " *              Always present, the display name of the script.",
-        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
-        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
-        " * httpClient - HTTP Client (8).",
-        " *              Always present, the HTTP Client instance:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
-        " *              In order to use the client, you may need to add",
-        " *              org.forgerock.http.Client,",
-        " *              org.forgerock.http.protocol.*,",
-        " *              and org.forgerock.util.promise.PromiseImpl",
-        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
-        " *",
-        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
-        " *          The result of the last statement in the script is returned to the server.",
-        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
-        " *          is the last (and only) statement in this script, and its return value will become the script result.",
-        " *          Do not use "return variable" statement outside of a function definition.",
-        " *          See RESULTS section for additional details.",
-        " *",
-        " * Class reference:",
-        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
-        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
-        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
-        " *         the claim name, requested values, locale, and whether the claim is essential.",
-        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
-        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
-        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
-        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
-        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
-        "*/",
-        "",
-        "(function () {",
-        "    // SETUP",
-        "",
-        "    /**",
-        "     * Claim processing utilities.",
-        "     * An object that contains reusable functions for processing claims.",
-        "     * @see CLAIM PROCESSING UTILITIES section for details.",
-        "     */",
-        "    var utils = getUtils();",
-        "",
-        "    // CONFIGURATION AND CUSTOMIZATION",
-        "",
-        "    /**",
-        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
-        "     *",
-        "     * Call this configuration method, and pass in as the first argument",
-        "     * an object that maps a scope value to an array of claim names",
-        "     * to specify which claims need to be processed and returned for the requested scopes.",
-        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
-        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
-        "     *",
-        "     * Below, find a default configuration that is expected to work in the current environment.",
-        "     *",
-        "     * CUSTOMIZATION",
-        "     * You can choose the claim names returned for a scope.",
-        "     */",
-        "    utils.setScopeClaimsMap({",
-        "        profile: [",
-        "            'name',",
-        "            'family_name',",
-        "            'given_name',",
-        "            'zoneinfo',",
-        "            'locale'",
-        "        ],",
-        "        email: ['email'],",
-        "        address: ['address'],",
-        "        phone: ['phone_number']",
-        "    });",
-        "",
-        "    /**",
-        "     * In this script, each claim",
-        "     * derived from the requested scopes,",
-        "     * provided by the authorization server, and",
-        "     * requested by the client via the claims parameter",
-        "     * will be processed by a function associated with the claim name.",
-        "     *",
-        "     * Call this configuration method, and pass in as the first argument",
-        "     * an object that maps a claim name to a resolver function,",
-        "     * which will be automatically executed for each claim processed by the script.",
-        "     *",
-        "     * The claim resolver function will receive the requested claim information",
-        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
-        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
-        "     * for details on the Claim class.",
-        "     *",
-        "     * If the claim resolver function returns a value,",
-        "     * other than undefined or null,",
-        "     * the claim will be included in the script's results.",
-        "     *",
-        "     * The Claim instance provides methods to check",
-        "     * what the name of the claim is,",
-        "     * which values the claim request contains,",
-        "     * whether the claim is essential, and",
-        "     * which locale the claim is associated with.",
-        "     * The resolver function can consider this information when computing and returning the claim value.",
-        "     *",
-        "     * Below, find a default configuration that is expected to work in the current environment.",
-        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
-        "     * is called to return a claim resolver function based on a user profile attribute.",
-        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
-        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
-        "     *",
-        "     * CUSTOMIZATION",
-        "     * You can reuse the predefined utils methods with your custom arguments.",
-        "     * You can also specify a custom resolver function for a claim name,",
-        "     * that will compute and return the claim value—as shown in the commented out example below.",
-        "     */",
-        "    utils.setClaimResolvers({",
-        "        /*",
-        "        // An example of a simple claim resolver function that is defined for a claim",
-        "        // directly in the configuration object:",
-        "        custom-claim-name: function (requestedClaim) {",
-        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
-        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
-        "",
-        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
-        "            // You can use:",
-        "            // requestedClaim.getName()",
-        "            // requestedClaim.getValues()",
-        "            // requestedClaim.getLocale()",
-        "            // requestedClaim.isEssential()",
-        "",
-        "            return claimValue",
-        "        },",
-        "        */",
-        "        /**",
-        "         * The use of utils.getUserProfileClaimResolver shows how",
-        "         * an argument passed to a function that returns a claim resolver",
-        "         * becomes available to the resolver function (via its lexical context).",
-        "         */",
-        "        name: utils.getUserProfileClaimResolver('cn'),",
-        "        family_name: utils.getUserProfileClaimResolver('sn'),",
-        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
-        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
-        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
-        "        email: utils.getUserProfileClaimResolver('mail'),",
-        "        address: utils.getAddressClaimResolver(",
-        "            /**",
-        "             * The passed in user profile claim resolver function",
-        "             * can be used by the address claim resolver function",
-        "             * to obtain the claim value to be formatted as per the OIDC specification:",
-        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
-        "             */",
-        "            utils.getUserProfileClaimResolver('postaladdress')",
-        "        ),",
-        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
-        "    });",
-        "",
-        "    // CLAIM PROCESSING UTILITIES",
-        "",
-        "    /**",
-        "     * @returns {object} An object that contains reusable claim processing utilities.",
-        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
-        "     */",
-        "    function getUtils () {",
-        "        // IMPORT JAVA",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "        /**",
-        "         * Provides Java scripting functionality.",
-        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
-        "         */",
-        "        var frJava = JavaImporter(",
-        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
-        "            org.forgerock.oauth2.core.UserInfoClaims,",
-        "            org.forgerock.openidconnect.Claim,",
+        "return json(object(",
+        "        field("id", rawProfile.user_id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Apple-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "484e6246-dbc6-4288-97e6-54e55431402e": {
+      "_id": "484e6246-dbc6-4288-97e6-54e55431402e",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from Apple",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Apple Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " *",
+        " * In some common default configurations, the following keys are required to be not empty:",
+        " * username, givenName, familyName, email.",
+        " *",
+        " * From RFC4517: A value of the Directory String syntax is a string of one or more",
+        " * arbitrary characters from the Universal Character Set (UCS).",
+        " * A zero-length character string is not permitted.",
+        " */",
         "",
-        "            java.util.LinkedHashMap,",
-        "            java.util.ArrayList",
-        "        );",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "        // SET UP CONFIGURATION",
+        "String email = "change@me.com"",
+        "String subjectId = rawProfile.sub",
+        "String firstName = " "",
+        "String lastName = " "",
+        "String username = subjectId",
+        "String name",
         "",
-        "        /**",
-        "         * Placeholder for a configuration option that contains",
-        "         * an object that maps the supported scope values (scopes)",
-        "         * and the corresponding claim names for each scope value.",
-        "         */",
-        "        var scopeClaimsMap;",
+        "if (rawProfile.isDefined("email") && rawProfile.email.isNotNull()){ // User can elect to not share their email",
+        "    email = rawProfile.email.asString()",
+        "    username = email",
+        "}",
+        "if (rawProfile.isDefined("name") && rawProfile.name.isNotNull()) {",
+        "    if (rawProfile.name.isDefined("firstName") && rawProfile.name.firstName.isNotNull()) {",
+        "        firstName = rawProfile.name.firstName.asString()",
+        "    }",
+        "    if (rawProfile.name.isDefined("lastName") && rawProfile.name.lastName.isNotNull()) {",
+        "        lastName = rawProfile.name.lastName.asString()",
+        "    }",
+        "}",
         "",
-        "        /**",
-        "         * Placeholder for a configuration option that contains",
-        "         * an object that maps the supported claim names",
-        "         * and the resolver functions returning the claim value.",
-        "         */",
-        "        var claimResolvers;",
+        "name = (firstName?.trim() ? firstName : "") + (lastName?.trim() ? ((firstName?.trim() ? " " : "") + lastName) : "")",
+        "name =  (!name?.trim()) ? " " : name",
         "",
-        "        /**",
-        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
-        "         * and assigns it to a (private) variable that serves as a configuration option.",
-        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
-        "         * in order to specify which claims need to be processed for the requested scopes.",
-        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
-        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
-        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
-        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
-        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
-        "         * @returns {undefined}",
-        "         */",
-        "        function setScopeClaimsMap(params) {",
-        "            scopeClaimsMap = params;",
-        "        }",
+        "return json(object(",
+        "        field("id", subjectId),",
+        "        field("displayName", name),",
+        "        field("email", email),",
+        "        field("givenName", firstName),",
+        "        field("familyName", lastName),",
+        "        field("username", username)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Authentication-Tree-Decision-Node-Script.script.json 1`] = `
+{
+  "script": {
+    "01e1a3c0-038b-4c16-956a-6c9d89328cff": {
+      "_id": "01e1a3c0-038b-4c16-956a-6c9d89328cff",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for a scripted decision node",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Authentication Tree Decision Node Script",
+      "script": [
+        "/*",
+        "  - Data made available by nodes that have already executed are available in the sharedState variable.",
+        "  - The script should set outcome to either "true" or "false".",
+        " */",
         "",
-        "        /**",
-        "         * A (public) method that accepts an object that maps the supported claim names",
-        "         * and the resolver functions returning the claim value,",
-        "         * and assigns it to a (private) variable that serves as a configuration option.",
-        "         * @param {object} params - An object that maps",
-        "         * each supported claim name to a function that computes and returns the claim value.",
-        "         */",
-        "        function setClaimResolvers(params) {",
-        "            claimResolvers = params;",
-        "        }",
+        "outcome = "true";",
         "",
-        "        // CLAIM RESOLVERS",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Check-Username.script.json 1`] = `
+{
+  "script": {
+    "739bdc48-fd24-4c52-b353-88706d75558a": {
+      "_id": "739bdc48-fd24-4c52-b353-88706d75558a",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Check if username has already been collected.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Check Username",
+      "script": [
+        "/* Check Username",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Check if username has already been collected.",
+        " * Return "known" if yes, "unknown" otherwise.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - known",
+        " * - unknown",
+        " */",
+        "(function () {",
+        "    if (null != sharedState.get("username")) {",
+        "        outcome = "known";",
+        "    }",
+        "    else {",
+        "        outcome = "unknown";",
+        "    }",
+        "}());",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Config-Provider-Node-Script.script.json 1`] = `
+{
+  "script": {
+    "5e854779-6ec1-4c39-aeba-0477e0986646": {
+      "_id": "5e854779-6ec1-4c39-aeba-0477e0986646",
+      "context": "CONFIG_PROVIDER_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Script to provide values for a config provider node",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Config Provider Node Script",
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "        /**",
-        "         * Claim resolvers are functions that return a claim value.",
-        "         * @param {*}",
-        "         * @returns {*}",
-        "         */",
+        "/**",
+        " * The following script is a simplified template for understanding how to build",
+        " * up a config Map object with custom values. The Config Provider Node will then",
+        " * provide this config Map to the desired node type. It is important that the Map",
+        " * you build here is named 'config'.",
+        " *",
+        " * Defined variables:",
+        " *",
+        " * nodeState - Node State (1)",
+        " *           Always present, this represents the current values stored in the node state.",
+        " *",
+        " * idRepository - Profile Data (2)",
+        " *           Always present, a repository to retrieve user information.",
+        " *",
+        " * secrets - Credentials and Secrets (3)",
+        " *           Always present, an interface to access the Secrets API from a scripting context.",
+        " *",
+        " * requestHeaders (4) - Map (5)",
+        " *           Always present, an object that provides methods for accessing headers in the login request.",
+        " *",
+        " * logger - Debug Logging (6)",
+        " *          Always present, the debug logger instance.",
+        " *",
+        " * httpClient - HTTP Client (7)",
+        " *          Always present, the HTTP client that can be used to make external HTTP requests.",
+        " *",
+        " * realm - String (primitive).",
+        " *          Always present, the name of the realm the user is authenticating to.",
+        " *",
+        " * existingSession - Map<String, String> (5)",
+        " *          Present if the request contains the session cookie, the user's session object. The returned map from",
+        " *          SSOToken.getProperties() (8)",
+        " *",
+        " * requestParameters - Map (5)",
+        " *          Always present, the object that contains the authentication request parameters.",
+        " *",
+        " *",
+        " * Outputs:",
+        " *",
+        " * config - Map (5)",
+        " *           Define and fill a Map object named 'config' with custom values, this will define the configuration for the",
+        " *           associated node selected in the ConfigProviderNode.",
+        " *",
+        " * Reference:",
+        " * (1) Node State - https://backstage.forgerock.com/docs/idcloud-am/latest/authentication-guide/scripting-api-node.html#scripting-api-node-nodeState",
+        " * (2) Profile Data - https://backstage.forgerock.com/docs/am/7.1/authentication-guide/scripting-api-node.html#scripting-api-node-id-repo",
+        " * (3) Credentials and Secrets - https://backstage.forgerock.com/docs/am/7.1/authentication-guide/scripting-api-node.html#scripting-api-authn-secrets",
+        " * (4) Request Headers - https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/Map.html",
+        " * (6) Debug Logging - https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " * (7) HTTP Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        " * (8) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " */",
         "",
-        "        /**",
-        "         * Defines a claim resolver based on a user profile attribute.",
-        "         * @param {string} attributeName - Name of the user profile attribute.",
-        "         * @returns {function} A function that will determine the claim value",
-        "         * based on the user profile attribute and the (requested) claim properties.",
-        "         */",
-        "        function getUserProfileClaimResolver (attributeName) {",
-        "            /**",
-        "             * Resolves a claim with a user profile attribute value.",
-        "             * Returns undefined if the identity attribute is not populated,",
-        "             * OR if the claim has requested values that do not contain the identity attribute value.",
-        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {string|HashSet|undefined}",
-        "             */",
-        "            function resolveClaim(claim) {",
-        "                var userProfileValue;",
+        "config = {",
+        "    "key0": {"subKey": "value0"},",
+        "    "key1": "value1"",
+        "};",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Custom-Device-Match-Script.script.json 1`] = `
+{
+  "script": {
+    "d58977ed-0542-4147-8197-973ef7300191": {
+      "_id": "d58977ed-0542-4147-8197-973ef7300191",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Custom Device Match Script",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Custom Device Match Script",
+      "script": [
+        "/*",
+        " * Custom Device Match Script",
+        " */",
         "",
-        "                if (identity) {",
-        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "outcome = "true";",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Id-(Match)-Client-Side.script.json 1`] = `
+{
+  "script": {
+    "157298c0-7d31-4059-a95b-eeb08473b7e5": {
+      "_id": "157298c0-7d31-4059-a95b-eeb08473b7e5",
+      "context": "AUTHENTICATION_CLIENT_SIDE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for client side Device Id (Match) Authentication Module",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Device Id (Match) - Client Side",
+      "script": [
+        "/*",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
-        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
-        "                            return userProfileValue;",
-        "                        }",
-        "                    }",
-        "                }",
-        "            }",
+        "var fontDetector = (function () {",
+        "    /**",
+        "     * JavaScript code to detect available availability of a",
+        "     * particular font in a browser using JavaScript and CSS.",
+        "     *",
+        "     * Author : Lalit Patel",
+        "     * Website: http://www.lalit.org/lab/javascript-css-font-detect/",
+        "     * License: Apache Software License 2.0",
+        "     *          http://www.apache.org/licenses/LICENSE-2.0",
+        "     * Version: 0.15 (21 Sep 2009)",
+        "     *          Changed comparision font to default from sans-default-default,",
+        "     *          as in FF3.0 font of child element didn't fallback",
+        "     *          to parent element if the font is missing.",
+        "     * Version: 0.2 (04 Mar 2012)",
+        "     *          Comparing font against all the 3 generic font families ie,",
+        "     *          'monospace', 'sans-serif' and 'sans'. If it doesn't match all 3",
+        "     *          then that font is 100% not available in the system",
+        "     * Version: 0.3 (24 Mar 2012)",
+        "     *          Replaced sans with serif in the list of baseFonts",
+        "     */",
+        "    /*",
+        "     * Portions Copyrighted 2013 ForgeRock AS.",
+        "     */",
+        "    var detector = {}, baseFonts, testString, testSize, h, s, defaultWidth = {}, defaultHeight = {}, index;",
         "",
-        "            return resolveClaim;",
-        "        }",
+        "    // a font will be compared against all the three default fonts.",
+        "    // and if it doesn't match all 3 then that font is not available.",
+        "    baseFonts = ['monospace', 'sans-serif', 'serif'];",
         "",
-        "        /**",
-        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
-        "         * @param {function} resolveClaim - A function that returns a claim value.",
-        "         * @returns {function} A function that will accept a claim as an argument,",
-        "         * run the claim resolver function for the claim and obtain the claim value,",
-        "         * and apply additional formatting to the value before returning it.",
-        "         */",
-        "        function getAddressClaimResolver (resolveClaim) {",
-        "            /**",
-        "             * Creates an address claim object from a value returned by a claim resolver,",
-        "             * and returns the address claim object as the claim value.",
-        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
-        "             * The claim value is obtained with a claim resolving function available from the closure.",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
-        "             */",
-        "            function resolveAddressClaim(claim) {",
-        "                var claimValue = resolveClaim(claim);",
-        "                var addressObject;",
+        "    //we use m or w because these two characters take up the maximum width.",
+        "    // And we use a LLi so that the same matching fonts can get separated",
+        "    testString = "mmmmmmmmmmlli";",
         "",
-        "                if (isClaimValueValid(claimValue)) {",
-        "                    addressObject = new frJava.LinkedHashMap();",
+        "    //we test using 72px font size, we may use any size. I guess larger the better.",
+        "    testSize = '72px';",
         "",
-        "                    addressObject.put('formatted', claimValue);",
+        "    h = document.getElementsByTagName("body")[0];",
         "",
-        "                    return addressObject;",
-        "                }",
-        "            }",
+        "    // create a SPAN in the document to get the width of the text we use to test",
+        "    s = document.createElement("span");",
+        "    s.style.fontSize = testSize;",
+        "    s.innerHTML = testString;",
+        "    for (index in baseFonts) {",
+        "        //get the default width for the three base fonts",
+        "        s.style.fontFamily = baseFonts[index];",
+        "        h.appendChild(s);",
+        "        defaultWidth[baseFonts[index]] = s.offsetWidth; //width for the default font",
+        "        defaultHeight[baseFonts[index]] = s.offsetHeight; //height for the defualt font",
+        "        h.removeChild(s);",
+        "    }",
         "",
-        "            return resolveAddressClaim;",
+        "    detector.detect = function(font) {",
+        "        var detected = false, index, matched;",
+        "        for (index in baseFonts) {",
+        "            s.style.fontFamily = font + ',' + baseFonts[index]; // name of the font along with the base font for fallback.",
+        "            h.appendChild(s);",
+        "            matched = (s.offsetWidth !== defaultWidth[baseFonts[index]] || s.offsetHeight !== defaultHeight[baseFonts[index]]);",
+        "            h.removeChild(s);",
+        "            detected = detected || matched;",
         "        }",
+        "        return detected;",
+        "    };",
         "",
-        "        /**",
-        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
-        "         * @param {function} resolveClaim - A function that returns a claim value.",
-        "         * @returns {function} A function that will accept a claim as an argument,",
-        "         * run the claim resolver function for the claim and obtain the claim value,",
-        "         * and apply additional logic for essential claims.",
-        "         */",
-        "        function getEssentialClaimResolver (resolveClaim) {",
-        "            /**",
-        "             * Returns a claim value or throws an error.",
-        "             * The claim value is obtained with a claim resolving function available from the closure.",
-        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
-        "             *",
-        "             * Use of this resolver is optional.",
-        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
-        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
-        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
-        "             * unless otherwise specified in the description of the specific claim."",
-        "             *",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {*}",
-        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
-        "             */",
-        "            function resolveEssentialClaim(claim) {",
-        "                var claimValue = resolveClaim(claim);",
-        "",
-        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
-        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
-        "                }",
-        "",
-        "                return claimValue;",
-        "            }",
-        "",
-        "            return resolveEssentialClaim;",
-        "        }",
+        "    return detector;",
+        "}());",
+        "/*",
+        " * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.",
+        " *",
+        " * Copyright (c) 2009 Sun Microsystems Inc. All Rights Reserved",
+        " *",
+        " * The contents of this file are subject to the terms",
+        " * of the Common Development and Distribution License",
+        " * (the License). You may not use this file except in",
+        " * compliance with the License.",
+        " *",
+        " * You can obtain a copy of the License at",
+        " * https://opensso.dev.java.net/public/CDDLv1.0.html or",
+        " * opensso/legal/CDDLv1.0.txt",
+        " * See the License for the specific language governing",
+        " * permission and limitations under the License.",
+        " *",
+        " * When distributing Covered Code, include this CDDL",
+        " * Header Notice in each file and include the License file",
+        " * at opensso/legal/CDDLv1.0.txt.",
+        " * If applicable, add the following below the CDDL Header,",
+        " * with the fields enclosed by brackets [] replaced by",
+        " * your own identifying information:",
+        " * "Portions Copyrighted [year] [name of copyright owner]"",
+        " *",
+        " */",
+        "/*",
+        " * Portions Copyrighted 2013 Syntegrity.",
+        " * Portions Copyrighted 2013-2014 ForgeRock AS.",
+        " */",
         "",
-        "        /**",
-        "         * Provides default resolution for a claim.",
-        "         * Use it if a claim-specific resolver is not defined in the configuration.",
-        "         * @param {org.forgerock.openidconnect.Claim} claim",
-        "         * An object that provides methods to obtain information/requirements associated with a claim.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "         * @returns {*} A single value associated with this claim.",
-        "         */",
-        "        function resolveAnyClaim (claim) {",
-        "            if (claim.getValues().size() === 1) {",
-        "                return claim.getValues().toArray()[0];",
+        "var collectScreenInfo = function () {",
+        "        var screenInfo = {};",
+        "        if (screen) {",
+        "            if (screen.width) {",
+        "                screenInfo.screenWidth = screen.width;",
         "            }",
-        "        }",
         "",
-        "        // UTILITIES",
+        "            if (screen.height) {",
+        "                screenInfo.screenHeight = screen.height;",
+        "            }",
         "",
-        "        /**",
-        "         * Returns claim value from a set.",
-        "         * If the set contains a single value, returns the value.",
-        "         * If the set contains multiple values, returns the set.",
-        "         * Otherwise, returns undefined.",
-        "         *",
-        "         * @param {org.forgerock.openidconnect.Claim} claim",
-        "         * An object that provides methods to obtain information/requirements associated with a claim.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
-        "         * @returns {string|java.util.HashSet|undefined}",
-        "         */",
-        "        function getClaimValueFromSet (claim, set) {",
-        "            if (set && set.size()) {",
-        "                if (set.size() === 1) {",
-        "                    return set.toArray()[0];",
-        "                } else {",
-        "                    return set;",
-        "                }",
-        "            } else if (logger.warningEnabled()) {",
-        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            if (screen.pixelDepth) {",
+        "                screenInfo.screenColourDepth = screen.pixelDepth;",
         "            }",
+        "        } else {",
+        "            console.warn("Cannot collect screen information. screen is not defined.");",
         "        }",
+        "        return screenInfo;",
+        "    },",
+        "    collectTimezoneInfo = function () {",
+        "        var timezoneInfo =  {}, offset = new Date().getTimezoneOffset();",
         "",
-        "        function isClaimValueValid (claimValue) {",
-        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
-        "                return false;",
+        "        if (offset) {",
+        "            timezoneInfo.timezone = offset;",
+        "        } else {",
+        "            console.warn("Cannot collect timezone information. timezone is not defined.");",
+        "        }",
+        "",
+        "        return timezoneInfo;",
+        "    },",
+        "    collectBrowserPluginsInfo = function () {",
+        "",
+        "        if (navigator && navigator.plugins) {",
+        "            var pluginsInfo = {}, i, plugins = navigator.plugins;",
+        "            pluginsInfo.installedPlugins = "";",
+        "",
+        "            for (i = 0; i < plugins.length; i++) {",
+        "                pluginsInfo.installedPlugins = pluginsInfo.installedPlugins + plugins[i].filename + ";";",
         "            }",
         "",
-        "            return true;",
+        "            return pluginsInfo;",
+        "        } else {",
+        "            console.warn("Cannot collect browser plugin information. navigator.plugins is not defined.");",
+        "            return {};",
         "        }",
         "",
-        "        // CLAIM PROCESSING",
+        "    },",
+        "// Getting geolocation takes some time and is done asynchronously, hence need a callback which is called once geolocation is retrieved.",
+        "    collectGeolocationInfo = function (callback) {",
+        "        var geolocationInfo = {},",
+        "            successCallback = function(position) {",
+        "                geolocationInfo.longitude = position.coords.longitude;",
+        "                geolocationInfo.latitude = position.coords.latitude;",
+        "                callback(geolocationInfo);",
+        "            }, errorCallback = function(error) {",
+        "                console.warn("Cannot collect geolocation information. " + error.code + ": " + error.message);",
+        "                callback(geolocationInfo);",
+        "            };",
+        "        if (navigator && navigator.geolocation) {",
+        "            // NB: If user chooses 'Not now' on Firefox neither callback gets called",
+        "            //     https://bugzilla.mozilla.org/show_bug.cgi?id=675533",
+        "            navigator.geolocation.getCurrentPosition(successCallback, errorCallback);",
+        "        } else {",
+        "            console.warn("Cannot collect geolocation information. navigator.geolocation is not defined.");",
+        "            callback(geolocationInfo);",
+        "        }",
+        "    },",
+        "    collectBrowserFontsInfo = function () {",
+        "        var fontsInfo = {}, i, fontsList = ["cursive","monospace","serif","sans-serif","fantasy","default","Arial","Arial Black",",
+        "            "Arial Narrow","Arial Rounded MT Bold","Bookman Old Style","Bradley Hand ITC","Century","Century Gothic",",
+        "            "Comic Sans MS","Courier","Courier New","Georgia","Gentium","Impact","King","Lucida Console","Lalit",",
+        "            "Modena","Monotype Corsiva","Papyrus","Tahoma","TeX","Times","Times New Roman","Trebuchet MS","Verdana",",
+        "            "Verona"];",
+        "        fontsInfo.installedFonts = "";",
         "",
-        "        /**",
-        "         * Constructs and returns an object populated with the computed claim values",
-        "         * and the requested scopes mapped to the claim names.",
-        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
-        "         * @see RESULTS section for the use of this function.",
-        "         */",
-        "        function getUserInfoClaims () {",
-        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        for (i = 0; i < fontsList.length; i++) {",
+        "            if (fontDetector.detect(fontsList[i])) {",
+        "                fontsInfo.installedFonts = fontsInfo.installedFonts + fontsList[i] + ";";",
+        "            }",
         "        }",
+        "        return fontsInfo;",
+        "    },",
+        "    devicePrint = {};",
         "",
-        "        /**",
-        "         * Creates a map of (requested) claim names populated with the computed claim values.",
-        "         * @returns {java.util.LinkedHashMap}",
-        "         * A map of the requested claim names and the corresponding claim values.",
-        "         */",
-        "        function getComputedClaims () {",
-        "            /**",
-        "             * Creates a complete list of claim objects from:",
-        "             * the claims derived from the scopes,",
-        "             * the claims provided by the authorization server,",
-        "             * and the claims requested by the client.",
-        "             * @returns {java.util.ArrayList}",
-        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
-        "             */",
-        "            function getClaims() {",
-        "                /**",
-        "                 * Returns a list of claim objects for the requested scopes.",
-        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
-        "                 * no other properties of a claim derived from a scope are populated.",
-        "                 * @returns {java.util.ArrayList}",
-        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
-        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
-        "                 */",
-        "                function convertScopeToClaims() {",
-        "                    var claims = new frJava.ArrayList();",
+        "devicePrint.screen = collectScreenInfo();",
+        "devicePrint.timezone = collectTimezoneInfo();",
+        "devicePrint.plugins = collectBrowserPluginsInfo();",
+        "devicePrint.fonts = collectBrowserFontsInfo();",
         "",
-        "                    scopes.toArray().forEach(function (scope) {",
-        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
-        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
-        "                                claims.add(new frJava.Claim(claimName));",
-        "                            });",
-        "                        }",
-        "                    });",
+        "if (navigator.userAgent) {",
+        "    devicePrint.userAgent = navigator.userAgent;",
+        "}",
+        "if (navigator.appName) {",
+        "    devicePrint.appName = navigator.appName;",
+        "}",
+        "if (navigator.appCodeName) {",
+        "    devicePrint.appCodeName = navigator.appCodeName;",
+        "}",
+        "if (navigator.appVersion) {",
+        "    devicePrint.appVersion = navigator.appVersion;",
+        "}",
+        "if (navigator.appMinorVersion) {",
+        "    devicePrint.appMinorVersion = navigator.appMinorVersion;",
+        "}",
+        "if (navigator.buildID) {",
+        "    devicePrint.buildID = navigator.buildID;",
+        "}",
+        "if (navigator.platform) {",
+        "    devicePrint.platform = navigator.platform;",
+        "}",
+        "if (navigator.cpuClass) {",
+        "    devicePrint.cpuClass = navigator.cpuClass;",
+        "}",
+        "if (navigator.oscpu) {",
+        "    devicePrint.oscpu = navigator.oscpu;",
+        "}",
+        "if (navigator.product) {",
+        "    devicePrint.product = navigator.product;",
+        "}",
+        "if (navigator.productSub) {",
+        "    devicePrint.productSub = navigator.productSub;",
+        "}",
+        "if (navigator.vendor) {",
+        "    devicePrint.vendor = navigator.vendor;",
+        "}",
+        "if (navigator.vendorSub) {",
+        "    devicePrint.vendorSub = navigator.vendorSub;",
+        "}",
+        "if (navigator.language) {",
+        "    devicePrint.language = navigator.language;",
+        "}",
+        "if (navigator.userLanguage) {",
+        "    devicePrint.userLanguage = navigator.userLanguage;",
+        "}",
+        "if (navigator.browserLanguage) {",
+        "    devicePrint.browserLanguage = navigator.browserLanguage;",
+        "}",
+        "if (navigator.systemLanguage) {",
+        "    devicePrint.systemLanguage = navigator.systemLanguage;",
+        "}",
         "",
-        "                    return claims;",
-        "                }",
+        "// Attempt to collect geo-location information and return this with the data collected so far.",
+        "// Otherwise, if geo-location fails or takes longer than 30 seconds, auto-submit the data collected so far.",
+        "autoSubmitDelay = 30000;",
+        "output.value = JSON.stringify(devicePrint);",
+        "collectGeolocationInfo(function(geolocationInfo) {",
+        "    devicePrint.geolocation = geolocationInfo;",
+        "    output.value = JSON.stringify(devicePrint);",
+        "    submit();",
+        "});",
         "",
-        "                var claims = new frJava.ArrayList();",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Id-(Match)-Server-Side.script.json 1`] = `
+{
+  "script": {
+    "703dab1a-1921-4981-98dd-b8e5349d8548": {
+      "_id": "703dab1a-1921-4981-98dd-b8e5349d8548",
+      "context": "AUTHENTICATION_SERVER_SIDE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for server side Device Id (Match) Authentication Module",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Device Id (Match) - Server Side",
+      "script": [
+        "/*",
+        " * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.",
+        " *",
+        " * Copyright (c) 2009 Sun Microsystems Inc. All Rights Reserved",
+        " *",
+        " * The contents of this file are subject to the terms",
+        " * of the Common Development and Distribution License",
+        " * (the License). You may not use this file except in",
+        " * compliance with the License.",
+        " *",
+        " * You can obtain a copy of the License at",
+        " * https://opensso.dev.java.net/public/CDDLv1.0.html or",
+        " * opensso/legal/CDDLv1.0.txt",
+        " * See the License for the specific language governing",
+        " * permission and limitations under the License.",
+        " *",
+        " * When distributing Covered Code, include this CDDL",
+        " * Header Notice in each file and include the License file",
+        " * at opensso/legal/CDDLv1.0.txt.",
+        " * If applicable, add the following below the CDDL Header,",
+        " * with the fields enclosed by brackets [] replaced by",
+        " * your own identifying information:",
+        " * "Portions Copyrighted [year] [name of copyright owner]"",
+        " *",
+        " */",
+        "/*",
+        " * Portions Copyrighted 2013 Syntegrity.",
+        " * Portions Copyrighted 2013-2023 ForgeRock AS.",
+        " */",
         "",
-        "                claims.addAll(convertScopeToClaims());",
-        "                claims.addAll(claimObjects);",
-        "                claims.addAll(requestedTypedClaims);",
+        "var ScalarComparator = {}, ScreenComparator = {}, MultiValueComparator = {}, UserAgentComparator = {}, GeolocationComparator = {};",
         "",
-        "                return claims;",
+        "var config = {",
+        "    profileExpiration: 30,              //in days",
+        "    maxProfilesAllowed: 5,",
+        "    maxPenaltyPoints: 0,",
+        "    attributes: {",
+        "        screen: {",
+        "            required: true,",
+        "            comparator: ScreenComparator,",
+        "            args: {",
+        "                penaltyPoints: 50",
         "            }",
+        "        },",
+        "        plugins: {",
+        "            installedPlugins: {",
+        "                required: false,",
+        "                comparator: MultiValueComparator,",
+        "                args: {",
+        "                    maxPercentageDifference: 10,",
+        "                    maxDifferences: 5,",
+        "                    penaltyPoints: 100",
+        "                }",
+        "            }",
+        "        },",
+        "        fonts: {",
+        "            installedFonts: {",
+        "                required: false,",
+        "                comparator: MultiValueComparator,",
+        "                args: {",
+        "                    maxPercentageDifference: 10,",
+        "                    maxDifferences: 5,",
+        "                    penaltyPoints: 100",
+        "                }",
+        "            }",
+        "        },",
+        "        timezone: {",
+        "            timezone: {",
+        "                required: false,",
+        "                comparator: ScalarComparator,",
+        "                args: {",
+        "                    penaltyPoints: 100",
+        "                }",
+        "            }",
+        "        },",
+        "        userAgent: {",
+        "            required: true,",
+        "            comparator: UserAgentComparator,",
+        "            args: {",
+        "                ignoreVersion: true,",
+        "                penaltyPoints: 100",
+        "            }",
+        "        },",
+        "        geolocation: {",
+        "            required: false,",
+        "            comparator: GeolocationComparator,",
+        "            args: {",
+        "                allowedRange: 100,            //in miles",
+        "                penaltyPoints: 100",
+        "            }",
+        "        }",
+        "    }",
+        "};",
         "",
-        "            /**",
-        "             * Computes and returns a claim value.",
-        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
-        "             * @see claimResolvers",
-        "             * If no resolver function is found, uses the default claim resolver function.",
-        "             *",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {*} Claim value.",
-        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
-        "             * Rethrows this exception if a claim resolver throws it.",
-        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
-        "             * if you want to terminate the claim processing.",
-        "             */",
-        "            function computeClaim(claim) {",
-        "                var resolveClaim;",
-        "                var message;",
-        "",
-        "                try {",
-        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
-        "",
-        "                    return resolveClaim(claim);",
-        "                } catch (e) {",
-        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "//---------------------------------------------------------------------------//",
+        "//                           Comparator functions                            //",
+        "//---------------------------------------------------------------------------//",
         "",
-        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
-        "                        throw e;",
-        "                    }",
+        "var all, any, calculateDistance, calculateIntersection, calculatePercentage, nullOrUndefined, splitAndTrim,",
+        "    undefinedLocation;",
         "",
-        "                    if (logger.warningEnabled()) {",
-        "                        logger.warning(message);",
-        "                    }",
-        "                }",
-        "            }",
+        "// ComparisonResult",
         "",
-        "            var computedClaims = new frJava.LinkedHashMap();",
+        "/**",
+        " * Constructs an instance of a ComparisonResult with the given penalty points.",
+        " *",
+        " * @param penaltyPoints (Number) The penalty points for the comparison (defaults to 0).",
+        " * @param additionalInfoInCurrentValue (boolean) Whether the current value contains more information",
+        " *                                               than the stored value (defaults to false).",
+        " */",
+        "function ComparisonResult() {",
         "",
-        "            getClaims().toArray().forEach(function (claim) {",
-        "                var claimValue = computeClaim(claim);",
+        "    var penaltyPoints = 0,",
+        "        additionalInfoInCurrentValue = false;",
         "",
-        "                if (isClaimValueValid(claimValue)) {",
-        "                    computedClaims.put(claim.getName(), claimValue);",
-        "                } else {",
-        "                    /**",
-        "                     * If a claim has been processed, but appears in the list again,",
-        "                     * and its value cannot be computed under the new conditions,",
-        "                     * the claim is removed from the final result.",
-        "                     *",
-        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
-        "                     * but also requested by the client with required values that don't match the computed one.",
-        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
-        "                     * for the relevant OIDC specification details.",
-        "                     */",
-        "                    computedClaims.remove(claim.getName());",
-        "                }",
-        "            });",
+        "    if (arguments[0] !== undefined && arguments[1] !== undefined) {",
+        "        penaltyPoints = arguments[0];",
+        "        additionalInfoInCurrentValue = arguments[1];",
+        "    }",
         "",
-        "            return computedClaims;",
+        "    if (arguments[0] !== undefined && arguments[1] === undefined) {",
+        "        if (typeof(arguments[0]) === "boolean") {",
+        "            additionalInfoInCurrentValue = arguments[0];",
+        "        } else {",
+        "            penaltyPoints = arguments[0];",
         "        }",
+        "    }",
         "",
-        "        /**",
-        "         * Creates a map of requested scopes and the corresponding claim names.",
-        "         * @returns {java.util.LinkedHashMap}",
-        "         */",
-        "        function getCompositeScopes () {",
-        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "    this.penaltyPoints = penaltyPoints;",
+        "    this.additionalInfoInCurrentValue = additionalInfoInCurrentValue;",
         "",
-        "            scopes.toArray().forEach(function (scope) {",
-        "                var scopeClaims = new frJava.ArrayList();",
+        "}",
         "",
-        "                if (scopeClaimsMap[scope]) {",
-        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
-        "                        scopeClaims.add(claimName);",
-        "                    });",
-        "                }",
+        "ComparisonResult.ZERO_PENALTY_POINTS = new ComparisonResult(0);",
         "",
-        "                if (scopeClaims.size()) {",
-        "                    compositeScopes.put(scope, scopeClaims);",
-        "                }",
-        "            });",
+        "/**",
+        " * Static method for functional programming.",
+        " *",
+        " * @return boolean true if comparisonResult.isSuccessful().",
+        " */",
+        "ComparisonResult.isSuccessful =  function(comparisonResult) {",
+        "    return comparisonResult.isSuccessful();",
+        "};",
         "",
-        "            return compositeScopes;",
-        "        }",
         "",
-        "        // PUBLIC METHODS",
+        "/**",
+        " * Static method for functional programming.",
+        " *",
+        " * @return boolean true if comparisonResult.additionalInfoInCurrentValue.",
+        " */",
+        "ComparisonResult.additionalInfoInCurrentValue =  function(comparisonResult) {",
+        "    return comparisonResult.additionalInfoInCurrentValue;",
+        "};",
         "",
-        "        return {",
-        "            setScopeClaimsMap: setScopeClaimsMap,",
-        "            setClaimResolvers: setClaimResolvers,",
-        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
-        "            getAddressClaimResolver: getAddressClaimResolver,",
-        "            getEssentialClaimResolver: getEssentialClaimResolver,",
-        "            getUserInfoClaims: getUserInfoClaims",
-        "        };",
+        "/**",
+        " * Comparison function that can be provided as an argument to array.sort",
+        " */",
+        "ComparisonResult.compare = function(first, second) {",
+        "    if (nullOrUndefined(first) && nullOrUndefined(second)) {",
+        "        return 0;",
+        "    } else if (nullOrUndefined(first)) {",
+        "        return -1;",
+        "    } else if (nullOrUndefined(second)) {",
+        "        return 1;",
+        "    } else {",
+        "        if (first.penaltyPoints !== second.penaltyPoints) {",
+        "            return first.penaltyPoints - second.penaltyPoints;",
+        "        } else {",
+        "            return (first.additionalInfoInCurrentValue ? 1 : 0) - (second.additionalInfoInCurrentValue ? 1 : 0);",
+        "        }",
         "    }",
+        "};",
         "",
-        "    // RESULTS",
+        "/**",
+        " * Amalgamates the given ComparisonResult into this ComparisonResult.",
+        " *",
+        " * @param comparisonResult The ComparisonResult to include.",
+        " */",
+        "ComparisonResult.prototype.addComparisonResult = function(comparisonResult) {",
+        "    this.penaltyPoints += comparisonResult.penaltyPoints;",
+        "    if (comparisonResult.additionalInfoInCurrentValue) {",
+        "        this.additionalInfoInCurrentValue = comparisonResult.additionalInfoInCurrentValue;",
+        "    }",
+        "};",
         "",
-        "    /**",
-        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
-        "     * populated with the computed claim values and",
-        "     * the requested scopes mapped to the claim names.",
-        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
-        "     *",
-        "     * Assigning it to a variable gives you an opportunity",
-        "     * to log the content of the returned value during development.",
-        "     */",
-        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "/**",
+        " * Returns true if no penalty points have been assigned for the comparison.",
+        " *",
+        " * @return boolean true if the comparison was successful.",
+        " */",
+        "ComparisonResult.prototype.isSuccessful = function() {",
+        "    return nullOrUndefined(this.penaltyPoints) || this.penaltyPoints === 0;",
+        "};",
         "",
-        "    /*",
-        "    logger.error(scriptName + ' results:')",
-        "    logger.error('Values: ' + userInfoClaims.getValues())",
-        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
-        "    */",
+        "/**",
+        " * Compares two simple objects (String|Number) and if they are equal then returns a ComparisonResult with zero",
+        " * penalty points assigned, otherwise returns a ComparisonResult with the given number of penalty points assigned.",
+        " *",
+        " * @param currentValue (String|Number) The current value.",
+        " * @param storedValue (String|Number) The stored value.",
+        " * @param config: {",
+        " *            "penaltyPoints": (Number) The number of penalty points.",
+        " *        }",
+        " * @return ComparisonResult.",
+        " */",
+        "ScalarComparator.compare = function (currentValue, storedValue, config) {",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message("StringComparator.compare:currentValue: " + JSON.stringify(currentValue));",
+        "        logger.message("StringComparator.compare:storedValue: " + JSON.stringify(storedValue));",
+        "        logger.message("StringComparator.compare:config: " + JSON.stringify(config));",
+        "    }",
+        "    if (config.penaltyPoints === 0) {",
+        "        return ComparisonResult.ZERO_PENALTY_POINTS;",
+        "    }",
         "",
-        "    return userInfoClaims;",
-        "}());",
+        "    if (!nullOrUndefined(storedValue)) {",
+        "        if (nullOrUndefined(currentValue) || currentValue !== storedValue) {",
+        "            return new ComparisonResult(config.penaltyPoints);",
+        "        }",
+        "    } else if (!nullOrUndefined(currentValue)) {",
+        "        return new ComparisonResult(true);",
+        "    }",
         "",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "e232cff3-2460-47cd-80b2-36c86c0d0f06": {
-      "_id": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Used by endUserUIClient",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Alpha endUserUIClient OAuth2 Access Token Modification Script",
-      "script": [
-        "(function () {",
-        "  if (scopes.contains('fr:autoaccess:*') || scopes.contains('fr:iga:*') || scopes.contains('fr:idc:analytics:*')) {",
-        "    var fr = JavaImporter(",
-        "      com.sun.identity.idm.IdType",
-        "    );",
-        "    var groups = [];",
-        "    identity.getMemberships(fr.IdType.GROUP).toArray().forEach(function (group) {",
-        "      groups.push(group.getAttribute('cn').toArray()[0]);",
-        "    });",
-        "    accessToken.setField('groups', groups);",
-        "  }",
-        "}());",
+        "    return ComparisonResult.ZERO_PENALTY_POINTS;",
+        "};",
         "",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-endUserUIClient-OIDC-Claims-Script.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "e1db8a0a-0329-4962-a5bf-ecffaca376ae": {
-      "_id": "e1db8a0a-0329-4962-a5bf-ecffaca376ae",
-      "context": "OIDC_CLAIMS",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Used by endUserUIClient",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Alpha endUserUIClient OIDC Claims Script",
-      "script": [
-        "/*",
-        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        "/**",
+        " * Compares two screens and if they are equal then returns a ComparisonResult with zero penalty points assigned,",
+        " * otherwise returns a ComparisonResult with the given number of penalty points assigned.",
         " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
+        " * @param currentValue: {",
+        " *            "screenWidth": (Number) The current client screen width.",
+        " *            "screenHeight": (Number) The current client screen height.",
+        " *            "screenColourDepth": (Number) The current client screen colour depth.",
+        " *        }",
+        " * @param storedValue: {",
+        " *            "screenWidth": (Number) The stored client screen width.",
+        " *            "screenHeight": (Number) The stored client screen height.",
+        " *            "screenColourDepth": (Number) The stored client screen colour depth.",
+        " *        }",
+        " * @param config: {",
+        " *            "penaltyPoints": (Number) The number of penalty points.",
+        " *        }",
+        " * @return ComparisonResult",
         " */",
+        "ScreenComparator.compare = function (currentValue, storedValue, config) {",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message("ScreenComparator.compare:currentValue: " + JSON.stringify(currentValue));",
+        "        logger.message("ScreenComparator.compare:storedValue: " + JSON.stringify(storedValue));",
+        "        logger.message("ScreenComparator.compare:config: " + JSON.stringify(config));",
+        "    }",
         "",
-        "/*",
-        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
-        " * The claim values are computed for:",
-        " * the claims derived from the requested scopes,",
-        " * the claims provided by the authorization server,",
-        " * and the claims requested by the client via the claims parameter.",
-        " *",
-        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
-        " * define the scope-to-claims mapping, and",
-        " * assign to each claim a resolver function that will compute the claim value.",
+        "    if (nullOrUndefined(currentValue)) {",
+        "        currentValue = {screenWidth: null, screenHeight: null, screenColourDepth: null};",
+        "    }",
+        "    if (nullOrUndefined(storedValue)) {",
+        "        storedValue = {screenWidth: null, screenHeight: null, screenColourDepth: null};",
+        "    }",
+        "",
+        "    var comparisonResults = [",
+        "        ScalarComparator.compare(currentValue.screenWidth, storedValue.screenWidth, config),",
+        "        ScalarComparator.compare(currentValue.screenHeight, storedValue.screenHeight, config),",
+        "        ScalarComparator.compare(currentValue.screenColourDepth, storedValue.screenColourDepth, config)];",
+        "",
+        "    if (all(comparisonResults, ComparisonResult.isSuccessful)) {",
+        "        return new ComparisonResult(any(comparisonResults, ComparisonResult.additionalInfoInCurrentValue));",
+        "    } else {",
+        "        return new ComparisonResult(config.penaltyPoints);",
+        "    }",
+        "};",
+        "",
+        "/**",
+        " * Splits both values using delimiter, trims every value and compares collections of values.",
+        " * Returns zero-result for same multi-value attributes.",
         " *",
-        " * Defined variables (class references are provided below):",
-        " * scopes - Set<String> (6).",
-        " *          Always present, the requested scopes.",
-        " * claims - Map<String, Object> (5).",
-        " *          Always present, default server provided claims.",
-        " * claimObjects - List<Claim> (7, 2).",
-        " *                Always present, the default server provided claims.",
-        " * requestedClaims - Map<String, Set<String>> (5).",
-        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
-        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
-        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
-        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
-        " * requestedTypedClaims - List<Claim> (7, 2).",
-        " *                        Always present, the requested claims.",
-        " *                        Requested claims with no requested values will have a claim with no values.",
-        " *                        A claim with a single value indicates this is the only value that should be returned.",
-        " * claimsLocales - List<String> (7).",
-        " *                 The values from the 'claims_locales' parameter.",
-        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
-        " * requestProperties - Unmodifiable Map (5).",
-        " *                     Always present, contains a map of request properties:",
-        " *                     requestUri - The request URI.",
-        " *                     realm - The realm that the request relates to.",
-        " *                     requestParams - A map of the request params and/or posted data.",
-        " *                                     Each value is a list of one or more properties.",
-        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
-        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
-        " * clientProperties - Unmodifiable Map (5).",
-        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
-        " *                    clientId - The client's URI for the request locale.",
-        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
-        " *                    allowedResponseTypes - List of the allowed response types for the client.",
-        " *                    allowedScopes - List of the allowed scopes for the client.",
-        " *                    customProperties - A map of the custom properties of the client.",
-        " *                                       Lists or maps will be included as sub-maps; for example:",
-        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
-        " *                                       To add custom properties to a client, update the Custom Properties field",
-        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
-        " * identity - AMIdentity (3).",
-        " *            Always present, the identity of the resource owner.",
-        " * session - SSOToken (4).",
-        " *           Present if the request contains the session cookie, the user's session object.",
-        " * scriptName - String (primitive).",
-        " *              Always present, the display name of the script.",
-        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
-        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
-        " * httpClient - HTTP Client (8).",
-        " *              Always present, the HTTP Client instance:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
-        " *              In order to use the client, you may need to add",
-        " *              org.forgerock.http.Client,",
-        " *              org.forgerock.http.protocol.*,",
-        " *              and org.forgerock.util.promise.PromiseImpl",
-        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
+        " * If collections are not same checks if number of differences is less or equal maxDifferences or",
+        " * percentage of difference is less or equal maxPercentageDifference.",
         " *",
-        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
-        " *          The result of the last statement in the script is returned to the server.",
-        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
-        " *          is the last (and only) statement in this script, and its return value will become the script result.",
-        " *          Do not use "return variable" statement outside of a function definition.",
-        " *          See RESULTS section for additional details.",
+        " * If yes then returns zero-result with additional info, else returns penaltyPoints-result.",
         " *",
-        " * Class reference:",
-        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
-        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
-        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
-        " *         the claim name, requested values, locale, and whether the claim is essential.",
-        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
-        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
-        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
-        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
-        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
-        "*/",
+        " * @param currentValue: (String) The current value.",
+        " * @param storedValue: (String) The stored value.",
+        " * @param config: {",
+        " *            "maxPercentageDifference": (Number) The max difference percentage in the values,",
+        " *                                                before the penalty is assigned.",
+        " *            "maxDifferences": (Number) The max number of differences in the values,",
+        " *                                       before the penalty points are assigned.",
+        " *            "penaltyPoints": (Number) The number of penalty points.",
+        "  *        }",
+        " * @return ComparisonResult",
+        " */",
+        "MultiValueComparator.compare = function (currentValue, storedValue, config) {",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message("MultiValueComparator.compare:currentValue: " + JSON.stringify(currentValue));",
+        "        logger.message("MultiValueComparator.compare:storedValue: " + JSON.stringify(storedValue));",
+        "        logger.message("MultiValueComparator.compare:config: " + JSON.stringify(config));",
+        "    }",
         "",
-        "(function () {",
-        "    // SETUP",
+        "    var delimiter = ";",",
+        "        currentValues = splitAndTrim(currentValue, delimiter),",
+        "        storedValues = splitAndTrim(storedValue, delimiter),",
+        "        maxNumberOfElements = Math.max(currentValues.length, storedValues.length),",
+        "        numberOfTheSameElements = calculateIntersection(currentValues, storedValues).length,",
+        "        numberOfDifferences = maxNumberOfElements - numberOfTheSameElements,",
+        "        percentageOfDifferences = calculatePercentage(numberOfDifferences, maxNumberOfElements);",
+        "",
+        "    if (nullOrUndefined(storedValue) && !nullOrUndefined(currentValue)) {",
+        "        return new ComparisonResult(true);",
+        "    }",
+        "",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message(numberOfTheSameElements + " of " + maxNumberOfElements + " are same");",
+        "    }",
+        "",
+        "    if (maxNumberOfElements === 0) {",
+        "        logger.message("Ignored because no attributes found in both profiles");",
+        "        return ComparisonResult.ZERO_PENALTY_POINTS;",
+        "    }",
+        "",
+        "    if (numberOfTheSameElements === maxNumberOfElements) {",
+        "        logger.message("Ignored because all attributes are same");",
+        "        return ComparisonResult.ZERO_PENALTY_POINTS;",
+        "    }",
         "",
-        "    /**",
-        "     * Claim processing utilities.",
-        "     * An object that contains reusable functions for processing claims.",
-        "     * @see CLAIM PROCESSING UTILITIES section for details.",
-        "     */",
-        "    var utils = getUtils();",
+        "    if (numberOfDifferences > config.maxDifferences) {",
+        "        if (logger.messageEnabled()) {",
+        "            logger.message("Would be ignored if not more than " + config.maxDifferences + " differences");",
+        "        }",
+        "        return new ComparisonResult(config.penaltyPoints);",
+        "    }",
         "",
-        "    // CONFIGURATION AND CUSTOMIZATION",
+        "    if (percentageOfDifferences > config.maxPercentageDifference) {",
+        "        if (logger.messageEnabled()) {",
+        "            logger.message(percentageOfDifferences + " percents are different");",
+        "            logger.message("Would be ignored if not more than " + config.maxPercentageDifference + " percent");",
+        "        }",
+        "        return new ComparisonResult(config.penaltyPoints);",
+        "    }",
         "",
-        "    /**",
-        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
-        "     *",
-        "     * Call this configuration method, and pass in as the first argument",
-        "     * an object that maps a scope value to an array of claim names",
-        "     * to specify which claims need to be processed and returned for the requested scopes.",
-        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
-        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
-        "     *",
-        "     * Below, find a default configuration that is expected to work in the current environment.",
-        "     *",
-        "     * CUSTOMIZATION",
-        "     * You can choose the claim names returned for a scope.",
-        "     */",
-        "    utils.setScopeClaimsMap({",
-        "        profile: [",
-        "            'name',",
-        "            'family_name',",
-        "            'given_name',",
-        "            'zoneinfo',",
-        "            'locale'",
-        "        ],",
-        "        email: ['email'],",
-        "        address: ['address'],",
-        "        phone: ['phone_number']",
-        "    });",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message("Ignored because number of differences(" + numberOfDifferences + ") not more than "",
+        "            + config.maxDifferences);",
+        "        logger.message(percentageOfDifferences + " percents are different");",
+        "        logger.message("Ignored because not more than " + config.maxPercentageDifference + " percent");",
+        "    }",
+        "    return new ComparisonResult(true);",
+        "};",
         "",
-        "    /**",
-        "     * In this script, each claim",
-        "     * derived from the requested scopes,",
-        "     * provided by the authorization server, and",
-        "     * requested by the client via the claims parameter",
-        "     * will be processed by a function associated with the claim name.",
-        "     *",
-        "     * Call this configuration method, and pass in as the first argument",
-        "     * an object that maps a claim name to a resolver function,",
-        "     * which will be automatically executed for each claim processed by the script.",
-        "     *",
-        "     * The claim resolver function will receive the requested claim information",
-        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
-        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
-        "     * for details on the Claim class.",
-        "     *",
-        "     * If the claim resolver function returns a value,",
-        "     * other than undefined or null,",
-        "     * the claim will be included in the script's results.",
-        "     *",
-        "     * The Claim instance provides methods to check",
-        "     * what the name of the claim is,",
-        "     * which values the claim request contains,",
-        "     * whether the claim is essential, and",
-        "     * which locale the claim is associated with.",
-        "     * The resolver function can consider this information when computing and returning the claim value.",
-        "     *",
-        "     * Below, find a default configuration that is expected to work in the current environment.",
-        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
-        "     * is called to return a claim resolver function based on a user profile attribute.",
-        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
-        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
-        "     *",
-        "     * CUSTOMIZATION",
-        "     * You can reuse the predefined utils methods with your custom arguments.",
-        "     * You can also specify a custom resolver function for a claim name,",
-        "     * that will compute and return the claim value—as shown in the commented out example below.",
-        "     */",
-        "    utils.setClaimResolvers({",
-        "        /*",
-        "        // An example of a simple claim resolver function that is defined for a claim",
-        "        // directly in the configuration object:",
-        "        custom-claim-name: function (requestedClaim) {",
-        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
-        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "/**",
+        " * Compares two User Agent Strings and if they are equal then returns a ComparisonResult with zero penalty",
+        " * points assigned, otherwise returns a ComparisonResult with the given number of penalty points assigned.",
+        " *",
+        " * @param currentValue (String) The current value.",
+        " * @param storedValue (String) The stored value.",
+        " * @param config: {",
+        " *            "ignoreVersion": (boolean) If the version numbers in the User Agent Strings should be ignore",
+        " *                                       in the comparison.",
+        " *            "penaltyPoints": (Number) The number of penalty points.",
+        " *        }",
+        " * @return A ComparisonResult.",
+        " */",
+        "UserAgentComparator.compare = function (currentValue, storedValue, config) {",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message("UserAgentComparator.compare:currentValue: " + JSON.stringify(currentValue));",
+        "        logger.message("UserAgentComparator.compare:storedValue: " + JSON.stringify(storedValue));",
+        "        logger.message("UserAgentComparator.compare:config: " + JSON.stringify(config));",
+        "    }",
         "",
-        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
-        "            // You can use:",
-        "            // requestedClaim.getName()",
-        "            // requestedClaim.getValues()",
-        "            // requestedClaim.getLocale()",
-        "            // requestedClaim.isEssential()",
+        "    if (config.ignoreVersion) {",
+        "        // remove version number",
+        "        currentValue = nullOrUndefined(currentValue) ? null : currentValue.replace(/[\\d\\.]+/g, "").trim();",
+        "        storedValue = nullOrUndefined(storedValue) ? null : storedValue.replace(/[\\d\\.]+/g, "").trim();",
+        "    }",
         "",
-        "            return claimValue",
-        "        },",
-        "        */",
-        "        /**",
-        "         * The use of utils.getUserProfileClaimResolver shows how",
-        "         * an argument passed to a function that returns a claim resolver",
-        "         * becomes available to the resolver function (via its lexical context).",
-        "         */",
-        "        name: utils.getUserProfileClaimResolver('cn'),",
-        "        family_name: utils.getUserProfileClaimResolver('sn'),",
-        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
-        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
-        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
-        "        email: utils.getUserProfileClaimResolver('mail'),",
-        "        address: utils.getAddressClaimResolver(",
-        "            /**",
-        "             * The passed in user profile claim resolver function",
-        "             * can be used by the address claim resolver function",
-        "             * to obtain the claim value to be formatted as per the OIDC specification:",
-        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
-        "             */",
-        "            utils.getUserProfileClaimResolver('postaladdress')",
-        "        ),",
-        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
-        "    });",
+        "    return ScalarComparator.compare(currentValue, storedValue, config);",
+        "};",
         "",
-        "    // CLAIM PROCESSING UTILITIES",
+        "/**",
+        " * Compares two locations, taking into account a degree of difference.",
+        " *",
+        " * @param currentValue: {",
+        " *            "latitude": (Number) The current latitude.",
+        " *            "longitude": (Number) The current longitude.",
+        " *        }",
+        " * @param storedValue: {",
+        " *            "latitude": (Number) The stored latitude.",
+        " *            "longitude": (Number) The stored longitude.",
+        " *        }",
+        " * @param config: {",
+        " *            "allowedRange": (Number) The max difference allowed in the two locations, before the penalty is assigned.",
+        " *            "penaltyPoints": (Number) The number of penalty points.",
+        "*         }",
+        " * @return ComparisonResult",
+        " */",
+        "GeolocationComparator.compare = function (currentValue, storedValue, config) {",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message("GeolocationComparator.compare:currentValue: " + JSON.stringify(currentValue));",
+        "        logger.message("GeolocationComparator.compare:storedValue: " + JSON.stringify(storedValue));",
+        "        logger.message("GeolocationComparator.compare:config: " + JSON.stringify(config));",
+        "    }",
         "",
-        "    /**",
-        "     * @returns {object} An object that contains reusable claim processing utilities.",
-        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
-        "     */",
-        "    function getUtils () {",
-        "        // IMPORT JAVA",
+        "    // Check for undefined stored or current locations",
         "",
-        "        /**",
-        "         * Provides Java scripting functionality.",
-        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
-        "         */",
-        "        var frJava = JavaImporter(",
-        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
-        "            org.forgerock.oauth2.core.UserInfoClaims,",
-        "            org.forgerock.openidconnect.Claim,",
+        "    if (undefinedLocation(currentValue) && undefinedLocation(storedValue)) {",
+        "        return ComparisonResult.ZERO_PENALTY_POINTS;",
+        "    }",
+        "    if (undefinedLocation(currentValue) && !undefinedLocation(storedValue)) {",
+        "        return new ComparisonResult(config.penaltyPoints);",
+        "    }",
+        "    if (!undefinedLocation(currentValue) && undefinedLocation(storedValue)) {",
+        "        return new ComparisonResult(true);",
+        "    }",
         "",
-        "            java.util.LinkedHashMap,",
-        "            java.util.ArrayList",
-        "        );",
+        "    // Both locations defined, therefore perform comparison",
         "",
-        "        // SET UP CONFIGURATION",
+        "    var distance = calculateDistance(currentValue, storedValue);",
         "",
-        "        /**",
-        "         * Placeholder for a configuration option that contains",
-        "         * an object that maps the supported scope values (scopes)",
-        "         * and the corresponding claim names for each scope value.",
-        "         */",
-        "        var scopeClaimsMap;",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message("Distance between (" + currentValue.latitude + "," + currentValue.longitude + ") and (" +",
+        "            storedValue.latitude + "," + storedValue.longitude + ") is " + distance + " miles");",
+        "    }",
         "",
-        "        /**",
-        "         * Placeholder for a configuration option that contains",
-        "         * an object that maps the supported claim names",
-        "         * and the resolver functions returning the claim value.",
-        "         */",
-        "        var claimResolvers;",
+        "    if (parseFloat(distance.toPrecision(5)) === 0) {",
+        "        logger.message("Location is the same");",
+        "        return ComparisonResult.ZERO_PENALTY_POINTS;",
+        "    }",
         "",
-        "        /**",
-        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
-        "         * and assigns it to a (private) variable that serves as a configuration option.",
-        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
-        "         * in order to specify which claims need to be processed for the requested scopes.",
-        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
-        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
-        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
-        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
-        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
-        "         * @returns {undefined}",
-        "         */",
-        "        function setScopeClaimsMap(params) {",
-        "            scopeClaimsMap = params;",
+        "    if (distance <= config.allowedRange) {",
+        "        if (logger.messageEnabled()) {",
+        "            logger.message("Tolerated because distance not more then " + config.allowedRange);",
+        "        }",
+        "        return new ComparisonResult(true);",
+        "    } else {",
+        "        if (logger.messageEnabled()) {",
+        "            logger.message("Would be ignored if distance not more then " + config.allowedRange);",
+        "        }",
+        "        return new ComparisonResult(config.penaltyPoints);",
+        "    }",
+        "};",
+        "",
+        "",
+        "//---------------------------------------------------------------------------//",
+        "//                    Device Print Logic - DO NOT MODIFY                     //",
+        "//---------------------------------------------------------------------------//",
+        "",
+        "// Utility functions",
+        "",
+        "/**",
+        " * Returns true if evaluating function f on each element of the Array a returns true.",
+        " *",
+        " * @param a: (Array) The array of elements to evaluate",
+        " * @param f: (Function) A single argument function for mapping elements of the array to boolean.",
+        " * @return boolean.",
+        " */",
+        "all = function(a, f) {",
+        "    var i;",
+        "    for (i = 0; i < a.length; i++) {",
+        "        if (f(a[i]) === false) {",
+        "            return false;",
         "        }",
+        "    }",
+        "    return true;",
+        "};",
         "",
-        "        /**",
-        "         * A (public) method that accepts an object that maps the supported claim names",
-        "         * and the resolver functions returning the claim value,",
-        "         * and assigns it to a (private) variable that serves as a configuration option.",
-        "         * @param {object} params - An object that maps",
-        "         * each supported claim name to a function that computes and returns the claim value.",
-        "         */",
-        "        function setClaimResolvers(params) {",
-        "            claimResolvers = params;",
+        "/**",
+        " * Returns true if evaluating function f on any element of the Array a returns true.",
+        " *",
+        " * @param a: (Array) The array of elements to evaluate",
+        " * @param f: (Function) A single argument function for mapping elements of the array to boolean.",
+        " * @return boolean.",
+        " */",
+        "any = function(a, f) {",
+        "    var i;",
+        "    for (i = 0; i < a.length; i++) {",
+        "        if (f(a[i]) === true) {",
+        "            return true;",
         "        }",
+        "    }",
+        "    return false;",
+        "};",
         "",
-        "        // CLAIM RESOLVERS",
+        "/**",
+        " * Returns true if the provided location is null or has undefined longitude or latitude values.",
+        " *",
+        " * @param location: {",
+        " *            "latitude": (Number) The latitude.",
+        " *            "longitude": (Number) The longitude.",
+        " *        }",
+        " * @return boolean",
+        " */",
+        "undefinedLocation = function(location) {",
+        "    return nullOrUndefined(location) || nullOrUndefined(location.latitude) || nullOrUndefined(location.longitude);",
+        "};",
         "",
-        "        /**",
-        "         * Claim resolvers are functions that return a claim value.",
-        "         * @param {*}",
-        "         * @returns {*}",
-        "         */",
+        "/**",
+        " * Returns true if the provided value is null or undefined.",
+        " *",
+        " * @param value: a value of any type",
+        " * @return boolean",
+        " */",
+        "nullOrUndefined = function(value) {",
+        "    return value === null || value === undefined;",
+        "};",
         "",
-        "        /**",
-        "         * Defines a claim resolver based on a user profile attribute.",
-        "         * @param {string} attributeName - Name of the user profile attribute.",
-        "         * @returns {function} A function that will determine the claim value",
-        "         * based on the user profile attribute and the (requested) claim properties.",
-        "         */",
-        "        function getUserProfileClaimResolver (attributeName) {",
-        "            /**",
-        "             * Resolves a claim with a user profile attribute value.",
-        "             * Returns undefined if the identity attribute is not populated,",
-        "             * OR if the claim has requested values that do not contain the identity attribute value.",
-        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {string|HashSet|undefined}",
-        "             */",
-        "            function resolveClaim(claim) {",
-        "                var userProfileValue;",
+        "/**",
+        " * Calculates the distances between the two locations.",
+        " *",
+        " * @param first: {",
+        " *            "latitude": (Number) The first latitude.",
+        " *            "longitude": (Number) The first longitude.",
+        " *        }",
+        " * @param second: {",
+        " *            "latitude": (Number) The second latitude.",
+        " *            "longitude": (Number) The second longitude.",
+        " *        }",
+        " * @return Number The distance between the two locations.",
+        " */",
+        "calculateDistance = function(first, second) {",
+        "    var factor = (Math.PI / 180),",
+        "        theta,",
+        "        dist;",
+        "    function degreesToRadians(degrees) {",
+        "        return degrees * factor;",
+        "    }",
+        "    function radiansToDegrees(radians) {",
+        "        return radians / factor;",
+        "    }",
+        "    theta = first.longitude - second.longitude;",
+        "    dist = Math.sin(degreesToRadians(first.latitude)) * Math.sin(degreesToRadians(second.latitude))",
+        "        + Math.cos(degreesToRadians(first.latitude)) * Math.cos(degreesToRadians(second.latitude))",
+        "        * Math.cos(degreesToRadians(theta));",
+        "    dist = Math.acos(dist);",
+        "    dist = radiansToDegrees(dist);",
+        "    dist = dist * 60 * 1.1515;",
+        "    return dist;",
+        "};",
         "",
-        "                if (identity) {",
-        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "/**",
+        " * Converts a String holding a delimited sequence of values into an array.",
+        " *",
+        " * @param text (String) The String representation of a delimited sequence of values.",
+        " * @param delimiter (String) The character delimiting values within the text String.",
+        " * @return (Array) The comma separated values.",
+        " */",
+        "splitAndTrim = function(text, delimiter) {",
         "",
-        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
-        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
-        "                            return userProfileValue;",
-        "                        }",
-        "                    }",
-        "                }",
-        "            }",
+        "    var results = [],",
+        "        i,",
+        "        values,",
+        "        value;",
+        "    if (text === null) {",
+        "        return results;",
+        "    }",
         "",
-        "            return resolveClaim;",
+        "    values = text.split(delimiter);",
+        "    for (i = 0; i < values.length; i++) {",
+        "        value = values[i].trim();",
+        "        if (value !== "") {",
+        "            results.push(value);",
         "        }",
+        "    }",
         "",
-        "        /**",
-        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
-        "         * @param {function} resolveClaim - A function that returns a claim value.",
-        "         * @returns {function} A function that will accept a claim as an argument,",
-        "         * run the claim resolver function for the claim and obtain the claim value,",
-        "         * and apply additional formatting to the value before returning it.",
-        "         */",
-        "        function getAddressClaimResolver (resolveClaim) {",
-        "            /**",
-        "             * Creates an address claim object from a value returned by a claim resolver,",
-        "             * and returns the address claim object as the claim value.",
-        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
-        "             * The claim value is obtained with a claim resolving function available from the closure.",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
-        "             */",
-        "            function resolveAddressClaim(claim) {",
-        "                var claimValue = resolveClaim(claim);",
-        "                var addressObject;",
-        "",
-        "                if (isClaimValueValid(claimValue)) {",
-        "                    addressObject = new frJava.LinkedHashMap();",
+        "    return results;",
+        "};",
         "",
-        "                    addressObject.put('formatted', claimValue);",
+        "/**",
+        " * Converts value to a percentage of range.",
+        " *",
+        " * @param value (Number) The actual number to be converted to a percentage.",
+        " * @param range (Number) The total number of values (i.e. represents 100%).",
+        " * @return (Number) The percentage.",
+        " */",
+        "calculatePercentage = function(value, range) {",
+        "    if (range === 0) {",
+        "        return 0;",
+        "    }",
+        "    return parseFloat((value / range).toPrecision(2)) * 100;",
+        "};",
         "",
-        "                    return addressObject;",
-        "                }",
-        "            }",
+        "/**",
+        " * Creates a new array containing only those elements found in both arrays received as arguments.",
+        " *",
+        " * @param first (Array) The first array.",
+        " * @param second (Array) The second array.",
+        " * @return (Array) The elements that found in first and second.",
+        " */",
+        "calculateIntersection = function(first, second) {",
+        "    return first.filter(function(element) {",
+        "        return second.indexOf(element) !== -1;",
+        "    });",
+        "};",
         "",
-        "            return resolveAddressClaim;",
+        "function getValue(obj, attributePath) {",
+        "    var value = obj,",
+        "        i;",
+        "    for (i = 0; i < attributePath.length; i++) {",
+        "        if (value === undefined) {",
+        "            return null;",
         "        }",
+        "        value = value[attributePath[i]];",
+        "    }",
+        "    return value;",
+        "}",
         "",
-        "        /**",
-        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
-        "         * @param {function} resolveClaim - A function that returns a claim value.",
-        "         * @returns {function} A function that will accept a claim as an argument,",
-        "         * run the claim resolver function for the claim and obtain the claim value,",
-        "         * and apply additional logic for essential claims.",
-        "         */",
-        "        function getEssentialClaimResolver (resolveClaim) {",
-        "            /**",
-        "             * Returns a claim value or throws an error.",
-        "             * The claim value is obtained with a claim resolving function available from the closure.",
-        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
-        "             *",
-        "             * Use of this resolver is optional.",
-        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
-        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
-        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
-        "             * unless otherwise specified in the description of the specific claim."",
-        "             *",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {*}",
-        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
-        "             */",
-        "            function resolveEssentialClaim(claim) {",
-        "                var claimValue = resolveClaim(claim);",
-        "",
-        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
-        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
-        "                }",
         "",
-        "                return claimValue;",
-        "            }",
+        "function isLeafNode(attributeConfig) {",
+        "    return attributeConfig.comparator !== undefined;",
+        "}",
         "",
-        "            return resolveEssentialClaim;",
-        "        }",
+        "function getAttributePaths(attributeConfig, attributePath) {",
         "",
-        "        /**",
-        "         * Provides default resolution for a claim.",
-        "         * Use it if a claim-specific resolver is not defined in the configuration.",
-        "         * @param {org.forgerock.openidconnect.Claim} claim",
-        "         * An object that provides methods to obtain information/requirements associated with a claim.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "         * @returns {*} A single value associated with this claim.",
-        "         */",
-        "        function resolveAnyClaim (claim) {",
-        "            if (claim.getValues().size() === 1) {",
-        "                return claim.getValues().toArray()[0];",
-        "            }",
-        "        }",
+        "    var attributePaths = [],",
+        "        attributeName,",
+        "        attrPaths,",
+        "        attrPath,",
+        "        i;",
         "",
-        "        // UTILITIES",
+        "    for (attributeName in attributeConfig) {",
+        "        if (attributeConfig.hasOwnProperty(attributeName)) {",
         "",
-        "        /**",
-        "         * Returns claim value from a set.",
-        "         * If the set contains a single value, returns the value.",
-        "         * If the set contains multiple values, returns the set.",
-        "         * Otherwise, returns undefined.",
-        "         *",
-        "         * @param {org.forgerock.openidconnect.Claim} claim",
-        "         * An object that provides methods to obtain information/requirements associated with a claim.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
-        "         * @returns {string|java.util.HashSet|undefined}",
-        "         */",
-        "        function getClaimValueFromSet (claim, set) {",
-        "            if (set && set.size()) {",
-        "                if (set.size() === 1) {",
-        "                    return set.toArray()[0];",
-        "                } else {",
-        "                    return set;",
+        "            if (isLeafNode(attributeConfig[attributeName])) {",
+        "                attrPath = attributePath.slice();",
+        "                attrPath.push(attributeName);",
+        "                attributePaths.push(attrPath);",
+        "            } else {",
+        "                attrPath = attributePath.slice();",
+        "                attrPath.push(attributeName);",
+        "                attrPaths = getAttributePaths(attributeConfig[attributeName], attrPath);",
+        "                for (i = 0; i < attrPaths.length; i++) {",
+        "                    attributePaths.push(attrPaths[i]);",
         "                }",
-        "            } else if (logger.warningEnabled()) {",
-        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
         "            }",
         "        }",
+        "    }",
         "",
-        "        function isClaimValueValid (claimValue) {",
-        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
-        "                return false;",
-        "            }",
+        "    return attributePaths;",
+        "}",
         "",
-        "            return true;",
-        "        }",
+        "function getDevicePrintAttributePaths(attributeConfig) {",
+        "    return getAttributePaths(attributeConfig, []);",
+        "}",
         "",
-        "        // CLAIM PROCESSING",
+        "function hasRequiredAttributes(devicePrint, attributeConfig) {",
         "",
-        "        /**",
-        "         * Constructs and returns an object populated with the computed claim values",
-        "         * and the requested scopes mapped to the claim names.",
-        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
-        "         * @see RESULTS section for the use of this function.",
-        "         */",
-        "        function getUserInfoClaims () {",
-        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "    var attributePaths = getDevicePrintAttributePaths(attributeConfig),",
+        "        i,",
+        "        attrValue,",
+        "        attrConfig;",
+        "",
+        "    for (i = 0; i < attributePaths.length; i++) {",
+        "",
+        "        attrValue = getValue(devicePrint, attributePaths[i]);",
+        "        attrConfig = getValue(attributeConfig, attributePaths[i]);",
+        "",
+        "        if (attrConfig.required && attrValue === undefined) {",
+        "            logger.warning("Device Print profile missing required attribute, " + attributePaths[i]);",
+        "            return false;",
         "        }",
+        "    }",
         "",
-        "        /**",
-        "         * Creates a map of (requested) claim names populated with the computed claim values.",
-        "         * @returns {java.util.LinkedHashMap}",
-        "         * A map of the requested claim names and the corresponding claim values.",
-        "         */",
-        "        function getComputedClaims () {",
-        "            /**",
-        "             * Creates a complete list of claim objects from:",
-        "             * the claims derived from the scopes,",
-        "             * the claims provided by the authorization server,",
-        "             * and the claims requested by the client.",
-        "             * @returns {java.util.ArrayList}",
-        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
-        "             */",
-        "            function getClaims() {",
-        "                /**",
-        "                 * Returns a list of claim objects for the requested scopes.",
-        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
-        "                 * no other properties of a claim derived from a scope are populated.",
-        "                 * @returns {java.util.ArrayList}",
-        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
-        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
-        "                 */",
-        "                function convertScopeToClaims() {",
-        "                    var claims = new frJava.ArrayList();",
+        "    logger.message("device print has required attributes");",
+        "    return true;",
+        "}",
         "",
-        "                    scopes.toArray().forEach(function (scope) {",
-        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
-        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
-        "                                claims.add(new frJava.Claim(claimName));",
-        "                            });",
-        "                        }",
-        "                    });",
+        "function compareDevicePrintProfiles(attributeConfig, devicePrint, devicePrintProfiles, maxPenaltyPoints) {",
         "",
-        "                    return claims;",
-        "                }",
+        "    var attributePaths = getDevicePrintAttributePaths(attributeConfig),",
+        "        dao = sharedState.get('_DeviceIdDao'),",
+        "        results,",
+        "        j,",
+        "        aggregatedComparisonResult,",
+        "        i,",
+        "        currentValue,",
+        "        storedValue,",
+        "        attrConfig,",
+        "        comparisonResult,",
+        "        selectedComparisonResult,",
+        "        selectedProfile,",
+        "        curDevicePrintProfile,",
+        "        vals;",
         "",
-        "                var claims = new frJava.ArrayList();",
+        "    results = [];",
+        "    for (j = 0; j < devicePrintProfiles.length; j++) {",
+        "        curDevicePrintProfile = JSON.parse(org.forgerock.json.JsonValue.json(devicePrintProfiles[j]));",
+        "        aggregatedComparisonResult = new ComparisonResult();",
+        "        for (i = 0; i < attributePaths.length; i++) {",
         "",
-        "                claims.addAll(convertScopeToClaims());",
-        "                claims.addAll(claimObjects);",
-        "                claims.addAll(requestedTypedClaims);",
+        "            currentValue = getValue(devicePrint, attributePaths[i]);",
+        "            storedValue = getValue(curDevicePrintProfile.devicePrint, attributePaths[i]);",
+        "            attrConfig = getValue(attributeConfig, attributePaths[i]);",
         "",
-        "                return claims;",
+        "            if (storedValue === null) {",
+        "                comparisonResult = new ComparisonResult(attrConfig.penaltyPoints);",
+        "            } else {",
+        "                comparisonResult = attrConfig.comparator.compare(currentValue, storedValue, attrConfig.args);",
         "            }",
         "",
-        "            /**",
-        "             * Computes and returns a claim value.",
-        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
-        "             * @see claimResolvers",
-        "             * If no resolver function is found, uses the default claim resolver function.",
-        "             *",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {*} Claim value.",
-        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
-        "             * Rethrows this exception if a claim resolver throws it.",
-        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
-        "             * if you want to terminate the claim processing.",
-        "             */",
-        "            function computeClaim(claim) {",
-        "                var resolveClaim;",
-        "                var message;",
+        "            if (logger.messageEnabled()) {",
+        "                logger.message("Comparing attribute path: " + attributePaths[i]",
+        "                    + ", Comparison result: successful=" + comparisonResult.isSuccessful() + ", penaltyPoints="",
+        "                    + comparisonResult.penaltyPoints + ", additionalInfoInCurrentValue="",
+        "                    + comparisonResult.additionalInfoInCurrentValue);",
+        "            }",
+        "            aggregatedComparisonResult.addComparisonResult(comparisonResult);",
+        "        }",
+        "        if (logger.messageEnabled()) {",
+        "            logger.message("Aggregated comparison result: successful="",
+        "                + aggregatedComparisonResult.isSuccessful() + ", penaltyPoints="",
+        "                + aggregatedComparisonResult.penaltyPoints + ", additionalInfoInCurrentValue="",
+        "                + aggregatedComparisonResult.additionalInfoInCurrentValue);",
+        "        }",
         "",
-        "                try {",
-        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "        results.push({",
+        "            key: aggregatedComparisonResult,",
+        "            value: devicePrintProfiles[j]",
+        "        });",
+        "    }",
         "",
-        "                    return resolveClaim(claim);",
-        "                } catch (e) {",
-        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "    if (results.length === 0) {",
+        "        return null;",
+        "    }",
         "",
-        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
-        "                        throw e;",
-        "                    }",
+        "    results.sort(function(a, b) {",
+        "        return ComparisonResult.compare(a.key, b.key);",
+        "    });",
+        "    selectedComparisonResult = results[0].key;",
+        "    if (logger.messageEnabled()) {",
+        "        logger.message("Selected comparison result: successful=" + selectedComparisonResult.isSuccessful()",
+        "            + ", penaltyPoints=" + selectedComparisonResult.penaltyPoints + ", additionalInfoInCurrentValue="",
+        "            + selectedComparisonResult.additionalInfoInCurrentValue);",
+        "    }",
         "",
-        "                    if (logger.warningEnabled()) {",
-        "                        logger.warning(message);",
-        "                    }",
-        "                }",
-        "            }",
+        "    selectedProfile = null;",
+        "    if (selectedComparisonResult.penaltyPoints <= maxPenaltyPoints) {",
+        "        selectedProfile = results[0].value;",
+        "        if (logger.messageEnabled()) {",
+        "            logger.message("Selected profile: " + selectedProfile +",
+        "                " with " + selectedComparisonResult.penaltyPoints + " penalty points");",
+        "        }",
+        "    }",
         "",
-        "            var computedClaims = new frJava.LinkedHashMap();",
+        "    if (selectedProfile === null) {",
+        "        return false;",
+        "    }",
         "",
-        "            getClaims().toArray().forEach(function (claim) {",
-        "                var claimValue = computeClaim(claim);",
+        "    /* update profile */",
+        "    selectedProfile.put("selectionCounter",",
+        "        java.lang.Integer.valueOf(parseInt(selectedProfile.get("selectionCounter"), 10) + 1));",
+        "    selectedProfile.put("lastSelectedDate", java.lang.Long.valueOf(new Date().getTime()));",
+        "    selectedProfile.put("devicePrint", devicePrint);",
+        "",
+        "    vals = [];",
+        "    for (i = 0; i < devicePrintProfiles.length; i++) {",
+        "        vals.push(org.forgerock.json.JsonValue.json(devicePrintProfiles[i]));",
+        "    }",
+        "",
+        "    dao.saveDeviceProfiles(username, realm, vals);",
+        "",
+        "    return true;",
+        "}",
+        "",
+        "function matchDevicePrint() {",
         "",
-        "                if (isClaimValueValid(claimValue)) {",
-        "                    computedClaims.put(claim.getName(), claimValue);",
-        "                } else {",
-        "                    /**",
-        "                     * If a claim has been processed, but appears in the list again,",
-        "                     * and its value cannot be computed under the new conditions,",
-        "                     * the claim is removed from the final result.",
-        "                     *",
-        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
-        "                     * but also requested by the client with required values that don't match the computed one.",
-        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
-        "                     * for the relevant OIDC specification details.",
-        "                     */",
-        "                    computedClaims.remove(claim.getName());",
-        "                }",
-        "            });",
+        "    if (!username) {",
+        "        logger.error("Username not set. Cannot compare user's device print profiles.");",
+        "        authState = FAILED;",
+        "    } else {",
         "",
-        "            return computedClaims;",
+        "        if (logger.messageEnabled()) {",
+        "            logger.message("client devicePrint: " + clientScriptOutputData);",
         "        }",
         "",
-        "        /**",
-        "         * Creates a map of requested scopes and the corresponding claim names.",
-        "         * @returns {java.util.LinkedHashMap}",
-        "         */",
-        "        function getCompositeScopes () {",
-        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "        var getProfiles = function () {",
         "",
-        "            scopes.toArray().forEach(function (scope) {",
-        "                var scopeClaims = new frJava.ArrayList();",
+        "                function isExpiredProfile(devicePrintProfile) {",
+        "                    var expirationDate = new Date(),",
+        "                        lastSelectedDate;",
+        "                    expirationDate.setDate(expirationDate.getDate() - config.profileExpiration);",
         "",
-        "                if (scopeClaimsMap[scope]) {",
-        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
-        "                        scopeClaims.add(claimName);",
-        "                    });",
-        "                }",
+        "                    lastSelectedDate = new Date(devicePrintProfile.lastSelectedDate);",
         "",
-        "                if (scopeClaims.size()) {",
-        "                    compositeScopes.put(scope, scopeClaims);",
+        "                    return lastSelectedDate < expirationDate;",
         "                }",
-        "            });",
         "",
-        "            return compositeScopes;",
-        "        }",
+        "                function getNotExpiredProfiles() {",
+        "                    var profile,",
+        "                        dao = sharedState.get('_DeviceIdDao'),",
+        "                        results = [],",
+        "                        profiles,",
+        "                        iter;",
         "",
-        "        // PUBLIC METHODS",
+        "                    profiles = dao.getDeviceProfiles(username, realm);",
         "",
-        "        return {",
-        "            setScopeClaimsMap: setScopeClaimsMap,",
-        "            setClaimResolvers: setClaimResolvers,",
-        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
-        "            getAddressClaimResolver: getAddressClaimResolver,",
-        "            getEssentialClaimResolver: getEssentialClaimResolver,",
-        "            getUserInfoClaims: getUserInfoClaims",
-        "        };",
-        "    }",
+        "                    if (profiles) {",
+        "                        iter = profiles.iterator();",
         "",
-        "    // RESULTS",
+        "                        while (iter.hasNext()) {",
+        "                            profile = iter.next().getObject();",
+        "                            if (!isExpiredProfile(profile)) {",
+        "                                results.push(profile);",
+        "                            }",
+        "                        }",
+        "                    }",
+        "                    if (logger.messageEnabled()) {",
+        "                        logger.message("stored non-expired profiles: " + results);",
+        "                    }",
+        "                    return results;",
+        "                }",
         "",
-        "    /**",
-        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
-        "     * populated with the computed claim values and",
-        "     * the requested scopes mapped to the claim names.",
-        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
-        "     *",
-        "     * Assigning it to a variable gives you an opportunity",
-        "     * to log the content of the returned value during development.",
-        "     */",
-        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "                return getNotExpiredProfiles();",
+        "            },",
+        "            devicePrint = JSON.parse(clientScriptOutputData),",
+        "            devicePrintProfiles = getProfiles();",
         "",
-        "    /*",
-        "    logger.error(scriptName + ' results:')",
-        "    logger.error('Values: ' + userInfoClaims.getValues())",
-        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
-        "    */",
+        "        if (!hasRequiredAttributes(devicePrint, config.attributes)) {",
+        "            logger.message("devicePrint.hasRequiredAttributes: false");",
+        "            // Will fail this module but fall-through to next module. Which should be OTP.",
+        "            authState = FAILED;",
+        "        } else if (compareDevicePrintProfiles(config.attributes, devicePrint, devicePrintProfiles, config.maxPenaltyPoints)) {",
+        "            logger.message("devicePrint.hasValidProfile: true");",
+        "            authState = SUCCESS;",
+        "        } else {",
+        "            logger.message("devicePrint.hasValidProfile: false");",
+        "            sharedState.put('devicePrintProfile', JSON.stringify(devicePrint));",
+        "            // Will fail this module but fall-through to next module. Which should be OTP.",
+        "            authState = FAILED;",
+        "        }",
+        "    }",
+        "}",
         "",
-        "    return userInfoClaims;",
-        "}());",
+        "matchDevicePrint();",
         "",
       ],
     },
@@ -14328,77 +6466,111 @@ exports[`frodo script export "frodo script export -A": should export all scripts
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Check-Username.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Device-Profile-Match-Template-Decision-Node-Script.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "739bdc48-fd24-4c52-b353-88706d75558a": {
-      "_id": "739bdc48-fd24-4c52-b353-88706d75558a",
+    "13e3f263-9cd3-4844-8d1c-040fd0dd02eb": {
+      "_id": "13e3f263-9cd3-4844-8d1c-040fd0dd02eb",
       "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "Check if username has already been collected.",
+      "default": true,
+      "description": "Default global script template for Device Profile Match decision node script for Authentication Tree",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Check Username",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Device Profile Match Template - Decision Node Script",
       "script": [
-        "/* Check Username",
+        "/*",
+        " * Copyright 2020-2022 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Author: volker.scheuber@forgerock.com",
-        " * ",
-        " * Check if username has already been collected.",
-        " * Return "known" if yes, "unknown" otherwise.",
-        " * ",
-        " * This script does not need to be parametrized. It will work properly as is.",
-        " * ",
-        " * The Scripted Decision Node needs the following outcomes defined:",
-        " * - known",
-        " * - unknown",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
         " */",
-        "(function () {",
-        "    if (null != sharedState.get("username")) {",
-        "        outcome = "known";",
-        "    }",
-        "    else {",
-        "        outcome = "unknown";",
-        "    }",
-        "}());",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Custom-Device-Match-Script.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "d58977ed-0542-4147-8197-973ef7300191": {
-      "_id": "d58977ed-0542-4147-8197-973ef7300191",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Custom Device Match Script",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Custom Device Match Script",
-      "script": [
-        "/*",
-        " * Custom Device Match Script",
+        "",
+        "/** ******************************************************************",
+        " *",
+        " * The following script is a simplified template for understanding",
+        " * the basics of device matching. _This is not functionally complete._",
+        " * For a functionally complete script as well as a development toolkit,",
+        " * visit https://github.com/ForgeRock/forgerock-device-match-script.",
+        " *",
+        " * Global node variables accessible within this scope:",
+        " * 1. \`sharedState\` provides access to incoming request",
+        " * 2. \`deviceProfilesDao\` provides access to stored profiles",
+        " * 3. \`outcome\` variable maps to auth tree node outcomes; values are",
+        " *    'true', 'false', or 'unknownDevice' (notice _all_ are strings).",
+        " * ******************************************************************/",
+        "",
+        "/**",
+        " * Get the incoming request's device profile.",
+        " * Returns serialized JSON (type string); parsing this will result a",
+        " * native JS object.",
         " */",
+        "var incomingJson = sharedState.get('forgeRock.device.profile').toString();",
+        "var incoming = JSON.parse(incomingJson);",
         "",
-        "outcome = "true";",
+        "/**",
+        " * Get the incoming user's username and realm.",
+        " * Notice the use of \`.asString()\`.",
+        " */",
+        "var username = sharedState.get("username").asString();",
+        "var realm = sharedState.get("realm").asString();",
+        "",
+        "/**",
+        " * Get the user's stored profiles for appropriate realm.",
+        " * Returns a _special_ object with methods for profile data",
+        " */",
+        "var storedProfiles = deviceProfilesDao.getDeviceProfiles(username, realm);",
+        "",
+        "// Default to \`outcome\` of 'unknownDevice'",
+        "outcome = 'unknownDevice';",
+        "",
+        "if (storedProfiles) {",
+        "    var i = 0;",
+        "    // NOTE: \`.size()\` method returns the number of stored profiles",
+        "    var len = storedProfiles.size();",
+        "",
+        "    for (i; i < len; i++) {",
+        "        /**",
+        "         * Get the stored profile.",
+        "         * Returns serialized JSON (type string); parsing this will result",
+        "         * a native JS object.",
+        "         */",
+        "        var storedJson = storedProfiles.get(i);",
+        "        var stored = JSON.parse(storedJson);",
+        "",
+        "        /**",
+        "         * Find a stored profile with the same identifier.",
+        "         */",
+        "        if (incoming.identifier === stored.identifier) {",
+        "",
+        "            /**",
+        "             * Now that you've found the appropriate profile, you will perform",
+        "             * the logic here to match the values of the \`incoming\` profile",
+        "             * with that of the \`stored\` profile.",
+        "             *",
+        "             * The result of the matching logic is assigned to \`outcome\`. Since",
+        "             * we have profiles of the same identifier, the value (type string)",
+        "             * should now be either 'true' or 'false' (properties matched or not).",
+        "             *",
+        "             * For more information about this topic, visit this Github repo:",
+        "             * https://github.com/ForgeRock/forgerock-device-match-script",
+        "             */",
+        "            outcome = 'false';",
+        "        }",
+        "    }",
+        "}",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Dummy.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Dummy.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
     "4c963bb3-7084-43d0-bcdc-a47482cf1825": {
       "_id": "4c963bb3-7084-43d0-bcdc-a47482cf1825",
@@ -14409,6 +6581,8 @@ exports[`frodo script export "frodo script export -A": should export all scripts
       "description": "Dummy",
       "evaluatorVersion": "2.0",
       "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
       "name": "Dummy",
       "script": [
         "",
@@ -14420,9 +6594,8 @@ exports[`frodo script export "frodo script export -A": should export all scripts
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: EmailAsUsername.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/EmailAsUsername.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
     "e5c302c8-f838-4698-87cc-d7225fc82454": {
       "_id": "e5c302c8-f838-4698-87cc-d7225fc82454",
@@ -14433,6 +6606,8 @@ exports[`frodo script export "frodo script export -A": should export all scripts
       "description": "null",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
       "name": "EmailAsUsername",
       "script": [
         "objectAttributes = sharedState.get("objectAttributes")",
@@ -14457,293 +6632,63 @@ exports[`frodo script export "frodo script export -A": should export all scripts
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Format-Username.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "223739f3-9c54-43b7-9572-3c5338786145": {
-      "_id": "223739f3-9c54-43b7-9572-3c5338786145",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Format Username",
-      "script": [
-        "var username = sharedState.get("username");",
-        "",
-        "sharedState.put("displayName", username);",
-        "outcome = "continue";",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Facebook-Profile-Normalization.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "07ee6240-d106-4e25-a781-5fcabc477d22": {
-      "_id": "07ee6240-d106-4e25-a781-5fcabc477d22",
-      "context": "SAML2_SP_ADAPTER",
+    "bae1d54a-e97d-4997-aa5d-c027f21af82c": {
+      "_id": "bae1d54a-e97d-4997-aa5d-c027f21af82c",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "FrodoSPAdapter",
-      "script": [
-        "/*",
-        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
-        "",
-        "/*",
-        " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOnRequest",
-        " *      - preSingleSignOnProcess",
-        " *      - postSingleSignOnSuccess",
-        " *      - postSingleSignOnFailure",
-        " *      - postNewNameIDSuccess",
-        " *      - postTerminateNameIDSuccess",
-        " *      - preSingleLogoutProcess",
-        " *      - postSingleLogoutSuccess",
-        " *",
-        " * Please see the JavaDoc for the interface for more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
-        " * Note that the initialize method is not supported in the scripts.",
-        " *",
-        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
-        " *",
-        " * hostedEntityId - String",
-        " *     Entity ID for the hosted IDP",
-        " * realm - String",
-        " *     Realm of the hosted IDP",
-        " * idpEntityId - String",
-        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
-        " * request - HttpServletRequest (1)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (2)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (3)",
-        " *     The authentication request sent that is sent from the Service Provider.",
-        " * session - SSOToken (4)",
-        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * res - Response (5)",
-        " *     The SSO Response received from the Identity Provider.",
-        " * profile - String",
-        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
-        " *          - SAML2Constants.HTTP_POST",
-        " *          - SAML2Constants.HTTP_ARTIFACT",
-        " *          - SAML2Constants.PAOS",
-        " * out - PrintWriter (7)",
-        " *     The PrintWriter that can be used to write to.",
-        " * isFederation - boolean",
-        " *     Set to true if using federation, otherwise false.",
-        " * failureCode - int",
-        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
-        " * userId - String",
-        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
-        " * idRequest - ManageNameIDRequest (8)",
-        " *     The new name identifier request, this will be null if the request object is not available",
-        " * idResponse - ManageNameIDResponse (9)",
-        " *     The new name identifier response, this will be null if the response object is not available",
-        " * binding - String",
-        " *     The binding used for the new name identifier request. This will be one of the following values:",
-        " *          - SAML2Constants.SOAP",
-        " *          - SAML2Constants.HTTP_REDIRECT",
-        " * logoutRequest - LogoutRequest (10)",
-        " *     The single logout request.",
-        " * logoutResponse - LogoutResponse (11)",
-        " *     The single logout response.",
-        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
-        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * logger - Logger instance",
-        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *     Corresponding log files will be prefixed with: scripts.<script name>",
-        " *",
-        " * Throws SAML2Exception (13):",
-        " *     for any exceptions occurring in the adapter. The federation process will continue",
-        " *",
-        " * Class reference:",
-        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
-        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
-        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
-        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
-        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
-        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
-        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
-        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
-        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
-        " */",
-        "",
-        "/*",
-        " * Template/default script for SAML2 SP Adapter scripted plugin.",
-        " */",
-        "",
-        "/*",
-        " * Available variables for preSingleSignOnRequest:",
-        " *     hostedEntityId",
-        " *     idpEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnRequest() {",
-        "}",
-        "",
-        "/*",
-        " * Available variables for preSingleSignOnProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnProcess() {",
-        "}",
-        "",
-        "/*",
-        " * Available variables for postSingleSignOnSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     out",
-        " *     session",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     isFederation",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnSuccess() {",
-        "    return false;",
-        "}",
-        "",
-        "/*",
-        " * Available variables for postSingleSignOnFailure:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     failureCode",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnFailure() {",
-        "    return false;",
-        "}",
-        "",
-        "/*",
-        " * Available variables for postNewNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postNewNameIDSuccess() {",
-        "}",
-        "",
-        "/*",
-        " * Available variables for postTerminateNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postTerminateNameIDSuccess() {",
-        "}",
-        "",
-        "/*",
-        " * Available variables for preSingleLogoutProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleLogoutProcess() {",
-        "}",
-        "",
+      "default": true,
+      "description": "Normalizes raw profile data from Facebook",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Facebook Profile Normalization",
+      "script": [
         "/*",
-        " * Available variables for postSingleLogoutSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
         " */",
-        "function postSingleLogoutSuccess() {",
-        "}",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter-imported-(1).script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ForgeRock-Internal-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "5ce0d38a-154c-4be5-bd22-f9879c77e895": {
-      "_id": "5ce0d38a-154c-4be5-bd22-f9879c77e895",
-      "context": "SAML2_SP_ADAPTER",
+    "c234ba0b-58a1-4cfd-9567-09edde980745": {
+      "_id": "c234ba0b-58a1-4cfd-9567-09edde980745",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
       "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
+      "creationDate": 1433147666269,
+      "default": true,
+      "description": "Internal token modification script",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "FrodoSPAdapter - imported (1)",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "ForgeRock Internal: OAuth2 Access Token Modification Script",
       "script": [
         "/*",
         " * Copyright 2023 ForgeRock AS. All Rights Reserved",
@@ -14752,943 +6697,701 @@ exports[`frodo script export "frodo script export -A": should export all scripts
         " * or with one of its affiliates. All use shall be exclusively subject",
         " * to such license between the licensee and ForgeRock AS.",
         " */",
+        "// Script is intentionally empty",
         "",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/ForgeRock-Internal-OIDC-Claims-Script.script.json 1`] = `
+{
+  "script": {
+    "1f389a3d-21cf-417c-a6d3-42ea620071f0": {
+      "_id": "1f389a3d-21cf-417c-a6d3-42ea620071f0",
+      "context": "OIDC_CLAIMS",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Internal OIDC Claims script",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "ForgeRock Internal: OIDC Claims Script",
+      "script": [
         "/*",
-        " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOnRequest",
-        " *      - preSingleSignOnProcess",
-        " *      - postSingleSignOnSuccess",
-        " *      - postSingleSignOnFailure",
-        " *      - postNewNameIDSuccess",
-        " *      - postTerminateNameIDSuccess",
-        " *      - preSingleLogoutProcess",
-        " *      - postSingleLogoutSuccess",
+        " * Copyright 2014-2023 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Please see the JavaDoc for the interface for more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
-        " * Note that the initialize method is not supported in the scripts.",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
+        " * The claim values are computed for:",
+        " * the claims derived from the requested scopes,",
+        " * the claims provided by the authorization server,",
+        " * and the claims requested by the client via the claims parameter.",
         " *",
-        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
+        " * define the scope-to-claims mapping, and",
+        " * assign to each claim a resolver function that will compute the claim value.",
         " *",
-        " * hostedEntityId - String",
-        " *     Entity ID for the hosted IDP",
-        " * realm - String",
-        " *     Realm of the hosted IDP",
-        " * idpEntityId - String",
-        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
-        " * request - HttpServletRequest (1)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (2)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (3)",
-        " *     The authentication request sent that is sent from the Service Provider.",
-        " * session - SSOToken (4)",
-        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * res - Response (5)",
-        " *     The SSO Response received from the Identity Provider.",
-        " * profile - String",
-        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
-        " *          - SAML2Constants.HTTP_POST",
-        " *          - SAML2Constants.HTTP_ARTIFACT",
-        " *          - SAML2Constants.PAOS",
-        " * out - PrintWriter (7)",
-        " *     The PrintWriter that can be used to write to.",
-        " * isFederation - boolean",
-        " *     Set to true if using federation, otherwise false.",
-        " * failureCode - int",
-        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
-        " * userId - String",
-        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
-        " * idRequest - ManageNameIDRequest (8)",
-        " *     The new name identifier request, this will be null if the request object is not available",
-        " * idResponse - ManageNameIDResponse (9)",
-        " *     The new name identifier response, this will be null if the response object is not available",
-        " * binding - String",
-        " *     The binding used for the new name identifier request. This will be one of the following values:",
-        " *          - SAML2Constants.SOAP",
-        " *          - SAML2Constants.HTTP_REDIRECT",
-        " * logoutRequest - LogoutRequest (10)",
-        " *     The single logout request.",
-        " * logoutResponse - LogoutResponse (11)",
-        " *     The single logout response.",
-        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
-        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * logger - Logger instance",
-        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " * Defined variables (class references are provided below):",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * claims - Map<String, Object> (5).",
+        " *          Always present, default server provided claims.",
+        " * claimObjects - List<Claim> (7, 2).",
+        " *                Always present, the default server provided claims.",
+        " * requestedClaims - Map<String, Set<String>> (5).",
+        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
+        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
+        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
+        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
+        " * requestedTypedClaims - List<Claim> (7, 2).",
+        " *                        Always present, the requested claims.",
+        " *                        Requested claims with no requested values will have a claim with no values.",
+        " *                        A claim with a single value indicates this is the only value that should be returned.",
+        " * claimsLocales - List<String> (7).",
+        " *                 The values from the 'claims_locales' parameter.",
+        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *              In order to use the client, you may need to add",
+        " *              org.forgerock.http.Client,",
+        " *              org.forgerock.http.protocol.*,",
+        " *              and org.forgerock.util.promise.PromiseImpl",
+        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
         " *",
-        " * Throws SAML2Exception (13):",
-        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *          See RESULTS section for additional details.",
         " *",
         " * Class reference:",
-        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
-        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
-        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
-        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
-        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
-        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
-        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
-        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
-        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
-        " */",
+        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
+        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
+        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
+        " *         the claim name, requested values, locale, and whether the claim is essential.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        "*/",
+        "",
+        "(function () {",
+        "    // SETUP",
+        "",
+        "    /**",
+        "     * Claim processing utilities.",
+        "     * An object that contains reusable functions for processing claims.",
+        "     * @see CLAIM PROCESSING UTILITIES section for details.",
+        "     */",
+        "    var utils = getUtils();",
+        "",
+        "    // CONFIGURATION AND CUSTOMIZATION",
+        "",
+        "    /**",
+        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a scope value to an array of claim names",
+        "     * to specify which claims need to be processed and returned for the requested scopes.",
+        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
+        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can choose the claim names returned for a scope.",
+        "     */",
+        "    utils.setScopeClaimsMap({",
+        "        profile: [",
+        "            'name',",
+        "            'family_name',",
+        "            'given_name',",
+        "            'zoneinfo',",
+        "            'locale'",
+        "        ],",
+        "        email: ['email'],",
+        "        address: ['address'],",
+        "        phone: ['phone_number']",
+        "    });",
         "",
-        "/*",
-        " * Template/default script for SAML2 SP Adapter scripted plugin.",
-        " */",
+        "    /**",
+        "     * In this script, each claim",
+        "     * derived from the requested scopes,",
+        "     * provided by the authorization server, and",
+        "     * requested by the client via the claims parameter",
+        "     * will be processed by a function associated with the claim name.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a claim name to a resolver function,",
+        "     * which will be automatically executed for each claim processed by the script.",
+        "     *",
+        "     * The claim resolver function will receive the requested claim information",
+        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
+        "     * for details on the Claim class.",
+        "     *",
+        "     * If the claim resolver function returns a value,",
+        "     * other than undefined or null,",
+        "     * the claim will be included in the script's results.",
+        "     *",
+        "     * The Claim instance provides methods to check",
+        "     * what the name of the claim is,",
+        "     * which values the claim request contains,",
+        "     * whether the claim is essential, and",
+        "     * which locale the claim is associated with.",
+        "     * The resolver function can consider this information when computing and returning the claim value.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
+        "     * is called to return a claim resolver function based on a user profile attribute.",
+        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
+        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can reuse the predefined utils methods with your custom arguments.",
+        "     * You can also specify a custom resolver function for a claim name,",
+        "     * that will compute and return the claim value—as shown in the commented out example below.",
+        "     */",
+        "    utils.setClaimResolvers({",
+        "        /*",
+        "        // An example of a simple claim resolver function that is defined for a claim",
+        "        // directly in the configuration object:",
+        "        custom-claim-name: function (requestedClaim) {",
+        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
+        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
         "",
-        "/*",
-        " * Available variables for preSingleSignOnRequest:",
-        " *     hostedEntityId",
-        " *     idpEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnRequest() {",
-        "}",
+        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
+        "            // You can use:",
+        "            // requestedClaim.getName()",
+        "            // requestedClaim.getValues()",
+        "            // requestedClaim.getLocale()",
+        "            // requestedClaim.isEssential()",
         "",
-        "/*",
-        " * Available variables for preSingleSignOnProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnProcess() {",
-        "}",
+        "            return claimValue",
+        "        },",
+        "        */",
+        "        /**",
+        "         * The use of utils.getUserProfileClaimResolver shows how",
+        "         * an argument passed to a function that returns a claim resolver",
+        "         * becomes available to the resolver function (via its lexical context).",
+        "         */",
+        "        name: utils.getUserProfileClaimResolver('cn'),",
+        "        family_name: utils.getUserProfileClaimResolver('sn'),",
+        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
+        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
+        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
+        "        email: utils.getUserProfileClaimResolver('mail'),",
+        "        address: utils.getAddressClaimResolver(",
+        "            /**",
+        "             * The passed in user profile claim resolver function",
+        "             * can be used by the address claim resolver function",
+        "             * to obtain the claim value to be formatted as per the OIDC specification:",
+        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             */",
+        "            utils.getUserProfileClaimResolver('postaladdress')",
+        "        ),",
+        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
+        "    });",
         "",
-        "/*",
-        " * Available variables for postSingleSignOnSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     out",
-        " *     session",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     isFederation",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnSuccess() {",
-        "    return false;",
-        "}",
+        "    // CLAIM PROCESSING UTILITIES",
         "",
-        "/*",
-        " * Available variables for postSingleSignOnFailure:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     failureCode",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnFailure() {",
-        "    return false;",
-        "}",
+        "    /**",
+        "     * @returns {object} An object that contains reusable claim processing utilities.",
+        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
+        "     */",
+        "    function getUtils () {",
+        "        // IMPORT JAVA",
         "",
-        "/*",
-        " * Available variables for postNewNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postNewNameIDSuccess() {",
-        "}",
+        "        /**",
+        "         * Provides Java scripting functionality.",
+        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
+        "         */",
+        "        var frJava = JavaImporter(",
+        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
+        "            org.forgerock.oauth2.core.UserInfoClaims,",
+        "            org.forgerock.openidconnect.Claim,",
         "",
-        "/*",
-        " * Available variables for postTerminateNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postTerminateNameIDSuccess() {",
-        "}",
+        "            java.util.LinkedHashMap,",
+        "            java.util.ArrayList",
+        "        );",
         "",
-        "/*",
-        " * Available variables for preSingleLogoutProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleLogoutProcess() {",
-        "}",
+        "        // SET UP CONFIGURATION",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported scope values (scopes)",
+        "         * and the corresponding claim names for each scope value.",
+        "         */",
+        "        var scopeClaimsMap;",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value.",
+        "         */",
+        "        var claimResolvers;",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
+        "         * in order to specify which claims need to be processed for the requested scopes.",
+        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
+        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
+        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
+        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
+        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
+        "         * @returns {undefined}",
+        "         */",
+        "        function setScopeClaimsMap(params) {",
+        "            scopeClaimsMap = params;",
+        "        }",
         "",
-        "/*",
-        " * Available variables for postSingleLogoutSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postSingleLogoutSuccess() {",
-        "}",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter-imported-(2).script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd": {
-      "_id": "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd",
-      "context": "SAML2_SP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "FrodoSPAdapter - imported (2)",
-      "script": [
-        "/*",
-        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps",
+        "         * each supported claim name to a function that computes and returns the claim value.",
+        "         */",
+        "        function setClaimResolvers(params) {",
+        "            claimResolvers = params;",
+        "        }",
         "",
-        "/*",
-        " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOnRequest",
-        " *      - preSingleSignOnProcess",
-        " *      - postSingleSignOnSuccess",
-        " *      - postSingleSignOnFailure",
-        " *      - postNewNameIDSuccess",
-        " *      - postTerminateNameIDSuccess",
-        " *      - preSingleLogoutProcess",
-        " *      - postSingleLogoutSuccess",
-        " *",
-        " * Please see the JavaDoc for the interface for more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
-        " * Note that the initialize method is not supported in the scripts.",
-        " *",
-        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
-        " *",
-        " * hostedEntityId - String",
-        " *     Entity ID for the hosted IDP",
-        " * realm - String",
-        " *     Realm of the hosted IDP",
-        " * idpEntityId - String",
-        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
-        " * request - HttpServletRequest (1)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (2)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (3)",
-        " *     The authentication request sent that is sent from the Service Provider.",
-        " * session - SSOToken (4)",
-        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * res - Response (5)",
-        " *     The SSO Response received from the Identity Provider.",
-        " * profile - String",
-        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
-        " *          - SAML2Constants.HTTP_POST",
-        " *          - SAML2Constants.HTTP_ARTIFACT",
-        " *          - SAML2Constants.PAOS",
-        " * out - PrintWriter (7)",
-        " *     The PrintWriter that can be used to write to.",
-        " * isFederation - boolean",
-        " *     Set to true if using federation, otherwise false.",
-        " * failureCode - int",
-        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
-        " * userId - String",
-        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
-        " * idRequest - ManageNameIDRequest (8)",
-        " *     The new name identifier request, this will be null if the request object is not available",
-        " * idResponse - ManageNameIDResponse (9)",
-        " *     The new name identifier response, this will be null if the response object is not available",
-        " * binding - String",
-        " *     The binding used for the new name identifier request. This will be one of the following values:",
-        " *          - SAML2Constants.SOAP",
-        " *          - SAML2Constants.HTTP_REDIRECT",
-        " * logoutRequest - LogoutRequest (10)",
-        " *     The single logout request.",
-        " * logoutResponse - LogoutResponse (11)",
-        " *     The single logout response.",
-        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
-        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * logger - Logger instance",
-        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *     Corresponding log files will be prefixed with: scripts.<script name>",
-        " *",
-        " * Throws SAML2Exception (13):",
-        " *     for any exceptions occurring in the adapter. The federation process will continue",
-        " *",
-        " * Class reference:",
-        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
-        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
-        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
-        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
-        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
-        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
-        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
-        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
-        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
-        " */",
+        "        // CLAIM RESOLVERS",
         "",
-        "/*",
-        " * Template/default script for SAML2 SP Adapter scripted plugin.",
-        " */",
+        "        /**",
+        "         * Claim resolvers are functions that return a claim value.",
+        "         * @param {*}",
+        "         * @returns {*}",
+        "         */",
         "",
-        "/*",
-        " * Available variables for preSingleSignOnRequest:",
-        " *     hostedEntityId",
-        " *     idpEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnRequest() {",
-        "}",
+        "        /**",
+        "         * Defines a claim resolver based on a user profile attribute.",
+        "         * @param {string} attributeName - Name of the user profile attribute.",
+        "         * @returns {function} A function that will determine the claim value",
+        "         * based on the user profile attribute and the (requested) claim properties.",
+        "         */",
+        "        function getUserProfileClaimResolver (attributeName) {",
+        "            /**",
+        "             * Resolves a claim with a user profile attribute value.",
+        "             * Returns undefined if the identity attribute is not populated,",
+        "             * OR if the claim has requested values that do not contain the identity attribute value.",
+        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {string|HashSet|undefined}",
+        "             */",
+        "            function resolveClaim(claim) {",
+        "                var userProfileValue;",
         "",
-        "/*",
-        " * Available variables for preSingleSignOnProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnProcess() {",
-        "}",
+        "                if (identity) {",
+        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
         "",
-        "/*",
-        " * Available variables for postSingleSignOnSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     out",
-        " *     session",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     isFederation",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnSuccess() {",
-        "    return false;",
-        "}",
+        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
+        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
+        "                            return userProfileValue;",
+        "                        }",
+        "                    }",
+        "                }",
+        "            }",
         "",
-        "/*",
-        " * Available variables for postSingleSignOnFailure:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     failureCode",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnFailure() {",
-        "    return false;",
-        "}",
+        "            return resolveClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional formatting to the value before returning it.",
+        "         */",
+        "        function getAddressClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Creates an address claim object from a value returned by a claim resolver,",
+        "             * and returns the address claim object as the claim value.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
+        "             */",
+        "            function resolveAddressClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "                var addressObject;",
         "",
-        "/*",
-        " * Available variables for postNewNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postNewNameIDSuccess() {",
-        "}",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    addressObject = new frJava.LinkedHashMap();",
         "",
-        "/*",
-        " * Available variables for postTerminateNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postTerminateNameIDSuccess() {",
-        "}",
+        "                    addressObject.put('formatted', claimValue);",
         "",
-        "/*",
-        " * Available variables for preSingleLogoutProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleLogoutProcess() {",
-        "}",
+        "                    return addressObject;",
+        "                }",
+        "            }",
         "",
-        "/*",
-        " * Available variables for postSingleLogoutSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postSingleLogoutSuccess() {",
-        "}",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS).script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "23143919-6b78-40c3-b25e-beca19b229e0": {
-      "_id": "23143919-6b78-40c3-b25e-beca19b229e0",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "GitHub Profile Normalization (VS)",
-      "script": [
-        "/*",
-        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "            return resolveAddressClaim;",
+        "        }",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "        /**",
+        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional logic for essential claims.",
+        "         */",
+        "        function getEssentialClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Returns a claim value or throws an error.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
+        "             *",
+        "             * Use of this resolver is optional.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
+        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
+        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
+        "             * unless otherwise specified in the description of the specific claim."",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*}",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             */",
+        "            function resolveEssentialClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
         "",
-        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
+        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
+        "                }",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.email)))",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS)-imported-(1).script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "207f172f-ffb5-439d-b7df-e8e80408830b": {
-      "_id": "207f172f-ffb5-439d-b7df-e8e80408830b",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "GitHub Profile Normalization (VS) - imported (1)",
-      "script": [
-        "/*",
-        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "                return claimValue;",
+        "            }",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "            return resolveEssentialClaim;",
+        "        }",
         "",
-        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "        /**",
+        "         * Provides default resolution for a claim.",
+        "         * Use it if a claim-specific resolver is not defined in the configuration.",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @returns {*} A single value associated with this claim.",
+        "         */",
+        "        function resolveAnyClaim (claim) {",
+        "            if (claim.getValues().size() === 1) {",
+        "                return claim.getValues().toArray()[0];",
+        "            }",
+        "        }",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.email)))",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS)-imported-(2).script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "fdb60c75-d58b-409f-bef2-ce4ebb04c77c": {
-      "_id": "fdb60c75-d58b-409f-bef2-ce4ebb04c77c",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "GitHub Profile Normalization (VS) - imported (2)",
-      "script": [
-        "/*",
-        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "        // UTILITIES",
+        "",
+        "        /**",
+        "         * Returns claim value from a set.",
+        "         * If the set contains a single value, returns the value.",
+        "         * If the set contains multiple values, returns the set.",
+        "         * Otherwise, returns undefined.",
+        "         *",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
+        "         * @returns {string|java.util.HashSet|undefined}",
+        "         */",
+        "        function getClaimValueFromSet (claim, set) {",
+        "            if (set && set.size()) {",
+        "                if (set.size() === 1) {",
+        "                    return set.toArray()[0];",
+        "                } else {",
+        "                    return set;",
+        "                }",
+        "            } else if (logger.warningEnabled()) {",
+        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            }",
+        "        }",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "        function isClaimValueValid (claimValue) {",
+        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
+        "                return false;",
+        "            }",
         "",
-        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "            return true;",
+        "        }",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.email)))",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Inactive-Device-Match-Script.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "3bd13a46-61c4-4974-8efb-1700c80c64e3": {
-      "_id": "3bd13a46-61c4-4974-8efb-1700c80c64e3",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Inactive Device Match Script",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Inactive Device Match Script",
-      "script": [
-        "/*",
-        " * Inactive Device Match Script",
-        " */",
+        "        // CLAIM PROCESSING",
         "",
-        "outcome = "true";",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Example-Library.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
-      "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Library",
-      "evaluatorVersion": "2.0",
-      "exports": [
-        {
-          "id": "MSG",
-          "type": "String",
-        },
-        {
-          "arity": 1,
-          "id": "add",
-          "type": "Function",
-        },
-        {
-          "arity": 1,
-          "id": "logTotal",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logTotalWithMessage",
-          "type": "Function",
-        },
-      ],
-      "language": "JAVASCRIPT",
-      "name": "My Example Library",
-      "script": [
-        "var i = 0;",
+        "        /**",
+        "         * Constructs and returns an object populated with the computed claim values",
+        "         * and the requested scopes mapped to the claim names.",
+        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "         * @see RESULTS section for the use of this function.",
+        "         */",
+        "        function getUserInfoClaims () {",
+        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        }",
         "",
-        "function add(j) {i += j};",
-        "function logTotal(log) { log.info("Total: " + i) };",
+        "        /**",
+        "         * Creates a map of (requested) claim names populated with the computed claim values.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         * A map of the requested claim names and the corresponding claim values.",
+        "         */",
+        "        function getComputedClaims () {",
+        "            /**",
+        "             * Creates a complete list of claim objects from:",
+        "             * the claims derived from the scopes,",
+        "             * the claims provided by the authorization server,",
+        "             * and the claims requested by the client.",
+        "             * @returns {java.util.ArrayList}",
+        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "             */",
+        "            function getClaims() {",
+        "                /**",
+        "                 * Returns a list of claim objects for the requested scopes.",
+        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
+        "                 * no other properties of a claim derived from a scope are populated.",
+        "                 * @returns {java.util.ArrayList}",
+        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
+        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "                 */",
+        "                function convertScopeToClaims() {",
+        "                    var claims = new frJava.ArrayList();",
         "",
-        "// export constant",
-        "exports.MSG = 'Final sum';",
+        "                    scopes.toArray().forEach(function (scope) {",
+        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
+        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                                claims.add(new frJava.Claim(claimName));",
+        "                            });",
+        "                        }",
+        "                    });",
         "",
-        "// export functions",
-        "exports.add = add;",
-        "exports.logTotal = logTotal;",
+        "                    return claims;",
+        "                }",
         "",
-        "//direct export using an inline declaration",
-        "exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Example-Script-Using-Libraries.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
-      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Script Using Libraries",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "name": "My Example Script Using Libraries",
-      "script": [
-        "/**",
-        " * Testing library scripts",
-        " */",
-        "var mylib = require('My Example Library');",
-        "var loggers = require('Library Script');",
+        "                var claims = new frJava.ArrayList();",
         "",
-        "mylib.add(1);",
-        "mylib.logTotal(logger);",
-        "mylib.add(3);",
-        "mylib.logTotalWithMessage(logger, mylib.MSG);",
+        "                claims.addAll(convertScopeToClaims());",
+        "                claims.addAll(claimObjects);",
+        "                claims.addAll(requestedTypedClaims);",
         "",
-        "outcome = 'true';",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Other-Example-Library-Script.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "4e053815-adde-46ac-9fe2-d3ae93517c14": {
-      "_id": "4e053815-adde-46ac-9fe2-d3ae93517c14",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "2.0",
-      "exports": [],
-      "language": "JAVASCRIPT",
-      "name": "My Other Example Library Script",
-      "script": [
-        "console.log("hi there");",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "6325cf19-a49b-471e-8d26-7e4df76df0e2": {
-      "_id": "6325cf19-a49b-471e-8d26-7e4df76df0e2",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "Okta Profile Normalization",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "                return claims;",
+        "            }",
+        "",
+        "            /**",
+        "             * Computes and returns a claim value.",
+        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
+        "             * @see claimResolvers",
+        "             * If no resolver function is found, uses the default claim resolver function.",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*} Claim value.",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             * Rethrows this exception if a claim resolver throws it.",
+        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
+        "             * if you want to terminate the claim processing.",
+        "             */",
+        "            function computeClaim(claim) {",
+        "                var resolveClaim;",
+        "                var message;",
+        "",
+        "                try {",
+        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "",
+        "                    return resolveClaim(claim);",
+        "                } catch (e) {",
+        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
+        "                        throw e;",
+        "                    }",
         "",
-        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "                    if (logger.warningEnabled()) {",
+        "                        logger.warning(message);",
+        "                    }",
+        "                }",
+        "            }",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.preferred_username)))",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization-imported-(1).script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "6002c349-f1d0-4317-baa2-a18590fc3cff": {
-      "_id": "6002c349-f1d0-4317-baa2-a18590fc3cff",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "Okta Profile Normalization - imported (1)",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "            var computedClaims = new frJava.LinkedHashMap();",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "            getClaims().toArray().forEach(function (claim) {",
+        "                var claimValue = computeClaim(claim);",
         "",
-        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    computedClaims.put(claim.getName(), claimValue);",
+        "                } else {",
+        "                    /**",
+        "                     * If a claim has been processed, but appears in the list again,",
+        "                     * and its value cannot be computed under the new conditions,",
+        "                     * the claim is removed from the final result.",
+        "                     *",
+        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
+        "                     * but also requested by the client with required values that don't match the computed one.",
+        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
+        "                     * for the relevant OIDC specification details.",
+        "                     */",
+        "                    computedClaims.remove(claim.getName());",
+        "                }",
+        "            });",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.preferred_username)))",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization-imported-(2).script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "647f2a33-9211-4315-a83f-a521d8b77d7b": {
-      "_id": "647f2a33-9211-4315-a83f-a521d8b77d7b",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "Okta Profile Normalization - imported (2)",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "            return computedClaims;",
+        "        }",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "        /**",
+        "         * Creates a map of requested scopes and the corresponding claim names.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         */",
+        "        function getCompositeScopes () {",
+        "            var compositeScopes = new frJava.LinkedHashMap();",
         "",
-        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "            scopes.toArray().forEach(function (scope) {",
+        "                var scopeClaims = new frJava.ArrayList();",
+        "",
+        "                if (scopeClaimsMap[scope]) {",
+        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                        scopeClaims.add(claimName);",
+        "                    });",
+        "                }",
+        "",
+        "                if (scopeClaims.size()) {",
+        "                    compositeScopes.put(scope, scopeClaims);",
+        "                }",
+        "            });",
+        "",
+        "            return compositeScopes;",
+        "        }",
+        "",
+        "        // PUBLIC METHODS",
+        "",
+        "        return {",
+        "            setScopeClaimsMap: setScopeClaimsMap,",
+        "            setClaimResolvers: setClaimResolvers,",
+        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
+        "            getAddressClaimResolver: getAddressClaimResolver,",
+        "            getEssentialClaimResolver: getEssentialClaimResolver,",
+        "            getUserInfoClaims: getUserInfoClaims",
+        "        };",
+        "    }",
+        "",
+        "    // RESULTS",
+        "",
+        "    /**",
+        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
+        "     * populated with the computed claim values and",
+        "     * the requested scopes mapped to the claim names.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "     *",
+        "     * Assigning it to a variable gives you an opportunity",
+        "     * to log the content of the returned value during development.",
+        "     */",
+        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "",
+        "    /*",
+        "    logger.error(scriptName + ' results:')",
+        "    logger.error('Values: ' + userInfoClaims.getValues())",
+        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
+        "    */",
+        "",
+        "    return userInfoClaims;",
+        "}());",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.preferred_username)))",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Remove-Button.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Format-Username.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "9535446c-0ff6-4a76-8576-616599119d64": {
-      "_id": "9535446c-0ff6-4a76-8576-616599119d64",
+    "223739f3-9c54-43b7-9572-3c5338786145": {
+      "_id": "223739f3-9c54-43b7-9572-3c5338786145",
       "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Remove button from page.",
+      "description": "null",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Remove Button",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Format Username",
       "script": [
-        "/* Remove Button",
-        " *",
-        " * Author: volker.scheuber@forgerock.com",
-        " * ",
-        " * Hide buttons on the journey page.",
-        " * ",
-        " * This script does not need to be parametrized. It will work properly as is.",
-        " * ",
-        " * The Scripted Decision Node needs the following outcomes defined:",
-        " * - true",
-        " */",
-        "(function () {",
-        "    var script = "Array.prototype.slice.call(document.getElementsByTagName('button')).forEach(function (e) {e.style.display = 'none'})"",
-        "    var fr = JavaImporter(",
-        "        org.forgerock.openam.auth.node.api.Action,",
-        "        javax.security.auth.callback.TextOutputCallback,",
-        "        com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
-        "    )",
-        "    var message = " "",
-        "    if (callbacks.isEmpty()) {",
-        "        action = fr.Action.send(",
-        "            new fr.TextOutputCallback(",
-        "                fr.TextOutputCallback.INFORMATION,",
-        "                message",
-        "            ),",
-        "            new fr.ScriptTextOutputCallback(script)",
-        "        ).build()",
-        "    }",
-        "}());",
+        "var username = sharedState.get("username");",
+        "",
+        "sharedState.put("displayName", username);",
+        "outcome = "continue";",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "85523e71-2d77-4577-b078-6f9674cc54e2": {
-      "_id": "85523e71-2d77-4577-b078-6f9674cc54e2",
-      "context": "SAML2_IDP_ADAPTER",
+    "07ee6240-d106-4e25-a781-5fcabc477d22": {
+      "_id": "07ee6240-d106-4e25-a781-5fcabc477d22",
+      "context": "SAML2_SP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Always redirect browser pre-auth",
+      "description": "null",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Saml2 IDP Adapter Always Auth",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "FrodoSPAdapter",
       "script": [
         "/*",
-        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
         " *",
         " * Use of this code requires a commercial software license with ForgeRock AS.",
         " * or with one of its affiliates. All use shall be exclusively subject",
@@ -15697,14 +7400,17 @@ exports[`frodo script export "frodo script export -A": should export all scripts
         "",
         "/*",
         " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOn",
-        " *      - preAuthentication",
-        " *      - preSendResponse",
-        " *      - preSignResponse",
-        " *      - preSendFailureResponse",
-        " *",
-        " * Please see the javadoc for the interface definition and more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
+        " *",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
         " * Note that the initialize method is not supported in the scripts.",
         " *",
         " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
@@ -15713,136 +7419,203 @@ exports[`frodo script export "frodo script export -A": should export all scripts
         " *     Entity ID for the hosted IDP",
         " * realm - String",
         " *     Realm of the hosted IDP",
-        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
-        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * request - HttpServletRequest (2)",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
         " *     Servlet request object",
-        " * response - HttpServletResponse (3)",
+        " * response - HttpServletResponse (2)",
         " *     Servlet response object",
-        " * authnRequest - AuthnRequest (4)",
-        " *     The original authentication request sent from SP",
-        " * reqId - String",
-        " *     The id to use for continuation of processing if the adapter redirects",
-        " * res - Response (5)",
-        " *     The SAML Response",
-        " * session - SSOToken (6)",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
         " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * relayState - String",
-        " *     The relayState that will be used in the redirect",
-        " * faultCode - String",
-        " *     the fault code that will be returned in the SAML response",
-        " * faultDetail - String",
-        " *     the fault detail that will be returned in the SAML response",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
         " * logger - Logger instance",
         " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
         " *     Corresponding log files will be prefixed with: scripts.<script name>",
         " *",
-        " * Throws SAML2Exception (7):",
+        " * Throws SAML2Exception (13):",
         " *     for any exceptions occurring in the adapter. The federation process will continue",
         " *",
         " * Class reference:",
-        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
-        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
-        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
         " */",
         "",
         "/*",
-        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
         " */",
         "",
         "/*",
-        " * Available variables for preSingleSignOn:",
+        " * Available variables for preSingleSignOnRequest:",
         " *     hostedEntityId",
+        " *     idpEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
         " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
         " */",
-        "function preSingleSignOn () {",
-        "      logger.error("Chicago: preSingleSignOn");",
-        "    return true;",
+        "function preSingleSignOnRequest() {",
         "}",
         "",
         "/*",
-        " * Available variables for preAuthentication:",
+        " * Available variables for preSingleSignOnProcess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
-        " *     session",
-        " *     relayState",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
         " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
         " */",
-        "function preAuthentication () {",
-        "      logger.error("Chicago: preAuthentication");",
-        "    return true;",
+        "function preSingleSignOnProcess() {",
         "}",
         "",
         "/*",
-        " * Available variables for preSendResponse:",
+        " * Available variables for postSingleSignOnSuccess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
+        " *     out",
         " *     session",
-        " *     relayState",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
         " *     logger",
         " *",
-        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " * Return - true if response is being redirected, false if not. Default to false.",
         " */",
-        "function preSendResponse () {",
-        "      logger.error("Chicago: preSendResponse");",
-        "      logger.error("Chicago: authnRequest: "+authnRequest);",
-        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
-        "    return true;",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
         "}",
         "",
         "/*",
-        " * Available variables for preSignResponse:",
+        " * Available variables for postSingleSignOnFailure:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
+        " *     response",
         " *     authnRequest",
-        " *     session",
-        " *     relayState",
         " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
         " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
         " */",
-        "function preSignResponse () {",
-        "      logger.error("Chicago: preSignResponse");",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
         "}",
         "",
         "/*",
-        " * Available variables for preSendFailureResponse:",
+        " * Available variables for postNewNameIDSuccess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
         " *     response",
-        " *     faultCode",
-        " *     faultDetail",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
         " *     logger",
         " */",
-        "function preSendFailureResponse () {",
-        "      logger.error("Chicago: preSendFailureResponse");",
+        "function postNewNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
         "}",
       ],
     },
@@ -15850,23 +7623,24 @@ exports[`frodo script export "frodo script export -A": should export all scripts
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth-imported-(1).script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter-imported-(1).script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1": {
-      "_id": "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1",
-      "context": "SAML2_IDP_ADAPTER",
+    "5ce0d38a-154c-4be5-bd22-f9879c77e895": {
+      "_id": "5ce0d38a-154c-4be5-bd22-f9879c77e895",
+      "context": "SAML2_SP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Always redirect browser pre-auth",
+      "description": "null",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Saml2 IDP Adapter Always Auth - imported (1)",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "FrodoSPAdapter - imported (1)",
       "script": [
         "/*",
-        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
         " *",
         " * Use of this code requires a commercial software license with ForgeRock AS.",
         " * or with one of its affiliates. All use shall be exclusively subject",
@@ -15875,14 +7649,17 @@ exports[`frodo script export "frodo script export -A": should export all scripts
         "",
         "/*",
         " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOn",
-        " *      - preAuthentication",
-        " *      - preSendResponse",
-        " *      - preSignResponse",
-        " *      - preSendFailureResponse",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
         " *",
-        " * Please see the javadoc for the interface definition and more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
         " * Note that the initialize method is not supported in the scripts.",
         " *",
         " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
@@ -15891,136 +7668,203 @@ exports[`frodo script export "frodo script export -A": should export all scripts
         " *     Entity ID for the hosted IDP",
         " * realm - String",
         " *     Realm of the hosted IDP",
-        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
-        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * request - HttpServletRequest (2)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (3)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (4)",
-        " *     The original authentication request sent from SP",
-        " * reqId - String",
-        " *     The id to use for continuation of processing if the adapter redirects",
-        " * res - Response (5)",
-        " *     The SAML Response",
-        " * session - SSOToken (6)",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (2)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
         " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * relayState - String",
-        " *     The relayState that will be used in the redirect",
-        " * faultCode - String",
-        " *     the fault code that will be returned in the SAML response",
-        " * faultDetail - String",
-        " *     the fault detail that will be returned in the SAML response",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
         " * logger - Logger instance",
         " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
         " *     Corresponding log files will be prefixed with: scripts.<script name>",
         " *",
-        " * Throws SAML2Exception (7):",
+        " * Throws SAML2Exception (13):",
         " *     for any exceptions occurring in the adapter. The federation process will continue",
         " *",
         " * Class reference:",
-        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
-        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
-        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
         " */",
         "",
         "/*",
-        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
         " */",
         "",
         "/*",
-        " * Available variables for preSingleSignOn:",
+        " * Available variables for preSingleSignOnRequest:",
         " *     hostedEntityId",
+        " *     idpEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
         " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
         " */",
-        "function preSingleSignOn () {",
-        "      logger.error("Chicago: preSingleSignOn");",
-        "    return true;",
+        "function preSingleSignOnRequest() {",
         "}",
         "",
         "/*",
-        " * Available variables for preAuthentication:",
+        " * Available variables for preSingleSignOnProcess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
-        " *     session",
-        " *     relayState",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
         " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
         " */",
-        "function preAuthentication () {",
-        "      logger.error("Chicago: preAuthentication");",
-        "    return true;",
+        "function preSingleSignOnProcess() {",
         "}",
         "",
         "/*",
-        " * Available variables for preSendResponse:",
+        " * Available variables for postSingleSignOnSuccess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
+        " *     out",
         " *     session",
-        " *     relayState",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
         " *     logger",
         " *",
-        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " * Return - true if response is being redirected, false if not. Default to false.",
         " */",
-        "function preSendResponse () {",
-        "      logger.error("Chicago: preSendResponse");",
-        "      logger.error("Chicago: authnRequest: "+authnRequest);",
-        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
-        "    return true;",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
         "}",
         "",
         "/*",
-        " * Available variables for preSignResponse:",
+        " * Available variables for postSingleSignOnFailure:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
+        " *     response",
         " *     authnRequest",
-        " *     session",
-        " *     relayState",
         " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postNewNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
         " *     logger",
         " */",
-        "function preSignResponse () {",
-        "      logger.error("Chicago: preSignResponse");",
+        "function postNewNameIDSuccess() {",
         "}",
         "",
         "/*",
-        " * Available variables for preSendFailureResponse:",
+        " * Available variables for postTerminateNameIDSuccess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
         " *     response",
-        " *     faultCode",
-        " *     faultDetail",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
         " *     logger",
         " */",
-        "function preSendFailureResponse () {",
-        "      logger.error("Chicago: preSendFailureResponse");",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
         "}",
       ],
     },
@@ -16028,23 +7872,24 @@ exports[`frodo script export "frodo script export -A": should export all scripts
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth-imported-(2).script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/FrodoSPAdapter-imported-(2).script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "994a4e8f-2741-424a-83e7-3c5f78da01f5": {
-      "_id": "994a4e8f-2741-424a-83e7-3c5f78da01f5",
-      "context": "SAML2_IDP_ADAPTER",
+    "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd": {
+      "_id": "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd",
+      "context": "SAML2_SP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Always redirect browser pre-auth",
+      "description": "null",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Saml2 IDP Adapter Always Auth - imported (2)",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "FrodoSPAdapter - imported (2)",
       "script": [
         "/*",
-        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
         " *",
         " * Use of this code requires a commercial software license with ForgeRock AS.",
         " * or with one of its affiliates. All use shall be exclusively subject",
@@ -16053,14 +7898,17 @@ exports[`frodo script export "frodo script export -A": should export all scripts
         "",
         "/*",
         " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOn",
-        " *      - preAuthentication",
-        " *      - preSendResponse",
-        " *      - preSignResponse",
-        " *      - preSendFailureResponse",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
         " *",
-        " * Please see the javadoc for the interface definition and more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
         " * Note that the initialize method is not supported in the scripts.",
         " *",
         " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
@@ -16069,653 +7917,549 @@ exports[`frodo script export "frodo script export -A": should export all scripts
         " *     Entity ID for the hosted IDP",
         " * realm - String",
         " *     Realm of the hosted IDP",
-        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
-        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * request - HttpServletRequest (2)",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
         " *     Servlet request object",
-        " * response - HttpServletResponse (3)",
+        " * response - HttpServletResponse (2)",
         " *     Servlet response object",
-        " * authnRequest - AuthnRequest (4)",
-        " *     The original authentication request sent from SP",
-        " * reqId - String",
-        " *     The id to use for continuation of processing if the adapter redirects",
-        " * res - Response (5)",
-        " *     The SAML Response",
-        " * session - SSOToken (6)",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
         " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * relayState - String",
-        " *     The relayState that will be used in the redirect",
-        " * faultCode - String",
-        " *     the fault code that will be returned in the SAML response",
-        " * faultDetail - String",
-        " *     the fault detail that will be returned in the SAML response",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
         " * logger - Logger instance",
         " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
         " *     Corresponding log files will be prefixed with: scripts.<script name>",
         " *",
-        " * Throws SAML2Exception (7):",
+        " * Throws SAML2Exception (13):",
         " *     for any exceptions occurring in the adapter. The federation process will continue",
         " *",
         " * Class reference:",
-        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
-        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
-        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
         " */",
         "",
         "/*",
-        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
         " */",
         "",
         "/*",
-        " * Available variables for preSingleSignOn:",
+        " * Available variables for preSingleSignOnRequest:",
         " *     hostedEntityId",
+        " *     idpEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
         " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
         " */",
-        "function preSingleSignOn () {",
-        "      logger.error("Chicago: preSingleSignOn");",
-        "    return true;",
+        "function preSingleSignOnRequest() {",
         "}",
         "",
         "/*",
-        " * Available variables for preAuthentication:",
+        " * Available variables for preSingleSignOnProcess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
-        " *     session",
-        " *     relayState",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
         " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
         " */",
-        "function preAuthentication () {",
-        "      logger.error("Chicago: preAuthentication");",
-        "    return true;",
+        "function preSingleSignOnProcess() {",
         "}",
         "",
         "/*",
-        " * Available variables for preSendResponse:",
+        " * Available variables for postSingleSignOnSuccess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
-        " *     authnRequest",
         " *     response",
-        " *     reqId",
+        " *     out",
         " *     session",
-        " *     relayState",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
         " *     logger",
         " *",
-        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " * Return - true if response is being redirected, false if not. Default to false.",
         " */",
-        "function preSendResponse () {",
-        "      logger.error("Chicago: preSendResponse");",
-        "      logger.error("Chicago: authnRequest: "+authnRequest);",
-        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
-        "    return true;",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
         "}",
         "",
         "/*",
-        " * Available variables for preSignResponse:",
+        " * Available variables for postSingleSignOnFailure:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
+        " *     response",
         " *     authnRequest",
-        " *     session",
-        " *     relayState",
         " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
         " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
         " */",
-        "function preSignResponse () {",
-        "      logger.error("Chicago: preSignResponse");",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
         "}",
         "",
         "/*",
-        " * Available variables for preSendFailureResponse:",
+        " * Available variables for postNewNameIDSuccess:",
         " *     hostedEntityId",
         " *     realm",
-        " *     idpAdapterScriptHelper",
         " *     request",
         " *     response",
-        " *     faultCode",
-        " *     faultDetail",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
         " *     logger",
         " */",
-        "function preSendFailureResponse () {",
-        "      logger.error("Chicago: preSendFailureResponse");",
+        "function postNewNameIDSuccess() {",
         "}",
+        "",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
+        "}",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "a7a78773-445b-4eca-bb93-409e86bced81": {
+      "_id": "a7a78773-445b-4eca-bb93-409e86bced81",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "GitHub Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("username", rawProfile.login)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS).script.json 1`] = `
+{
+  "script": {
+    "23143919-6b78-40c3-b25e-beca19b229e0": {
+      "_id": "23143919-6b78-40c3-b25e-beca19b229e0",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "GitHub Profile Normalization (VS)",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: debug.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS)-imported-(1).script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "3cb43516-ae69-433a-8787-501d45db14e9": {
-      "_id": "3cb43516-ae69-433a-8787-501d45db14e9",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+    "207f172f-ffb5-439d-b7df-e8e80408830b": {
+      "_id": "207f172f-ffb5-439d-b7df-e8e80408830b",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Display sharedState, transientState, and headers.",
+      "description": "Normalizes raw profile data from GitHub",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "debug",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "GitHub Profile Normalization (VS) - imported (1)",
       "script": [
-        "/* debug",
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Author: volker.scheuber@forgerock.com",
-        " * ",
-        " * Display sharedState, transientState, and headers.",
-        " * ",
-        " * This script does not need to be parametrized. It will work properly as is.",
-        " * ",
-        " * The Scripted Decision Node needs the following outcomes defined:",
-        " * - true",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
         " */",
-        "var anchor = "anchor-".concat(generateNumericToken('xxx'));",
-        "var halign = "left";",
-        "var message = "<p><b>Shared State</b>:<br/>".concat(",
-        "      sharedState.toString()).concat("</p>").concat(",
-        "    "<p><b>Transient State</b>:<br/>").concat(",
-        "      transientState.toString()).concat("</p>").concat(",
-        "    "<p><b>Request Headers</b>:<br/>").concat(",
-        "      requestHeaders.toString()).concat("</p>")",
-        "var script = "Array.prototype.slice.call(\\n".concat(",
-        "  "document.getElementsByClassName('callback-component')).forEach(\\n").concat(",
-        "  "function (e) {\\n").concat(",
-        "  "  var message = e.firstElementChild;\\n").concat(",
-        "  "  if (message.firstChild && message.firstChild.nodeName == '#text' && message.firstChild.nodeValue.trim() == '").concat(anchor).concat("') {\\n").concat(",
-        "  "    message.className = \\"text-left\\";\\n").concat(",
-        "  "    message.align = \\"").concat(halign).concat("\\";\\n").concat(",
-        "  "    message.innerHTML = '").concat(message).concat("';\\n").concat(",
-        "  "  }\\n").concat(",
-        "  "})")",
-        "var fr = JavaImporter(",
-        "    org.forgerock.openam.auth.node.api.Action,",
-        "    javax.security.auth.callback.TextOutputCallback,",
-        "    com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
-        ")",
-        "if (message.length && callbacks.isEmpty()) {",
-        "    action = fr.Action.send(",
-        "        new fr.TextOutputCallback(",
-        "            fr.TextOutputCallback.INFORMATION,",
-        "            anchor",
-        "        ),",
-        "        new fr.ScriptTextOutputCallback(script)",
-        "    ).build()",
-        "}",
-        "else {",
-        "  action = fr.Action.goTo("true").build();",
-        "}",
         "",
-        " /*",
-        "  * Generate a token in the desired format. All 'x' characters will be replaced with a random number 0-9.",
-        "  * ",
-        "  * Example:",
-        "  * 'xxxxx' produces '28535'",
-        "  * 'xxx-xxx' produces '432-521'",
-        "  */",
-        "function generateNumericToken(format) {",
-        "    return format.replace(/[x]/g, function(c) {",
-        "        var r = Math.random()*10|0;",
-        "        var v = r;",
-        "        return v.toString(10);",
-        "    });",
-        "}",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: level.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/GitHub-Profile-Normalization-(VS)-imported-(2).script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "41c24257-d7fc-4654-8b46-c2666dc5b56d": {
-      "_id": "41c24257-d7fc-4654-8b46-c2666dc5b56d",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+    "fdb60c75-d58b-409f-bef2-ce4ebb04c77c": {
+      "_id": "fdb60c75-d58b-409f-bef2-ce4ebb04c77c",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "set per level shared state variable",
+      "description": "Normalizes raw profile data from GitHub",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "level",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "GitHub Profile Normalization (VS) - imported (2)",
       "script": [
-        "(function () {",
-        "  outcome = 'true';",
-        "  var level = nodeState.get('level').asInteger();",
-        "  sharedState.put('level' + level + 'Value', 'Level ' + level + ': This is a longer string value set at each level of the nested journeys. It contains an indicator in which level it was set.');",
-        "}());",
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: mode.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Google-Profile-Normalization.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "5bbdaeff-ddee-44b9-b608-8d413d7d65a6": {
-      "_id": "5bbdaeff-ddee-44b9-b608-8d413d7d65a6",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+    "58d29080-4563-480b-89bb-1e7719776a21": {
+      "_id": "58d29080-4563-480b-89bb-1e7719776a21",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "Check if mode has already been set.",
+      "default": true,
+      "description": "Normalizes raw profile data from Google",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "mode",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Google Profile Normalization",
       "script": [
-        "/* mode",
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Author: volker.scheuber@forgerock.com",
-        " * ",
-        " * Collect mode if not already set and set outcome to mode.",
-        " * ",
-        " * This script does not need to be parametrized. It will work properly as is.",
-        " * ",
-        " * The Scripted Decision Node needs the following outcomes defined:",
-        " * - 'shared and level'",
-        " * - 'shared only'",
-        " * - 'level only'",
-        " * - 'none'",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
         " */",
-        "(function () {",
-        "  var mode = nodeState.get('mode');",
-        "  if (mode) {",
-        "    outcome = mode.asString();",
-        "    var level = nodeState.get('level').asInteger() + 1;",
-        "    logger.error('mode: mode=' + mode.asString() + ', level=' + level);",
-        "    sharedState.put('level', level);",
-        "  }",
-        "  else {",
-        "    var choices = ['shared and level', 'shared only', 'level only', 'none'];",
-        "  ",
-        "    var fr = JavaImporter(",
-        "      org.forgerock.openam.auth.node.api.Action,",
-        "      javax.security.auth.callback.ChoiceCallback",
-        "    )",
         "",
-        "    if (callbacks.isEmpty()) {",
-        "      action = fr.Action.send([",
-        "        new fr.ChoiceCallback('Choose test mode', choices, 0, false)",
-        "      ]).build();",
-        "    } else {",
-        "      var choice = parseInt(callbacks.get(0).getSelectedIndexes()[0]);",
-        "      nodeState.putShared('mode', choices[choice]);",
-        "      nodeState.putShared('level', 0);",
-        "      action = fr.Action.goTo(choices[choice]).build();",
-        "    }",
-        "  }",
-        "}());",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.sub),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.given_name),",
+        "        field("familyName", rawProfile.family_name),",
+        "        field("photoUrl", rawProfile.picture),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email),",
+        "        field("locale", rawProfile.locale)))",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: shared.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Inactive-Device-Match-Script.script.json 1`] = `
 {
-  "meta": Any<Object>,
   "script": {
-    "1b52a7e0-4019-40fa-958a-15a49870e901": {
-      "_id": "1b52a7e0-4019-40fa-958a-15a49870e901",
+    "3bd13a46-61c4-4974-8efb-1700c80c64e3": {
+      "_id": "3bd13a46-61c4-4974-8efb-1700c80c64e3",
       "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "set the same shared state variable",
+      "description": "Inactive Device Match Script",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "shared",
-      "script": [
-        "(function () {",
-        "  outcome = 'true';",
-        "  var level = nodeState.get('level').asInteger();",
-        "  sharedState.put('sharedValue', 'Level ' + level + ': This is a longer string value shared across all nested journeys. It contains an indicator in which level it was last set.');",
-        "}());",
-      ],
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -A": should export all scripts to separate files: test-script-with-secrets-and-variables.script.json 1`] = `
-{
-  "meta": Any<Object>,
-  "script": {
-    "da7a96a8-7969-4dab-9c6e-a812938cc76d": {
-      "_id": "da7a96a8-7969-4dab-9c6e-a812938cc76d",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Script that uses secrets and variables",
-      "evaluatorVersion": "2.0",
-      "exports": [],
-      "language": "JAVASCRIPT",
-      "name": "test-script-with-secrets-and-variables",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Inactive Device Match Script",
       "script": [
-        "console.log(\`pi: \${systemEnv.getProperty("esv.test.var.pi")}\`);",
-        "console.log(\`pi secret: \${systemEnv.getProperty("esv.test.secret.pi")}\`);",
-        "console.log(\`speed of light: \${systemEnv.getProperty("esv.test.variable.light")}\`);",
-        "console.log(\`euler's number: \${systemEnv.getProperty("esv.test.secret.euler")}\`);",
-        "console.log(\`Area of circle with radius 7: \${7 * 7 * systemEnv.getProperty("esv.test.var.pi")}\`);",
-        "console.log(\`Volume of sphere with radius 7: \${4 * 7 * 7 * 7 * systemEnv.getProperty("esv.test.secret.pi") / 3}\`);",
+        "/*",
+        " * Inactive Device Match Script",
+        " */",
         "",
+        "outcome = "true";",
       ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": should export all scripts to a single file in the directory scriptExportTestDir2 1`] = `0`;
-
-exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": should export all scripts to a single file in the directory scriptExportTestDir2 2`] = `""`;
-
-exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": should export all scripts to a single file in the directory scriptExportTestDir2: scriptExportTestDir2/allAlphaScripts.script.json 1`] = `
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Instagram-Profile-Normalization.script.json 1`] = `
 {
   "script": {
-    "07ee6240-d106-4e25-a781-5fcabc477d22": {
-      "_id": "07ee6240-d106-4e25-a781-5fcabc477d22",
-      "context": "SAML2_SP_ADAPTER",
+    "1244e639-4a31-401d-ab61-d75133d8dc9e": {
+      "_id": "1244e639-4a31-401d-ab61-d75133d8dc9e",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "null",
+      "default": true,
+      "description": "Normalizes raw profile data from Instagram",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
+      "language": "GROOVY",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "FrodoSPAdapter",
+      "name": "Instagram Profile Normalization",
       "script": [
         "/*",
-        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
         " *",
         " * Use of this code requires a commercial software license with ForgeRock AS.",
         " * or with one of its affiliates. All use shall be exclusively subject",
         " * to such license between the licensee and ForgeRock AS.",
         " */",
         "",
-        "/*",
-        " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOnRequest",
-        " *      - preSingleSignOnProcess",
-        " *      - postSingleSignOnSuccess",
-        " *      - postSingleSignOnFailure",
-        " *      - postNewNameIDSuccess",
-        " *      - postTerminateNameIDSuccess",
-        " *      - preSingleLogoutProcess",
-        " *      - postSingleLogoutSuccess",
-        " *",
-        " * Please see the JavaDoc for the interface for more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
-        " * Note that the initialize method is not supported in the scripts.",
-        " *",
-        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
-        " *",
-        " * hostedEntityId - String",
-        " *     Entity ID for the hosted IDP",
-        " * realm - String",
-        " *     Realm of the hosted IDP",
-        " * idpEntityId - String",
-        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
-        " * request - HttpServletRequest (1)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (2)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (3)",
-        " *     The authentication request sent that is sent from the Service Provider.",
-        " * session - SSOToken (4)",
-        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * res - Response (5)",
-        " *     The SSO Response received from the Identity Provider.",
-        " * profile - String",
-        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
-        " *          - SAML2Constants.HTTP_POST",
-        " *          - SAML2Constants.HTTP_ARTIFACT",
-        " *          - SAML2Constants.PAOS",
-        " * out - PrintWriter (7)",
-        " *     The PrintWriter that can be used to write to.",
-        " * isFederation - boolean",
-        " *     Set to true if using federation, otherwise false.",
-        " * failureCode - int",
-        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
-        " * userId - String",
-        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
-        " * idRequest - ManageNameIDRequest (8)",
-        " *     The new name identifier request, this will be null if the request object is not available",
-        " * idResponse - ManageNameIDResponse (9)",
-        " *     The new name identifier response, this will be null if the response object is not available",
-        " * binding - String",
-        " *     The binding used for the new name identifier request. This will be one of the following values:",
-        " *          - SAML2Constants.SOAP",
-        " *          - SAML2Constants.HTTP_REDIRECT",
-        " * logoutRequest - LogoutRequest (10)",
-        " *     The single logout request.",
-        " * logoutResponse - LogoutResponse (11)",
-        " *     The single logout response.",
-        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
-        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * logger - Logger instance",
-        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *     Corresponding log files will be prefixed with: scripts.<script name>",
-        " *",
-        " * Throws SAML2Exception (13):",
-        " *     for any exceptions occurring in the adapter. The federation process will continue",
-        " *",
-        " * Class reference:",
-        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
-        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
-        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
-        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
-        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
-        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
-        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
-        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
-        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
-        " */",
-        "",
-        "/*",
-        " * Template/default script for SAML2 SP Adapter scripted plugin.",
-        " */",
-        "",
-        "/*",
-        " * Available variables for preSingleSignOnRequest:",
-        " *     hostedEntityId",
-        " *     idpEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnRequest() {",
-        "}",
-        "",
-        "/*",
-        " * Available variables for preSingleSignOnProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnProcess() {",
-        "}",
-        "",
-        "/*",
-        " * Available variables for postSingleSignOnSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     out",
-        " *     session",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     isFederation",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnSuccess() {",
-        "    return false;",
-        "}",
-        "",
-        "/*",
-        " * Available variables for postSingleSignOnFailure:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     failureCode",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnFailure() {",
-        "    return false;",
-        "}",
-        "",
-        "/*",
-        " * Available variables for postNewNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postNewNameIDSuccess() {",
-        "}",
-        "",
-        "/*",
-        " * Available variables for postTerminateNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postTerminateNameIDSuccess() {",
-        "}",
-        "",
-        "/*",
-        " * Available variables for preSingleLogoutProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleLogoutProcess() {",
-        "}",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "/*",
-        " * Available variables for postSingleLogoutSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postSingleLogoutSuccess() {",
-        "}",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("username", rawProfile.username)))",
       ],
     },
-    "1b52a7e0-4019-40fa-958a-15a49870e901": {
-      "_id": "1b52a7e0-4019-40fa-958a-15a49870e901",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Itsme-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "3d97c436-42c0-4dd0-a571-ea6f34f752b3": {
+      "_id": "3d97c436-42c0-4dd0-a571-ea6f34f752b3",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "set the same shared state variable",
+      "default": true,
+      "description": "Normalizes raw profile data from Itsme",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
+      "language": "GROOVY",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "shared",
+      "name": "Itsme Profile Normalization",
       "script": [
-        "(function () {",
-        "  outcome = 'true';",
-        "  var level = nodeState.get('level').asInteger();",
-        "  sharedState.put('sharedValue', 'Level ' + level + ': This is a longer string value shared across all nested journeys. It contains an indicator in which level it was last set.');",
-        "}());",
+        "/*",
+        " * Copyright 2020-2021 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "import org.forgerock.json.JsonValue",
+        "",
+        "JsonValue managedUser = json(object(",
+        "        field("id", rawProfile.sub),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.given_name),",
+        "        field("familyName", rawProfile.family_name),",
+        "        field("username", rawProfile.email),",
+        "        field("email", rawProfile.email)))",
+        "return managedUser",
       ],
     },
-    "207f172f-ffb5-439d-b7df-e8e80408830b": {
-      "_id": "207f172f-ffb5-439d-b7df-e8e80408830b",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/LINE-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "60609c1a-4cef-4729-a417-354aafdebf3f": {
+      "_id": "60609c1a-4cef-4729-a417-354aafdebf3f",
       "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
+      "createdBy": "id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org",
+      "creationDate": 1433147666269,
+      "default": true,
+      "description": "Normalizes raw profile data from LINE",
       "evaluatorVersion": "1.0",
       "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "GitHub Profile Normalization (VS) - imported (1)",
+      "lastModifiedBy": "id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org",
+      "lastModifiedDate": 1433147666269,
+      "name": "LINE Profile Normalization",
       "script": [
         "/*",
-        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2024 ForgeRock AS. All Rights Reserved",
         " *",
         " * Use of this code requires a commercial software license with ForgeRock AS.",
         " * or with one of its affiliates. All use shall be exclusively subject",
@@ -16726,49 +8470,132 @@ exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": s
         "import static org.forgerock.json.JsonValue.json",
         "import static org.forgerock.json.JsonValue.object",
         "",
-        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "// LINE does not return the email from the userInfo endpoint but should return it from the token endpoint and therefore",
+        "// it should be set in the shared state",
+        "var email = "change@me.com"",
+        "var subjectId = rawProfile.sub",
+        "var username = subjectId",
+        "var firstName = " "",
+        "var lastName = " "",
+        "",
+        "if (sharedState.get("claims_set") != null && sharedState.get("claims_set").email != null) {",
+        "    email = sharedState.get("claims_set").email",
+        "    username = email",
+        "}",
+        "",
+        "if (rawProfile.isDefined("name") && rawProfile.name.isNotNull()) {",
+        "    var splitName = rawProfile.name.asString().split(" ")",
+        "    firstName = splitName[0]",
+        "    lastName = splitName[-1]",
+        "}",
         "",
         "return json(object(",
-        "        field("id", rawProfile.id),",
+        "        field("id", rawProfile.sub),",
         "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.email)))",
+        "        field("photoUrl", rawProfile.picture),",
+        "        field("email", email),",
+        "        field("givenName", firstName),",
+        "        field("familyName", lastName),",
+        "        field("username", username)))",
       ],
     },
-    "223739f3-9c54-43b7-9572-3c5338786145": {
-      "_id": "223739f3-9c54-43b7-9572-3c5338786145",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Library-Script.script.json 1`] = `
+{
+  "script": {
+    "6c49bebe-3a62-11ed-a261-0242ac120002": {
+      "_id": "6c49bebe-3a62-11ed-a261-0242ac120002",
+      "context": "LIBRARY",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
+      "default": true,
+      "description": "Default global library script to be referenced from other scripts",
+      "evaluatorVersion": "2.0",
+      "exports": [
+        {
+          "arity": 2,
+          "id": "logError",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logWarning",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logInfo",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logDebug",
+          "type": "Function",
+        },
+      ],
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "Format Username",
+      "name": "Library Script",
       "script": [
-        "var username = sharedState.get("username");",
+        "/*",
+        " * Copyright 2022-2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This is an example library script with methods that can be used in other scripts.",
+        " * To reference it, use the following:",
+        " *",
+        " * var library = require("Library Script");",
+        " *",
+        " * library.logError(logger, "Error message");",
+        " * library.logDebug(logger, "Debug message");",
+        " */",
+        "",
+        "function logError(log, errorMessage) {",
+        "  log.error(errorMessage);",
+        "}",
+        "",
+        "function logWarning(log, warningMessage) {",
+        "  log.warn(warningMessage);",
+        "}",
+        "",
+        "exports.logError = logError;",
+        "exports.logWarning = logWarning;",
+        "",
+        "// Alternatively, exports can be declared using an inline arrow function",
+        "",
+        "exports.logInfo = (log, infoMessage) => log.info(infoMessage);",
+        "exports.logDebug = (log, debugMessage) => log.debug(debugMessage);",
         "",
-        "sharedState.put("displayName", username);",
-        "outcome = "continue";",
       ],
     },
-    "23143919-6b78-40c3-b25e-beca19b229e0": {
-      "_id": "23143919-6b78-40c3-b25e-beca19b229e0",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/LinkedIn-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "8862ca8f-7770-4af5-a888-ac0df0947f36": {
+      "_id": "8862ca8f-7770-4af5-a888-ac0df0947f36",
       "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
+      "default": true,
+      "description": "Normalizes raw profile data from LinkedIn",
       "evaluatorVersion": "1.0",
       "language": "GROOVY",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "GitHub Profile Normalization (VS)",
+      "name": "LinkedIn Profile Normalization",
       "script": [
         "/*",
         " * Copyright 2020 ForgeRock AS. All Rights Reserved",
@@ -16782,18 +8609,86 @@ exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": s
         "import static org.forgerock.json.JsonValue.json",
         "import static org.forgerock.json.JsonValue.object",
         "",
-        "logger.warning("GitHub rawProfile: "+rawProfile)",
-        "",
         "return json(object(",
         "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.email)))",
+        "        field("givenName", rawProfile.firstName.localized.get(0)),",
+        "        field("familyName", rawProfile.lastName.localized.get(0)),",
+        "        field("photoUrl", rawProfile.profilePicture.displayImage),",
+        "        field("email", rawProfile.elements.get(0).get("handle~").emailAddress),",
+        "        field("username", rawProfile.elements.get(0).get("handle~").emailAddress)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Microsoft-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "73cecbfc-dad0-4395-be6a-6858ee3a80e5": {
+      "_id": "73cecbfc-dad0-4395-be6a-6858ee3a80e5",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from Microsoft",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Microsoft Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        "{",
+        "    "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users/$entity",",
+        "    "@odata.id": "https://graph.microsoft.com/v2/711ffa9c-5972-4713-ace3-688c9732614a/directoryObjects/7d7759e2-36d8-4e64-b173-3f890d7d46d6/Microsoft.DirectoryServices.User",",
+        "    "businessPhones": [",
+        "        "18014735451"",
+        "    ],",
+        "    "displayName": "Volker Scheuber",",
+        "    "givenName": "Volker",",
+        "    "jobTitle": null,",
+        "    "mail": "vscheuber@vscheuber.onmicrosoft.com",",
+        "    "mobilePhone": null,",
+        "    "officeLocation": null,",
+        "    "preferredLanguage": null,",
+        "    "surname": "Scheuber",",
+        "    "userPrincipalName": "vscheuber@vscheuber.onmicrosoft.com",",
+        "    "id": "7d7759e2-36d8-4e64-b173-3f890d7d46d6"",
+        "}",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.message("Kauai Microsoft Profile Normalization: rawProfile={}", rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.displayName),",
+        "        field("givenName", rawProfile.givenName),",
+        "        field("familyName", rawProfile.surname),",
+        "        field("email", rawProfile.userPrincipalName),",
+        "        field("username", rawProfile.userPrincipalName),",
+        "        field("groups", rawProfile.groups)))",
       ],
     },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Example-Library.script.json 1`] = `
+{
+  "script": {
     "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
       "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
       "context": "LIBRARY",
@@ -16844,21 +8739,154 @@ exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": s
         "exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);",
       ],
     },
-    "39c08084-1238-43e8-857f-2e11005eac49": {
-      "_id": "39c08084-1238-43e8-857f-2e11005eac49",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Example-Script-Using-Libraries.script.json 1`] = `
+{
+  "script": {
+    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
+      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Default alpha realm script for OAuth2 Access Token Modification",
+      "description": "My Example Script Using Libraries",
+      "evaluatorVersion": "2.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "My Example Script Using Libraries",
+      "script": [
+        "/**",
+        " * Testing library scripts",
+        " */",
+        "var mylib = require('My Example Library');",
+        "var loggers = require('Library Script');",
+        "",
+        "mylib.add(1);",
+        "mylib.logTotal(logger);",
+        "mylib.add(3);",
+        "mylib.logTotalWithMessage(logger, mylib.MSG);",
+        "",
+        "outcome = 'true';",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/My-Other-Example-Library-Script.script.json 1`] = `
+{
+  "script": {
+    "4e053815-adde-46ac-9fe2-d3ae93517c14": {
+      "_id": "4e053815-adde-46ac-9fe2-d3ae93517c14",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "2.0",
+      "exports": [],
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "My Other Example Library Script",
+      "script": [
+        "console.log("hi there");",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Normalized-Profile-to-Identity.script.json 1`] = `
+{
+  "script": {
+    "ed685f9f-5909-4726-86e8-22bd38b47663": {
+      "_id": "ed685f9f-5909-4726-86e8-22bd38b47663",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Converts a normalized social profile into an Identity",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Normalized Profile to Identity",
+      "script": [
+        "/*",
+        " * Copyright 2021 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "import org.forgerock.json.JsonValue",
+        "",
+        "JsonValue identity = json(object(",
+        "        field("givenName", normalizedProfile.givenName),",
+        "        field("sn", normalizedProfile.familyName),",
+        "        field("mail", normalizedProfile.email),",
+        "        field("cn", normalizedProfile.displayName),",
+        "        field("userName", normalizedProfile.username),",
+        "        field("iplanet-am-user-alias-list", selectedIdp + '-' + normalizedProfile.id.asString())))",
+        "",
+        "return identity",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Normalized-Profile-to-Managed-User.script.json 1`] = `
+{
+  "script": {
+    "58c824ae-84ed-4724-82cd-db128fc3f6c": {
+      "_id": "58c824ae-84ed-4724-82cd-db128fc3f6c",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Converts a normalized social profile into a managed user",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Normalized Profile to Managed User",
+      "script": [
+        ""/*\\n * Copyright 2020 ForgeRock AS. All Rights Reserved\\n *\\n * Use of this code requires a commercial software license with ForgeRock AS.\\n * or with one of its affiliates. All use shall be exclusively subject\\n * to such license between the licensee and ForgeRock AS.\\n */\\n\\nimport static org.forgerock.json.JsonValue.field\\nimport static org.forgerock.json.JsonValue.json\\nimport static org.forgerock.json.JsonValue.object\\n\\nimport org.forgerock.json.JsonValue\\n\\nJsonValue managedUser = json(object(\\n        field(\\"givenName\\", normalizedProfile.givenName),\\n        field(\\"sn\\", normalizedProfile.familyName),\\n        field(\\"mail\\", normalizedProfile.email),\\n        field(\\"userName\\", normalizedProfile.username)))\\n\\nif (normalizedProfile.postalAddress.isNotNull()) managedUser.put(\\"postalAddress\\", normalizedProfile.postalAddress)\\nif (normalizedProfile.addressLocality.isNotNull()) managedUser.put(\\"city\\", normalizedProfile.addressLocality)\\nif (normalizedProfile.addressRegion.isNotNull()) managedUser.put(\\"stateProvince\\", normalizedProfile.addressRegion)\\nif (normalizedProfile.postalCode.isNotNull()) managedUser.put(\\"postalCode\\", normalizedProfile.postalCode)\\nif (normalizedProfile.country.isNotNull()) managedUser.put(\\"country\\", normalizedProfile.country)\\nif (normalizedProfile.phone.isNotNull()) managedUser.put(\\"telephoneNumber\\", normalizedProfile.phone)\\n\\n// if the givenName and familyName is null or empty\\n// then add a boolean flag to the shared state to indicate names are not present\\n// this could be used elsewhere\\n// for eg. this could be used in a scripted decision node to by-pass patching\\n// the user object with blank values when givenName  and familyName is not present\\nboolean noGivenName = normalizedProfile.givenName.isNull() || (!normalizedProfile.givenName.asString()?.trim())\\nboolean noFamilyName = normalizedProfile.familyName.isNull() || (!normalizedProfile.familyName.asString()?.trim())\\nsharedState.put(\\"nameEmptyOrNull\\", noGivenName && noFamilyName)\\n\\nreturn managedUser\\n"",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Access-Token-Modification-Script.script.json 1`] = `
+{
+  "script": {
+    "d22f9a0c-426a-4466-b95e-d0f125b0d5fa": {
+      "_id": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for OAuth2 Access Token Modification",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "Alpha OAuth2 Access Token Modification Script",
+      "name": "OAuth2 Access Token Modification Script",
       "script": [
         "/*",
-        " * Copyright 2019-2021 ForgeRock AS. All Rights Reserved.",
+        " * Copyright 2019-2023 ForgeRock AS. All Rights Reserved.",
         " *",
         " * Use of this code requires a commercial software license with ForgeRock AS",
         " * or with one of its affiliates. All use shall be exclusively subject",
@@ -16975,1676 +9003,1997 @@ exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": s
         "    accessToken.setField('mail', identity.getAttribute('mail'));",
         "    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);",
         "",
-        "    // Adds new fields containing the session property values.",
-        "    // NOTE: session may not be available for non-interactive authorization grants.",
-        "    if (session) {",
-        "        try {",
-        "            accessToken.setField('ipAddress', session.getProperty('Host'));",
-        "        } catch (e) {",
-        "            logger.error('Unable to retrieve session property value. ' + e);",
-        "        }",
-        "    }",
+        "    // Adds new fields containing the session property values.",
+        "    // NOTE: session may not be available for non-interactive authorization grants.",
+        "    if (session) {",
+        "        try {",
+        "            accessToken.setField('ipAddress', session.getProperty('Host'));",
+        "        } catch (e) {",
+        "            logger.error('Unable to retrieve session property value. ' + e);",
+        "        }",
+        "    }",
+        "",
+        "    // Removes a native field from the token entry, that was set by AM.",
+        "    // WARNING: removing native fields from the token may result in loss of functionality.",
+        "    // accessToken.removeTokenName()",
+        "",
+        "    // No return value is expected. Let it be undefined.",
+        "}());",
+        "*/",
+        "",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Authorize-Endpoint-Data-Provider-Script.script.json 1`] = `
+{
+  "script": {
+    "3f93ef6e-e54a-4393-aba1-f322656db28a": {
+      "_id": "3f93ef6e-e54a-4393-aba1-f322656db28a",
+      "context": "OAUTH2_AUTHORIZE_ENDPOINT_DATA_PROVIDER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for OAuth2 Authorize Endpoint Data Provider",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "OAuth2 Authorize Endpoint Data Provider Script",
+      "script": [
+        "/*",
+        " * Copyright 2021 ForgeRock AS. All Rights Reserved",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script lets you return additional data when authorize request is called.",
+        " *",
+        " * Defined variables:",
+        " *",
+        " * session - SSOToken (1)",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " *",
+        " * httpClient - HTTP Client (2).",
+        " *              Always present, the HTTP client that can be used to make external HTTP requests",
+        " *",
+        " * logger - Debug (3)",
+        " *          Always present, the "ScriptedAuthorizeEndpointDataProvider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding log files will be prefixed with: scripts.OAUTH2_AUTHORIZE_ENDPOINT_DATA_PROVIDER.",
+        " *",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script",
+        " *",
+        " * Return - a Map<String, String> of additional data (4).",
+        " *",
+        " * Class reference:",
+        " * (1) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (2) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        " * (3) Debug - https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " * (4) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html.",
+        " */",
+        "",
+        "/**",
+        " * Default authorize endpoint data provider script to use as a template for new scripts.",
+        " */",
+        "",
+        "/* EXAMPLE",
+        "var map = new java.util.HashMap();",
+        "",
+        "function addAdditionalData() {",
+        "",
+        "    //If constant data needs to be returned",
+        "    map.put("hello", "world");",
+        "",
+        "    //If some data needs to be returned from third party service",
+        "    addAdditionalDataFromExternalService();",
+        "",
+        "    //If there is a need to return some user session data",
+        "    addAdditionalDataFromSessionProperties()",
+        "",
+        "    return map;",
+        "};",
+        "",
+        "function addAdditionalDataFromExternalService() {",
+        "  var frJava = JavaImporter(",
+        "        org.forgerock.oauth2.core.exceptions.ServerException",
+        "    );",
+        "  try {",
+        "        //Obtain additional data by performing a REST call to an external service",
+        "        var request = new org.forgerock.http.protocol.Request();",
+        "        request.setUri("https://third.party.app/hello.jsp");",
+        "        request.setMethod("POST");",
+        "        //request.setEntity("foo=bar&hello=world");",
+        "        request.setEntity(json(object(",
+        "                    field("foo", "bar"))));",
+        "        var response = httpClient.send(request).getOrThrow();",
+        "        logResponse(response);",
+        "        var result = JSON.parse(response.getEntity());",
+        "        map.put("someKey",result.get("someKey"));",
+        "  } catch (err) {",
+        "     throw new frJava.ServerException(err);",
+        "  }",
+        "};",
+        "",
+        "function addAdditionalDataFromSessionProperties() {",
+        "  //Add additional data from session property values",
+        "   if (session != null) { // session is not available for resource owner password credentials grant",
+        "     map.put("ipAddress", session.getProperty("Host"))",
+        "   }",
+        "};",
         "",
-        "    // Removes a native field from the token entry, that was set by AM.",
-        "    // WARNING: removing native fields from the token may result in loss of functionality.",
-        "    // accessToken.removeTokenName()",
+        "function logResponse(response) {",
+        "    logger.message("User REST Call. Status: " + response.getStatus() + ", Body: " + response.getEntity());",
+        "};",
         "",
-        "    // No return value is expected. Let it be undefined.",
-        "}());",
+        "addAdditionalData();",
         "*/",
-        "",
       ],
     },
-    "3bd13a46-61c4-4974-8efb-1700c80c64e3": {
-      "_id": "3bd13a46-61c4-4974-8efb-1700c80c64e3",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Evaluate-Scope-Script.script.json 1`] = `
+{
+  "script": {
+    "da56fe60-8b38-4c46-a405-d6b306d4b336": {
+      "_id": "da56fe60-8b38-4c46-a405-d6b306d4b336",
+      "context": "OAUTH2_EVALUATE_SCOPE",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "Inactive Device Match Script",
+      "default": true,
+      "description": "Default global script for OAuth2 Scope Evaluation",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "Inactive Device Match Script",
+      "name": "OAuth2 Evaluate Scope Script",
       "script": [
         "/*",
-        " * Inactive Device Match Script",
+        " * Copyright 2021 ForgeRock AS. All Rights Reserved",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
         " */",
         "",
-        "outcome = "true";",
-      ],
-    },
-    "3cb43516-ae69-433a-8787-501d45db14e9": {
-      "_id": "3cb43516-ae69-433a-8787-501d45db14e9",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Display sharedState, transientState, and headers.",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "debug",
-      "script": [
-        "/* debug",
+        "/*",
+        " * This script lets you populate the scopes with profile attribute values when the tokeninfo endpoint is called.",
+        " * For example, if one of the scopes is mail, AM sets mail to the resource owner's email address in the token information returned.",
         " *",
-        " * Author: volker.scheuber@forgerock.com",
-        " * ",
-        " * Display sharedState, transientState, and headers.",
-        " * ",
-        " * This script does not need to be parametrized. It will work properly as is.",
-        " * ",
-        " * The Scripted Decision Node needs the following outcomes defined:",
-        " * - true",
+        " * Defined variables:",
+        " * accessToken - AccessToken (1).",
+        " *               The access token to be updated.",
+        " *               Mutable object, all changes to the access token will be reflected.",
+        " * identity - AMIdentity (2).",
+        " *            The client's identity if present or the resource owner's identity. Can be null.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding log files will be prefixed with: scripts.OAUTH2_EVALUATE_SCOPE",
+        " * httpClient - HTTP Client (3).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *",
+        " * Return - a Map<String, Object> of the access token's information (4).",
+        " *",
+        " * Class reference:",
+        " * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.",
+        " * (2) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (3) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        " * (4) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html.",
         " */",
-        "var anchor = "anchor-".concat(generateNumericToken('xxx'));",
-        "var halign = "left";",
-        "var message = "<p><b>Shared State</b>:<br/>".concat(",
-        "      sharedState.toString()).concat("</p>").concat(",
-        "    "<p><b>Transient State</b>:<br/>").concat(",
-        "      transientState.toString()).concat("</p>").concat(",
-        "    "<p><b>Request Headers</b>:<br/>").concat(",
-        "      requestHeaders.toString()).concat("</p>")",
-        "var script = "Array.prototype.slice.call(\\n".concat(",
-        "  "document.getElementsByClassName('callback-component')).forEach(\\n").concat(",
-        "  "function (e) {\\n").concat(",
-        "  "  var message = e.firstElementChild;\\n").concat(",
-        "  "  if (message.firstChild && message.firstChild.nodeName == '#text' && message.firstChild.nodeValue.trim() == '").concat(anchor).concat("') {\\n").concat(",
-        "  "    message.className = \\"text-left\\";\\n").concat(",
-        "  "    message.align = \\"").concat(halign).concat("\\";\\n").concat(",
-        "  "    message.innerHTML = '").concat(message).concat("';\\n").concat(",
-        "  "  }\\n").concat(",
-        "  "})")",
-        "var fr = JavaImporter(",
-        "    org.forgerock.openam.auth.node.api.Action,",
-        "    javax.security.auth.callback.TextOutputCallback,",
-        "    com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
-        ")",
-        "if (message.length && callbacks.isEmpty()) {",
-        "    action = fr.Action.send(",
-        "        new fr.TextOutputCallback(",
-        "            fr.TextOutputCallback.INFORMATION,",
-        "            anchor",
-        "        ),",
-        "        new fr.ScriptTextOutputCallback(script)",
-        "    ).build()",
-        "}",
-        "else {",
-        "  action = fr.Action.goTo("true").build();",
-        "}",
         "",
-        " /*",
-        "  * Generate a token in the desired format. All 'x' characters will be replaced with a random number 0-9.",
-        "  * ",
-        "  * Example:",
-        "  * 'xxxxx' produces '28535'",
-        "  * 'xxx-xxx' produces '432-521'",
-        "  */",
-        "function generateNumericToken(format) {",
-        "    return format.replace(/[x]/g, function(c) {",
-        "        var r = Math.random()*10|0;",
-        "        var v = r;",
-        "        return v.toString(10);",
-        "    });",
-        "}",
+        "/**",
+        " * Default evaluate scope script to use as a template for new scripts.",
+        " */",
+        "",
+        "(function () {",
+        "    var map = new java.util.HashMap();",
+        "    if (identity !== null) {",
+        "        var scopes = accessToken.getScope().toArray();",
+        "        scopes.forEach(function (scope) {",
+        "            var attributes = identity.getAttribute(scope).toArray();",
+        "            map.put(scope, attributes.join(","));",
+        "        });",
+        "    } else {",
+        "        logger.error('identity is null');",
+        "    }",
+        "    return map;",
+        "}());",
       ],
     },
-    "41c24257-d7fc-4654-8b46-c2666dc5b56d": {
-      "_id": "41c24257-d7fc-4654-8b46-c2666dc5b56d",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-JWT-Issuer-Script.script.json 1`] = `
+{
+  "script": {
+    "400e48ba-3f13-4144-ac7b-f824ea8e98c5": {
+      "_id": "400e48ba-3f13-4144-ac7b-f824ea8e98c5",
+      "context": "OAUTH2_SCRIPTED_JWT_ISSUER",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "set per level shared state variable",
+      "default": true,
+      "description": "Default global script for scripted JWT Issuers",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "level",
+      "name": "OAuth2 JWT Issuer Script",
       "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script lets you to derive the configuration for a dynamic JWT issuer from the issuer string.",
+        " * A JWT issuer is made up of the following:",
+        " *   - issuer - the identifier of the entity that issues JWTs",
+        " *   - resource owner subject claim - the name of the claim in the JWT that identifies the resource owner",
+        " *   - consented scope claim - the name of the claim in the JWT that represents scope that the resource owner",
+        " *                             has already consented to externally",
+        " *   - authorized subjects - the set of principal identifiers that are authorized to be used as resource owners",
+        " *                           by the issuer",
+        " *   - JWKs - either a set of JWKs or connection details for obtaining that set, that are the public keys that",
+        " *            can verify the signature on the issued JWTs.",
+        " *",
+        " * Defined variables:",
+        " * issuer - String",
+        " *          The issuer from the bearer JWT.",
+        " * realm - String",
+        " *         The path of the realm that is handling the request.",
+        " * scriptName - String.",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the script debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding log files will be prefixed with: scripts.OAUTH2_SCRIPTED_JWT_ISSUER.",
+        " * httpClient - HTTP Client (1).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " * idRepository - Identity Repository (2). Always present.",
+        " * secrets - Secrets accessor (3). Always present.",
+        " *",
+        " * Return - org.forgerock.oauth2.core.TrustedJwtIssuerConfig (4) - the configuration of the trusted JWT issuer.",
+        " *",
+        " * Class reference:",
+        " * (1) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        " * (2) ScriptedIdentityRepository - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openam/scripting/api/identity/ScriptedIdentityRepository.html.",
+        " * (3) ScriptedSecrets - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openam/scripting/api/secrets/ScriptedSecrets.html.",
+        " * (4) TrustedJwtIssuerConfig - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/TrustedJwtIssuerConfig.html.",
+        " */",
+        "",
+        "/* EXAMPLE",
         "(function () {",
-        "  outcome = 'true';",
-        "  var level = nodeState.get('level').asInteger();",
-        "  sharedState.put('level' + level + 'Value', 'Level ' + level + ': This is a longer string value set at each level of the nested journeys. It contains an indicator in which level it was set.');",
+        "    var frJava = JavaImporter(",
+        "        org.forgerock.oauth2.core.TrustedJwtIssuerConfig,",
+        "        java.util.Collections",
+        "    );",
+        "",
+        "    var iss = idRepository.getIdentity(issuer);",
+        "    if (iss == null) {",
+        "        logger.message('No issuer found for: '+issuer);",
+        "        return null;",
+        "    }",
+        "    logger.message('Found issuer: '+iss);",
+        "    // in this example either a JWK set or a URI to a JWK set are in the postalAddress attribute",
+        "    var jwksAttrs = iss.getAttributeValues('postalAddress');",
+        "    var jwkSet = jwksAttrs.length === 0 ? null : jwksAttrs[0];",
+        "    var config = new frJava.TrustedJwtIssuerConfig(",
+        "        issuer,",
+        "        'sub',",
+        "        'scope',",
+        "        // in this example, valid subjects are stored in the mail attribute",
+        "        iss.getAttributeValues('mail'),",
+        "        jwkSet.startsWith('{') ? jwkSet : null,",
+        "        jwkSet.startsWith('http') ? jwkSet : null,",
+        "        '5 minutes',",
+        "        '1 minute'",
+        "    );",
+        "    return config;",
         "}());",
+        "*/",
       ],
     },
-    "4c963bb3-7084-43d0-bcdc-a47482cf1825": {
-      "_id": "4c963bb3-7084-43d0-bcdc-a47482cf1825",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-May-Act-Script.script.json 1`] = `
+{
+  "script": {
+    "c735de08-f8f2-4e69-aa4a-2d8d3d438323": {
+      "_id": "c735de08-f8f2-4e69-aa4a-2d8d3d438323",
+      "context": "OAUTH2_MAY_ACT",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "Dummy",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
+      "default": true,
+      "description": "Default global script for OAuth2 May Act",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "Dummy",
+      "name": "OAuth2 May Act Script",
       "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "outcome = "true";",
+        "/**",
+        " * Defined variables:",
+        " * token - The access token to be updated. Mutable object, all changes to the access token will be reflected.",
+        " * logger - always present, corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.",
+        " * scriptName - always present, the display name of the script",
+        " * session - present if the request contains the session cookie, the user's session object",
+        " * requestProperties - always present, contains a map of request properties:",
+        " *                     requestUri - the request URI",
+        " *                     realm - the realm that the request relates to",
+        " *                     requestParams - a map of the request params and/or posted data. Each value is a list of one or",
+        " *                     more properties. Please note that these should be handled in accordance with OWASP best",
+        " *                     practices.",
+        " * clientProperties - present if the client specified in the request was identified, contains a map of client",
+        " *                    properties:",
+        " *                    clientId - the client's Uri for the request locale",
+        " *                    allowedGrantTypes - list of the allowed grant types (org.forgerock.oauth2.core.GrantType)",
+        " *                                        for the client",
+        " *                    allowedResponseTypes - list of the allowed response types for the client",
+        " *                    allowedScopes - list of the allowed scopes for the client",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps, e.g:",
+        " *                                       testMap[Key1]=Value1 will be returned as testmap -> Key1 -> Value1",
+        " *",
+        " * identity - always present, the identity of the resource owner",
+        " * scopes - always present, the requested scopes",
+        " */",
+        "/*",
+        "import org.forgerock.json.JsonValue",
         "",
+        "token.setMayAct(",
+        "    JsonValue.json(JsonValue.object(",
+        "        JsonValue.field("client_id", "myClient"), ",
+        "        JsonValue.field("sub", "(usr!myActor)"))))",
+        "*/",
       ],
     },
-    "4e053815-adde-46ac-9fe2-d3ae93517c14": {
-      "_id": "4e053815-adde-46ac-9fe2-d3ae93517c14",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "2.0",
-      "exports": [],
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "My Other Example Library Script",
-      "script": [
-        "console.log("hi there");",
-      ],
-    },
-    "5bbdaeff-ddee-44b9-b608-8d413d7d65a6": {
-      "_id": "5bbdaeff-ddee-44b9-b608-8d413d7d65a6",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OAuth2-Validate-Scope-Script.script.json 1`] = `
+{
+  "script": {
+    "25e6c06d-cf70-473b-bd28-26931edc476b": {
+      "_id": "25e6c06d-cf70-473b-bd28-26931edc476b",
+      "context": "OAUTH2_VALIDATE_SCOPE",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "Check if mode has already been set.",
+      "default": true,
+      "description": "Default global script for OAuth2 Scope Validation",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "mode",
+      "name": "OAuth2 Validate Scope Script",
       "script": [
-        "/* mode",
+        "/*",
+        " * Copyright 2021 ForgeRock AS. All Rights Reserved",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script validates the requested scopes against the allowed scopes.",
+        " * If no scopes are requested, default scopes are assumed.",
+        " * The script has four top level functions that could be executed during the different OAuth2 flows:",
+        " *      - validateAuthorizationScope",
+        " *      - validateAccessTokenScope",
+        " *      - validateRefreshTokenScope",
+        " *      - validateBackChannelAuthorizationScope",
         " *",
-        " * Author: volker.scheuber@forgerock.com",
-        " * ",
-        " * Collect mode if not already set and set outcome to mode.",
-        " * ",
-        " * This script does not need to be parametrized. It will work properly as is.",
-        " * ",
-        " * The Scripted Decision Node needs the following outcomes defined:",
-        " * - 'shared and level'",
-        " * - 'shared only'",
-        " * - 'level only'",
-        " * - 'none'",
+        " * Defined variables:",
+        " * requestedScopes - Set<String> (1).",
+        " *          The set of requested scopes.",
+        " * defaultScopes - Set<String> (1).",
+        " *                 The set of default scopes.",
+        " * allowedScopes - Set<String> (1).",
+        " *                 The set of allowed scopes.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding log files will be prefixed with: scripts.OAUTH2_VALIDATE_SCOPE",
+        " * httpClient - HTTP Client (2).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *",
+        " * Throws InvalidScopeException:",
+        " *      - if there are no scopes requested and default scopes are empty",
+        " *      - if a requested scope is not allowed",
+        " *",
+        " * Return - a Set<String> of validated scopes (1).",
+        " *",
+        " * Class reference:",
+        " * (1) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (2) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
         " */",
-        "(function () {",
-        "  var mode = nodeState.get('mode');",
-        "  if (mode) {",
-        "    outcome = mode.asString();",
-        "    var level = nodeState.get('level').asInteger() + 1;",
-        "    logger.error('mode: mode=' + mode.asString() + ', level=' + level);",
-        "    sharedState.put('level', level);",
-        "  }",
-        "  else {",
-        "    var choices = ['shared and level', 'shared only', 'level only', 'none'];",
-        "  ",
-        "    var fr = JavaImporter(",
-        "      org.forgerock.openam.auth.node.api.Action,",
-        "      javax.security.auth.callback.ChoiceCallback",
-        "    )",
         "",
-        "    if (callbacks.isEmpty()) {",
-        "      action = fr.Action.send([",
-        "        new fr.ChoiceCallback('Choose test mode', choices, 0, false)",
-        "      ]).build();",
+        "/**",
+        " * Default validate scope script.",
+        " */",
+        "function validateScopes () {",
+        "    var frJava = JavaImporter(",
+        "        org.forgerock.oauth2.core.exceptions.InvalidScopeException",
+        "    );",
+        "",
+        "    var scopes;",
+        "    if (requestedScopes == null || requestedScopes.isEmpty()) {",
+        "        scopes = defaultScopes;",
         "    } else {",
-        "      var choice = parseInt(callbacks.get(0).getSelectedIndexes()[0]);",
-        "      nodeState.putShared('mode', choices[choice]);",
-        "      nodeState.putShared('level', 0);",
-        "      action = fr.Action.goTo(choices[choice]).build();",
+        "        scopes = new java.util.HashSet(allowedScopes);",
+        "        scopes.retainAll(requestedScopes);",
+        "        if (requestedScopes.size() > scopes.size()) {",
+        "            var invalidScopes = new java.util.HashSet(requestedScopes);",
+        "            invalidScopes.removeAll(allowedScopes);",
+        "            throw new frJava.InvalidScopeException('Unknown/invalid scope(s)');",
+        "        }",
         "    }",
-        "  }",
-        "}());",
+        "",
+        "    if (scopes == null || scopes.isEmpty()) {",
+        "        throw new frJava.InvalidScopeException('No scope requested and no default scope configured');",
+        "    }",
+        "    return scopes;",
+        "}",
+        "",
+        "function validateAuthorizationScope () {",
+        "    return validateScopes();",
+        "}",
+        "",
+        "function validateAccessTokenScope () {",
+        "    return validateScopes();",
+        "}",
+        "",
+        "function validateRefreshTokenScope () {",
+        "    return validateScopes();",
+        "}",
+        "",
+        "function validateBackChannelAuthorizationScope () {",
+        "    return validateScopes();",
+        "}",
       ],
     },
-    "5ce0d38a-154c-4be5-bd22-f9879c77e895": {
-      "_id": "5ce0d38a-154c-4be5-bd22-f9879c77e895",
-      "context": "SAML2_SP_ADAPTER",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/OIDC-Claims-Script.script.json 1`] = `
+{
+  "script": {
+    "36863ffb-40ec-48b9-94b1-9a99f71cc3b5": {
+      "_id": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+      "context": "OIDC_CLAIMS",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "null",
+      "default": true,
+      "description": "Default global script for OIDC claims",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "FrodoSPAdapter - imported (1)",
+      "name": "OIDC Claims Script",
       "script": [
         "/*",
-        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2014-2023 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
         " * or with one of its affiliates. All use shall be exclusively subject",
         " * to such license between the licensee and ForgeRock AS.",
         " */",
         "",
         "/*",
-        " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOnRequest",
-        " *      - preSingleSignOnProcess",
-        " *      - postSingleSignOnSuccess",
-        " *      - postSingleSignOnFailure",
-        " *      - postNewNameIDSuccess",
-        " *      - postTerminateNameIDSuccess",
-        " *      - preSingleLogoutProcess",
-        " *      - postSingleLogoutSuccess",
-        " *",
-        " * Please see the JavaDoc for the interface for more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
-        " * Note that the initialize method is not supported in the scripts.",
+        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
+        " * The claim values are computed for:",
+        " * the claims derived from the requested scopes,",
+        " * the claims provided by the authorization server,",
+        " * and the claims requested by the client via the claims parameter.",
         " *",
-        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
+        " * define the scope-to-claims mapping, and",
+        " * assign to each claim a resolver function that will compute the claim value.",
         " *",
-        " * hostedEntityId - String",
-        " *     Entity ID for the hosted IDP",
-        " * realm - String",
-        " *     Realm of the hosted IDP",
-        " * idpEntityId - String",
-        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
-        " * request - HttpServletRequest (1)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (2)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (3)",
-        " *     The authentication request sent that is sent from the Service Provider.",
-        " * session - SSOToken (4)",
-        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * res - Response (5)",
-        " *     The SSO Response received from the Identity Provider.",
-        " * profile - String",
-        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
-        " *          - SAML2Constants.HTTP_POST",
-        " *          - SAML2Constants.HTTP_ARTIFACT",
-        " *          - SAML2Constants.PAOS",
-        " * out - PrintWriter (7)",
-        " *     The PrintWriter that can be used to write to.",
-        " * isFederation - boolean",
-        " *     Set to true if using federation, otherwise false.",
-        " * failureCode - int",
-        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
-        " * userId - String",
-        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
-        " * idRequest - ManageNameIDRequest (8)",
-        " *     The new name identifier request, this will be null if the request object is not available",
-        " * idResponse - ManageNameIDResponse (9)",
-        " *     The new name identifier response, this will be null if the response object is not available",
-        " * binding - String",
-        " *     The binding used for the new name identifier request. This will be one of the following values:",
-        " *          - SAML2Constants.SOAP",
-        " *          - SAML2Constants.HTTP_REDIRECT",
-        " * logoutRequest - LogoutRequest (10)",
-        " *     The single logout request.",
-        " * logoutResponse - LogoutResponse (11)",
-        " *     The single logout response.",
-        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
-        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * logger - Logger instance",
-        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " * Defined variables (class references are provided below):",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * claims - Map<String, Object> (5).",
+        " *          Always present, default server provided claims.",
+        " * claimObjects - List<Claim> (7, 2).",
+        " *                Always present, the default server provided claims.",
+        " * requestedClaims - Map<String, Set<String>> (5).",
+        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
+        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
+        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
+        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
+        " * requestedTypedClaims - List<Claim> (7, 2).",
+        " *                        Always present, the requested claims.",
+        " *                        Requested claims with no requested values will have a claim with no values.",
+        " *                        A claim with a single value indicates this is the only value that should be returned.",
+        " * claimsLocales - List<String> (7).",
+        " *                 The values from the 'claims_locales' parameter.",
+        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *              In order to use the client, you may need to add",
+        " *              org.forgerock.http.Client,",
+        " *              org.forgerock.http.protocol.*,",
+        " *              and org.forgerock.util.promise.PromiseImpl",
+        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
         " *",
-        " * Throws SAML2Exception (13):",
-        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *          See RESULTS section for additional details.",
         " *",
         " * Class reference:",
-        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
-        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
-        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
-        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
-        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
-        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
-        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
-        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
-        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
-        " */",
+        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
+        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
+        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
+        " *         the claim name, requested values, locale, and whether the claim is essential.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        "*/",
         "",
-        "/*",
-        " * Template/default script for SAML2 SP Adapter scripted plugin.",
-        " */",
+        "(function () {",
+        "    // SETUP",
         "",
-        "/*",
-        " * Available variables for preSingleSignOnRequest:",
-        " *     hostedEntityId",
-        " *     idpEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnRequest() {",
-        "}",
+        "    /**",
+        "     * Claim processing utilities.",
+        "     * An object that contains reusable functions for processing claims.",
+        "     * @see CLAIM PROCESSING UTILITIES section for details.",
+        "     */",
+        "    var utils = getUtils();",
+        "",
+        "    // CONFIGURATION AND CUSTOMIZATION",
+        "",
+        "    /**",
+        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a scope value to an array of claim names",
+        "     * to specify which claims need to be processed and returned for the requested scopes.",
+        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
+        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can choose the claim names returned for a scope.",
+        "     */",
+        "    utils.setScopeClaimsMap({",
+        "        profile: [",
+        "            'name',",
+        "            'family_name',",
+        "            'given_name',",
+        "            'zoneinfo',",
+        "            'locale'",
+        "        ],",
+        "        email: ['email'],",
+        "        address: ['address'],",
+        "        phone: ['phone_number']",
+        "    });",
+        "",
+        "    /**",
+        "     * In this script, each claim",
+        "     * derived from the requested scopes,",
+        "     * provided by the authorization server, and",
+        "     * requested by the client via the claims parameter",
+        "     * will be processed by a function associated with the claim name.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a claim name to a resolver function,",
+        "     * which will be automatically executed for each claim processed by the script.",
+        "     *",
+        "     * The claim resolver function will receive the requested claim information",
+        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
+        "     * for details on the Claim class.",
+        "     *",
+        "     * If the claim resolver function returns a value,",
+        "     * other than undefined or null,",
+        "     * the claim will be included in the script's results.",
+        "     *",
+        "     * The Claim instance provides methods to check",
+        "     * what the name of the claim is,",
+        "     * which values the claim request contains,",
+        "     * whether the claim is essential, and",
+        "     * which locale the claim is associated with.",
+        "     * The resolver function can consider this information when computing and returning the claim value.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
+        "     * is called to return a claim resolver function based on a user profile attribute.",
+        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
+        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can reuse the predefined utils methods with your custom arguments.",
+        "     * You can also specify a custom resolver function for a claim name,",
+        "     * that will compute and return the claim value—as shown in the commented out example below.",
+        "     */",
+        "    utils.setClaimResolvers({",
+        "        /*",
+        "        // An example of a simple claim resolver function that is defined for a claim",
+        "        // directly in the configuration object:",
+        "        custom-claim-name: function (requestedClaim) {",
+        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
+        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
         "",
-        "/*",
-        " * Available variables for preSingleSignOnProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnProcess() {",
-        "}",
+        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
+        "            // You can use:",
+        "            // requestedClaim.getName()",
+        "            // requestedClaim.getValues()",
+        "            // requestedClaim.getLocale()",
+        "            // requestedClaim.isEssential()",
         "",
-        "/*",
-        " * Available variables for postSingleSignOnSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     out",
-        " *     session",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     isFederation",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnSuccess() {",
-        "    return false;",
-        "}",
+        "            return claimValue",
+        "        },",
+        "        */",
+        "        /**",
+        "         * The use of utils.getUserProfileClaimResolver shows how",
+        "         * an argument passed to a function that returns a claim resolver",
+        "         * becomes available to the resolver function (via its lexical context).",
+        "         */",
+        "        name: utils.getUserProfileClaimResolver('cn'),",
+        "        family_name: utils.getUserProfileClaimResolver('sn'),",
+        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
+        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
+        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
+        "        email: utils.getUserProfileClaimResolver('mail'),",
+        "        address: utils.getAddressClaimResolver(",
+        "            /**",
+        "             * The passed in user profile claim resolver function",
+        "             * can be used by the address claim resolver function",
+        "             * to obtain the claim value to be formatted as per the OIDC specification:",
+        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             */",
+        "            utils.getUserProfileClaimResolver('postaladdress')",
+        "        ),",
+        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
+        "    });",
         "",
-        "/*",
-        " * Available variables for postSingleSignOnFailure:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     failureCode",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
-        " */",
-        "function postSingleSignOnFailure() {",
-        "    return false;",
-        "}",
+        "    // CLAIM PROCESSING UTILITIES",
         "",
-        "/*",
-        " * Available variables for postNewNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postNewNameIDSuccess() {",
-        "}",
+        "    /**",
+        "     * @returns {object} An object that contains reusable claim processing utilities.",
+        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
+        "     */",
+        "    function getUtils () {",
+        "        // IMPORT JAVA",
         "",
-        "/*",
-        " * Available variables for postTerminateNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postTerminateNameIDSuccess() {",
-        "}",
+        "        /**",
+        "         * Provides Java scripting functionality.",
+        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
+        "         */",
+        "        var frJava = JavaImporter(",
+        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
+        "            org.forgerock.oauth2.core.UserInfoClaims,",
+        "            org.forgerock.openidconnect.Claim,",
         "",
-        "/*",
-        " * Available variables for preSingleLogoutProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleLogoutProcess() {",
-        "}",
+        "            java.util.LinkedHashMap,",
+        "            java.util.ArrayList",
+        "        );",
         "",
-        "/*",
-        " * Available variables for postSingleLogoutSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postSingleLogoutSuccess() {",
-        "}",
-      ],
-    },
-    "6002c349-f1d0-4317-baa2-a18590fc3cff": {
-      "_id": "6002c349-f1d0-4317-baa2-a18590fc3cff",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Okta Profile Normalization - imported (1)",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "        // SET UP CONFIGURATION",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported scope values (scopes)",
+        "         * and the corresponding claim names for each scope value.",
+        "         */",
+        "        var scopeClaimsMap;",
         "",
-        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value.",
+        "         */",
+        "        var claimResolvers;",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.preferred_username)))",
-      ],
-    },
-    "6325cf19-a49b-471e-8d26-7e4df76df0e2": {
-      "_id": "6325cf19-a49b-471e-8d26-7e4df76df0e2",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Okta Profile Normalization",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
+        "         * in order to specify which claims need to be processed for the requested scopes.",
+        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
+        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
+        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
+        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
+        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
+        "         * @returns {undefined}",
+        "         */",
+        "        function setScopeClaimsMap(params) {",
+        "            scopeClaimsMap = params;",
+        "        }",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps",
+        "         * each supported claim name to a function that computes and returns the claim value.",
+        "         */",
+        "        function setClaimResolvers(params) {",
+        "            claimResolvers = params;",
+        "        }",
         "",
-        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "        // CLAIM RESOLVERS",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.preferred_username)))",
-      ],
-    },
-    "647f2a33-9211-4315-a83f-a521d8b77d7b": {
-      "_id": "647f2a33-9211-4315-a83f-a521d8b77d7b",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Okta Profile Normalization - imported (2)",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "        /**",
+        "         * Claim resolvers are functions that return a claim value.",
+        "         * @param {*}",
+        "         * @returns {*}",
+        "         */",
         "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
+        "        /**",
+        "         * Defines a claim resolver based on a user profile attribute.",
+        "         * @param {string} attributeName - Name of the user profile attribute.",
+        "         * @returns {function} A function that will determine the claim value",
+        "         * based on the user profile attribute and the (requested) claim properties.",
+        "         */",
+        "        function getUserProfileClaimResolver (attributeName) {",
+        "            /**",
+        "             * Resolves a claim with a user profile attribute value.",
+        "             * Returns undefined if the identity attribute is not populated,",
+        "             * OR if the claim has requested values that do not contain the identity attribute value.",
+        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {string|HashSet|undefined}",
+        "             */",
+        "            function resolveClaim(claim) {",
+        "                var userProfileValue;",
         "",
-        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "                if (identity) {",
+        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
         "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.preferred_username)))",
-      ],
-    },
-    "739bdc48-fd24-4c52-b353-88706d75558a": {
-      "_id": "739bdc48-fd24-4c52-b353-88706d75558a",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Check if username has already been collected.",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Check Username",
-      "script": [
-        "/* Check Username",
-        " *",
-        " * Author: volker.scheuber@forgerock.com",
-        " * ",
-        " * Check if username has already been collected.",
-        " * Return "known" if yes, "unknown" otherwise.",
-        " * ",
-        " * This script does not need to be parametrized. It will work properly as is.",
-        " * ",
-        " * The Scripted Decision Node needs the following outcomes defined:",
-        " * - known",
-        " * - unknown",
-        " */",
-        "(function () {",
-        "    if (null != sharedState.get("username")) {",
-        "        outcome = "known";",
-        "    }",
-        "    else {",
-        "        outcome = "unknown";",
-        "    }",
-        "}());",
-      ],
-    },
-    "85523e71-2d77-4577-b078-6f9674cc54e2": {
-      "_id": "85523e71-2d77-4577-b078-6f9674cc54e2",
-      "context": "SAML2_IDP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Always redirect browser pre-auth",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Saml2 IDP Adapter Always Auth",
-      "script": [
-        "/*",
-        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
+        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
+        "                            return userProfileValue;",
+        "                        }",
+        "                    }",
+        "                }",
+        "            }",
         "",
-        "/*",
-        " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOn",
-        " *      - preAuthentication",
-        " *      - preSendResponse",
-        " *      - preSignResponse",
-        " *      - preSendFailureResponse",
-        " *",
-        " * Please see the javadoc for the interface definition and more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
-        " * Note that the initialize method is not supported in the scripts.",
-        " *",
-        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
-        " *",
-        " * hostedEntityId - String",
-        " *     Entity ID for the hosted IDP",
-        " * realm - String",
-        " *     Realm of the hosted IDP",
-        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
-        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * request - HttpServletRequest (2)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (3)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (4)",
-        " *     The original authentication request sent from SP",
-        " * reqId - String",
-        " *     The id to use for continuation of processing if the adapter redirects",
-        " * res - Response (5)",
-        " *     The SAML Response",
-        " * session - SSOToken (6)",
-        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * relayState - String",
-        " *     The relayState that will be used in the redirect",
-        " * faultCode - String",
-        " *     the fault code that will be returned in the SAML response",
-        " * faultDetail - String",
-        " *     the fault detail that will be returned in the SAML response",
-        " * logger - Logger instance",
-        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *     Corresponding log files will be prefixed with: scripts.<script name>",
-        " *",
-        " * Throws SAML2Exception (7):",
-        " *     for any exceptions occurring in the adapter. The federation process will continue",
-        " *",
-        " * Class reference:",
-        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
-        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
-        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
-        " */",
+        "            return resolveClaim;",
+        "        }",
         "",
-        "/*",
-        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
-        " */",
+        "        /**",
+        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional formatting to the value before returning it.",
+        "         */",
+        "        function getAddressClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Creates an address claim object from a value returned by a claim resolver,",
+        "             * and returns the address claim object as the claim value.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
+        "             */",
+        "            function resolveAddressClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "                var addressObject;",
         "",
-        "/*",
-        " * Available variables for preSingleSignOn:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     authnRequest",
-        " *     response",
-        " *     reqId",
-        " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
-        " */",
-        "function preSingleSignOn () {",
-        "      logger.error("Chicago: preSingleSignOn");",
-        "    return true;",
-        "}",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    addressObject = new frJava.LinkedHashMap();",
         "",
-        "/*",
-        " * Available variables for preAuthentication:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     authnRequest",
-        " *     response",
-        " *     reqId",
-        " *     session",
-        " *     relayState",
-        " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
-        " */",
-        "function preAuthentication () {",
-        "      logger.error("Chicago: preAuthentication");",
-        "    return true;",
-        "}",
+        "                    addressObject.put('formatted', claimValue);",
         "",
-        "/*",
-        " * Available variables for preSendResponse:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     authnRequest",
-        " *     response",
-        " *     reqId",
-        " *     session",
-        " *     relayState",
-        " *     logger",
-        " *",
-        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
-        " */",
-        "function preSendResponse () {",
-        "      logger.error("Chicago: preSendResponse");",
-        "      logger.error("Chicago: authnRequest: "+authnRequest);",
-        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
-        "    return true;",
-        "}",
+        "                    return addressObject;",
+        "                }",
+        "            }",
         "",
-        "/*",
-        " * Available variables for preSignResponse:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     authnRequest",
-        " *     session",
-        " *     relayState",
-        " *     res",
-        " *     logger",
-        " */",
-        "function preSignResponse () {",
-        "      logger.error("Chicago: preSignResponse");",
-        "}",
+        "            return resolveAddressClaim;",
+        "        }",
         "",
-        "/*",
-        " * Available variables for preSendFailureResponse:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     response",
-        " *     faultCode",
-        " *     faultDetail",
-        " *     logger",
-        " */",
-        "function preSendFailureResponse () {",
-        "      logger.error("Chicago: preSendFailureResponse");",
-        "}",
-      ],
-    },
-    "9535446c-0ff6-4a76-8576-616599119d64": {
-      "_id": "9535446c-0ff6-4a76-8576-616599119d64",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Remove button from page.",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Remove Button",
-      "script": [
-        "/* Remove Button",
-        " *",
-        " * Author: volker.scheuber@forgerock.com",
-        " * ",
-        " * Hide buttons on the journey page.",
-        " * ",
-        " * This script does not need to be parametrized. It will work properly as is.",
-        " * ",
-        " * The Scripted Decision Node needs the following outcomes defined:",
-        " * - true",
-        " */",
-        "(function () {",
-        "    var script = "Array.prototype.slice.call(document.getElementsByTagName('button')).forEach(function (e) {e.style.display = 'none'})"",
-        "    var fr = JavaImporter(",
-        "        org.forgerock.openam.auth.node.api.Action,",
-        "        javax.security.auth.callback.TextOutputCallback,",
-        "        com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
-        "    )",
-        "    var message = " "",
-        "    if (callbacks.isEmpty()) {",
-        "        action = fr.Action.send(",
-        "            new fr.TextOutputCallback(",
-        "                fr.TextOutputCallback.INFORMATION,",
-        "                message",
-        "            ),",
-        "            new fr.ScriptTextOutputCallback(script)",
-        "        ).build()",
-        "    }",
-        "}());",
-      ],
-    },
-    "994a4e8f-2741-424a-83e7-3c5f78da01f5": {
-      "_id": "994a4e8f-2741-424a-83e7-3c5f78da01f5",
-      "context": "SAML2_IDP_ADAPTER",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Always redirect browser pre-auth",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Saml2 IDP Adapter Always Auth - imported (2)",
-      "script": [
-        "/*",
-        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "        /**",
+        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional logic for essential claims.",
+        "         */",
+        "        function getEssentialClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Returns a claim value or throws an error.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
+        "             *",
+        "             * Use of this resolver is optional.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
+        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
+        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
+        "             * unless otherwise specified in the description of the specific claim."",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*}",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             */",
+        "            function resolveEssentialClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
         "",
-        "/*",
-        " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOn",
-        " *      - preAuthentication",
-        " *      - preSendResponse",
-        " *      - preSignResponse",
-        " *      - preSendFailureResponse",
-        " *",
-        " * Please see the javadoc for the interface definition and more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
-        " * Note that the initialize method is not supported in the scripts.",
-        " *",
-        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
-        " *",
-        " * hostedEntityId - String",
-        " *     Entity ID for the hosted IDP",
-        " * realm - String",
-        " *     Realm of the hosted IDP",
-        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
-        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * request - HttpServletRequest (2)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (3)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (4)",
-        " *     The original authentication request sent from SP",
-        " * reqId - String",
-        " *     The id to use for continuation of processing if the adapter redirects",
-        " * res - Response (5)",
-        " *     The SAML Response",
-        " * session - SSOToken (6)",
-        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * relayState - String",
-        " *     The relayState that will be used in the redirect",
-        " * faultCode - String",
-        " *     the fault code that will be returned in the SAML response",
-        " * faultDetail - String",
-        " *     the fault detail that will be returned in the SAML response",
-        " * logger - Logger instance",
-        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *     Corresponding log files will be prefixed with: scripts.<script name>",
-        " *",
-        " * Throws SAML2Exception (7):",
-        " *     for any exceptions occurring in the adapter. The federation process will continue",
-        " *",
-        " * Class reference:",
-        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
-        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
-        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
-        " */",
+        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
+        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
+        "                }",
         "",
-        "/*",
-        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
-        " */",
+        "                return claimValue;",
+        "            }",
         "",
-        "/*",
-        " * Available variables for preSingleSignOn:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     authnRequest",
-        " *     response",
-        " *     reqId",
-        " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
-        " */",
-        "function preSingleSignOn () {",
-        "      logger.error("Chicago: preSingleSignOn");",
-        "    return true;",
-        "}",
+        "            return resolveEssentialClaim;",
+        "        }",
         "",
-        "/*",
-        " * Available variables for preAuthentication:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     authnRequest",
-        " *     response",
-        " *     reqId",
-        " *     session",
-        " *     relayState",
-        " *     logger",
-        " *",
-        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
-        " */",
-        "function preAuthentication () {",
-        "      logger.error("Chicago: preAuthentication");",
-        "    return true;",
-        "}",
+        "        /**",
+        "         * Provides default resolution for a claim.",
+        "         * Use it if a claim-specific resolver is not defined in the configuration.",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @returns {*} A single value associated with this claim.",
+        "         */",
+        "        function resolveAnyClaim (claim) {",
+        "            if (claim.getValues().size() === 1) {",
+        "                return claim.getValues().toArray()[0];",
+        "            }",
+        "        }",
         "",
-        "/*",
-        " * Available variables for preSendResponse:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     authnRequest",
-        " *     response",
-        " *     reqId",
-        " *     session",
-        " *     relayState",
-        " *     logger",
-        " *",
-        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
-        " */",
-        "function preSendResponse () {",
-        "      logger.error("Chicago: preSendResponse");",
-        "      logger.error("Chicago: authnRequest: "+authnRequest);",
-        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
-        "    return true;",
-        "}",
+        "        // UTILITIES",
         "",
-        "/*",
-        " * Available variables for preSignResponse:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     authnRequest",
-        " *     session",
-        " *     relayState",
-        " *     res",
-        " *     logger",
-        " */",
-        "function preSignResponse () {",
-        "      logger.error("Chicago: preSignResponse");",
-        "}",
+        "        /**",
+        "         * Returns claim value from a set.",
+        "         * If the set contains a single value, returns the value.",
+        "         * If the set contains multiple values, returns the set.",
+        "         * Otherwise, returns undefined.",
+        "         *",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
+        "         * @returns {string|java.util.HashSet|undefined}",
+        "         */",
+        "        function getClaimValueFromSet (claim, set) {",
+        "            if (set && set.size()) {",
+        "                if (set.size() === 1) {",
+        "                    return set.toArray()[0];",
+        "                } else {",
+        "                    return set;",
+        "                }",
+        "            } else if (logger.warningEnabled()) {",
+        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            }",
+        "        }",
         "",
-        "/*",
-        " * Available variables for preSendFailureResponse:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     idpAdapterScriptHelper",
-        " *     request",
-        " *     response",
-        " *     faultCode",
-        " *     faultDetail",
-        " *     logger",
-        " */",
-        "function preSendFailureResponse () {",
-        "      logger.error("Chicago: preSendFailureResponse");",
-        "}",
-      ],
-    },
-    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
-      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Script Using Libraries",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "My Example Script Using Libraries",
-      "script": [
-        "/**",
-        " * Testing library scripts",
-        " */",
-        "var mylib = require('My Example Library');",
-        "var loggers = require('Library Script');",
+        "        function isClaimValueValid (claimValue) {",
+        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
+        "                return false;",
+        "            }",
         "",
-        "mylib.add(1);",
-        "mylib.logTotal(logger);",
-        "mylib.add(3);",
-        "mylib.logTotalWithMessage(logger, mylib.MSG);",
+        "            return true;",
+        "        }",
         "",
-        "outcome = 'true';",
-      ],
-    },
-    "cf3515f0-8278-4ee3-a530-1bad7424c416": {
-      "_id": "cf3515f0-8278-4ee3-a530-1bad7424c416",
-      "context": "OIDC_CLAIMS",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Default alpha realm script for OIDC claims",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Alpha OIDC Claims Script",
-      "script": [
-        "/*",
-        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
+        "        // CLAIM PROCESSING",
         "",
-        "/*",
-        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
-        " * The claim values are computed for:",
-        " * the claims derived from the requested scopes,",
-        " * the claims provided by the authorization server,",
-        " * and the claims requested by the client via the claims parameter.",
-        " *",
-        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
-        " * define the scope-to-claims mapping, and",
-        " * assign to each claim a resolver function that will compute the claim value.",
-        " *",
-        " * Defined variables (class references are provided below):",
-        " * scopes - Set<String> (6).",
-        " *          Always present, the requested scopes.",
-        " * claims - Map<String, Object> (5).",
-        " *          Always present, default server provided claims.",
-        " * claimObjects - List<Claim> (7, 2).",
-        " *                Always present, the default server provided claims.",
-        " * requestedClaims - Map<String, Set<String>> (5).",
-        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
-        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
-        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
-        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
-        " * requestedTypedClaims - List<Claim> (7, 2).",
-        " *                        Always present, the requested claims.",
-        " *                        Requested claims with no requested values will have a claim with no values.",
-        " *                        A claim with a single value indicates this is the only value that should be returned.",
-        " * claimsLocales - List<String> (7).",
-        " *                 The values from the 'claims_locales' parameter.",
-        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
-        " * requestProperties - Unmodifiable Map (5).",
-        " *                     Always present, contains a map of request properties:",
-        " *                     requestUri - The request URI.",
-        " *                     realm - The realm that the request relates to.",
-        " *                     requestParams - A map of the request params and/or posted data.",
-        " *                                     Each value is a list of one or more properties.",
-        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
-        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
-        " * clientProperties - Unmodifiable Map (5).",
-        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
-        " *                    clientId - The client's URI for the request locale.",
-        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
-        " *                    allowedResponseTypes - List of the allowed response types for the client.",
-        " *                    allowedScopes - List of the allowed scopes for the client.",
-        " *                    customProperties - A map of the custom properties of the client.",
-        " *                                       Lists or maps will be included as sub-maps; for example:",
-        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
-        " *                                       To add custom properties to a client, update the Custom Properties field",
-        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
-        " * identity - AMIdentity (3).",
-        " *            Always present, the identity of the resource owner.",
-        " * session - SSOToken (4).",
-        " *           Present if the request contains the session cookie, the user's session object.",
-        " * scriptName - String (primitive).",
-        " *              Always present, the display name of the script.",
-        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
-        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
-        " * httpClient - HTTP Client (8).",
-        " *              Always present, the HTTP Client instance:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
-        " *              In order to use the client, you may need to add",
-        " *              org.forgerock.http.Client,",
-        " *              org.forgerock.http.protocol.*,",
-        " *              and org.forgerock.util.promise.PromiseImpl",
-        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
-        " *",
-        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
-        " *          The result of the last statement in the script is returned to the server.",
-        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
-        " *          is the last (and only) statement in this script, and its return value will become the script result.",
-        " *          Do not use "return variable" statement outside of a function definition.",
-        " *          See RESULTS section for additional details.",
-        " *",
-        " * Class reference:",
-        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
-        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
-        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
-        " *         the claim name, requested values, locale, and whether the claim is essential.",
-        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
-        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
-        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
-        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
-        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
-        "*/",
+        "        /**",
+        "         * Constructs and returns an object populated with the computed claim values",
+        "         * and the requested scopes mapped to the claim names.",
+        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "         * @see RESULTS section for the use of this function.",
+        "         */",
+        "        function getUserInfoClaims () {",
+        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        }",
         "",
-        "(function () {",
-        "    // SETUP",
+        "        /**",
+        "         * Creates a map of (requested) claim names populated with the computed claim values.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         * A map of the requested claim names and the corresponding claim values.",
+        "         */",
+        "        function getComputedClaims () {",
+        "            /**",
+        "             * Creates a complete list of claim objects from:",
+        "             * the claims derived from the scopes,",
+        "             * the claims provided by the authorization server,",
+        "             * and the claims requested by the client.",
+        "             * @returns {java.util.ArrayList}",
+        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "             */",
+        "            function getClaims() {",
+        "                /**",
+        "                 * Returns a list of claim objects for the requested scopes.",
+        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
+        "                 * no other properties of a claim derived from a scope are populated.",
+        "                 * @returns {java.util.ArrayList}",
+        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
+        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "                 */",
+        "                function convertScopeToClaims() {",
+        "                    var claims = new frJava.ArrayList();",
         "",
-        "    /**",
-        "     * Claim processing utilities.",
-        "     * An object that contains reusable functions for processing claims.",
-        "     * @see CLAIM PROCESSING UTILITIES section for details.",
-        "     */",
-        "    var utils = getUtils();",
+        "                    scopes.toArray().forEach(function (scope) {",
+        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
+        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                                claims.add(new frJava.Claim(claimName));",
+        "                            });",
+        "                        }",
+        "                    });",
         "",
-        "    // CONFIGURATION AND CUSTOMIZATION",
+        "                    return claims;",
+        "                }",
         "",
-        "    /**",
-        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
-        "     *",
-        "     * Call this configuration method, and pass in as the first argument",
-        "     * an object that maps a scope value to an array of claim names",
-        "     * to specify which claims need to be processed and returned for the requested scopes.",
-        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
-        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
-        "     *",
-        "     * Below, find a default configuration that is expected to work in the current environment.",
-        "     *",
-        "     * CUSTOMIZATION",
-        "     * You can choose the claim names returned for a scope.",
-        "     */",
-        "    utils.setScopeClaimsMap({",
-        "        profile: [",
-        "            'name',",
-        "            'family_name',",
-        "            'given_name',",
-        "            'zoneinfo',",
-        "            'locale'",
-        "        ],",
-        "        email: ['email'],",
-        "        address: ['address'],",
-        "        phone: ['phone_number']",
-        "    });",
+        "                var claims = new frJava.ArrayList();",
         "",
-        "    /**",
-        "     * In this script, each claim",
-        "     * derived from the requested scopes,",
-        "     * provided by the authorization server, and",
-        "     * requested by the client via the claims parameter",
-        "     * will be processed by a function associated with the claim name.",
-        "     *",
-        "     * Call this configuration method, and pass in as the first argument",
-        "     * an object that maps a claim name to a resolver function,",
-        "     * which will be automatically executed for each claim processed by the script.",
-        "     *",
-        "     * The claim resolver function will receive the requested claim information",
-        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
-        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
-        "     * for details on the Claim class.",
-        "     *",
-        "     * If the claim resolver function returns a value,",
-        "     * other than undefined or null,",
-        "     * the claim will be included in the script's results.",
-        "     *",
-        "     * The Claim instance provides methods to check",
-        "     * what the name of the claim is,",
-        "     * which values the claim request contains,",
-        "     * whether the claim is essential, and",
-        "     * which locale the claim is associated with.",
-        "     * The resolver function can consider this information when computing and returning the claim value.",
-        "     *",
-        "     * Below, find a default configuration that is expected to work in the current environment.",
-        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
-        "     * is called to return a claim resolver function based on a user profile attribute.",
-        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
-        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
-        "     *",
-        "     * CUSTOMIZATION",
-        "     * You can reuse the predefined utils methods with your custom arguments.",
-        "     * You can also specify a custom resolver function for a claim name,",
-        "     * that will compute and return the claim value—as shown in the commented out example below.",
-        "     */",
-        "    utils.setClaimResolvers({",
-        "        /*",
-        "        // An example of a simple claim resolver function that is defined for a claim",
-        "        // directly in the configuration object:",
-        "        custom-claim-name: function (requestedClaim) {",
-        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
-        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "                claims.addAll(convertScopeToClaims());",
+        "                claims.addAll(claimObjects);",
+        "                claims.addAll(requestedTypedClaims);",
         "",
-        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
-        "            // You can use:",
-        "            // requestedClaim.getName()",
-        "            // requestedClaim.getValues()",
-        "            // requestedClaim.getLocale()",
-        "            // requestedClaim.isEssential()",
+        "                return claims;",
+        "            }",
         "",
-        "            return claimValue",
-        "        },",
-        "        */",
-        "        /**",
-        "         * The use of utils.getUserProfileClaimResolver shows how",
-        "         * an argument passed to a function that returns a claim resolver",
-        "         * becomes available to the resolver function (via its lexical context).",
-        "         */",
-        "        name: utils.getUserProfileClaimResolver('cn'),",
-        "        family_name: utils.getUserProfileClaimResolver('sn'),",
-        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
-        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
-        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
-        "        email: utils.getUserProfileClaimResolver('mail'),",
-        "        address: utils.getAddressClaimResolver(",
         "            /**",
-        "             * The passed in user profile claim resolver function",
-        "             * can be used by the address claim resolver function",
-        "             * to obtain the claim value to be formatted as per the OIDC specification:",
-        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             * Computes and returns a claim value.",
+        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
+        "             * @see claimResolvers",
+        "             * If no resolver function is found, uses the default claim resolver function.",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*} Claim value.",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             * Rethrows this exception if a claim resolver throws it.",
+        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
+        "             * if you want to terminate the claim processing.",
         "             */",
-        "            utils.getUserProfileClaimResolver('postaladdress')",
-        "        ),",
-        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
-        "    });",
+        "            function computeClaim(claim) {",
+        "                var resolveClaim;",
+        "                var message;",
         "",
-        "    // CLAIM PROCESSING UTILITIES",
+        "                try {",
+        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
         "",
-        "    /**",
-        "     * @returns {object} An object that contains reusable claim processing utilities.",
-        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
-        "     */",
-        "    function getUtils () {",
-        "        // IMPORT JAVA",
+        "                    return resolveClaim(claim);",
+        "                } catch (e) {",
+        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
         "",
-        "        /**",
-        "         * Provides Java scripting functionality.",
-        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
-        "         */",
-        "        var frJava = JavaImporter(",
-        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
-        "            org.forgerock.oauth2.core.UserInfoClaims,",
-        "            org.forgerock.openidconnect.Claim,",
+        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
+        "                        throw e;",
+        "                    }",
         "",
-        "            java.util.LinkedHashMap,",
-        "            java.util.ArrayList",
-        "        );",
+        "                    if (logger.warningEnabled()) {",
+        "                        logger.warning(message);",
+        "                    }",
+        "                }",
+        "            }",
         "",
-        "        // SET UP CONFIGURATION",
+        "            var computedClaims = new frJava.LinkedHashMap();",
+        "",
+        "            getClaims().toArray().forEach(function (claim) {",
+        "                var claimValue = computeClaim(claim);",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    computedClaims.put(claim.getName(), claimValue);",
+        "                } else {",
+        "                    /**",
+        "                     * If a claim has been processed, but appears in the list again,",
+        "                     * and its value cannot be computed under the new conditions,",
+        "                     * the claim is removed from the final result.",
+        "                     *",
+        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
+        "                     * but also requested by the client with required values that don't match the computed one.",
+        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
+        "                     * for the relevant OIDC specification details.",
+        "                     */",
+        "                    computedClaims.remove(claim.getName());",
+        "                }",
+        "            });",
+        "",
+        "            return computedClaims;",
+        "        }",
         "",
         "        /**",
-        "         * Placeholder for a configuration option that contains",
-        "         * an object that maps the supported scope values (scopes)",
-        "         * and the corresponding claim names for each scope value.",
+        "         * Creates a map of requested scopes and the corresponding claim names.",
+        "         * @returns {java.util.LinkedHashMap}",
         "         */",
-        "        var scopeClaimsMap;",
+        "        function getCompositeScopes () {",
+        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "",
+        "            scopes.toArray().forEach(function (scope) {",
+        "                var scopeClaims = new frJava.ArrayList();",
+        "",
+        "                if (scopeClaimsMap[scope]) {",
+        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                        scopeClaims.add(claimName);",
+        "                    });",
+        "                }",
+        "",
+        "                if (scopeClaims.size()) {",
+        "                    compositeScopes.put(scope, scopeClaims);",
+        "                }",
+        "            });",
+        "",
+        "            return compositeScopes;",
+        "        }",
+        "",
+        "        // PUBLIC METHODS",
+        "",
+        "        return {",
+        "            setScopeClaimsMap: setScopeClaimsMap,",
+        "            setClaimResolvers: setClaimResolvers,",
+        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
+        "            getAddressClaimResolver: getAddressClaimResolver,",
+        "            getEssentialClaimResolver: getEssentialClaimResolver,",
+        "            getUserInfoClaims: getUserInfoClaims",
+        "        };",
+        "    }",
+        "",
+        "    // RESULTS",
+        "",
+        "    /**",
+        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
+        "     * populated with the computed claim values and",
+        "     * the requested scopes mapped to the claim names.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "     *",
+        "     * Assigning it to a variable gives you an opportunity",
+        "     * to log the content of the returned value during development.",
+        "     */",
+        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "",
+        "    /*",
+        "    logger.error(scriptName + ' results:')",
+        "    logger.error('Values: ' + userInfoClaims.getValues())",
+        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
+        "    */",
+        "",
+        "    return userInfoClaims;",
+        "}());",
         "",
-        "        /**",
-        "         * Placeholder for a configuration option that contains",
-        "         * an object that maps the supported claim names",
-        "         * and the resolver functions returning the claim value.",
-        "         */",
-        "        var claimResolvers;",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "6325cf19-a49b-471e-8d26-7e4df76df0e2": {
+      "_id": "6325cf19-a49b-471e-8d26-7e4df76df0e2",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Okta Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "        /**",
-        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
-        "         * and assigns it to a (private) variable that serves as a configuration option.",
-        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
-        "         * in order to specify which claims need to be processed for the requested scopes.",
-        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
-        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
-        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
-        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
-        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
-        "         * @returns {undefined}",
-        "         */",
-        "        function setScopeClaimsMap(params) {",
-        "            scopeClaimsMap = params;",
-        "        }",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "        /**",
-        "         * A (public) method that accepts an object that maps the supported claim names",
-        "         * and the resolver functions returning the claim value,",
-        "         * and assigns it to a (private) variable that serves as a configuration option.",
-        "         * @param {object} params - An object that maps",
-        "         * each supported claim name to a function that computes and returns the claim value.",
-        "         */",
-        "        function setClaimResolvers(params) {",
-        "            claimResolvers = params;",
-        "        }",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
         "",
-        "        // CLAIM RESOLVERS",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization-imported-(1).script.json 1`] = `
+{
+  "script": {
+    "6002c349-f1d0-4317-baa2-a18590fc3cff": {
+      "_id": "6002c349-f1d0-4317-baa2-a18590fc3cff",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Okta Profile Normalization - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "        /**",
-        "         * Claim resolvers are functions that return a claim value.",
-        "         * @param {*}",
-        "         * @returns {*}",
-        "         */",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "        /**",
-        "         * Defines a claim resolver based on a user profile attribute.",
-        "         * @param {string} attributeName - Name of the user profile attribute.",
-        "         * @returns {function} A function that will determine the claim value",
-        "         * based on the user profile attribute and the (requested) claim properties.",
-        "         */",
-        "        function getUserProfileClaimResolver (attributeName) {",
-        "            /**",
-        "             * Resolves a claim with a user profile attribute value.",
-        "             * Returns undefined if the identity attribute is not populated,",
-        "             * OR if the claim has requested values that do not contain the identity attribute value.",
-        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {string|HashSet|undefined}",
-        "             */",
-        "            function resolveClaim(claim) {",
-        "                var userProfileValue;",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
         "",
-        "                if (identity) {",
-        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Okta-Profile-Normalization-imported-(2).script.json 1`] = `
+{
+  "script": {
+    "647f2a33-9211-4315-a83f-a521d8b77d7b": {
+      "_id": "647f2a33-9211-4315-a83f-a521d8b77d7b",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Okta Profile Normalization - imported (2)",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
-        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
-        "                            return userProfileValue;",
-        "                        }",
-        "                    }",
-        "                }",
-        "            }",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "            return resolveClaim;",
-        "        }",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Remove-Button.script.json 1`] = `
+{
+  "script": {
+    "9535446c-0ff6-4a76-8576-616599119d64": {
+      "_id": "9535446c-0ff6-4a76-8576-616599119d64",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Remove button from page.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Remove Button",
+      "script": [
+        "/* Remove Button",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Hide buttons on the journey page.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - true",
+        " */",
+        "(function () {",
+        "    var script = "Array.prototype.slice.call(document.getElementsByTagName('button')).forEach(function (e) {e.style.display = 'none'})"",
+        "    var fr = JavaImporter(",
+        "        org.forgerock.openam.auth.node.api.Action,",
+        "        javax.security.auth.callback.TextOutputCallback,",
+        "        com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
+        "    )",
+        "    var message = " "",
+        "    if (callbacks.isEmpty()) {",
+        "        action = fr.Action.send(",
+        "            new fr.TextOutputCallback(",
+        "                fr.TextOutputCallback.INFORMATION,",
+        "                message",
+        "            ),",
+        "            new fr.ScriptTextOutputCallback(script)",
+        "        ).build()",
+        "    }",
+        "}());",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-IDP-Adapter-Script.script.json 1`] = `
+{
+  "script": {
+    "248b8a56-df81-4b1b-b4ba-45d994f6504c": {
+      "_id": "248b8a56-df81-4b1b-b4ba-45d994f6504c",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for SAML2 IDP Adapter",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "SAML2 IDP Adapter Script",
+      "script": [
+        "/*",
+        " * Copyright 2021-2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "        /**",
-        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
-        "         * @param {function} resolveClaim - A function that returns a claim value.",
-        "         * @returns {function} A function that will accept a claim as an argument,",
-        "         * run the claim resolver function for the claim and obtain the claim value,",
-        "         * and apply additional formatting to the value before returning it.",
-        "         */",
-        "        function getAddressClaimResolver (resolveClaim) {",
-        "            /**",
-        "             * Creates an address claim object from a value returned by a claim resolver,",
-        "             * and returns the address claim object as the claim value.",
-        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
-        "             * The claim value is obtained with a claim resolving function available from the closure.",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
-        "             */",
-        "            function resolveAddressClaim(claim) {",
-        "                var claimValue = resolveClaim(claim);",
-        "                var addressObject;",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
+        " *",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7.3/scripting-guide/scripting-api-global-logger.html.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
         "",
-        "                if (isClaimValueValid(claimValue)) {",
-        "                    addressObject = new frJava.LinkedHashMap();",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
         "",
-        "                    addressObject.put('formatted', claimValue);",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "    return false;",
+        "}",
         "",
-        "                    return addressObject;",
-        "                }",
-        "            }",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "    return false;",
+        "}",
         "",
-        "            return resolveAddressClaim;",
-        "        }",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "    return false;",
+        "}",
         "",
-        "        /**",
-        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
-        "         * @param {function} resolveClaim - A function that returns a claim value.",
-        "         * @returns {function} A function that will accept a claim as an argument,",
-        "         * run the claim resolver function for the claim and obtain the claim value,",
-        "         * and apply additional logic for essential claims.",
-        "         */",
-        "        function getEssentialClaimResolver (resolveClaim) {",
-        "            /**",
-        "             * Returns a claim value or throws an error.",
-        "             * The claim value is obtained with a claim resolving function available from the closure.",
-        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
-        "             *",
-        "             * Use of this resolver is optional.",
-        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
-        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
-        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
-        "             * unless otherwise specified in the description of the specific claim."",
-        "             *",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {*}",
-        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
-        "             */",
-        "            function resolveEssentialClaim(claim) {",
-        "                var claimValue = resolveClaim(claim);",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "}",
         "",
-        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
-        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
-        "                }",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "}",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-IDP-Attribute-Mapper-Script.script.json 1`] = `
+{
+  "script": {
+    "c4f22465-2368-4e27-8013-e6399974fd48": {
+      "_id": "c4f22465-2368-4e27-8013-e6399974fd48",
+      "context": "SAML2_IDP_ATTRIBUTE_MAPPER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for SAML2 IDP Attribute Mapper",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "SAML2 IDP Attribute Mapper Script",
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "                return claimValue;",
-        "            }",
+        "/*",
+        " * This script returns a list of SAML Attribute objects for the IDP framework to insert into the generated Assertion.",
+        " *",
+        " * Defined variables:",
+        " * session - SSOToken (1)",
+        " *           The single sign-on session.",
+        " * hostedEntityId - String (primitive).",
+        " *                  The hosted entity ID.",
+        " * remoteEntityId - String (primitive).",
+        " *                  The remote entity ID.",
+        " * realm - String (primitive).",
+        " *         The name of the realm the user is authenticating to.",
+        " * logger - Always present, the debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding log files will be prefixed with: scripts.SAML2_IDP_ATTRIBUTE_MAPPER",
+        " * idpAttributeMapperScriptHelper - IdpAttributeMapperScriptHelper (2)",
+        " *                                - An IdpAttributeMapperScriptHelper instance containing methods used for IDP attribute mapping.",
+        " *",
+        " * Throws SAML2Exception:",
+        " *      - on failing to map the IDP attributes.",
+        " *",
+        " * Return - a list of SAML Attribute (3) objects.",
+        " *",
+        " * Class reference:",
+        " * (1) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (2) IdpAttributeMapperScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAttributeMapperScriptHelper.html.",
+        " * (3) Attribute - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/saml2/assertion/Attribute.html.",
+        " */",
         "",
-        "            return resolveEssentialClaim;",
-        "        }",
+        "/**",
+        " * Default SAML2 IDP Attribute Mapper.",
+        " */",
+        "function getAttributes() {",
+        "    var frJava = JavaImporter(",
+        "        com.sun.identity.saml2.common.SAML2Exception",
+        "    );",
         "",
-        "        /**",
-        "         * Provides default resolution for a claim.",
-        "         * Use it if a claim-specific resolver is not defined in the configuration.",
-        "         * @param {org.forgerock.openidconnect.Claim} claim",
-        "         * An object that provides methods to obtain information/requirements associated with a claim.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "         * @returns {*} A single value associated with this claim.",
-        "         */",
-        "        function resolveAnyClaim (claim) {",
-        "            if (claim.getValues().size() === 1) {",
-        "                return claim.getValues().toArray()[0];",
-        "            }",
-        "        }",
+        "    const debugMethod = "ScriptedIDPAttributeMapper.getAttributes:: ";",
         "",
-        "        // UTILITIES",
+        "    try {",
         "",
-        "        /**",
-        "         * Returns claim value from a set.",
-        "         * If the set contains a single value, returns the value.",
-        "         * If the set contains multiple values, returns the set.",
-        "         * Otherwise, returns undefined.",
-        "         *",
-        "         * @param {org.forgerock.openidconnect.Claim} claim",
-        "         * An object that provides methods to obtain information/requirements associated with a claim.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
-        "         * @returns {string|java.util.HashSet|undefined}",
-        "         */",
-        "        function getClaimValueFromSet (claim, set) {",
-        "            if (set && set.size()) {",
-        "                if (set.size() === 1) {",
-        "                    return set.toArray()[0];",
-        "                } else {",
-        "                    return set;",
-        "                }",
-        "            } else if (logger.warningEnabled()) {",
-        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
-        "            }",
+        "        if (!idpAttributeMapperScriptHelper.isSessionValid(session)) {",
+        "            logger.error(debugMethod + "Invalid session.");",
+        "            return null;",
         "        }",
         "",
-        "        function isClaimValueValid (claimValue) {",
-        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
-        "                return false;",
+        "        var configMap = idpAttributeMapperScriptHelper.getRemoteSPConfigAttributeMap(realm, remoteEntityId);",
+        "        logger.message(debugMethod + "Remote SP attribute map = {}", configMap);",
+        "        if (configMap == null || configMap.isEmpty()) {",
+        "            configMap = idpAttributeMapperScriptHelper.getHostedIDPConfigAttributeMap(realm, hostedEntityId);",
+        "            if (configMap == null || configMap.isEmpty()) {",
+        "                logger.message(debugMethod + "Configuration map is not defined.");",
+        "                return null;",
         "            }",
-        "",
-        "            return true;",
-        "        }",
-        "",
-        "        // CLAIM PROCESSING",
-        "",
-        "        /**",
-        "         * Constructs and returns an object populated with the computed claim values",
-        "         * and the requested scopes mapped to the claim names.",
-        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
-        "         * @see RESULTS section for the use of this function.",
-        "         */",
-        "        function getUserInfoClaims () {",
-        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "            logger.message(debugMethod + "Hosted IDP attribute map = {}", configMap);",
         "        }",
         "",
-        "        /**",
-        "         * Creates a map of (requested) claim names populated with the computed claim values.",
-        "         * @returns {java.util.LinkedHashMap}",
-        "         * A map of the requested claim names and the corresponding claim values.",
-        "         */",
-        "        function getComputedClaims () {",
-        "            /**",
-        "             * Creates a complete list of claim objects from:",
-        "             * the claims derived from the scopes,",
-        "             * the claims provided by the authorization server,",
-        "             * and the claims requested by the client.",
-        "             * @returns {java.util.ArrayList}",
-        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
-        "             */",
-        "            function getClaims() {",
-        "                /**",
-        "                 * Returns a list of claim objects for the requested scopes.",
-        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
-        "                 * no other properties of a claim derived from a scope are populated.",
-        "                 * @returns {java.util.ArrayList}",
-        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
-        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
-        "                 */",
-        "                function convertScopeToClaims() {",
-        "                    var claims = new frJava.ArrayList();",
+        "        var attributes = new java.util.ArrayList();",
+        "        var stringValueMap = new java.util.HashSet();",
+        "        var binaryValueMap;",
+        "        var localAttribute;",
         "",
-        "                    scopes.toArray().forEach(function (scope) {",
-        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
-        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
-        "                                claims.add(new frJava.Claim(claimName));",
-        "                            });",
+        "        // Don't try to read the attributes from the datastore if the ignored profile is enabled in this realm.",
+        "        if (!idpAttributeMapperScriptHelper.isIgnoredProfile(session, realm)) {",
+        "            try {",
+        "                // Resolve attributes to be read from the datastore.",
+        "                var stringAttributes = new java.util.HashSet();",
+        "                var binaryAttributes = new java.util.HashSet();",
+        "                var keyIter = configMap.keySet().iterator();",
+        "                while (keyIter.hasNext()) {",
+        "                    var key = keyIter.next();",
+        "                    localAttribute = configMap.get(key);",
+        "                    if (!idpAttributeMapperScriptHelper.isStaticAttribute(localAttribute)) {",
+        "                        if (idpAttributeMapperScriptHelper.isBinaryAttribute(localAttribute)) {",
+        "                            // add it to the list of attributes to treat as being binary",
+        "                            binaryAttributes.add(idpAttributeMapperScriptHelper.removeBinaryAttributeFlag(localAttribute));",
+        "                        } else {",
+        "                            stringAttributes.add(localAttribute);",
         "                        }",
-        "                    });",
-        "",
-        "                    return claims;",
+        "                    }",
         "                }",
         "",
-        "                var claims = new frJava.ArrayList();",
-        "",
-        "                claims.addAll(convertScopeToClaims());",
-        "                claims.addAll(claimObjects);",
-        "                claims.addAll(requestedTypedClaims);",
-        "",
-        "                return claims;",
+        "                if (!stringAttributes.isEmpty()) {",
+        "                    stringValueMap = idpAttributeMapperScriptHelper.getAttributes(session, stringAttributes);",
+        "                }",
+        "                if (!binaryAttributes.isEmpty()) {",
+        "                    binaryValueMap = idpAttributeMapperScriptHelper.getBinaryAttributes(session, binaryAttributes);",
+        "                }",
+        "            } catch (error) {",
+        "                logger.error(debugMethod + "Error accessing the datastore. " + error);",
+        "                //continue to check in ssotoken.",
         "            }",
+        "        }",
         "",
-        "            /**",
-        "             * Computes and returns a claim value.",
-        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
-        "             * @see claimResolvers",
-        "             * If no resolver function is found, uses the default claim resolver function.",
-        "             *",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {*} Claim value.",
-        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
-        "             * Rethrows this exception if a claim resolver throws it.",
-        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
-        "             * if you want to terminate the claim processing.",
-        "             */",
-        "            function computeClaim(claim) {",
-        "                var resolveClaim;",
-        "                var message;",
-        "",
-        "                try {",
-        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "        var keyIter = configMap.keySet().iterator();",
+        "        while (keyIter.hasNext()) {",
+        "            var key = keyIter.next()",
+        "            var nameFormat = null;",
+        "            var samlAttribute = key;",
+        "            localAttribute = configMap.get(key);",
+        "            // check if samlAttribute has format nameFormat|samlAttribute",
+        "            var samlAttributes = String(new java.lang.String(samlAttribute));",
+        "            var tokens = samlAttributes.split('|');",
         "",
-        "                    return resolveClaim(claim);",
-        "                } catch (e) {",
-        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "            if (tokens.length > 1) {",
+        "                nameFormat = tokens[0];",
+        "                samlAttribute = tokens[1];",
+        "            }",
         "",
-        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
-        "                        throw e;",
+        "            var attributeValues = new java.util.HashSet();",
+        "            if (idpAttributeMapperScriptHelper.isStaticAttribute(localAttribute)) {",
+        "                // Remove the static flag before using it as the static value",
+        "                localAttribute = idpAttributeMapperScriptHelper.removeStaticAttributeFlag(localAttribute);",
+        "                attributeValues = new java.util.HashSet([localAttribute]);",
+        "                logger.message(debugMethod + "Adding static value {} for attribute named {}", localAttribute, samlAttribute);",
+        "            } else {",
+        "                if (idpAttributeMapperScriptHelper.isBinaryAttribute(localAttribute)) {",
+        "                    // Remove the flag as not used for lookup",
+        "                    localAttribute = idpAttributeMapperScriptHelper.removeBinaryAttributeFlag(localAttribute);",
+        "                    attributeValues = idpAttributeMapperScriptHelper.getBinaryAttributeValues(samlAttribute, localAttribute,",
+        "                        binaryValueMap);",
+        "                } else {",
+        "                    if (stringValueMap != null && !stringValueMap.isEmpty()) {",
+        "                        attributeValues = stringValueMap.get(localAttribute);",
+        "                    } else {",
+        "                        logger.message(debugMethod + "{} string value map was empty or null.", localAttribute);",
         "                    }",
+        "                }",
         "",
-        "                    if (logger.warningEnabled()) {",
-        "                        logger.warning(message);",
-        "                    }",
+        "                // If all else fails, try to get the value from the users ssoToken",
+        "                if (attributeValues == null || attributeValues.isEmpty()) {",
+        "                    logger.message(debugMethod + "User profile does not have value for {}, checking SSOToken.", localAttribute);",
+        "                    attributeValues = new java.util.HashSet(idpAttributeMapperScriptHelper.getPropertySet(session, localAttribute));",
         "                }",
         "            }",
         "",
-        "            var computedClaims = new frJava.LinkedHashMap();",
+        "            if (attributeValues == null || attributeValues.isEmpty()) {",
+        "                logger.message(debugMethod + "{} not found in user profile or SSOToken.", localAttribute);",
+        "            } else {",
+        "                attributes.add(idpAttributeMapperScriptHelper.createSAMLAttribute(samlAttribute, nameFormat, attributeValues));",
+        "            }",
+        "        }",
         "",
-        "            getClaims().toArray().forEach(function (claim) {",
-        "                var claimValue = computeClaim(claim);",
+        "        return attributes;",
         "",
-        "                if (isClaimValueValid(claimValue)) {",
-        "                    computedClaims.put(claim.getName(), claimValue);",
-        "                } else {",
-        "                    /**",
-        "                     * If a claim has been processed, but appears in the list again,",
-        "                     * and its value cannot be computed under the new conditions,",
-        "                     * the claim is removed from the final result.",
-        "                     *",
-        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
-        "                     * but also requested by the client with required values that don't match the computed one.",
-        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
-        "                     * for the relevant OIDC specification details.",
-        "                     */",
-        "                    computedClaims.remove(claim.getName());",
-        "                }",
-        "            });",
+        "    } catch (error) {",
+        "        logger.error(debugMethod + "Error mapping IDP attributes. " + error);",
+        "        throw new frJava.SAML2Exception(error);",
+        "    }",
+        "}",
+        "",
+        "getAttributes();",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-NameID-Mapper-Script.script.json 1`] = `
+{
+  "script": {
+    "4a171d3a-056b-4ab7-a19f-d7e93ddf7ae5": {
+      "_id": "4a171d3a-056b-4ab7-a19f-d7e93ddf7ae5",
+      "context": "SAML2_NAMEID_MAPPER",
+      "createdBy": "id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org",
+      "creationDate": 1433147666269,
+      "default": true,
+      "description": "Default global script for SAML2 NameID Mapper",
+      "evaluatorVersion": "2.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org",
+      "lastModifiedDate": 1433147666269,
+      "name": "SAML2 NameID Mapper Script",
+      "script": [
+        "/*",
+        " * Copyright 2024 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "            return computedClaims;",
-        "        }",
+        "/*",
+        " * This is an example SAML2 NameID Mapper script.",
+        " * This script should return a string value representing the SAML2 NameID identifier.",
+        " * The example script delegates to the configured java plugin via the nameIDScriptHelper binding.",
+        " */",
+        "nameIDScriptHelper.getNameIDValue();",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/SAML2-SP-Adapter-Script.script.json 1`] = `
+{
+  "script": {
+    "69f06e63-128c-4e2f-af52-079a8a6f448b": {
+      "_id": "69f06e63-128c-4e2f-af52-079a8a6f448b",
+      "context": "SAML2_SP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for SAML2 SP Adapter",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "SAML2 SP Adapter Script",
+      "script": [
+        "/*",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "        /**",
-        "         * Creates a map of requested scopes and the corresponding claim names.",
-        "         * @returns {java.util.LinkedHashMap}",
-        "         */",
-        "        function getCompositeScopes () {",
-        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
+        " *",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (2)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (13):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
         "",
-        "            scopes.toArray().forEach(function (scope) {",
-        "                var scopeClaims = new frJava.ArrayList();",
+        "/*",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
+        " */",
         "",
-        "                if (scopeClaimsMap[scope]) {",
-        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
-        "                        scopeClaims.add(claimName);",
-        "                    });",
-        "                }",
+        "/*",
+        " * Available variables for preSingleSignOnRequest:",
+        " *     hostedEntityId",
+        " *     idpEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnRequest() {",
+        "}",
         "",
-        "                if (scopeClaims.size()) {",
-        "                    compositeScopes.put(scope, scopeClaims);",
-        "                }",
-        "            });",
+        "/*",
+        " * Available variables for preSingleSignOnProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnProcess() {",
+        "}",
         "",
-        "            return compositeScopes;",
-        "        }",
+        "/*",
+        " * Available variables for postSingleSignOnSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     out",
+        " *     session",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
+        "}",
         "",
-        "        // PUBLIC METHODS",
+        "/*",
+        " * Available variables for postSingleSignOnFailure:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
+        "}",
         "",
-        "        return {",
-        "            setScopeClaimsMap: setScopeClaimsMap,",
-        "            setClaimResolvers: setClaimResolvers,",
-        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
-        "            getAddressClaimResolver: getAddressClaimResolver,",
-        "            getEssentialClaimResolver: getEssentialClaimResolver,",
-        "            getUserInfoClaims: getUserInfoClaims",
-        "        };",
-        "    }",
+        "/*",
+        " * Available variables for postNewNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postNewNameIDSuccess() {",
+        "}",
         "",
-        "    // RESULTS",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
         "",
-        "    /**",
-        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
-        "     * populated with the computed claim values and",
-        "     * the requested scopes mapped to the claim names.",
-        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
-        "     *",
-        "     * Assigning it to a variable gives you an opportunity",
-        "     * to log the content of the returned value during development.",
-        "     */",
-        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
         "",
-        "    /*",
-        "    logger.error(scriptName + ' results:')",
-        "    logger.error('Values: ' + userInfoClaims.getValues())",
-        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
-        "    */",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
+        "}",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Salesforce-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "312e951f-70c5-49d2-a9ae-93aef909d5df": {
+      "_id": "312e951f-70c5-49d2-a9ae-93aef909d5df",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from Salesforce",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Salesforce Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "    return userInfoClaims;",
-        "}());",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
+        "return json(object(",
+        "        field("id", rawProfile.user_id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.given_name),",
+        "        field("familyName", rawProfile.family_name),",
+        "        field("photoUrl", rawProfile.picture),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email),",
+        "        field("locale", rawProfile.zoneInfo)))",
       ],
     },
-    "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1": {
-      "_id": "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth.script.json 1`] = `
+{
+  "script": {
+    "85523e71-2d77-4577-b078-6f9674cc54e2": {
+      "_id": "85523e71-2d77-4577-b078-6f9674cc54e2",
       "context": "SAML2_IDP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
@@ -18654,7 +11003,7 @@ exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": s
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "Saml2 IDP Adapter Always Auth - imported (1)",
+      "name": "Saml2 IDP Adapter Always Auth",
       "script": [
         "/*",
         " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
@@ -18815,2755 +11164,7689 @@ exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": s
         "}",
       ],
     },
-    "d58977ed-0542-4147-8197-973ef7300191": {
-      "_id": "d58977ed-0542-4147-8197-973ef7300191",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Custom Device Match Script",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "Custom Device Match Script",
-      "script": [
-        "/*",
-        " * Custom Device Match Script",
-        " */",
-        "",
-        "outcome = "true";",
-      ],
-    },
-    "da7a96a8-7969-4dab-9c6e-a812938cc76d": {
-      "_id": "da7a96a8-7969-4dab-9c6e-a812938cc76d",
-      "context": "LIBRARY",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Script that uses secrets and variables",
-      "evaluatorVersion": "2.0",
-      "exports": [],
-      "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "test-script-with-secrets-and-variables",
-      "script": [
-        "console.log(\`pi: \${systemEnv.getProperty("esv.test.var.pi")}\`);",
-        "console.log(\`pi secret: \${systemEnv.getProperty("esv.test.secret.pi")}\`);",
-        "console.log(\`speed of light: \${systemEnv.getProperty("esv.test.variable.light")}\`);",
-        "console.log(\`euler's number: \${systemEnv.getProperty("esv.test.secret.euler")}\`);",
-        "console.log(\`Area of circle with radius 7: \${7 * 7 * systemEnv.getProperty("esv.test.var.pi")}\`);",
-        "console.log(\`Volume of sphere with radius 7: \${4 * 7 * 7 * 7 * systemEnv.getProperty("esv.test.secret.pi") / 3}\`);",
-        "",
-      ],
-    },
-    "dbe0bf9a-72aa-49d5-8483-9db147985a47": {
-      "_id": "dbe0bf9a-72aa-49d5-8483-9db147985a47",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth-imported-(1).script.json 1`] = `
+{
+  "script": {
+    "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1": {
+      "_id": "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1",
+      "context": "SAML2_IDP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Normalizes raw profile data from ADFS",
+      "description": "Always redirect browser pre-auth",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "ADFS Profile Normalization (JS)",
+      "name": "Saml2 IDP Adapter Always Auth - imported (1)",
       "script": [
         "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
         " * or with one of its affiliates. All use shall be exclusively subject",
         " * to such license between the licensee and ForgeRock AS.",
         " */",
         "",
         "/*",
-        " * This script returns the social identity profile information for the authenticating user",
-        " * in a standard form expected by the Social Provider Handler Node.",
-        " *",
-        " * Defined variables:",
-        " * rawProfile - The social identity provider profile information for the authenticating user.",
-        " *              JsonValue (1).",
-        " * logger - The debug logger instance:",
-        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " * realm - String (primitive).",
-        " *         The name of the realm the user is authenticating to.",
-        " * requestHeaders - TreeMap (2).",
-        " *                  The object that provides methods for accessing headers in the login request:",
-        " *                  https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.",
-        " * requestParameters - TreeMap (2).",
-        " *                     The object that contains the authentication request parameters.",
-        " * selectedIdp - String (primitive).",
-        " *               The social identity provider name. For example: google.",
-        " * sharedState - LinkedHashMap (3).",
-        " *               The object that holds the state of the authentication tree and allows data exchange between the stateless nodes:",
-        " *               https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
-        " * transientState - LinkedHashMap (3).",
-        " *                  The object for storing sensitive information that must not leave the server unencrypted,",
-        " *                  and that may not need to persist between authentication requests during the authentication session:",
-        " *                  https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
         " *",
-        " * Return - a JsonValue (1).",
-        " *          The result of the last statement in the script is returned to the server.",
-        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
-        " *          is the last (and only) statement in this script, and its return value will become the script result.",
-        " *          Do not use "return variable" statement outside of a function definition.",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
         " *",
-        " *          This script's last statement should result in a JsonValue (1) with the following keys:",
-        " *          {",
-        " *              {"displayName": "corresponding-social-identity-provider-value"},",
-        " *              {"email": "corresponding-social-identity-provider-value"},",
-        " *              {"familyName": "corresponding-social-identity-provider-value"},",
-        " *              {"givenName": "corresponding-social-identity-provider-value"},",
-        " *              {"id": "corresponding-social-identity-provider-value"},",
-        " *              {"locale": "corresponding-social-identity-provider-value"},",
-        " *              {"photoUrl": "corresponding-social-identity-provider-value"},",
-        " *              {"username": "corresponding-social-identity-provider-value"}",
-        " *          }",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
         " *",
-        " *          The consumer of this data defines which keys are required and which are optional.",
-        " *          For example, the script associated with the Social Provider Handler Node and,",
-        " *          ultimately, the managed object created/updated with this data",
-        " *          will expect certain keys to be populated.",
-        " *          In some common default configurations, the following keys are required to be not empty:",
-        " *          username, givenName, familyName, email.",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
         " *",
-        " *          From RFC4517: A value of the Directory String syntax is a string of one or more",
-        " *          arbitrary characters from the Universal Character Set (UCS).",
-        " *          A zero-length character string is not permitted.",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
         " *",
-        " * (1) JsonValue - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/json/JsonValue.html.",
-        " * (2) TreeMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/TreeMap.html.",
-        " * (3) LinkedHashMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * Class reference:",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
         " */",
         "",
-        "(function () {",
-        "    var frJava = JavaImporter(",
-        "        org.forgerock.json.JsonValue",
-        "    );",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
         "",
-        "    var normalizedProfileData = frJava.JsonValue.json(frJava.JsonValue.object());",
-        "  ",
-        "      //logger.message('Seguin rawProfile: '+rawProfile);",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "      logger.error("Chicago: preSingleSignOn");",
+        "    return true;",
+        "}",
         "",
-        "    normalizedProfileData.put('id', rawProfile.get('sub').asString());",
-        "    normalizedProfileData.put('displayName', rawProfile.get('givenName').asString() + ' ' + rawProfile.get('sn').asString());",
-        "    normalizedProfileData.put('email', rawProfile.get('mail').asString());",
-        "    normalizedProfileData.put('givenName', rawProfile.get('givenName').asString());",
-        "    normalizedProfileData.put('familyName', rawProfile.get('sn').asString());",
-        "    normalizedProfileData.put('username', rawProfile.get('upn').asString());",
-        "    normalizedProfileData.put('roles', rawProfile.get('roles').asString());",
-        "  ",
-        "      //logger.message('Seguin normalizedProfileData: '+normalizedProfileData);",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "      logger.error("Chicago: preAuthentication");",
+        "    return true;",
+        "}",
         "",
-        "    return normalizedProfileData;",
-        "}());",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "      logger.error("Chicago: preSendResponse");",
+        "      logger.error("Chicago: authnRequest: "+authnRequest);",
+        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "      logger.error("Chicago: preSignResponse");",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "      logger.error("Chicago: preSendFailureResponse");",
+        "}",
       ],
     },
-    "e1db8a0a-0329-4962-a5bf-ecffaca376ae": {
-      "_id": "e1db8a0a-0329-4962-a5bf-ecffaca376ae",
-      "context": "OIDC_CLAIMS",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Saml2-IDP-Adapter-Always-Auth-imported-(2).script.json 1`] = `
+{
+  "script": {
+    "994a4e8f-2741-424a-83e7-3c5f78da01f5": {
+      "_id": "994a4e8f-2741-424a-83e7-3c5f78da01f5",
+      "context": "SAML2_IDP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Used by endUserUIClient",
+      "description": "Always redirect browser pre-auth",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "Alpha endUserUIClient OIDC Claims Script",
+      "name": "Saml2 IDP Adapter Always Auth - imported (2)",
       "script": [
         "/*",
-        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
         " * or with one of its affiliates. All use shall be exclusively subject",
         " * to such license between the licensee and ForgeRock AS.",
         " */",
         "",
         "/*",
-        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
-        " * The claim values are computed for:",
-        " * the claims derived from the requested scopes,",
-        " * the claims provided by the authorization server,",
-        " * and the claims requested by the client via the claims parameter.",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
         " *",
-        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
-        " * define the scope-to-claims mapping, and",
-        " * assign to each claim a resolver function that will compute the claim value.",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
         " *",
-        " * Defined variables (class references are provided below):",
-        " * scopes - Set<String> (6).",
-        " *          Always present, the requested scopes.",
-        " * claims - Map<String, Object> (5).",
-        " *          Always present, default server provided claims.",
-        " * claimObjects - List<Claim> (7, 2).",
-        " *                Always present, the default server provided claims.",
-        " * requestedClaims - Map<String, Set<String>> (5).",
-        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
-        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
-        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
-        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
-        " * requestedTypedClaims - List<Claim> (7, 2).",
-        " *                        Always present, the requested claims.",
-        " *                        Requested claims with no requested values will have a claim with no values.",
-        " *                        A claim with a single value indicates this is the only value that should be returned.",
-        " * claimsLocales - List<String> (7).",
-        " *                 The values from the 'claims_locales' parameter.",
-        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
-        " * requestProperties - Unmodifiable Map (5).",
-        " *                     Always present, contains a map of request properties:",
-        " *                     requestUri - The request URI.",
-        " *                     realm - The realm that the request relates to.",
-        " *                     requestParams - A map of the request params and/or posted data.",
-        " *                                     Each value is a list of one or more properties.",
-        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
-        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
-        " * clientProperties - Unmodifiable Map (5).",
-        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
-        " *                    clientId - The client's URI for the request locale.",
-        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
-        " *                    allowedResponseTypes - List of the allowed response types for the client.",
-        " *                    allowedScopes - List of the allowed scopes for the client.",
-        " *                    customProperties - A map of the custom properties of the client.",
-        " *                                       Lists or maps will be included as sub-maps; for example:",
-        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
-        " *                                       To add custom properties to a client, update the Custom Properties field",
-        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
-        " * identity - AMIdentity (3).",
-        " *            Always present, the identity of the resource owner.",
-        " * session - SSOToken (4).",
-        " *           Present if the request contains the session cookie, the user's session object.",
-        " * scriptName - String (primitive).",
-        " *              Always present, the display name of the script.",
-        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
-        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
-        " * httpClient - HTTP Client (8).",
-        " *              Always present, the HTTP Client instance:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
-        " *              In order to use the client, you may need to add",
-        " *              org.forgerock.http.Client,",
-        " *              org.forgerock.http.protocol.*,",
-        " *              and org.forgerock.util.promise.PromiseImpl",
-        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
-        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
         " *",
-        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
-        " *          The result of the last statement in the script is returned to the server.",
-        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
-        " *          is the last (and only) statement in this script, and its return value will become the script result.",
-        " *          Do not use "return variable" statement outside of a function definition.",
-        " *          See RESULTS section for additional details.",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
         " *",
         " * Class reference:",
-        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
-        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
-        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
-        " *         the claim name, requested values, locale, and whether the claim is essential.",
-        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
-        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
-        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
-        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
-        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
-        "*/",
-        "",
-        "(function () {",
-        "    // SETUP",
-        "",
-        "    /**",
-        "     * Claim processing utilities.",
-        "     * An object that contains reusable functions for processing claims.",
-        "     * @see CLAIM PROCESSING UTILITIES section for details.",
-        "     */",
-        "    var utils = getUtils();",
-        "",
-        "    // CONFIGURATION AND CUSTOMIZATION",
-        "",
-        "    /**",
-        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
-        "     *",
-        "     * Call this configuration method, and pass in as the first argument",
-        "     * an object that maps a scope value to an array of claim names",
-        "     * to specify which claims need to be processed and returned for the requested scopes.",
-        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
-        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
-        "     *",
-        "     * Below, find a default configuration that is expected to work in the current environment.",
-        "     *",
-        "     * CUSTOMIZATION",
-        "     * You can choose the claim names returned for a scope.",
-        "     */",
-        "    utils.setScopeClaimsMap({",
-        "        profile: [",
-        "            'name',",
-        "            'family_name',",
-        "            'given_name',",
-        "            'zoneinfo',",
-        "            'locale'",
-        "        ],",
-        "        email: ['email'],",
-        "        address: ['address'],",
-        "        phone: ['phone_number']",
-        "    });",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
         "",
-        "    /**",
-        "     * In this script, each claim",
-        "     * derived from the requested scopes,",
-        "     * provided by the authorization server, and",
-        "     * requested by the client via the claims parameter",
-        "     * will be processed by a function associated with the claim name.",
-        "     *",
-        "     * Call this configuration method, and pass in as the first argument",
-        "     * an object that maps a claim name to a resolver function,",
-        "     * which will be automatically executed for each claim processed by the script.",
-        "     *",
-        "     * The claim resolver function will receive the requested claim information",
-        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
-        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
-        "     * for details on the Claim class.",
-        "     *",
-        "     * If the claim resolver function returns a value,",
-        "     * other than undefined or null,",
-        "     * the claim will be included in the script's results.",
-        "     *",
-        "     * The Claim instance provides methods to check",
-        "     * what the name of the claim is,",
-        "     * which values the claim request contains,",
-        "     * whether the claim is essential, and",
-        "     * which locale the claim is associated with.",
-        "     * The resolver function can consider this information when computing and returning the claim value.",
-        "     *",
-        "     * Below, find a default configuration that is expected to work in the current environment.",
-        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
-        "     * is called to return a claim resolver function based on a user profile attribute.",
-        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
-        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
-        "     *",
-        "     * CUSTOMIZATION",
-        "     * You can reuse the predefined utils methods with your custom arguments.",
-        "     * You can also specify a custom resolver function for a claim name,",
-        "     * that will compute and return the claim value—as shown in the commented out example below.",
-        "     */",
-        "    utils.setClaimResolvers({",
-        "        /*",
-        "        // An example of a simple claim resolver function that is defined for a claim",
-        "        // directly in the configuration object:",
-        "        custom-claim-name: function (requestedClaim) {",
-        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
-        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
         "",
-        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
-        "            // You can use:",
-        "            // requestedClaim.getName()",
-        "            // requestedClaim.getValues()",
-        "            // requestedClaim.getLocale()",
-        "            // requestedClaim.isEssential()",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "      logger.error("Chicago: preSingleSignOn");",
+        "    return true;",
+        "}",
         "",
-        "            return claimValue",
-        "        },",
-        "        */",
-        "        /**",
-        "         * The use of utils.getUserProfileClaimResolver shows how",
-        "         * an argument passed to a function that returns a claim resolver",
-        "         * becomes available to the resolver function (via its lexical context).",
-        "         */",
-        "        name: utils.getUserProfileClaimResolver('cn'),",
-        "        family_name: utils.getUserProfileClaimResolver('sn'),",
-        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
-        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
-        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
-        "        email: utils.getUserProfileClaimResolver('mail'),",
-        "        address: utils.getAddressClaimResolver(",
-        "            /**",
-        "             * The passed in user profile claim resolver function",
-        "             * can be used by the address claim resolver function",
-        "             * to obtain the claim value to be formatted as per the OIDC specification:",
-        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
-        "             */",
-        "            utils.getUserProfileClaimResolver('postaladdress')",
-        "        ),",
-        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
-        "    });",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "      logger.error("Chicago: preAuthentication");",
+        "    return true;",
+        "}",
         "",
-        "    // CLAIM PROCESSING UTILITIES",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "      logger.error("Chicago: preSendResponse");",
+        "      logger.error("Chicago: authnRequest: "+authnRequest);",
+        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
+        "    return true;",
+        "}",
         "",
-        "    /**",
-        "     * @returns {object} An object that contains reusable claim processing utilities.",
-        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
-        "     */",
-        "    function getUtils () {",
-        "        // IMPORT JAVA",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "      logger.error("Chicago: preSignResponse");",
+        "}",
         "",
-        "        /**",
-        "         * Provides Java scripting functionality.",
-        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
-        "         */",
-        "        var frJava = JavaImporter(",
-        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
-        "            org.forgerock.oauth2.core.UserInfoClaims,",
-        "            org.forgerock.openidconnect.Claim,",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "      logger.error("Chicago: preSendFailureResponse");",
+        "}",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Module-Client-Side.script.json 1`] = `
+{
+  "script": {
+    "c827d2b4-3608-4693-868e-bbcf86bd87c7": {
+      "_id": "c827d2b4-3608-4693-868e-bbcf86bd87c7",
+      "context": "AUTHENTICATION_CLIENT_SIDE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for client side Scripted Authentication Module",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Scripted Module - Client Side",
+      "script": [
+        "/*",
+        " * Copyright 2016-2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "/* Default Authentication client side script to use as a template for new scripts */",
         "",
-        "            java.util.LinkedHashMap,",
-        "            java.util.ArrayList",
-        "        );",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Module-Server-Side.script.json 1`] = `
+{
+  "script": {
+    "7e3d7067-d50f-4674-8c76-a3e13a810c33": {
+      "_id": "7e3d7067-d50f-4674-8c76-a3e13a810c33",
+      "context": "AUTHENTICATION_SERVER_SIDE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for server side Scripted Authentication Module",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Scripted Module - Server Side",
+      "script": [
+        "/*",
+        " * Copyright 2015-2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "        // SET UP CONFIGURATION",
+        "var START_TIME = 9;  // 9am",
+        "var END_TIME   = 17; // 5pm",
+        "var longitude, latitude;",
+        "var localTime;",
         "",
-        "        /**",
-        "         * Placeholder for a configuration option that contains",
-        "         * an object that maps the supported scope values (scopes)",
-        "         * and the corresponding claim names for each scope value.",
-        "         */",
-        "        var scopeClaimsMap;",
+        "logger.message("Starting scripted authentication");",
+        "logger.message("User: " + username);",
         "",
-        "        /**",
-        "         * Placeholder for a configuration option that contains",
-        "         * an object that maps the supported claim names",
-        "         * and the resolver functions returning the claim value.",
-        "         */",
-        "        var claimResolvers;",
+        "var userPostalAddress = getUserPostalAddress();",
+        "logger.message("User address: " + userPostalAddress);",
         "",
-        "        /**",
-        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
-        "         * and assigns it to a (private) variable that serves as a configuration option.",
-        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
-        "         * in order to specify which claims need to be processed for the requested scopes.",
-        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
-        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
-        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
-        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
-        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
-        "         * @returns {undefined}",
-        "         */",
-        "        function setScopeClaimsMap(params) {",
-        "            scopeClaimsMap = params;",
-        "        }",
+        "getLongitudeLatitudeFromUserPostalAddress();",
+        "getLocalTime();",
         "",
-        "        /**",
-        "         * A (public) method that accepts an object that maps the supported claim names",
-        "         * and the resolver functions returning the claim value,",
-        "         * and assigns it to a (private) variable that serves as a configuration option.",
-        "         * @param {object} params - An object that maps",
-        "         * each supported claim name to a function that computes and returns the claim value.",
-        "         */",
-        "        function setClaimResolvers(params) {",
-        "            claimResolvers = params;",
-        "        }",
+        "logger.message("Current time at the users location: " + localTime.getHours());",
+        "if (localTime.getHours() < START_TIME || localTime.getHours() > END_TIME) {",
+        "    logger.error("Login forbidden outside work hours!");",
+        "    authState = FAILED;",
+        "} else {",
+        "    logger.message("Authentication allowed!");",
+        "    authState = SUCCESS;",
+        "}",
         "",
-        "        // CLAIM RESOLVERS",
+        "function getLongitudeLatitudeFromUserPostalAddress() {",
         "",
-        "        /**",
-        "         * Claim resolvers are functions that return a claim value.",
-        "         * @param {*}",
-        "         * @returns {*}",
-        "         */",
+        "    var request = new org.forgerock.http.protocol.Request();",
+        "    request.setUri("http://maps.googleapis.com/maps/api/geocode/json?address=" + encodeURIComponent(userPostalAddress));",
+        "      request.setMethod("GET");",
+        "      //the above URI has to be extended with an API_KEY if used in a frequent manner",
+        "      //see documentation: https://developers.google.com/maps/documentation/geocoding/intro",
         "",
-        "        /**",
-        "         * Defines a claim resolver based on a user profile attribute.",
-        "         * @param {string} attributeName - Name of the user profile attribute.",
-        "         * @returns {function} A function that will determine the claim value",
-        "         * based on the user profile attribute and the (requested) claim properties.",
-        "         */",
-        "        function getUserProfileClaimResolver (attributeName) {",
-        "            /**",
-        "             * Resolves a claim with a user profile attribute value.",
-        "             * Returns undefined if the identity attribute is not populated,",
-        "             * OR if the claim has requested values that do not contain the identity attribute value.",
-        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {string|HashSet|undefined}",
-        "             */",
-        "            function resolveClaim(claim) {",
-        "                var userProfileValue;",
+        "    var response = httpClient.send(request).get();",
+        "    logResponse(response);",
         "",
-        "                if (identity) {",
-        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "    var geocode = JSON.parse(response.getEntity().getString());",
+        "    var i;",
+        "    for (i = 0; i < geocode.results.length; i++) {",
+        "        var result = geocode.results[i];",
+        "        latitude = result.geometry.location.lat;",
+        "        longitude = result.geometry.location.lng;",
         "",
-        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
-        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
-        "                            return userProfileValue;",
-        "                        }",
-        "                    }",
-        "                }",
-        "            }",
+        "           logger.message("latitude:" + latitude + " longitude:" + longitude);",
+        "    }",
+        "}",
         "",
-        "            return resolveClaim;",
-        "        }",
+        "function getLocalTime() {",
         "",
-        "        /**",
-        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
-        "         * @param {function} resolveClaim - A function that returns a claim value.",
-        "         * @returns {function} A function that will accept a claim as an argument,",
-        "         * run the claim resolver function for the claim and obtain the claim value,",
-        "         * and apply additional formatting to the value before returning it.",
-        "         */",
-        "        function getAddressClaimResolver (resolveClaim) {",
-        "            /**",
-        "             * Creates an address claim object from a value returned by a claim resolver,",
-        "             * and returns the address claim object as the claim value.",
-        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
-        "             * The claim value is obtained with a claim resolving function available from the closure.",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
-        "             */",
-        "            function resolveAddressClaim(claim) {",
-        "                var claimValue = resolveClaim(claim);",
-        "                var addressObject;",
+        "    var now = new Date().getTime() / 1000;",
+        "    var location = "location=" + latitude + "," + longitude;",
+        "    var timestamp = "timestamp=" + now;",
         "",
-        "                if (isClaimValueValid(claimValue)) {",
-        "                    addressObject = new frJava.LinkedHashMap();",
+        "    var request = new org.forgerock.http.protocol.Request();",
+        "    request.setUri("https://maps.googleapis.com/maps/api/timezone/json?" + location + "&" + timestamp);",
+        "      request.setMethod("GET");",
+        "      //the above URI has to be extended with an API_KEY if used in a frequent manner",
+        "      //see documentation: https://developers.google.com/maps/documentation/timezone/intro",
         "",
-        "                    addressObject.put('formatted', claimValue);",
+        "    var response = httpClient.send(request).get();",
+        "    logResponse(response);",
         "",
-        "                    return addressObject;",
-        "                }",
-        "            }",
+        "    var timezone = JSON.parse(response.getEntity().getString());",
+        "    var localTimestamp = parseInt(now) + parseInt(timezone.dstOffset) + parseInt(timezone.rawOffset);",
+        "    localTime = new Date(localTimestamp*1000);",
+        "}",
         "",
-        "            return resolveAddressClaim;",
-        "        }",
+        "function getUserPostalAddress() {",
+        "    var userAddressSet = idRepository.getAttribute(username, "postalAddress");",
+        "    if (userAddressSet == null || userAddressSet.isEmpty()) {",
+        "        logger.warning("No address specified for user: " + username);",
+        "        return false;",
+        "    }",
+        "    return userAddressSet.iterator().next()",
+        "}",
         "",
-        "        /**",
-        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
-        "         * @param {function} resolveClaim - A function that returns a claim value.",
-        "         * @returns {function} A function that will accept a claim as an argument,",
-        "         * run the claim resolver function for the claim and obtain the claim value,",
-        "         * and apply additional logic for essential claims.",
-        "         */",
-        "        function getEssentialClaimResolver (resolveClaim) {",
-        "            /**",
-        "             * Returns a claim value or throws an error.",
-        "             * The claim value is obtained with a claim resolving function available from the closure.",
-        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
-        "             *",
-        "             * Use of this resolver is optional.",
-        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
-        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
-        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
-        "             * unless otherwise specified in the description of the specific claim."",
-        "             *",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {*}",
-        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
-        "             */",
-        "            function resolveEssentialClaim(claim) {",
-        "                var claimValue = resolveClaim(claim);",
+        "function logResponse(response) {",
+        "    logger.message("User REST Call. Status: " + response.getStatus() + ", Body: " + response.getEntity().getString());",
+        "}",
         "",
-        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
-        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
-        "                }",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Scripted-Policy-Condition.script.json 1`] = `
+{
+  "script": {
+    "9de3eb62-f131-4fac-a294-7bd170fd4acb": {
+      "_id": "9de3eb62-f131-4fac-a294-7bd170fd4acb",
+      "context": "POLICY_CONDITION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for Scripted Policy Conditions",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Scripted Policy Condition",
+      "script": [
+        "/*",
+        " * Copyright 2015-2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "/**",
+        " * This is a Policy Condition example script. It demonstrates how to access a user's information,",
+        " * use that information in external HTTP calls and make a policy decision based on the outcome.",
+        " */",
         "",
-        "                return claimValue;",
-        "            }",
+        "var userAddress, userIP, resourceHost;",
         "",
-        "            return resolveEssentialClaim;",
-        "        }",
+        "if (validateAndInitializeParameters()) {",
         "",
-        "        /**",
-        "         * Provides default resolution for a claim.",
-        "         * Use it if a claim-specific resolver is not defined in the configuration.",
-        "         * @param {org.forgerock.openidconnect.Claim} claim",
-        "         * An object that provides methods to obtain information/requirements associated with a claim.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "         * @returns {*} A single value associated with this claim.",
-        "         */",
-        "        function resolveAnyClaim (claim) {",
-        "            if (claim.getValues().size() === 1) {",
-        "                return claim.getValues().toArray()[0];",
-        "            }",
-        "        }",
+        "    var countryFromUserAddress = getCountryFromUserAddress();",
+        "    logger.message("Country retrieved from user's address: " + countryFromUserAddress);",
+        "    var countryFromUserIP = getCountryFromUserIP();",
+        "    logger.message("Country retrieved from user's IP: " + countryFromUserIP);",
+        "    var countryFromResourceURI = getCountryFromResourceURI();",
+        "    logger.message("Country retrieved from resource URI: " + countryFromResourceURI);",
         "",
-        "        // UTILITIES",
+        "    if (countryFromUserAddress === countryFromUserIP && countryFromUserAddress === countryFromResourceURI) {",
+        "        logger.message("Authorization Succeeded");",
+        "        responseAttributes.put("countryOfOrigin", [countryFromUserAddress]);",
+        "        authorized = true;",
+        "    } else {",
+        "        logger.message("Authorization Failed");",
+        "        authorized = false;",
+        "    }",
         "",
-        "        /**",
-        "         * Returns claim value from a set.",
-        "         * If the set contains a single value, returns the value.",
-        "         * If the set contains multiple values, returns the set.",
-        "         * Otherwise, returns undefined.",
-        "         *",
-        "         * @param {org.forgerock.openidconnect.Claim} claim",
-        "         * An object that provides methods to obtain information/requirements associated with a claim.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
-        "         * @returns {string|java.util.HashSet|undefined}",
-        "         */",
-        "        function getClaimValueFromSet (claim, set) {",
-        "            if (set && set.size()) {",
-        "                if (set.size() === 1) {",
-        "                    return set.toArray()[0];",
-        "                } else {",
-        "                    return set;",
-        "                }",
-        "            } else if (logger.warningEnabled()) {",
-        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
-        "            }",
-        "        }",
+        "} else {",
+        "    logger.message("Required parameters not found. Authorization Failed.");",
+        "    authorized = false;",
+        "}",
         "",
-        "        function isClaimValueValid (claimValue) {",
-        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
-        "                return false;",
-        "            }",
+        "/**",
+        " * Use the user's address to lookup their country of residence.",
+        " *",
+        " * @returns {*} The user's country of residence.",
+        " */",
+        "function getCountryFromUserAddress() {",
         "",
-        "            return true;",
-        "        }",
+        "    var request = new org.forgerock.http.protocol.Request();",
+        "    request.setUri("http://maps.googleapis.com/maps/api/geocode/json?address=" + encodeURIComponent(userAddress));",
+        "      request.setMethod("GET");",
         "",
-        "        // CLAIM PROCESSING",
+        "    var response = httpClient.send(request).get();",
+        "    logResponse(response);",
         "",
-        "        /**",
-        "         * Constructs and returns an object populated with the computed claim values",
-        "         * and the requested scopes mapped to the claim names.",
-        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
-        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
-        "         * @see RESULTS section for the use of this function.",
-        "         */",
-        "        function getUserInfoClaims () {",
-        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "    var geocode = JSON.parse(response.getEntity().getString());",
+        "    var i;",
+        "    for (i = 0; i < geocode.results.length; i++) {",
+        "        var result = geocode.results[i];",
+        "        var j;",
+        "        for (j = 0; j < result.address_components.length; i++) {",
+        "            if (result.address_components[i].types[0] == "country") {",
+        "                return result.address_components[i].long_name;",
+        "            }",
         "        }",
+        "    }",
+        "}",
         "",
-        "        /**",
-        "         * Creates a map of (requested) claim names populated with the computed claim values.",
-        "         * @returns {java.util.LinkedHashMap}",
-        "         * A map of the requested claim names and the corresponding claim values.",
-        "         */",
-        "        function getComputedClaims () {",
-        "            /**",
-        "             * Creates a complete list of claim objects from:",
-        "             * the claims derived from the scopes,",
-        "             * the claims provided by the authorization server,",
-        "             * and the claims requested by the client.",
-        "             * @returns {java.util.ArrayList}",
-        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
-        "             */",
-        "            function getClaims() {",
-        "                /**",
-        "                 * Returns a list of claim objects for the requested scopes.",
-        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
-        "                 * no other properties of a claim derived from a scope are populated.",
-        "                 * @returns {java.util.ArrayList}",
-        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
-        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
-        "                 */",
-        "                function convertScopeToClaims() {",
-        "                    var claims = new frJava.ArrayList();",
-        "",
-        "                    scopes.toArray().forEach(function (scope) {",
-        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
-        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
-        "                                claims.add(new frJava.Claim(claimName));",
-        "                            });",
-        "                        }",
-        "                    });",
+        "/**",
+        " * Use the user's IP to lookup the country from which the request originated.",
+        " *",
+        " * @returns {*} The country from which the request originated.",
+        " */",
+        "function getCountryFromUserIP() {",
+        "    var request = new org.forgerock.http.protocol.Request();",
+        "    request.setUri("http://ip-api.com/json/" + userIP);",
+        "      request.setMethod("GET");",
         "",
-        "                    return claims;",
-        "                }",
+        "    var response = httpClient.send(request).get();",
+        "    logResponse(response);",
         "",
-        "                var claims = new frJava.ArrayList();",
+        "    var result = JSON.parse(response.getEntity().getString());",
+        "    if (result) {",
+        "        return result.country;",
+        "    }",
+        "}",
         "",
-        "                claims.addAll(convertScopeToClaims());",
-        "                claims.addAll(claimObjects);",
-        "                claims.addAll(requestedTypedClaims);",
+        "/**",
+        " * Use the requested resource's host name to lookup the country where the resource is hosted.",
+        " *",
+        " * @returns {*} The country in which the resource is hosted.",
+        " */",
+        "function getCountryFromResourceURI() {",
+        "    var request = new org.forgerock.http.protocol.Request();",
+        "    request.setUri("http://ip-api.com/json/" + encodeURIComponent(resourceHost));",
+        "      request.setMethod("GET");",
         "",
-        "                return claims;",
-        "            }",
+        "    var response = httpClient.send(request).get();",
+        "    logResponse(response);",
         "",
-        "            /**",
-        "             * Computes and returns a claim value.",
-        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
-        "             * @see claimResolvers",
-        "             * If no resolver function is found, uses the default claim resolver function.",
-        "             *",
-        "             * @param {org.forgerock.openidconnect.Claim} claim",
-        "             * An object that provides methods to obtain information/requirements associated with a claim.",
-        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
-        "             * @returns {*} Claim value.",
-        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
-        "             * Rethrows this exception if a claim resolver throws it.",
-        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
-        "             * if you want to terminate the claim processing.",
-        "             */",
-        "            function computeClaim(claim) {",
-        "                var resolveClaim;",
-        "                var message;",
+        "    var result = JSON.parse(response.getEntity().getString());",
+        "    if (result) {",
+        "        return result.country;",
+        "    }",
+        "}",
         "",
-        "                try {",
-        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "/**",
+        " * Retrieve and validate the variables required to make the external HTTP calls.",
+        " *",
+        " * @returns {boolean} Will be true if validation was successful.",
+        " */",
+        "function validateAndInitializeParameters() {",
+        "    var userAddressSet = identity.getAttribute("postalAddress");",
+        "    if (userAddressSet == null || userAddressSet.isEmpty()) {",
+        "        logger.warning("No address specified for user: " + username);",
+        "        return false;",
+        "    }",
+        "    userAddress = userAddressSet.iterator().next();",
+        "    logger.message("User address: " + userAddress);",
         "",
-        "                    return resolveClaim(claim);",
-        "                } catch (e) {",
-        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "    if (!environment) {",
+        "        logger.warning("No environment parameters specified in the evaluation request.");",
+        "        return false;",
+        "    }",
         "",
-        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
-        "                        throw e;",
-        "                    }",
+        "    var ipSet = environment.get("IP");",
+        "    if (ipSet == null || ipSet.isEmpty()) {",
+        "        logger.warning("No IP specified in the evaluation request environment parameters.");",
+        "        return false;",
+        "    }",
+        "    userIP = ipSet.iterator().next();",
+        "    logger.message("User IP: " + userIP);",
         "",
-        "                    if (logger.warningEnabled()) {",
-        "                        logger.warning(message);",
-        "                    }",
-        "                }",
-        "            }",
+        "    if (!resourceURI) {",
+        "        logger.warning("No resource URI specified.");",
+        "        return false;",
+        "    }",
+        "    resourceHost = resourceURI.match(/^(.*:\\/\\/)(www\\.)?([A-Za-z0-9\\-\\.]+)(:[0-9]+)?(.*)$/)[3];",
+        "    logger.message("Resource host: " + resourceHost);",
         "",
-        "            var computedClaims = new frJava.LinkedHashMap();",
+        "    return true;",
+        "}",
         "",
-        "            getClaims().toArray().forEach(function (claim) {",
-        "                var claimValue = computeClaim(claim);",
+        "function logResponse(response) {",
+        "    logger.message("User REST Call. Status: " + response.getStatus() + ", Body: " + response.getEntity().getString());",
+        "}",
         "",
-        "                if (isClaimValueValid(claimValue)) {",
-        "                    computedClaims.put(claim.getName(), claimValue);",
-        "                } else {",
-        "                    /**",
-        "                     * If a claim has been processed, but appears in the list again,",
-        "                     * and its value cannot be computed under the new conditions,",
-        "                     * the claim is removed from the final result.",
-        "                     *",
-        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
-        "                     * but also requested by the client with required values that don't match the computed one.",
-        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
-        "                     * for the relevant OIDC specification details.",
-        "                     */",
-        "                    computedClaims.remove(claim.getName());",
-        "                }",
-        "            });",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Social-Identity-Provider-Profile-Transformation-Script.script.json 1`] = `
+{
+  "script": {
+    "1d475815-72cb-42eb-aafd-4026989d28a7": {
+      "_id": "1d475815-72cb-42eb-aafd-4026989d28a7",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global script for Social Identity Provider Profile Transformation",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Social Identity Provider Profile Transformation Script",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "            return computedClaims;",
-        "        }",
+        "/* Default Social Identity Provider Profile Transformation script to use as a template for new scripts */",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Twitter-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "8e298710-b55e-4085-a464-88a375a4004b": {
+      "_id": "8e298710-b55e-4085-a464-88a375a4004b",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from Twitter",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Twitter Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "        /**",
-        "         * Creates a map of requested scopes and the corresponding claim names.",
-        "         * @returns {java.util.LinkedHashMap}",
-        "         */",
-        "        function getCompositeScopes () {",
-        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "            scopes.toArray().forEach(function (scope) {",
-        "                var scopeClaims = new frJava.ArrayList();",
+        "return json(object(",
+        "        field("id", rawProfile.id_str),",
+        "        field("displayName", rawProfile.name),",
+        "        field("photoUrl", rawProfile.profile_image_url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.screen_name)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/VKontakte-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "403cf226-6051-4368-8b72-9ba14f9a5140": {
+      "_id": "403cf226-6051-4368-8b72-9ba14f9a5140",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from VKontakte",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "VKontakte Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "                if (scopeClaimsMap[scope]) {",
-        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
-        "                        scopeClaims.add(claimName);",
-        "                    });",
-        "                }",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "                if (scopeClaims.size()) {",
-        "                    compositeScopes.put(scope, scopeClaims);",
-        "                }",
-        "            });",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.first_name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.photo_50),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/WeChat-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "472534ec-a25f-468d-a606-3fb1935190df": {
+      "_id": "472534ec-a25f-468d-a606-3fb1935190df",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from WeChat",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "WeChat Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "            return compositeScopes;",
-        "        }",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "        // PUBLIC METHODS",
+        "return json(object(",
+        "        field("id", rawProfile.openid),",
+        "        field("displayName", rawProfile.nickname),",
+        "        field("photoUrl", rawProfile.headimgurl),",
+        "        field("username", rawProfile.nickname)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/WordPress-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "91d197de-5916-4dca-83b5-9a4df26e7159": {
+      "_id": "91d197de-5916-4dca-83b5-9a4df26e7159",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from WordPress",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "WordPress Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "        return {",
-        "            setScopeClaimsMap: setScopeClaimsMap,",
-        "            setClaimResolvers: setClaimResolvers,",
-        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
-        "            getAddressClaimResolver: getAddressClaimResolver,",
-        "            getEssentialClaimResolver: getEssentialClaimResolver,",
-        "            getUserInfoClaims: getUserInfoClaims",
-        "        };",
-        "    }",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "    // RESULTS",
+        "return json(object(",
+        "        field("id", rawProfile.username),",
+        "        field("displayName", rawProfile.display_name),",
+        "        field("photoUrl", rawProfile.avatar_URL),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.username)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/Yahoo-Profile-Normalization.script.json 1`] = `
+{
+  "script": {
+    "424da748-82cc-4b54-be6f-82bd64d82a74": {
+      "_id": "424da748-82cc-4b54-be6f-82bd64d82a74",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from Yahoo",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Yahoo Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
         "",
-        "    /**",
-        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
-        "     * populated with the computed claim values and",
-        "     * the requested scopes mapped to the claim names.",
-        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
-        "     *",
-        "     * Assigning it to a variable gives you an opportunity",
-        "     * to log the content of the returned value during development.",
-        "     */",
-        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
         "",
-        "    /*",
-        "    logger.error(scriptName + ' results:')",
-        "    logger.error('Values: ' + userInfoClaims.getValues())",
-        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
-        "    */",
+        "return json(object(",
+        "        field("id", rawProfile.sub),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.given_name),",
+        "        field("familyName", rawProfile.family_name),",
+        "        field("photoUrl", rawProfile.picture),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email),",
+        "        field("locale", rawProfile.locale)))",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/debug.script.json 1`] = `
+{
+  "script": {
+    "3cb43516-ae69-433a-8787-501d45db14e9": {
+      "_id": "3cb43516-ae69-433a-8787-501d45db14e9",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Display sharedState, transientState, and headers.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "debug",
+      "script": [
+        "/* debug",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Display sharedState, transientState, and headers.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - true",
+        " */",
+        "var anchor = "anchor-".concat(generateNumericToken('xxx'));",
+        "var halign = "left";",
+        "var message = "<p><b>Shared State</b>:<br/>".concat(",
+        "      sharedState.toString()).concat("</p>").concat(",
+        "    "<p><b>Transient State</b>:<br/>").concat(",
+        "      transientState.toString()).concat("</p>").concat(",
+        "    "<p><b>Request Headers</b>:<br/>").concat(",
+        "      requestHeaders.toString()).concat("</p>")",
+        "var script = "Array.prototype.slice.call(\\n".concat(",
+        "  "document.getElementsByClassName('callback-component')).forEach(\\n").concat(",
+        "  "function (e) {\\n").concat(",
+        "  "  var message = e.firstElementChild;\\n").concat(",
+        "  "  if (message.firstChild && message.firstChild.nodeName == '#text' && message.firstChild.nodeValue.trim() == '").concat(anchor).concat("') {\\n").concat(",
+        "  "    message.className = \\"text-left\\";\\n").concat(",
+        "  "    message.align = \\"").concat(halign).concat("\\";\\n").concat(",
+        "  "    message.innerHTML = '").concat(message).concat("';\\n").concat(",
+        "  "  }\\n").concat(",
+        "  "})")",
+        "var fr = JavaImporter(",
+        "    org.forgerock.openam.auth.node.api.Action,",
+        "    javax.security.auth.callback.TextOutputCallback,",
+        "    com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
+        ")",
+        "if (message.length && callbacks.isEmpty()) {",
+        "    action = fr.Action.send(",
+        "        new fr.TextOutputCallback(",
+        "            fr.TextOutputCallback.INFORMATION,",
+        "            anchor",
+        "        ),",
+        "        new fr.ScriptTextOutputCallback(script)",
+        "    ).build()",
+        "}",
+        "else {",
+        "  action = fr.Action.goTo("true").build();",
+        "}",
         "",
-        "    return userInfoClaims;",
+        " /*",
+        "  * Generate a token in the desired format. All 'x' characters will be replaced with a random number 0-9.",
+        "  * ",
+        "  * Example:",
+        "  * 'xxxxx' produces '28535'",
+        "  * 'xxx-xxx' produces '432-521'",
+        "  */",
+        "function generateNumericToken(format) {",
+        "    return format.replace(/[x]/g, function(c) {",
+        "        var r = Math.random()*10|0;",
+        "        var v = r;",
+        "        return v.toString(10);",
+        "    });",
+        "}",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/level.script.json 1`] = `
+{
+  "script": {
+    "41c24257-d7fc-4654-8b46-c2666dc5b56d": {
+      "_id": "41c24257-d7fc-4654-8b46-c2666dc5b56d",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "set per level shared state variable",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "level",
+      "script": [
+        "(function () {",
+        "  outcome = 'true';",
+        "  var level = nodeState.get('level').asInteger();",
+        "  sharedState.put('level' + level + 'Value', 'Level ' + level + ': This is a longer string value set at each level of the nested journeys. It contains an indicator in which level it was set.');",
         "}());",
-        "",
       ],
     },
-    "e232cff3-2460-47cd-80b2-36c86c0d0f06": {
-      "_id": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/mode.script.json 1`] = `
+{
+  "script": {
+    "5bbdaeff-ddee-44b9-b608-8d413d7d65a6": {
+      "_id": "5bbdaeff-ddee-44b9-b608-8d413d7d65a6",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Used by endUserUIClient",
+      "description": "Check if mode has already been set.",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "lastModifiedBy": "null",
       "lastModifiedDate": 0,
-      "name": "Alpha endUserUIClient OAuth2 Access Token Modification Script",
+      "name": "mode",
       "script": [
+        "/* mode",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Collect mode if not already set and set outcome to mode.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - 'shared and level'",
+        " * - 'shared only'",
+        " * - 'level only'",
+        " * - 'none'",
+        " */",
         "(function () {",
-        "  if (scopes.contains('fr:autoaccess:*') || scopes.contains('fr:iga:*') || scopes.contains('fr:idc:analytics:*')) {",
+        "  var mode = nodeState.get('mode');",
+        "  if (mode) {",
+        "    outcome = mode.asString();",
+        "    var level = nodeState.get('level').asInteger() + 1;",
+        "    logger.error('mode: mode=' + mode.asString() + ', level=' + level);",
+        "    sharedState.put('level', level);",
+        "  }",
+        "  else {",
+        "    var choices = ['shared and level', 'shared only', 'level only', 'none'];",
+        "  ",
         "    var fr = JavaImporter(",
-        "      com.sun.identity.idm.IdType",
-        "    );",
-        "    var groups = [];",
-        "    identity.getMemberships(fr.IdType.GROUP).toArray().forEach(function (group) {",
-        "      groups.push(group.getAttribute('cn').toArray()[0]);",
-        "    });",
-        "    accessToken.setField('groups', groups);",
+        "      org.forgerock.openam.auth.node.api.Action,",
+        "      javax.security.auth.callback.ChoiceCallback",
+        "    )",
+        "",
+        "    if (callbacks.isEmpty()) {",
+        "      action = fr.Action.send([",
+        "        new fr.ChoiceCallback('Choose test mode', choices, 0, false)",
+        "      ]).build();",
+        "    } else {",
+        "      var choice = parseInt(callbacks.get(0).getSelectedIndexes()[0]);",
+        "      nodeState.putShared('mode', choices[choice]);",
+        "      nodeState.putShared('level', 0);",
+        "      action = fr.Action.goTo(choices[choice]).build();",
+        "    }",
         "  }",
         "}());",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/shared.script.json 1`] = `
+{
+  "script": {
+    "1b52a7e0-4019-40fa-958a-15a49870e901": {
+      "_id": "1b52a7e0-4019-40fa-958a-15a49870e901",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "set the same shared state variable",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "shared",
+      "script": [
+        "(function () {",
+        "  outcome = 'true';",
+        "  var level = nodeState.get('level').asInteger();",
+        "  sharedState.put('sharedValue', 'Level ' + level + ': This is a longer string value shared across all nested journeys. It contains an indicator in which level it was last set.');",
+        "}());",
+      ],
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4: scriptExportTestDir4/test-script-with-secrets-and-variables.script.json 1`] = `
+{
+  "script": {
+    "da7a96a8-7969-4dab-9c6e-a812938cc76d": {
+      "_id": "da7a96a8-7969-4dab-9c6e-a812938cc76d",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Script that uses secrets and variables",
+      "evaluatorVersion": "2.0",
+      "exports": [],
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "test-script-with-secrets-and-variables",
+      "script": [
+        "console.log(\`pi: \${systemEnv.getProperty("esv.test.var.pi")}\`);",
+        "console.log(\`pi secret: \${systemEnv.getProperty("esv.test.secret.pi")}\`);",
+        "console.log(\`speed of light: \${systemEnv.getProperty("esv.test.variable.light")}\`);",
+        "console.log(\`euler's number: \${systemEnv.getProperty("esv.test.secret.euler")}\`);",
+        "console.log(\`Area of circle with radius 7: \${7 * 7 * systemEnv.getProperty("esv.test.var.pi")}\`);",
+        "console.log(\`Volume of sphere with radius 7: \${4 * 7 * 7 * 7 * systemEnv.getProperty("esv.test.secret.pi") / 3}\`);",
         "",
       ],
     },
-    "e5c302c8-f838-4698-87cc-d7225fc82454": {
-      "_id": "e5c302c8-f838-4698-87cc-d7225fc82454",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --no-deps -i 'bb393d07-a121-47e2-9d24-1a1066f39ec0'": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" 1`] = `0`;
+
+exports[`frodo script export "frodo script export --no-deps -i 'bb393d07-a121-47e2-9d24-1a1066f39ec0'": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" 2`] = `""`;
+
+exports[`frodo script export "frodo script export --no-deps -i 'bb393d07-a121-47e2-9d24-1a1066f39ec0'": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0": bb393d07-a121-47e2-9d24-1a1066f39ec0.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
+      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
       "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
+      "description": "My Example Script Using Libraries",
+      "evaluatorVersion": "2.0",
       "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "EmailAsUsername",
-      "script": [
-        "objectAttributes = sharedState.get("objectAttributes")",
-        "userName = objectAttributes.get("userName")",
-        "",
-        "if(userName){",
-        "  //Form Fill",
-        "  objectAttributes.put("mail", userName)",
-        "} else {",
-        "  //Social",
-        "  objectAttributes.put("userName", objectAttributes.get("mail"))",
-        "}",
-        "",
-        "",
-        "sharedState.put("objectAttributes", objectAttributes);",
-        "//sharedState.put("username", mail)",
-        "",
-        "outcome = "true";",
-      ],
+      "name": "My Example Script Using Libraries",
+      "script": "file://bb393d07-a121-47e2-9d24-1a1066f39ec0.script.js",
     },
-    "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd": {
-      "_id": "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd",
-      "context": "SAML2_SP_ADAPTER",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --no-extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries 1`] = `0`;
+
+exports[`frodo script export "frodo script export --no-extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries 2`] = `""`;
+
+exports[`frodo script export "frodo script export --no-extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries: scriptExportTestDir5/bb393d07-a121-47e2-9d24-1a1066f39ec0.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
+      "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
+      "context": "LIBRARY",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
+      "description": "My Example Library",
+      "evaluatorVersion": "2.0",
+      "exports": [
+        {
+          "id": "MSG",
+          "type": "String",
+        },
+        {
+          "arity": 1,
+          "id": "add",
+          "type": "Function",
+        },
+        {
+          "arity": 1,
+          "id": "logTotal",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logTotalWithMessage",
+          "type": "Function",
+        },
+      ],
       "language": "JAVASCRIPT",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "FrodoSPAdapter - imported (2)",
+      "name": "My Example Library",
       "script": [
-        "/*",
-        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
-        "",
-        "/*",
-        " * The script has these top level functions that could be executed during a SAML2 flow.",
-        " *      - preSingleSignOnRequest",
-        " *      - preSingleSignOnProcess",
-        " *      - postSingleSignOnSuccess",
-        " *      - postSingleSignOnFailure",
-        " *      - postNewNameIDSuccess",
-        " *      - postTerminateNameIDSuccess",
-        " *      - preSingleLogoutProcess",
-        " *      - postSingleLogoutSuccess",
-        " *",
-        " * Please see the JavaDoc for the interface for more information about these methods.",
-        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
-        " * Note that the initialize method is not supported in the scripts.",
-        " *",
-        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
-        " *",
-        " * hostedEntityId - String",
-        " *     Entity ID for the hosted IDP",
-        " * realm - String",
-        " *     Realm of the hosted IDP",
-        " * idpEntityId - String",
-        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
-        " * request - HttpServletRequest (1)",
-        " *     Servlet request object",
-        " * response - HttpServletResponse (2)",
-        " *     Servlet response object",
-        " * authnRequest - AuthnRequest (3)",
-        " *     The authentication request sent that is sent from the Service Provider.",
-        " * session - SSOToken (4)",
-        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
-        " * res - Response (5)",
-        " *     The SSO Response received from the Identity Provider.",
-        " * profile - String",
-        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
-        " *          - SAML2Constants.HTTP_POST",
-        " *          - SAML2Constants.HTTP_ARTIFACT",
-        " *          - SAML2Constants.PAOS",
-        " * out - PrintWriter (7)",
-        " *     The PrintWriter that can be used to write to.",
-        " * isFederation - boolean",
-        " *     Set to true if using federation, otherwise false.",
-        " * failureCode - int",
-        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
-        " * userId - String",
-        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
-        " * idRequest - ManageNameIDRequest (8)",
-        " *     The new name identifier request, this will be null if the request object is not available",
-        " * idResponse - ManageNameIDResponse (9)",
-        " *     The new name identifier response, this will be null if the response object is not available",
-        " * binding - String",
-        " *     The binding used for the new name identifier request. This will be one of the following values:",
-        " *          - SAML2Constants.SOAP",
-        " *          - SAML2Constants.HTTP_REDIRECT",
-        " * logoutRequest - LogoutRequest (10)",
-        " *     The single logout request.",
-        " * logoutResponse - LogoutResponse (11)",
-        " *     The single logout response.",
-        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
-        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
-        " * logger - Logger instance",
-        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
-        " *     Corresponding log files will be prefixed with: scripts.<script name>",
-        " *",
-        " * Throws SAML2Exception (13):",
-        " *     for any exceptions occurring in the adapter. The federation process will continue",
-        " *",
-        " * Class reference:",
-        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
-        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
-        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
-        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
-        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
-        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
-        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
-        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
-        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
-        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
-        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
-        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
-        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
-        " */",
+        "var i = 0;",
         "",
-        "/*",
-        " * Template/default script for SAML2 SP Adapter scripted plugin.",
-        " */",
+        "function add(j) {i += j};",
+        "function logTotal(log) { log.info("Total: " + i) };",
         "",
-        "/*",
-        " * Available variables for preSingleSignOnRequest:",
-        " *     hostedEntityId",
-        " *     idpEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnRequest() {",
-        "}",
+        "// export constant",
+        "exports.MSG = 'Final sum';",
         "",
-        "/*",
-        " * Available variables for preSingleSignOnProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleSignOnProcess() {",
-        "}",
+        "// export functions",
+        "exports.add = add;",
+        "exports.logTotal = logTotal;",
         "",
-        "/*",
-        " * Available variables for postSingleSignOnSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     out",
-        " *     session",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     isFederation",
-        " *     spAdapterScriptHelper",
-        " *     logger",
+        "//direct export using an inline declaration",
+        "exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);",
+      ],
+    },
+    "6c49bebe-3a62-11ed-a261-0242ac120002": {
+      "_id": "6c49bebe-3a62-11ed-a261-0242ac120002",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Default global library script to be referenced from other scripts",
+      "evaluatorVersion": "2.0",
+      "exports": [
+        {
+          "arity": 2,
+          "id": "logError",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logWarning",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logInfo",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logDebug",
+          "type": "Function",
+        },
+      ],
+      "language": "JAVASCRIPT",
+      "name": "Library Script",
+      "script": [
+        "/*",
+        " * Copyright 2022-2023 ForgeRock AS. All Rights Reserved",
         " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
         " */",
-        "function postSingleSignOnSuccess() {",
-        "    return false;",
-        "}",
         "",
         "/*",
-        " * Available variables for postSingleSignOnFailure:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     authnRequest",
-        " *     res",
-        " *     profile",
-        " *     failureCode",
-        " *     spAdapterScriptHelper",
-        " *     logger",
+        " * This is an example library script with methods that can be used in other scripts.",
+        " * To reference it, use the following:",
         " *",
-        " * Return - true if response is being redirected, false if not. Default to false.",
+        " * var library = require("Library Script");",
+        " *",
+        " * library.logError(logger, "Error message");",
+        " * library.logDebug(logger, "Debug message");",
         " */",
-        "function postSingleSignOnFailure() {",
-        "    return false;",
-        "}",
         "",
-        "/*",
-        " * Available variables for postNewNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postNewNameIDSuccess() {",
+        "function logError(log, errorMessage) {",
+        "  log.error(errorMessage);",
         "}",
         "",
-        "/*",
-        " * Available variables for postTerminateNameIDSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     idRequest",
-        " *     idResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function postTerminateNameIDSuccess() {",
+        "function logWarning(log, warningMessage) {",
+        "  log.warn(warningMessage);",
         "}",
         "",
-        "/*",
-        " * Available variables for preSingleLogoutProcess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
-        " */",
-        "function preSingleLogoutProcess() {",
-        "}",
+        "exports.logError = logError;",
+        "exports.logWarning = logWarning;",
         "",
-        "/*",
-        " * Available variables for postSingleLogoutSuccess:",
-        " *     hostedEntityId",
-        " *     realm",
-        " *     request",
-        " *     response",
-        " *     userId",
-        " *     logoutRequest",
-        " *     logoutResponse",
-        " *     binding",
-        " *     spAdapterScriptHelper",
-        " *     logger",
+        "// Alternatively, exports can be declared using an inline arrow function",
+        "",
+        "exports.logInfo = (log, infoMessage) => log.info(infoMessage);",
+        "exports.logDebug = (log, debugMessage) => log.debug(debugMessage);",
+        "",
+      ],
+    },
+    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
+      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "My Example Script Using Libraries",
+      "evaluatorVersion": "2.0",
+      "language": "JAVASCRIPT",
+      "name": "My Example Script Using Libraries",
+      "script": [
+        "/**",
+        " * Testing library scripts",
         " */",
-        "function postSingleLogoutSuccess() {",
-        "}",
+        "var mylib = require('My Example Library');",
+        "var loggers = require('Library Script');",
+        "",
+        "mylib.add(1);",
+        "mylib.logTotal(logger);",
+        "mylib.add(3);",
+        "mylib.logTotalWithMessage(logger, mylib.MSG);",
+        "",
+        "outcome = 'true';",
       ],
     },
-    "fdb60c75-d58b-409f-bef2-ce4ebb04c77c": {
-      "_id": "fdb60c75-d58b-409f-bef2-ce4ebb04c77c",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export --script-name 'GitHub Profile Normalization'": should export the script named "GitHub Profile Normalization" 1`] = `0`;
+
+exports[`frodo script export "frodo script export --script-name 'GitHub Profile Normalization'": should export the script named "GitHub Profile Normalization" 2`] = `""`;
+
+exports[`frodo script export "frodo script export --script-name 'GitHub Profile Normalization'": should export the script named "GitHub Profile Normalization": GitHub-Profile-Normalization.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "a7a78773-445b-4eca-bb93-409e86bced81": {
+      "_id": "a7a78773-445b-4eca-bb93-409e86bced81",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": true,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "GitHub Profile Normalization",
+      "script": "file://GitHub-Profile-Normalization.script.groovy",
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files 1`] = `0`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files 2`] = `""`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: ADFS-Profile-Normalization-(JS).script.js 1`] = `
+"/*
+ * Copyright 2022 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
+
+/*
+ * This script returns the social identity profile information for the authenticating user
+ * in a standard form expected by the Social Provider Handler Node.
+ *
+ * Defined variables:
+ * rawProfile - The social identity provider profile information for the authenticating user.
+ *              JsonValue (1).
+ * logger - The debug logger instance:
+ *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ * realm - String (primitive).
+ *         The name of the realm the user is authenticating to.
+ * requestHeaders - TreeMap (2).
+ *                  The object that provides methods for accessing headers in the login request:
+ *                  https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.
+ * requestParameters - TreeMap (2).
+ *                     The object that contains the authentication request parameters.
+ * selectedIdp - String (primitive).
+ *               The social identity provider name. For example: google.
+ * sharedState - LinkedHashMap (3).
+ *               The object that holds the state of the authentication tree and allows data exchange between the stateless nodes:
+ *               https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.
+ * transientState - LinkedHashMap (3).
+ *                  The object for storing sensitive information that must not leave the server unencrypted,
+ *                  and that may not need to persist between authentication requests during the authentication session:
+ *                  https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.
+ *
+ * Return - a JsonValue (1).
+ *          The result of the last statement in the script is returned to the server.
+ *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
+ *          is the last (and only) statement in this script, and its return value will become the script result.
+ *          Do not use "return variable" statement outside of a function definition.
+ *
+ *          This script's last statement should result in a JsonValue (1) with the following keys:
+ *          {
+ *              {"displayName": "corresponding-social-identity-provider-value"},
+ *              {"email": "corresponding-social-identity-provider-value"},
+ *              {"familyName": "corresponding-social-identity-provider-value"},
+ *              {"givenName": "corresponding-social-identity-provider-value"},
+ *              {"id": "corresponding-social-identity-provider-value"},
+ *              {"locale": "corresponding-social-identity-provider-value"},
+ *              {"photoUrl": "corresponding-social-identity-provider-value"},
+ *              {"username": "corresponding-social-identity-provider-value"}
+ *          }
+ *
+ *          The consumer of this data defines which keys are required and which are optional.
+ *          For example, the script associated with the Social Provider Handler Node and,
+ *          ultimately, the managed object created/updated with this data
+ *          will expect certain keys to be populated.
+ *          In some common default configurations, the following keys are required to be not empty:
+ *          username, givenName, familyName, email.
+ *
+ *          From RFC4517: A value of the Directory String syntax is a string of one or more
+ *          arbitrary characters from the Universal Character Set (UCS).
+ *          A zero-length character string is not permitted.
+ *
+ * (1) JsonValue - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/json/JsonValue.html.
+ * (2) TreeMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/TreeMap.html.
+ * (3) LinkedHashMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
+ */
+
+(function () {
+    var frJava = JavaImporter(
+        org.forgerock.json.JsonValue
+    );
+
+    var normalizedProfileData = frJava.JsonValue.json(frJava.JsonValue.object());
+  
+      //logger.message('Seguin rawProfile: '+rawProfile);
+
+    normalizedProfileData.put('id', rawProfile.get('sub').asString());
+    normalizedProfileData.put('displayName', rawProfile.get('givenName').asString() + ' ' + rawProfile.get('sn').asString());
+    normalizedProfileData.put('email', rawProfile.get('mail').asString());
+    normalizedProfileData.put('givenName', rawProfile.get('givenName').asString());
+    normalizedProfileData.put('familyName', rawProfile.get('sn').asString());
+    normalizedProfileData.put('username', rawProfile.get('upn').asString());
+    normalizedProfileData.put('roles', rawProfile.get('roles').asString());
+  
+      //logger.message('Seguin normalizedProfileData: '+normalizedProfileData);
+
+    return normalizedProfileData;
+}());
+"
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: ADFS-Profile-Normalization-(JS).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "dbe0bf9a-72aa-49d5-8483-9db147985a47": {
+      "_id": "dbe0bf9a-72aa-49d5-8483-9db147985a47",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from ADFS",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "ADFS Profile Normalization (JS)",
+      "script": "file://ADFS-Profile-Normalization-(JS).script.js",
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-OAuth2-Access-Token-Modification-Script.script.js 1`] = `
+"/*
+ * Copyright 2019-2021 ForgeRock AS. All Rights Reserved.
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
+
+/*
+ * This script lets you modify information associated with an OAuth2 access token
+ * with methods provided by the AccessToken (1) interface.
+ * The changes made to OAuth2 access tokens will directly impact the size of the CTS tokens,
+ * and, similarly, the size of the JWTs if client-based OAuth2 tokens are utilized.
+ * When adding/updating fields make sure that the token size remains within client/user-agent limits.
+ *
+ * Defined variables:
+ * accessToken - AccessToken (1).
+ *               The access token to be updated.
+ *               Mutable object, all changes to the access token will be reflected.
+ * scopes - Set<String> (6).
+ *          Always present, the requested scopes.
+ * requestProperties - Unmodifiable Map (5).
+ *                     Always present, contains a map of request properties:
+ *                     requestUri - The request URI.
+ *                     realm - The realm that the request relates to.
+ *                     requestParams - A map of the request params and/or posted data.
+ *                                     Each value is a list of one or more properties.
+ *                                     Please note that these should be handled in accordance with OWASP best practices:
+ *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
+ * clientProperties - Unmodifiable Map (5).
+ *                    Present if the client specified in the request was identified, contains a map of client properties:
+ *                    clientId - The client's URI for the request locale.
+ *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
+ *                    allowedResponseTypes - List of the allowed response types for the client.
+ *                    allowedScopes - List of the allowed scopes for the client.
+ *                    customProperties - A map of the custom properties of the client.
+ *                                       Lists or maps will be included as sub-maps; for example:
+ *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
+ *                                       To add custom properties to a client, update the Custom Properties field
+ *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
+ * identity - AMIdentity (3).
+ *            Always present, the identity of the resource owner.
+ * session - SSOToken (4).
+ *           Present if the request contains the session cookie, the user's session object.
+ * scriptName - String (primitive).
+ *              Always present, the display name of the script.
+ * logger - Always present, the "OAuth2Provider" debug logger instance:
+ *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *          Corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.
+ * httpClient - HTTP Client (8).
+ *              Always present, the HTTP Client instance:
+ *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
+ *
+ * Return - no value is expected, changes shall be made to the accessToken parameter directly.
+ *
+ * Class reference:
+ * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.
+ * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
+ * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
+ * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
+ *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
+ * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
+ * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
+ */
+
+/* EXAMPLE
+(function () {
+    var frJava = JavaImporter(
+        org.forgerock.http.protocol.Request,
+        org.forgerock.http.protocol.Response
+    );
+
+    // Always includes this field in the token.
+    accessToken.setField('key1', 'value1');
+
+    // Receives and adds to the access token additional values by performing a REST call to an external service.
+    // WARNING: Below, you will find a reference to a third-party site, which is provided only as an example.
+    var uri = 'https://jsonplaceholder.typicode.com/posts';
+
+    try {
+        var request = new frJava.Request();
+
+        // You can chain methods that return the request object.
+        request.setUri(uri)
+            .setMethod('POST')
+            .setEntity(JSON.stringify({
+                updatedFields: {
+                    key2: 'value2',
+                    key3: 'value3'
+                }
+            }));
+
+        // You can call a method when chaining is not possible.
+        request.getHeaders().add('Content-Type', 'application/json; charset=UTF-8');
+
+        // Sends the request and receives the response.
+        var response = httpClient.send(request).getOrThrow();
+
+        // Checks if the response status is as expected.
+        if (response.getStatus() === org.forgerock.http.protocol.Status.CREATED) {
+            var result = JSON.parse(response.getEntity().getString());
+
+            // Set multiple token fields at once.
+            accessToken.setFields(result.updatedFields);
+        } else {
+            logger.error('Unable to obtain access token modifications. Status: ' + response.getStatus() + '. Content: ' + response.getEntity().getString());
+        }
+    } catch (e) {
+        logger.error('The request processing was interrupted. ' + e);
+
+        // The access token request fails with the HTTP 500 error in this case.
+        throw ('Unable to obtain response from: ' + uri);
+    }
+
+    // Adds new fields containing identity attribute values to the access token.
+    accessToken.setField('mail', identity.getAttribute('mail'));
+    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);
+
+    // Adds new fields containing the session property values.
+    // NOTE: session may not be available for non-interactive authorization grants.
+    if (session) {
+        try {
+            accessToken.setField('ipAddress', session.getProperty('Host'));
+        } catch (e) {
+            logger.error('Unable to retrieve session property value. ' + e);
+        }
+    }
+
+    // Removes a native field from the token entry, that was set by AM.
+    // WARNING: removing native fields from the token may result in loss of functionality.
+    // accessToken.removeTokenName()
+
+    // No return value is expected. Let it be undefined.
+}());
+*/
+"
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "39c08084-1238-43e8-857f-2e11005eac49": {
+      "_id": "39c08084-1238-43e8-857f-2e11005eac49",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Default alpha realm script for OAuth2 Access Token Modification",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Alpha OAuth2 Access Token Modification Script",
+      "script": "file://Alpha-OAuth2-Access-Token-Modification-Script.script.js",
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-OIDC-Claims-Script.script.js 1`] = `
+"/*
+ * Copyright 2014-2021 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
+
+/*
+ * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.
+ * The claim values are computed for:
+ * the claims derived from the requested scopes,
+ * the claims provided by the authorization server,
+ * and the claims requested by the client via the claims parameter.
+ *
+ * In the CONFIGURATION AND CUSTOMIZATION section, you can
+ * define the scope-to-claims mapping, and
+ * assign to each claim a resolver function that will compute the claim value.
+ *
+ * Defined variables (class references are provided below):
+ * scopes - Set<String> (6).
+ *          Always present, the requested scopes.
+ * claims - Map<String, Object> (5).
+ *          Always present, default server provided claims.
+ * claimObjects - List<Claim> (7, 2).
+ *                Always present, the default server provided claims.
+ * requestedClaims - Map<String, Set<String>> (5).
+ *                   Always present, not empty if the request contains the claims parameter and the server has enabled
+ *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;
+ *                   requested claims with no requested values will have a key but no value in the map. A key with
+ *                   a single value in its Set (6) indicates that this is the only value that should be returned.
+ * requestedTypedClaims - List<Claim> (7, 2).
+ *                        Always present, the requested claims.
+ *                        Requested claims with no requested values will have a claim with no values.
+ *                        A claim with a single value indicates this is the only value that should be returned.
+ * claimsLocales - List<String> (7).
+ *                 The values from the 'claims_locales' parameter.
+ *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.
+ * requestProperties - Unmodifiable Map (5).
+ *                     Always present, contains a map of request properties:
+ *                     requestUri - The request URI.
+ *                     realm - The realm that the request relates to.
+ *                     requestParams - A map of the request params and/or posted data.
+ *                                     Each value is a list of one or more properties.
+ *                                     Please note that these should be handled in accordance with OWASP best practices:
+ *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
+ * clientProperties - Unmodifiable Map (5).
+ *                    Present if the client specified in the request was identified, contains a map of client properties:
+ *                    clientId - The client's URI for the request locale.
+ *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
+ *                    allowedResponseTypes - List of the allowed response types for the client.
+ *                    allowedScopes - List of the allowed scopes for the client.
+ *                    customProperties - A map of the custom properties of the client.
+ *                                       Lists or maps will be included as sub-maps; for example:
+ *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
+ *                                       To add custom properties to a client, update the Custom Properties field
+ *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
+ * identity - AMIdentity (3).
+ *            Always present, the identity of the resource owner.
+ * session - SSOToken (4).
+ *           Present if the request contains the session cookie, the user's session object.
+ * scriptName - String (primitive).
+ *              Always present, the display name of the script.
+ * logger - Always present, the "OAuth2Provider" debug logger instance:
+ *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.
+ * httpClient - HTTP Client (8).
+ *              Always present, the HTTP Client instance:
+ *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
+ *              In order to use the client, you may need to add
+ *              org.forgerock.http.Client,
+ *              org.forgerock.http.protocol.*,
+ *              and org.forgerock.util.promise.PromiseImpl
+ *              to the allowed Java classes in the scripting engine configuration, as described in:
+ *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html
+ *
+ * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.
+ *          The result of the last statement in the script is returned to the server.
+ *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
+ *          is the last (and only) statement in this script, and its return value will become the script result.
+ *          Do not use "return variable" statement outside of a function definition.
+ *          See RESULTS section for additional details.
+ *
+ * Class reference:
+ * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.
+ * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).
+ *         An instance of org.forgerock.openidconnect.Claim has methods to access
+ *         the claim name, requested values, locale, and whether the claim is essential.
+ * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
+ * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
+ * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
+ *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
+ * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
+ * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.
+ * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
+*/
+
+(function () {
+    // SETUP
+
+    /**
+     * Claim processing utilities.
+     * An object that contains reusable functions for processing claims.
+     * @see CLAIM PROCESSING UTILITIES section for details.
+     */
+    var utils = getUtils();
+
+    // CONFIGURATION AND CUSTOMIZATION
+
+    /**
+     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.
+     *
+     * Call this configuration method, and pass in as the first argument
+     * an object that maps a scope value to an array of claim names
+     * to specify which claims need to be processed and returned for the requested scopes.
+     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}
+     * for the scope values that could be used to request claims as defined in the OIDC specification.
+     *
+     * Below, find a default configuration that is expected to work in the current environment.
+     *
+     * CUSTOMIZATION
+     * You can choose the claim names returned for a scope.
+     */
+    utils.setScopeClaimsMap({
+        profile: [
+            'name',
+            'family_name',
+            'given_name',
+            'zoneinfo',
+            'locale'
+        ],
+        email: ['email'],
+        address: ['address'],
+        phone: ['phone_number']
+    });
+
+    /**
+     * In this script, each claim
+     * derived from the requested scopes,
+     * provided by the authorization server, and
+     * requested by the client via the claims parameter
+     * will be processed by a function associated with the claim name.
+     *
+     * Call this configuration method, and pass in as the first argument
+     * an object that maps a claim name to a resolver function,
+     * which will be automatically executed for each claim processed by the script.
+     *
+     * The claim resolver function will receive the requested claim information
+     * in an instance of org.forgerock.openidconnect.Claim as the first argument.
+     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}
+     * for details on the Claim class.
+     *
+     * If the claim resolver function returns a value,
+     * other than undefined or null,
+     * the claim will be included in the script's results.
+     *
+     * The Claim instance provides methods to check
+     * what the name of the claim is,
+     * which values the claim request contains,
+     * whether the claim is essential, and
+     * which locale the claim is associated with.
+     * The resolver function can consider this information when computing and returning the claim value.
+     *
+     * Below, find a default configuration that is expected to work in the current environment.
+     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),
+     * is called to return a claim resolver function based on a user profile attribute.
+     * @see CLAIM RESOLVERS section for the implementation details and examples.
+     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.
+     *
+     * CUSTOMIZATION
+     * You can reuse the predefined utils methods with your custom arguments.
+     * You can also specify a custom resolver function for a claim name,
+     * that will compute and return the claim value—as shown in the commented out example below.
+     */
+    utils.setClaimResolvers({
+        /*
+        // An example of a simple claim resolver function that is defined for a claim
+        // directly in the configuration object:
+        custom-claim-name: function (requestedClaim) {
+            // In this case, initially, the claim value comes straight from a user profile attribute value:
+            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]
+
+            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.
+            // You can use:
+            // requestedClaim.getName()
+            // requestedClaim.getValues()
+            // requestedClaim.getLocale()
+            // requestedClaim.isEssential()
+
+            return claimValue
+        },
+        */
+        /**
+         * The use of utils.getUserProfileClaimResolver shows how
+         * an argument passed to a function that returns a claim resolver
+         * becomes available to the resolver function (via its lexical context).
+         */
+        name: utils.getUserProfileClaimResolver('cn'),
+        family_name: utils.getUserProfileClaimResolver('sn'),
+        given_name: utils.getUserProfileClaimResolver('givenname'),
+        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),
+        locale: utils.getUserProfileClaimResolver('preferredlocale'),
+        email: utils.getUserProfileClaimResolver('mail'),
+        address: utils.getAddressClaimResolver(
+            /**
+             * The passed in user profile claim resolver function
+             * can be used by the address claim resolver function
+             * to obtain the claim value to be formatted as per the OIDC specification:
+             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.
+             */
+            utils.getUserProfileClaimResolver('postaladdress')
+        ),
+        phone_number: utils.getUserProfileClaimResolver('telephonenumber')
+    });
+
+    // CLAIM PROCESSING UTILITIES
+
+    /**
+     * @returns {object} An object that contains reusable claim processing utilities.
+     * @see PUBLIC METHODS section and the return statement for the list of exported functions.
+     */
+    function getUtils () {
+        // IMPORT JAVA
+
+        /**
+         * Provides Java scripting functionality.
+         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.
+         */
+        var frJava = JavaImporter(
+            org.forgerock.oauth2.core.exceptions.InvalidRequestException,
+            org.forgerock.oauth2.core.UserInfoClaims,
+            org.forgerock.openidconnect.Claim,
+
+            java.util.LinkedHashMap,
+            java.util.ArrayList
+        );
+
+        // SET UP CONFIGURATION
+
+        /**
+         * Placeholder for a configuration option that contains
+         * an object that maps the supported scope values (scopes)
+         * and the corresponding claim names for each scope value.
+         */
+        var scopeClaimsMap;
+
+        /**
+         * Placeholder for a configuration option that contains
+         * an object that maps the supported claim names
+         * and the resolver functions returning the claim value.
+         */
+        var claimResolvers;
+
+        /**
+         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,
+         * and assigns it to a (private) variable that serves as a configuration option.
+         * @param {object} params - An object that maps each supported scope value to an array of claim names,
+         * in order to specify which claims need to be processed for the requested scopes.
+         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.
+         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.
+         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.
+         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.
+         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.
+         * @returns {undefined}
+         */
+        function setScopeClaimsMap(params) {
+            scopeClaimsMap = params;
+        }
+
+        /**
+         * A (public) method that accepts an object that maps the supported claim names
+         * and the resolver functions returning the claim value,
+         * and assigns it to a (private) variable that serves as a configuration option.
+         * @param {object} params - An object that maps
+         * each supported claim name to a function that computes and returns the claim value.
+         */
+        function setClaimResolvers(params) {
+            claimResolvers = params;
+        }
+
+        // CLAIM RESOLVERS
+
+        /**
+         * Claim resolvers are functions that return a claim value.
+         * @param {*}
+         * @returns {*}
+         */
+
+        /**
+         * Defines a claim resolver based on a user profile attribute.
+         * @param {string} attributeName - Name of the user profile attribute.
+         * @returns {function} A function that will determine the claim value
+         * based on the user profile attribute and the (requested) claim properties.
+         */
+        function getUserProfileClaimResolver (attributeName) {
+            /**
+             * Resolves a claim with a user profile attribute value.
+             * Returns undefined if the identity attribute is not populated,
+             * OR if the claim has requested values that do not contain the identity attribute value.
+             * ATTENTION: the aforementioned comparison is case-sensitive.
+             * @param {org.forgerock.openidconnect.Claim} claim
+             * An object that provides methods to obtain information/requirements associated with a claim.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+             * @returns {string|HashSet|undefined}
+             */
+            function resolveClaim(claim) {
+                var userProfileValue;
+
+                if (identity) {
+                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));
+
+                    if (userProfileValue && !userProfileValue.isEmpty()) {
+                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {
+                            return userProfileValue;
+                        }
+                    }
+                }
+            }
+
+            return resolveClaim;
+        }
+
+        /**
+         * Returns an address claim resolver based on a claim value obtained with another claim resolver.
+         * @param {function} resolveClaim - A function that returns a claim value.
+         * @returns {function} A function that will accept a claim as an argument,
+         * run the claim resolver function for the claim and obtain the claim value,
+         * and apply additional formatting to the value before returning it.
+         */
+        function getAddressClaimResolver (resolveClaim) {
+            /**
+             * Creates an address claim object from a value returned by a claim resolver,
+             * and returns the address claim object as the claim value.
+             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.
+             * The claim value is obtained with a claim resolving function available from the closure.
+             * @param {org.forgerock.openidconnect.Claim} claim
+             * An object that provides methods to obtain information/requirements associated with a claim.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.
+             */
+            function resolveAddressClaim(claim) {
+                var claimValue = resolveClaim(claim);
+                var addressObject;
+
+                if (isClaimValueValid(claimValue)) {
+                    addressObject = new frJava.LinkedHashMap();
+
+                    addressObject.put('formatted', claimValue);
+
+                    return addressObject;
+                }
+            }
+
+            return resolveAddressClaim;
+        }
+
+        /**
+         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.
+         * @param {function} resolveClaim - A function that returns a claim value.
+         * @returns {function} A function that will accept a claim as an argument,
+         * run the claim resolver function for the claim and obtain the claim value,
+         * and apply additional logic for essential claims.
+         */
+        function getEssentialClaimResolver (resolveClaim) {
+            /**
+             * Returns a claim value or throws an error.
+             * The claim value is obtained with a claim resolving function available from the closure.
+             * Throws an exception if the claim is essential and no value is returned for the claim.
+             *
+             * Use of this resolver is optional.
+             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:
+             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,
+             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,
+             * unless otherwise specified in the description of the specific claim."
+             *
+             * @param {org.forgerock.openidconnect.Claim} claim
+             * An object that provides methods to obtain information/requirements associated with a claim.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+             * @returns {*}
+             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
+             */
+            function resolveEssentialClaim(claim) {
+                var claimValue = resolveClaim(claim);
+
+                if (claim.isEssential() && !isClaimValueValid(claimValue)) {
+                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());
+                }
+
+                return claimValue;
+            }
+
+            return resolveEssentialClaim;
+        }
+
+        /**
+         * Provides default resolution for a claim.
+         * Use it if a claim-specific resolver is not defined in the configuration.
+         * @param {org.forgerock.openidconnect.Claim} claim
+         * An object that provides methods to obtain information/requirements associated with a claim.
+         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+         * @returns {*} A single value associated with this claim.
+         */
+        function resolveAnyClaim (claim) {
+            if (claim.getValues().size() === 1) {
+                return claim.getValues().toArray()[0];
+            }
+        }
+
+        // UTILITIES
+
+        /**
+         * Returns claim value from a set.
+         * If the set contains a single value, returns the value.
+         * If the set contains multiple values, returns the set.
+         * Otherwise, returns undefined.
+         *
+         * @param {org.forgerock.openidconnect.Claim} claim
+         * An object that provides methods to obtain information/requirements associated with a claim.
+         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.
+         * @returns {string|java.util.HashSet|undefined}
+         */
+        function getClaimValueFromSet (claim, set) {
+            if (set && set.size()) {
+                if (set.size() === 1) {
+                    return set.toArray()[0];
+                } else {
+                    return set;
+                }
+            } else if (logger.warningEnabled()) {
+                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());
+            }
+        }
+
+        function isClaimValueValid (claimValue) {
+            if (typeof claimValue === 'undefined' || claimValue === null) {
+                return false;
+            }
+
+            return true;
+        }
+
+        // CLAIM PROCESSING
+
+        /**
+         * Constructs and returns an object populated with the computed claim values
+         * and the requested scopes mapped to the claim names.
+         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.
+         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
+         * @see RESULTS section for the use of this function.
+         */
+        function getUserInfoClaims () {
+            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());
+        }
+
+        /**
+         * Creates a map of (requested) claim names populated with the computed claim values.
+         * @returns {java.util.LinkedHashMap}
+         * A map of the requested claim names and the corresponding claim values.
+         */
+        function getComputedClaims () {
+            /**
+             * Creates a complete list of claim objects from:
+             * the claims derived from the scopes,
+             * the claims provided by the authorization server,
+             * and the claims requested by the client.
+             * @returns {java.util.ArrayList}
+             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
+             */
+            function getClaims() {
+                /**
+                 * Returns a list of claim objects for the requested scopes.
+                 * Uses the scopeClaimsMap configuration option to derive the claim names;
+                 * no other properties of a claim derived from a scope are populated.
+                 * @returns {java.util.ArrayList}
+                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.
+                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
+                 */
+                function convertScopeToClaims() {
+                    var claims = new frJava.ArrayList();
+
+                    scopes.toArray().forEach(function (scope) {
+                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {
+                            scopeClaimsMap[scope].forEach(function (claimName) {
+                                claims.add(new frJava.Claim(claimName));
+                            });
+                        }
+                    });
+
+                    return claims;
+                }
+
+                var claims = new frJava.ArrayList();
+
+                claims.addAll(convertScopeToClaims());
+                claims.addAll(claimObjects);
+                claims.addAll(requestedTypedClaims);
+
+                return claims;
+            }
+
+            /**
+             * Computes and returns a claim value.
+             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.
+             * @see claimResolvers
+             * If no resolver function is found, uses the default claim resolver function.
+             *
+             * @param {org.forgerock.openidconnect.Claim} claim
+             * An object that provides methods to obtain information/requirements associated with a claim.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+             * @returns {*} Claim value.
+             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
+             * Rethrows this exception if a claim resolver throws it.
+             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver
+             * if you want to terminate the claim processing.
+             */
+            function computeClaim(claim) {
+                var resolveClaim;
+                var message;
+
+                try {
+                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;
+
+                    return resolveClaim(claim);
+                } catch (e) {
+                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;
+
+                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {
+                        throw e;
+                    }
+
+                    if (logger.warningEnabled()) {
+                        logger.warning(message);
+                    }
+                }
+            }
+
+            var computedClaims = new frJava.LinkedHashMap();
+
+            getClaims().toArray().forEach(function (claim) {
+                var claimValue = computeClaim(claim);
+
+                if (isClaimValueValid(claimValue)) {
+                    computedClaims.put(claim.getName(), claimValue);
+                } else {
+                    /**
+                     * If a claim has been processed, but appears in the list again,
+                     * and its value cannot be computed under the new conditions,
+                     * the claim is removed from the final result.
+                     *
+                     * For example, a claim could be mapped to a scope and found in the user profile,
+                     * but also requested by the client with required values that don't match the computed one.
+                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.
+                     * for the relevant OIDC specification details.
+                     */
+                    computedClaims.remove(claim.getName());
+                }
+            });
+
+            return computedClaims;
+        }
+
+        /**
+         * Creates a map of requested scopes and the corresponding claim names.
+         * @returns {java.util.LinkedHashMap}
+         */
+        function getCompositeScopes () {
+            var compositeScopes = new frJava.LinkedHashMap();
+
+            scopes.toArray().forEach(function (scope) {
+                var scopeClaims = new frJava.ArrayList();
+
+                if (scopeClaimsMap[scope]) {
+                    scopeClaimsMap[scope].forEach(function (claimName) {
+                        scopeClaims.add(claimName);
+                    });
+                }
+
+                if (scopeClaims.size()) {
+                    compositeScopes.put(scope, scopeClaims);
+                }
+            });
+
+            return compositeScopes;
+        }
+
+        // PUBLIC METHODS
+
+        return {
+            setScopeClaimsMap: setScopeClaimsMap,
+            setClaimResolvers: setClaimResolvers,
+            getUserProfileClaimResolver: getUserProfileClaimResolver,
+            getAddressClaimResolver: getAddressClaimResolver,
+            getEssentialClaimResolver: getEssentialClaimResolver,
+            getUserInfoClaims: getUserInfoClaims
+        };
+    }
+
+    // RESULTS
+
+    /**
+     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class
+     * populated with the computed claim values and
+     * the requested scopes mapped to the claim names.
+     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
+     *
+     * Assigning it to a variable gives you an opportunity
+     * to log the content of the returned value during development.
+     */
+    var userInfoClaims = utils.getUserInfoClaims();
+
+    /*
+    logger.error(scriptName + ' results:')
+    logger.error('Values: ' + userInfoClaims.getValues())
+    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())
+    */
+
+    return userInfoClaims;
+}());
+"
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-OIDC-Claims-Script.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "cf3515f0-8278-4ee3-a530-1bad7424c416": {
+      "_id": "cf3515f0-8278-4ee3-a530-1bad7424c416",
+      "context": "OIDC_CLAIMS",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Default alpha realm script for OIDC claims",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Alpha OIDC Claims Script",
+      "script": "file://Alpha-OIDC-Claims-Script.script.js",
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.js 1`] = `
+"(function () {
+  if (scopes.contains('fr:autoaccess:*') || scopes.contains('fr:iga:*') || scopes.contains('fr:idc:analytics:*')) {
+    var fr = JavaImporter(
+      com.sun.identity.idm.IdType
+    );
+    var groups = [];
+    identity.getMemberships(fr.IdType.GROUP).toArray().forEach(function (group) {
+      groups.push(group.getAttribute('cn').toArray()[0]);
+    });
+    accessToken.setField('groups', groups);
+  }
+}());
+"
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "e232cff3-2460-47cd-80b2-36c86c0d0f06": {
+      "_id": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Normalizes raw profile data from GitHub",
+      "description": "Used by endUserUIClient",
       "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "GitHub Profile Normalization (VS) - imported (2)",
-      "script": [
-        "/*",
-        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
-        "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
-        "",
-        "logger.warning("GitHub rawProfile: "+rawProfile)",
-        "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("givenName", rawProfile.first_name),",
-        "        field("familyName", rawProfile.last_name),",
-        "        field("photoUrl", rawProfile.picture.data.url),",
-        "        field("email", rawProfile.email),",
-        "        field("username", rawProfile.email)))",
-      ],
+      "language": "JAVASCRIPT",
+      "name": "Alpha endUserUIClient OAuth2 Access Token Modification Script",
+      "script": "file://Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.js",
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -MNxn 'GitHub Profile Normalization' -D scriptExportTestDir1": should export the script named "GitHub Profile Normalization" into the directory scriptExportTestDir1 1`] = `0`;
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-endUserUIClient-OIDC-Claims-Script.script.js 1`] = `
+"/*
+ * Copyright 2014-2021 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
+
+/*
+ * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.
+ * The claim values are computed for:
+ * the claims derived from the requested scopes,
+ * the claims provided by the authorization server,
+ * and the claims requested by the client via the claims parameter.
+ *
+ * In the CONFIGURATION AND CUSTOMIZATION section, you can
+ * define the scope-to-claims mapping, and
+ * assign to each claim a resolver function that will compute the claim value.
+ *
+ * Defined variables (class references are provided below):
+ * scopes - Set<String> (6).
+ *          Always present, the requested scopes.
+ * claims - Map<String, Object> (5).
+ *          Always present, default server provided claims.
+ * claimObjects - List<Claim> (7, 2).
+ *                Always present, the default server provided claims.
+ * requestedClaims - Map<String, Set<String>> (5).
+ *                   Always present, not empty if the request contains the claims parameter and the server has enabled
+ *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;
+ *                   requested claims with no requested values will have a key but no value in the map. A key with
+ *                   a single value in its Set (6) indicates that this is the only value that should be returned.
+ * requestedTypedClaims - List<Claim> (7, 2).
+ *                        Always present, the requested claims.
+ *                        Requested claims with no requested values will have a claim with no values.
+ *                        A claim with a single value indicates this is the only value that should be returned.
+ * claimsLocales - List<String> (7).
+ *                 The values from the 'claims_locales' parameter.
+ *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.
+ * requestProperties - Unmodifiable Map (5).
+ *                     Always present, contains a map of request properties:
+ *                     requestUri - The request URI.
+ *                     realm - The realm that the request relates to.
+ *                     requestParams - A map of the request params and/or posted data.
+ *                                     Each value is a list of one or more properties.
+ *                                     Please note that these should be handled in accordance with OWASP best practices:
+ *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
+ * clientProperties - Unmodifiable Map (5).
+ *                    Present if the client specified in the request was identified, contains a map of client properties:
+ *                    clientId - The client's URI for the request locale.
+ *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
+ *                    allowedResponseTypes - List of the allowed response types for the client.
+ *                    allowedScopes - List of the allowed scopes for the client.
+ *                    customProperties - A map of the custom properties of the client.
+ *                                       Lists or maps will be included as sub-maps; for example:
+ *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
+ *                                       To add custom properties to a client, update the Custom Properties field
+ *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
+ * identity - AMIdentity (3).
+ *            Always present, the identity of the resource owner.
+ * session - SSOToken (4).
+ *           Present if the request contains the session cookie, the user's session object.
+ * scriptName - String (primitive).
+ *              Always present, the display name of the script.
+ * logger - Always present, the "OAuth2Provider" debug logger instance:
+ *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.
+ * httpClient - HTTP Client (8).
+ *              Always present, the HTTP Client instance:
+ *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
+ *              In order to use the client, you may need to add
+ *              org.forgerock.http.Client,
+ *              org.forgerock.http.protocol.*,
+ *              and org.forgerock.util.promise.PromiseImpl
+ *              to the allowed Java classes in the scripting engine configuration, as described in:
+ *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html
+ *
+ * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.
+ *          The result of the last statement in the script is returned to the server.
+ *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
+ *          is the last (and only) statement in this script, and its return value will become the script result.
+ *          Do not use "return variable" statement outside of a function definition.
+ *          See RESULTS section for additional details.
+ *
+ * Class reference:
+ * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.
+ * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).
+ *         An instance of org.forgerock.openidconnect.Claim has methods to access
+ *         the claim name, requested values, locale, and whether the claim is essential.
+ * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
+ * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
+ * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
+ *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
+ * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
+ * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.
+ * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
+*/
+
+(function () {
+    // SETUP
+
+    /**
+     * Claim processing utilities.
+     * An object that contains reusable functions for processing claims.
+     * @see CLAIM PROCESSING UTILITIES section for details.
+     */
+    var utils = getUtils();
+
+    // CONFIGURATION AND CUSTOMIZATION
+
+    /**
+     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.
+     *
+     * Call this configuration method, and pass in as the first argument
+     * an object that maps a scope value to an array of claim names
+     * to specify which claims need to be processed and returned for the requested scopes.
+     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}
+     * for the scope values that could be used to request claims as defined in the OIDC specification.
+     *
+     * Below, find a default configuration that is expected to work in the current environment.
+     *
+     * CUSTOMIZATION
+     * You can choose the claim names returned for a scope.
+     */
+    utils.setScopeClaimsMap({
+        profile: [
+            'name',
+            'family_name',
+            'given_name',
+            'zoneinfo',
+            'locale'
+        ],
+        email: ['email'],
+        address: ['address'],
+        phone: ['phone_number']
+    });
+
+    /**
+     * In this script, each claim
+     * derived from the requested scopes,
+     * provided by the authorization server, and
+     * requested by the client via the claims parameter
+     * will be processed by a function associated with the claim name.
+     *
+     * Call this configuration method, and pass in as the first argument
+     * an object that maps a claim name to a resolver function,
+     * which will be automatically executed for each claim processed by the script.
+     *
+     * The claim resolver function will receive the requested claim information
+     * in an instance of org.forgerock.openidconnect.Claim as the first argument.
+     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}
+     * for details on the Claim class.
+     *
+     * If the claim resolver function returns a value,
+     * other than undefined or null,
+     * the claim will be included in the script's results.
+     *
+     * The Claim instance provides methods to check
+     * what the name of the claim is,
+     * which values the claim request contains,
+     * whether the claim is essential, and
+     * which locale the claim is associated with.
+     * The resolver function can consider this information when computing and returning the claim value.
+     *
+     * Below, find a default configuration that is expected to work in the current environment.
+     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),
+     * is called to return a claim resolver function based on a user profile attribute.
+     * @see CLAIM RESOLVERS section for the implementation details and examples.
+     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.
+     *
+     * CUSTOMIZATION
+     * You can reuse the predefined utils methods with your custom arguments.
+     * You can also specify a custom resolver function for a claim name,
+     * that will compute and return the claim value—as shown in the commented out example below.
+     */
+    utils.setClaimResolvers({
+        /*
+        // An example of a simple claim resolver function that is defined for a claim
+        // directly in the configuration object:
+        custom-claim-name: function (requestedClaim) {
+            // In this case, initially, the claim value comes straight from a user profile attribute value:
+            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]
+
+            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.
+            // You can use:
+            // requestedClaim.getName()
+            // requestedClaim.getValues()
+            // requestedClaim.getLocale()
+            // requestedClaim.isEssential()
+
+            return claimValue
+        },
+        */
+        /**
+         * The use of utils.getUserProfileClaimResolver shows how
+         * an argument passed to a function that returns a claim resolver
+         * becomes available to the resolver function (via its lexical context).
+         */
+        name: utils.getUserProfileClaimResolver('cn'),
+        family_name: utils.getUserProfileClaimResolver('sn'),
+        given_name: utils.getUserProfileClaimResolver('givenname'),
+        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),
+        locale: utils.getUserProfileClaimResolver('preferredlocale'),
+        email: utils.getUserProfileClaimResolver('mail'),
+        address: utils.getAddressClaimResolver(
+            /**
+             * The passed in user profile claim resolver function
+             * can be used by the address claim resolver function
+             * to obtain the claim value to be formatted as per the OIDC specification:
+             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.
+             */
+            utils.getUserProfileClaimResolver('postaladdress')
+        ),
+        phone_number: utils.getUserProfileClaimResolver('telephonenumber')
+    });
+
+    // CLAIM PROCESSING UTILITIES
+
+    /**
+     * @returns {object} An object that contains reusable claim processing utilities.
+     * @see PUBLIC METHODS section and the return statement for the list of exported functions.
+     */
+    function getUtils () {
+        // IMPORT JAVA
+
+        /**
+         * Provides Java scripting functionality.
+         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.
+         */
+        var frJava = JavaImporter(
+            org.forgerock.oauth2.core.exceptions.InvalidRequestException,
+            org.forgerock.oauth2.core.UserInfoClaims,
+            org.forgerock.openidconnect.Claim,
+
+            java.util.LinkedHashMap,
+            java.util.ArrayList
+        );
+
+        // SET UP CONFIGURATION
+
+        /**
+         * Placeholder for a configuration option that contains
+         * an object that maps the supported scope values (scopes)
+         * and the corresponding claim names for each scope value.
+         */
+        var scopeClaimsMap;
+
+        /**
+         * Placeholder for a configuration option that contains
+         * an object that maps the supported claim names
+         * and the resolver functions returning the claim value.
+         */
+        var claimResolvers;
+
+        /**
+         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,
+         * and assigns it to a (private) variable that serves as a configuration option.
+         * @param {object} params - An object that maps each supported scope value to an array of claim names,
+         * in order to specify which claims need to be processed for the requested scopes.
+         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.
+         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.
+         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.
+         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.
+         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.
+         * @returns {undefined}
+         */
+        function setScopeClaimsMap(params) {
+            scopeClaimsMap = params;
+        }
+
+        /**
+         * A (public) method that accepts an object that maps the supported claim names
+         * and the resolver functions returning the claim value,
+         * and assigns it to a (private) variable that serves as a configuration option.
+         * @param {object} params - An object that maps
+         * each supported claim name to a function that computes and returns the claim value.
+         */
+        function setClaimResolvers(params) {
+            claimResolvers = params;
+        }
+
+        // CLAIM RESOLVERS
+
+        /**
+         * Claim resolvers are functions that return a claim value.
+         * @param {*}
+         * @returns {*}
+         */
+
+        /**
+         * Defines a claim resolver based on a user profile attribute.
+         * @param {string} attributeName - Name of the user profile attribute.
+         * @returns {function} A function that will determine the claim value
+         * based on the user profile attribute and the (requested) claim properties.
+         */
+        function getUserProfileClaimResolver (attributeName) {
+            /**
+             * Resolves a claim with a user profile attribute value.
+             * Returns undefined if the identity attribute is not populated,
+             * OR if the claim has requested values that do not contain the identity attribute value.
+             * ATTENTION: the aforementioned comparison is case-sensitive.
+             * @param {org.forgerock.openidconnect.Claim} claim
+             * An object that provides methods to obtain information/requirements associated with a claim.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+             * @returns {string|HashSet|undefined}
+             */
+            function resolveClaim(claim) {
+                var userProfileValue;
+
+                if (identity) {
+                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));
+
+                    if (userProfileValue && !userProfileValue.isEmpty()) {
+                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {
+                            return userProfileValue;
+                        }
+                    }
+                }
+            }
+
+            return resolveClaim;
+        }
+
+        /**
+         * Returns an address claim resolver based on a claim value obtained with another claim resolver.
+         * @param {function} resolveClaim - A function that returns a claim value.
+         * @returns {function} A function that will accept a claim as an argument,
+         * run the claim resolver function for the claim and obtain the claim value,
+         * and apply additional formatting to the value before returning it.
+         */
+        function getAddressClaimResolver (resolveClaim) {
+            /**
+             * Creates an address claim object from a value returned by a claim resolver,
+             * and returns the address claim object as the claim value.
+             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.
+             * The claim value is obtained with a claim resolving function available from the closure.
+             * @param {org.forgerock.openidconnect.Claim} claim
+             * An object that provides methods to obtain information/requirements associated with a claim.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.
+             */
+            function resolveAddressClaim(claim) {
+                var claimValue = resolveClaim(claim);
+                var addressObject;
+
+                if (isClaimValueValid(claimValue)) {
+                    addressObject = new frJava.LinkedHashMap();
+
+                    addressObject.put('formatted', claimValue);
+
+                    return addressObject;
+                }
+            }
+
+            return resolveAddressClaim;
+        }
+
+        /**
+         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.
+         * @param {function} resolveClaim - A function that returns a claim value.
+         * @returns {function} A function that will accept a claim as an argument,
+         * run the claim resolver function for the claim and obtain the claim value,
+         * and apply additional logic for essential claims.
+         */
+        function getEssentialClaimResolver (resolveClaim) {
+            /**
+             * Returns a claim value or throws an error.
+             * The claim value is obtained with a claim resolving function available from the closure.
+             * Throws an exception if the claim is essential and no value is returned for the claim.
+             *
+             * Use of this resolver is optional.
+             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:
+             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,
+             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,
+             * unless otherwise specified in the description of the specific claim."
+             *
+             * @param {org.forgerock.openidconnect.Claim} claim
+             * An object that provides methods to obtain information/requirements associated with a claim.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+             * @returns {*}
+             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
+             */
+            function resolveEssentialClaim(claim) {
+                var claimValue = resolveClaim(claim);
+
+                if (claim.isEssential() && !isClaimValueValid(claimValue)) {
+                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());
+                }
+
+                return claimValue;
+            }
+
+            return resolveEssentialClaim;
+        }
+
+        /**
+         * Provides default resolution for a claim.
+         * Use it if a claim-specific resolver is not defined in the configuration.
+         * @param {org.forgerock.openidconnect.Claim} claim
+         * An object that provides methods to obtain information/requirements associated with a claim.
+         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+         * @returns {*} A single value associated with this claim.
+         */
+        function resolveAnyClaim (claim) {
+            if (claim.getValues().size() === 1) {
+                return claim.getValues().toArray()[0];
+            }
+        }
+
+        // UTILITIES
 
-exports[`frodo script export "frodo script export -MNxn 'GitHub Profile Normalization' -D scriptExportTestDir1": should export the script named "GitHub Profile Normalization" into the directory scriptExportTestDir1 2`] = `""`;
+        /**
+         * Returns claim value from a set.
+         * If the set contains a single value, returns the value.
+         * If the set contains multiple values, returns the set.
+         * Otherwise, returns undefined.
+         *
+         * @param {org.forgerock.openidconnect.Claim} claim
+         * An object that provides methods to obtain information/requirements associated with a claim.
+         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.
+         * @returns {string|java.util.HashSet|undefined}
+         */
+        function getClaimValueFromSet (claim, set) {
+            if (set && set.size()) {
+                if (set.size() === 1) {
+                    return set.toArray()[0];
+                } else {
+                    return set;
+                }
+            } else if (logger.warningEnabled()) {
+                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());
+            }
+        }
 
-exports[`frodo script export "frodo script export -MNxn 'GitHub Profile Normalization' -D scriptExportTestDir1": should export the script named "GitHub Profile Normalization" into the directory scriptExportTestDir1: scriptExportTestDir1/GitHub-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
+        function isClaimValueValid (claimValue) {
+            if (typeof claimValue === 'undefined' || claimValue === null) {
+                return false;
+            }
 
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
+            return true;
+        }
 
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("username", rawProfile.login)))
-"
-`;
+        // CLAIM PROCESSING
 
-exports[`frodo script export "frodo script export -MNxn 'GitHub Profile Normalization' -D scriptExportTestDir1": should export the script named "GitHub Profile Normalization" into the directory scriptExportTestDir1: scriptExportTestDir1/GitHub-Profile-Normalization.script.json 1`] = `
-{
-  "script": {
-    "a7a78773-445b-4eca-bb93-409e86bced81": {
-      "_id": "a7a78773-445b-4eca-bb93-409e86bced81",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": true,
-      "description": "Normalizes raw profile data from GitHub",
-      "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "lastModifiedBy": "null",
-      "lastModifiedDate": 0,
-      "name": "GitHub Profile Normalization",
-      "script": "file://GitHub-Profile-Normalization.script.groovy",
-    },
-  },
-}
-`;
+        /**
+         * Constructs and returns an object populated with the computed claim values
+         * and the requested scopes mapped to the claim names.
+         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.
+         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
+         * @see RESULTS section for the use of this function.
+         */
+        function getUserInfoClaims () {
+            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());
+        }
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3 1`] = `0`;
+        /**
+         * Creates a map of (requested) claim names populated with the computed claim values.
+         * @returns {java.util.LinkedHashMap}
+         * A map of the requested claim names and the corresponding claim values.
+         */
+        function getComputedClaims () {
+            /**
+             * Creates a complete list of claim objects from:
+             * the claims derived from the scopes,
+             * the claims provided by the authorization server,
+             * and the claims requested by the client.
+             * @returns {java.util.ArrayList}
+             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
+             */
+            function getClaims() {
+                /**
+                 * Returns a list of claim objects for the requested scopes.
+                 * Uses the scopeClaimsMap configuration option to derive the claim names;
+                 * no other properties of a claim derived from a scope are populated.
+                 * @returns {java.util.ArrayList}
+                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.
+                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
+                 */
+                function convertScopeToClaims() {
+                    var claims = new frJava.ArrayList();
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3 2`] = `""`;
+                    scopes.toArray().forEach(function (scope) {
+                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {
+                            scopeClaimsMap[scope].forEach(function (claimName) {
+                                claims.add(new frJava.Claim(claimName));
+                            });
+                        }
+                    });
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/ADFS-Profile-Normalization-(JS).script.js 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
+                    return claims;
+                }
 
-/*
- * This script returns the social identity profile information for the authenticating user
- * in a standard form expected by the Social Provider Handler Node.
- *
- * Defined variables:
- * rawProfile - The social identity provider profile information for the authenticating user.
- *              JsonValue (1).
- * logger - The debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- * realm - String (primitive).
- *         The name of the realm the user is authenticating to.
- * requestHeaders - TreeMap (2).
- *                  The object that provides methods for accessing headers in the login request:
- *                  https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.
- * requestParameters - TreeMap (2).
- *                     The object that contains the authentication request parameters.
- * selectedIdp - String (primitive).
- *               The social identity provider name. For example: google.
- * sharedState - LinkedHashMap (3).
- *               The object that holds the state of the authentication tree and allows data exchange between the stateless nodes:
- *               https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.
- * transientState - LinkedHashMap (3).
- *                  The object for storing sensitive information that must not leave the server unencrypted,
- *                  and that may not need to persist between authentication requests during the authentication session:
- *                  https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.
- *
- * Return - a JsonValue (1).
- *          The result of the last statement in the script is returned to the server.
- *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
- *          is the last (and only) statement in this script, and its return value will become the script result.
- *          Do not use "return variable" statement outside of a function definition.
- *
- *          This script's last statement should result in a JsonValue (1) with the following keys:
- *          {
- *              {"displayName": "corresponding-social-identity-provider-value"},
- *              {"email": "corresponding-social-identity-provider-value"},
- *              {"familyName": "corresponding-social-identity-provider-value"},
- *              {"givenName": "corresponding-social-identity-provider-value"},
- *              {"id": "corresponding-social-identity-provider-value"},
- *              {"locale": "corresponding-social-identity-provider-value"},
- *              {"photoUrl": "corresponding-social-identity-provider-value"},
- *              {"username": "corresponding-social-identity-provider-value"}
- *          }
- *
- *          The consumer of this data defines which keys are required and which are optional.
- *          For example, the script associated with the Social Provider Handler Node and,
- *          ultimately, the managed object created/updated with this data
- *          will expect certain keys to be populated.
- *          In some common default configurations, the following keys are required to be not empty:
- *          username, givenName, familyName, email.
- *
- *          From RFC4517: A value of the Directory String syntax is a string of one or more
- *          arbitrary characters from the Universal Character Set (UCS).
- *          A zero-length character string is not permitted.
- *
- * (1) JsonValue - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/json/JsonValue.html.
- * (2) TreeMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/TreeMap.html.
- * (3) LinkedHashMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- */
+                var claims = new frJava.ArrayList();
+
+                claims.addAll(convertScopeToClaims());
+                claims.addAll(claimObjects);
+                claims.addAll(requestedTypedClaims);
+
+                return claims;
+            }
+
+            /**
+             * Computes and returns a claim value.
+             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.
+             * @see claimResolvers
+             * If no resolver function is found, uses the default claim resolver function.
+             *
+             * @param {org.forgerock.openidconnect.Claim} claim
+             * An object that provides methods to obtain information/requirements associated with a claim.
+             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
+             * @returns {*} Claim value.
+             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
+             * Rethrows this exception if a claim resolver throws it.
+             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver
+             * if you want to terminate the claim processing.
+             */
+            function computeClaim(claim) {
+                var resolveClaim;
+                var message;
+
+                try {
+                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;
+
+                    return resolveClaim(claim);
+                } catch (e) {
+                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;
+
+                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {
+                        throw e;
+                    }
+
+                    if (logger.warningEnabled()) {
+                        logger.warning(message);
+                    }
+                }
+            }
+
+            var computedClaims = new frJava.LinkedHashMap();
+
+            getClaims().toArray().forEach(function (claim) {
+                var claimValue = computeClaim(claim);
+
+                if (isClaimValueValid(claimValue)) {
+                    computedClaims.put(claim.getName(), claimValue);
+                } else {
+                    /**
+                     * If a claim has been processed, but appears in the list again,
+                     * and its value cannot be computed under the new conditions,
+                     * the claim is removed from the final result.
+                     *
+                     * For example, a claim could be mapped to a scope and found in the user profile,
+                     * but also requested by the client with required values that don't match the computed one.
+                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.
+                     * for the relevant OIDC specification details.
+                     */
+                    computedClaims.remove(claim.getName());
+                }
+            });
+
+            return computedClaims;
+        }
+
+        /**
+         * Creates a map of requested scopes and the corresponding claim names.
+         * @returns {java.util.LinkedHashMap}
+         */
+        function getCompositeScopes () {
+            var compositeScopes = new frJava.LinkedHashMap();
 
-(function () {
-    var frJava = JavaImporter(
-        org.forgerock.json.JsonValue
-    );
+            scopes.toArray().forEach(function (scope) {
+                var scopeClaims = new frJava.ArrayList();
 
-    var normalizedProfileData = frJava.JsonValue.json(frJava.JsonValue.object());
-  
-      //logger.message('Seguin rawProfile: '+rawProfile);
+                if (scopeClaimsMap[scope]) {
+                    scopeClaimsMap[scope].forEach(function (claimName) {
+                        scopeClaims.add(claimName);
+                    });
+                }
 
-    normalizedProfileData.put('id', rawProfile.get('sub').asString());
-    normalizedProfileData.put('displayName', rawProfile.get('givenName').asString() + ' ' + rawProfile.get('sn').asString());
-    normalizedProfileData.put('email', rawProfile.get('mail').asString());
-    normalizedProfileData.put('givenName', rawProfile.get('givenName').asString());
-    normalizedProfileData.put('familyName', rawProfile.get('sn').asString());
-    normalizedProfileData.put('username', rawProfile.get('upn').asString());
-    normalizedProfileData.put('roles', rawProfile.get('roles').asString());
-  
-      //logger.message('Seguin normalizedProfileData: '+normalizedProfileData);
+                if (scopeClaims.size()) {
+                    compositeScopes.put(scope, scopeClaims);
+                }
+            });
 
-    return normalizedProfileData;
+            return compositeScopes;
+        }
+
+        // PUBLIC METHODS
+
+        return {
+            setScopeClaimsMap: setScopeClaimsMap,
+            setClaimResolvers: setClaimResolvers,
+            getUserProfileClaimResolver: getUserProfileClaimResolver,
+            getAddressClaimResolver: getAddressClaimResolver,
+            getEssentialClaimResolver: getEssentialClaimResolver,
+            getUserInfoClaims: getUserInfoClaims
+        };
+    }
+
+    // RESULTS
+
+    /**
+     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class
+     * populated with the computed claim values and
+     * the requested scopes mapped to the claim names.
+     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
+     *
+     * Assigning it to a variable gives you an opportunity
+     * to log the content of the returned value during development.
+     */
+    var userInfoClaims = utils.getUserInfoClaims();
+
+    /*
+    logger.error(scriptName + ' results:')
+    logger.error('Values: ' + userInfoClaims.getValues())
+    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())
+    */
+
+    return userInfoClaims;
 }());
 "
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/ADFS-Profile-Normalization-(JS).script.json 1`] = `
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Alpha-endUserUIClient-OIDC-Claims-Script.script.json 1`] = `
 {
+  "meta": Any<Object>,
   "script": {
-    "dbe0bf9a-72aa-49d5-8483-9db147985a47": {
-      "_id": "dbe0bf9a-72aa-49d5-8483-9db147985a47",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+    "e1db8a0a-0329-4962-a5bf-ecffaca376ae": {
+      "_id": "e1db8a0a-0329-4962-a5bf-ecffaca376ae",
+      "context": "OIDC_CLAIMS",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Normalizes raw profile data from ADFS",
+      "description": "Used by endUserUIClient",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "ADFS Profile Normalization (JS)",
-      "script": "file://ADFS-Profile-Normalization-(JS).script.js",
+      "name": "Alpha endUserUIClient OIDC Claims Script",
+      "script": "file://Alpha-endUserUIClient-OIDC-Claims-Script.script.js",
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-OAuth2-Access-Token-Modification-Script.script.js 1`] = `
-"/*
- * Copyright 2019-2021 ForgeRock AS. All Rights Reserved.
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script lets you modify information associated with an OAuth2 access token
- * with methods provided by the AccessToken (1) interface.
- * The changes made to OAuth2 access tokens will directly impact the size of the CTS tokens,
- * and, similarly, the size of the JWTs if client-based OAuth2 tokens are utilized.
- * When adding/updating fields make sure that the token size remains within client/user-agent limits.
- *
- * Defined variables:
- * accessToken - AccessToken (1).
- *               The access token to be updated.
- *               Mutable object, all changes to the access token will be reflected.
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *
- * Return - no value is expected, changes shall be made to the accessToken parameter directly.
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Check-Username.script.js 1`] = `
+"/* Check Username
  *
- * Class reference:
- * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
+ * Author: volker.scheuber@forgerock.com
+ * 
+ * Check if username has already been collected.
+ * Return "known" if yes, "unknown" otherwise.
+ * 
+ * This script does not need to be parametrized. It will work properly as is.
+ * 
+ * The Scripted Decision Node needs the following outcomes defined:
+ * - known
+ * - unknown
  */
-
-/* EXAMPLE
 (function () {
-    var frJava = JavaImporter(
-        org.forgerock.http.protocol.Request,
-        org.forgerock.http.protocol.Response
-    );
-
-    // Always includes this field in the token.
-    accessToken.setField('key1', 'value1');
-
-    // Receives and adds to the access token additional values by performing a REST call to an external service.
-    // WARNING: Below, you will find a reference to a third-party site, which is provided only as an example.
-    var uri = 'https://jsonplaceholder.typicode.com/posts';
-
-    try {
-        var request = new frJava.Request();
-
-        // You can chain methods that return the request object.
-        request.setUri(uri)
-            .setMethod('POST')
-            .setEntity(JSON.stringify({
-                updatedFields: {
-                    key2: 'value2',
-                    key3: 'value3'
-                }
-            }));
-
-        // You can call a method when chaining is not possible.
-        request.getHeaders().add('Content-Type', 'application/json; charset=UTF-8');
-
-        // Sends the request and receives the response.
-        var response = httpClient.send(request).getOrThrow();
-
-        // Checks if the response status is as expected.
-        if (response.getStatus() === org.forgerock.http.protocol.Status.CREATED) {
-            var result = JSON.parse(response.getEntity().getString());
-
-            // Set multiple token fields at once.
-            accessToken.setFields(result.updatedFields);
-        } else {
-            logger.error('Unable to obtain access token modifications. Status: ' + response.getStatus() + '. Content: ' + response.getEntity().getString());
-        }
-    } catch (e) {
-        logger.error('The request processing was interrupted. ' + e);
-
-        // The access token request fails with the HTTP 500 error in this case.
-        throw ('Unable to obtain response from: ' + uri);
+    if (null != sharedState.get("username")) {
+        outcome = "known";
+    }
+    else {
+        outcome = "unknown";
     }
+}());
+"
+`;
 
-    // Adds new fields containing identity attribute values to the access token.
-    accessToken.setField('mail', identity.getAttribute('mail'));
-    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Check-Username.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "739bdc48-fd24-4c52-b353-88706d75558a": {
+      "_id": "739bdc48-fd24-4c52-b353-88706d75558a",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Check if username has already been collected.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Check Username",
+      "script": "file://Check-Username.script.js",
+    },
+  },
+}
+`;
 
-    // Adds new fields containing the session property values.
-    // NOTE: session may not be available for non-interactive authorization grants.
-    if (session) {
-        try {
-            accessToken.setField('ipAddress', session.getProperty('Host'));
-        } catch (e) {
-            logger.error('Unable to retrieve session property value. ' + e);
-        }
-    }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Custom-Device-Match-Script.script.js 1`] = `
+"/*
+ * Custom Device Match Script
+ */
 
-    // Removes a native field from the token entry, that was set by AM.
-    // WARNING: removing native fields from the token may result in loss of functionality.
-    // accessToken.removeTokenName()
+outcome = "true";
+"
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Custom-Device-Match-Script.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "d58977ed-0542-4147-8197-973ef7300191": {
+      "_id": "d58977ed-0542-4147-8197-973ef7300191",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Custom Device Match Script",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Custom Device Match Script",
+      "script": "file://Custom-Device-Match-Script.script.js",
+    },
+  },
+}
+`;
 
-    // No return value is expected. Let it be undefined.
-}());
-*/
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Dummy.script.js 1`] = `
+"
+outcome = "true";
 "
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Dummy.script.json 1`] = `
 {
+  "meta": Any<Object>,
   "script": {
-    "39c08084-1238-43e8-857f-2e11005eac49": {
-      "_id": "39c08084-1238-43e8-857f-2e11005eac49",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+    "4c963bb3-7084-43d0-bcdc-a47482cf1825": {
+      "_id": "4c963bb3-7084-43d0-bcdc-a47482cf1825",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Default alpha realm script for OAuth2 Access Token Modification",
-      "evaluatorVersion": "1.0",
+      "description": "Dummy",
+      "evaluatorVersion": "2.0",
       "language": "JAVASCRIPT",
-      "name": "Alpha OAuth2 Access Token Modification Script",
-      "script": "file://Alpha-OAuth2-Access-Token-Modification-Script.script.js",
+      "name": "Dummy",
+      "script": "file://Dummy.script.js",
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-OIDC-Claims-Script.script.js 1`] = `
-"/*
- * Copyright 2014-2021 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.
- * The claim values are computed for:
- * the claims derived from the requested scopes,
- * the claims provided by the authorization server,
- * and the claims requested by the client via the claims parameter.
- *
- * In the CONFIGURATION AND CUSTOMIZATION section, you can
- * define the scope-to-claims mapping, and
- * assign to each claim a resolver function that will compute the claim value.
- *
- * Defined variables (class references are provided below):
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * claims - Map<String, Object> (5).
- *          Always present, default server provided claims.
- * claimObjects - List<Claim> (7, 2).
- *                Always present, the default server provided claims.
- * requestedClaims - Map<String, Set<String>> (5).
- *                   Always present, not empty if the request contains the claims parameter and the server has enabled
- *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;
- *                   requested claims with no requested values will have a key but no value in the map. A key with
- *                   a single value in its Set (6) indicates that this is the only value that should be returned.
- * requestedTypedClaims - List<Claim> (7, 2).
- *                        Always present, the requested claims.
- *                        Requested claims with no requested values will have a claim with no values.
- *                        A claim with a single value indicates this is the only value that should be returned.
- * claimsLocales - List<String> (7).
- *                 The values from the 'claims_locales' parameter.
- *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *              In order to use the client, you may need to add
- *              org.forgerock.http.Client,
- *              org.forgerock.http.protocol.*,
- *              and org.forgerock.util.promise.PromiseImpl
- *              to the allowed Java classes in the scripting engine configuration, as described in:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html
- *
- * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.
- *          The result of the last statement in the script is returned to the server.
- *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
- *          is the last (and only) statement in this script, and its return value will become the script result.
- *          Do not use "return variable" statement outside of a function definition.
- *          See RESULTS section for additional details.
- *
- * Class reference:
- * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.
- * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).
- *         An instance of org.forgerock.openidconnect.Claim has methods to access
- *         the claim name, requested values, locale, and whether the claim is essential.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
-*/
-
-(function () {
-    // SETUP
-
-    /**
-     * Claim processing utilities.
-     * An object that contains reusable functions for processing claims.
-     * @see CLAIM PROCESSING UTILITIES section for details.
-     */
-    var utils = getUtils();
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: EmailAsUsername.script.js 1`] = `
+"objectAttributes = sharedState.get("objectAttributes")
+userName = objectAttributes.get("userName")
 
-    // CONFIGURATION AND CUSTOMIZATION
+if(userName){
+  //Form Fill
+  objectAttributes.put("mail", userName)
+} else {
+  //Social
+  objectAttributes.put("userName", objectAttributes.get("mail"))
+}
 
-    /**
-     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a scope value to an array of claim names
-     * to specify which claims need to be processed and returned for the requested scopes.
-     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}
-     * for the scope values that could be used to request claims as defined in the OIDC specification.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     *
-     * CUSTOMIZATION
-     * You can choose the claim names returned for a scope.
-     */
-    utils.setScopeClaimsMap({
-        profile: [
-            'name',
-            'family_name',
-            'given_name',
-            'zoneinfo',
-            'locale'
-        ],
-        email: ['email'],
-        address: ['address'],
-        phone: ['phone_number']
-    });
 
-    /**
-     * In this script, each claim
-     * derived from the requested scopes,
-     * provided by the authorization server, and
-     * requested by the client via the claims parameter
-     * will be processed by a function associated with the claim name.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a claim name to a resolver function,
-     * which will be automatically executed for each claim processed by the script.
-     *
-     * The claim resolver function will receive the requested claim information
-     * in an instance of org.forgerock.openidconnect.Claim as the first argument.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}
-     * for details on the Claim class.
-     *
-     * If the claim resolver function returns a value,
-     * other than undefined or null,
-     * the claim will be included in the script's results.
-     *
-     * The Claim instance provides methods to check
-     * what the name of the claim is,
-     * which values the claim request contains,
-     * whether the claim is essential, and
-     * which locale the claim is associated with.
-     * The resolver function can consider this information when computing and returning the claim value.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),
-     * is called to return a claim resolver function based on a user profile attribute.
-     * @see CLAIM RESOLVERS section for the implementation details and examples.
-     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.
-     *
-     * CUSTOMIZATION
-     * You can reuse the predefined utils methods with your custom arguments.
-     * You can also specify a custom resolver function for a claim name,
-     * that will compute and return the claim value—as shown in the commented out example below.
-     */
-    utils.setClaimResolvers({
-        /*
-        // An example of a simple claim resolver function that is defined for a claim
-        // directly in the configuration object:
-        custom-claim-name: function (requestedClaim) {
-            // In this case, initially, the claim value comes straight from a user profile attribute value:
-            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]
+sharedState.put("objectAttributes", objectAttributes);
+//sharedState.put("username", mail)
 
-            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.
-            // You can use:
-            // requestedClaim.getName()
-            // requestedClaim.getValues()
-            // requestedClaim.getLocale()
-            // requestedClaim.isEssential()
+outcome = "true";
+"
+`;
 
-            return claimValue
-        },
-        */
-        /**
-         * The use of utils.getUserProfileClaimResolver shows how
-         * an argument passed to a function that returns a claim resolver
-         * becomes available to the resolver function (via its lexical context).
-         */
-        name: utils.getUserProfileClaimResolver('cn'),
-        family_name: utils.getUserProfileClaimResolver('sn'),
-        given_name: utils.getUserProfileClaimResolver('givenname'),
-        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),
-        locale: utils.getUserProfileClaimResolver('preferredlocale'),
-        email: utils.getUserProfileClaimResolver('mail'),
-        address: utils.getAddressClaimResolver(
-            /**
-             * The passed in user profile claim resolver function
-             * can be used by the address claim resolver function
-             * to obtain the claim value to be formatted as per the OIDC specification:
-             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.
-             */
-            utils.getUserProfileClaimResolver('postaladdress')
-        ),
-        phone_number: utils.getUserProfileClaimResolver('telephonenumber')
-    });
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: EmailAsUsername.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "e5c302c8-f838-4698-87cc-d7225fc82454": {
+      "_id": "e5c302c8-f838-4698-87cc-d7225fc82454",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "EmailAsUsername",
+      "script": "file://EmailAsUsername.script.js",
+    },
+  },
+}
+`;
 
-    // CLAIM PROCESSING UTILITIES
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Format-Username.script.js 1`] = `
+"var username = sharedState.get("username");
 
-    /**
-     * @returns {object} An object that contains reusable claim processing utilities.
-     * @see PUBLIC METHODS section and the return statement for the list of exported functions.
-     */
-    function getUtils () {
-        // IMPORT JAVA
+sharedState.put("displayName", username);
+outcome = "continue";
+"
+`;
 
-        /**
-         * Provides Java scripting functionality.
-         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.
-         */
-        var frJava = JavaImporter(
-            org.forgerock.oauth2.core.exceptions.InvalidRequestException,
-            org.forgerock.oauth2.core.UserInfoClaims,
-            org.forgerock.openidconnect.Claim,
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Format-Username.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "223739f3-9c54-43b7-9572-3c5338786145": {
+      "_id": "223739f3-9c54-43b7-9572-3c5338786145",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Format Username",
+      "script": "file://Format-Username.script.js",
+    },
+  },
+}
+`;
 
-            java.util.LinkedHashMap,
-            java.util.ArrayList
-        );
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter.script.js 1`] = `
+"/*
+ * Copyright 2023 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-        // SET UP CONFIGURATION
+/*
+ * The script has these top level functions that could be executed during a SAML2 flow.
+ *      - preSingleSignOnRequest
+ *      - preSingleSignOnProcess
+ *      - postSingleSignOnSuccess
+ *      - postSingleSignOnFailure
+ *      - postNewNameIDSuccess
+ *      - postTerminateNameIDSuccess
+ *      - preSingleLogoutProcess
+ *      - postSingleLogoutSuccess
+ *
+ * Please see the JavaDoc for the interface for more information about these methods.
+ * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
+ * Note that the initialize method is not supported in the scripts.
+ *
+ * Defined variables. Check the documentation on the respective functions for the variables available to it.
+ *
+ * hostedEntityId - String
+ *     Entity ID for the hosted IDP
+ * realm - String
+ *     Realm of the hosted IDP
+ * idpEntityId - String
+ *     The entity ID for the Identity Provider for which the sign-on request will be sent.
+ * request - HttpServletRequest (1)
+ *     Servlet request object
+ * response - HttpServletResponse (2)
+ *     Servlet response object
+ * authnRequest - AuthnRequest (3)
+ *     The authentication request sent that is sent from the Service Provider.
+ * session - SSOToken (4)
+ *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
+ * res - Response (5)
+ *     The SSO Response received from the Identity Provider.
+ * profile - String
+ *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
+ *          - SAML2Constants.HTTP_POST
+ *          - SAML2Constants.HTTP_ARTIFACT
+ *          - SAML2Constants.PAOS
+ * out - PrintWriter (7)
+ *     The PrintWriter that can be used to write to.
+ * isFederation - boolean
+ *     Set to true if using federation, otherwise false.
+ * failureCode - int
+ *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
+ * userId - String
+ *     The unique universal ID of the user with whom the new name identifier request was performed.
+ * idRequest - ManageNameIDRequest (8)
+ *     The new name identifier request, this will be null if the request object is not available
+ * idResponse - ManageNameIDResponse (9)
+ *     The new name identifier response, this will be null if the response object is not available
+ * binding - String
+ *     The binding used for the new name identifier request. This will be one of the following values:
+ *          - SAML2Constants.SOAP
+ *          - SAML2Constants.HTTP_REDIRECT
+ * logoutRequest - LogoutRequest (10)
+ *     The single logout request.
+ * logoutResponse - LogoutResponse (11)
+ *     The single logout response.
+ * spAdapterScriptHelper - SpAdapterScriptHelper (12)
+ *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
+ * logger - Logger instance
+ *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *     Corresponding log files will be prefixed with: scripts.<script name>
+ *
+ * Throws SAML2Exception (13):
+ *     for any exceptions occurring in the adapter. The federation process will continue
+ *
+ * Class reference:
+ * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
+ * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
+ * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
+ * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
+ * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
+ * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
+ * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
+ * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
+ * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
+ * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
+ * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
+ * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
+ * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
+ */
 
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported scope values (scopes)
-         * and the corresponding claim names for each scope value.
-         */
-        var scopeClaimsMap;
+/*
+ * Template/default script for SAML2 SP Adapter scripted plugin.
+ */
 
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported claim names
-         * and the resolver functions returning the claim value.
-         */
-        var claimResolvers;
+/*
+ * Available variables for preSingleSignOnRequest:
+ *     hostedEntityId
+ *     idpEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleSignOnRequest() {
+}
 
-        /**
-         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps each supported scope value to an array of claim names,
-         * in order to specify which claims need to be processed for the requested scopes.
-         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.
-         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.
-         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.
-         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.
-         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.
-         * @returns {undefined}
-         */
-        function setScopeClaimsMap(params) {
-            scopeClaimsMap = params;
-        }
+/*
+ * Available variables for preSingleSignOnProcess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     res
+ *     profile
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleSignOnProcess() {
+}
 
-        /**
-         * A (public) method that accepts an object that maps the supported claim names
-         * and the resolver functions returning the claim value,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps
-         * each supported claim name to a function that computes and returns the claim value.
-         */
-        function setClaimResolvers(params) {
-            claimResolvers = params;
-        }
+/*
+ * Available variables for postSingleSignOnSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     out
+ *     session
+ *     authnRequest
+ *     res
+ *     profile
+ *     isFederation
+ *     spAdapterScriptHelper
+ *     logger
+ *
+ * Return - true if response is being redirected, false if not. Default to false.
+ */
+function postSingleSignOnSuccess() {
+    return false;
+}
+
+/*
+ * Available variables for postSingleSignOnFailure:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     res
+ *     profile
+ *     failureCode
+ *     spAdapterScriptHelper
+ *     logger
+ *
+ * Return - true if response is being redirected, false if not. Default to false.
+ */
+function postSingleSignOnFailure() {
+    return false;
+}
 
-        // CLAIM RESOLVERS
+/*
+ * Available variables for postNewNameIDSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     idRequest
+ *     idResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postNewNameIDSuccess() {
+}
 
-        /**
-         * Claim resolvers are functions that return a claim value.
-         * @param {*}
-         * @returns {*}
-         */
+/*
+ * Available variables for postTerminateNameIDSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     idRequest
+ *     idResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postTerminateNameIDSuccess() {
+}
 
-        /**
-         * Defines a claim resolver based on a user profile attribute.
-         * @param {string} attributeName - Name of the user profile attribute.
-         * @returns {function} A function that will determine the claim value
-         * based on the user profile attribute and the (requested) claim properties.
-         */
-        function getUserProfileClaimResolver (attributeName) {
-            /**
-             * Resolves a claim with a user profile attribute value.
-             * Returns undefined if the identity attribute is not populated,
-             * OR if the claim has requested values that do not contain the identity attribute value.
-             * ATTENTION: the aforementioned comparison is case-sensitive.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {string|HashSet|undefined}
-             */
-            function resolveClaim(claim) {
-                var userProfileValue;
+/*
+ * Available variables for preSingleLogoutProcess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     logoutRequest
+ *     logoutResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleLogoutProcess() {
+}
 
-                if (identity) {
-                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));
+/*
+ * Available variables for postSingleLogoutSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     logoutRequest
+ *     logoutResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postSingleLogoutSuccess() {
+}
+"
+`;
 
-                    if (userProfileValue && !userProfileValue.isEmpty()) {
-                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {
-                            return userProfileValue;
-                        }
-                    }
-                }
-            }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "07ee6240-d106-4e25-a781-5fcabc477d22": {
+      "_id": "07ee6240-d106-4e25-a781-5fcabc477d22",
+      "context": "SAML2_SP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "FrodoSPAdapter",
+      "script": "file://FrodoSPAdapter.script.js",
+    },
+  },
+}
+`;
 
-            return resolveClaim;
-        }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter-imported-(1).script.js 1`] = `
+"/*
+ * Copyright 2023 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-        /**
-         * Returns an address claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional formatting to the value before returning it.
-         */
-        function getAddressClaimResolver (resolveClaim) {
-            /**
-             * Creates an address claim object from a value returned by a claim resolver,
-             * and returns the address claim object as the claim value.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.
-             */
-            function resolveAddressClaim(claim) {
-                var claimValue = resolveClaim(claim);
-                var addressObject;
+/*
+ * The script has these top level functions that could be executed during a SAML2 flow.
+ *      - preSingleSignOnRequest
+ *      - preSingleSignOnProcess
+ *      - postSingleSignOnSuccess
+ *      - postSingleSignOnFailure
+ *      - postNewNameIDSuccess
+ *      - postTerminateNameIDSuccess
+ *      - preSingleLogoutProcess
+ *      - postSingleLogoutSuccess
+ *
+ * Please see the JavaDoc for the interface for more information about these methods.
+ * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
+ * Note that the initialize method is not supported in the scripts.
+ *
+ * Defined variables. Check the documentation on the respective functions for the variables available to it.
+ *
+ * hostedEntityId - String
+ *     Entity ID for the hosted IDP
+ * realm - String
+ *     Realm of the hosted IDP
+ * idpEntityId - String
+ *     The entity ID for the Identity Provider for which the sign-on request will be sent.
+ * request - HttpServletRequest (1)
+ *     Servlet request object
+ * response - HttpServletResponse (2)
+ *     Servlet response object
+ * authnRequest - AuthnRequest (3)
+ *     The authentication request sent that is sent from the Service Provider.
+ * session - SSOToken (4)
+ *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
+ * res - Response (5)
+ *     The SSO Response received from the Identity Provider.
+ * profile - String
+ *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
+ *          - SAML2Constants.HTTP_POST
+ *          - SAML2Constants.HTTP_ARTIFACT
+ *          - SAML2Constants.PAOS
+ * out - PrintWriter (7)
+ *     The PrintWriter that can be used to write to.
+ * isFederation - boolean
+ *     Set to true if using federation, otherwise false.
+ * failureCode - int
+ *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
+ * userId - String
+ *     The unique universal ID of the user with whom the new name identifier request was performed.
+ * idRequest - ManageNameIDRequest (8)
+ *     The new name identifier request, this will be null if the request object is not available
+ * idResponse - ManageNameIDResponse (9)
+ *     The new name identifier response, this will be null if the response object is not available
+ * binding - String
+ *     The binding used for the new name identifier request. This will be one of the following values:
+ *          - SAML2Constants.SOAP
+ *          - SAML2Constants.HTTP_REDIRECT
+ * logoutRequest - LogoutRequest (10)
+ *     The single logout request.
+ * logoutResponse - LogoutResponse (11)
+ *     The single logout response.
+ * spAdapterScriptHelper - SpAdapterScriptHelper (12)
+ *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
+ * logger - Logger instance
+ *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *     Corresponding log files will be prefixed with: scripts.<script name>
+ *
+ * Throws SAML2Exception (13):
+ *     for any exceptions occurring in the adapter. The federation process will continue
+ *
+ * Class reference:
+ * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
+ * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
+ * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
+ * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
+ * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
+ * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
+ * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
+ * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
+ * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
+ * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
+ * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
+ * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
+ * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
+ */
 
-                if (isClaimValueValid(claimValue)) {
-                    addressObject = new frJava.LinkedHashMap();
+/*
+ * Template/default script for SAML2 SP Adapter scripted plugin.
+ */
 
-                    addressObject.put('formatted', claimValue);
+/*
+ * Available variables for preSingleSignOnRequest:
+ *     hostedEntityId
+ *     idpEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleSignOnRequest() {
+}
 
-                    return addressObject;
-                }
-            }
+/*
+ * Available variables for preSingleSignOnProcess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     res
+ *     profile
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleSignOnProcess() {
+}
 
-            return resolveAddressClaim;
-        }
+/*
+ * Available variables for postSingleSignOnSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     out
+ *     session
+ *     authnRequest
+ *     res
+ *     profile
+ *     isFederation
+ *     spAdapterScriptHelper
+ *     logger
+ *
+ * Return - true if response is being redirected, false if not. Default to false.
+ */
+function postSingleSignOnSuccess() {
+    return false;
+}
 
-        /**
-         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional logic for essential claims.
-         */
-        function getEssentialClaimResolver (resolveClaim) {
-            /**
-             * Returns a claim value or throws an error.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * Throws an exception if the claim is essential and no value is returned for the claim.
-             *
-             * Use of this resolver is optional.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:
-             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,
-             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,
-             * unless otherwise specified in the description of the specific claim."
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*}
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             */
-            function resolveEssentialClaim(claim) {
-                var claimValue = resolveClaim(claim);
+/*
+ * Available variables for postSingleSignOnFailure:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     res
+ *     profile
+ *     failureCode
+ *     spAdapterScriptHelper
+ *     logger
+ *
+ * Return - true if response is being redirected, false if not. Default to false.
+ */
+function postSingleSignOnFailure() {
+    return false;
+}
 
-                if (claim.isEssential() && !isClaimValueValid(claimValue)) {
-                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());
-                }
+/*
+ * Available variables for postNewNameIDSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     idRequest
+ *     idResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postNewNameIDSuccess() {
+}
 
-                return claimValue;
-            }
+/*
+ * Available variables for postTerminateNameIDSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     idRequest
+ *     idResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postTerminateNameIDSuccess() {
+}
 
-            return resolveEssentialClaim;
-        }
+/*
+ * Available variables for preSingleLogoutProcess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     logoutRequest
+ *     logoutResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleLogoutProcess() {
+}
 
-        /**
-         * Provides default resolution for a claim.
-         * Use it if a claim-specific resolver is not defined in the configuration.
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @returns {*} A single value associated with this claim.
-         */
-        function resolveAnyClaim (claim) {
-            if (claim.getValues().size() === 1) {
-                return claim.getValues().toArray()[0];
-            }
-        }
+/*
+ * Available variables for postSingleLogoutSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     logoutRequest
+ *     logoutResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postSingleLogoutSuccess() {
+}
+"
+`;
 
-        // UTILITIES
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter-imported-(1).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "5ce0d38a-154c-4be5-bd22-f9879c77e895": {
+      "_id": "5ce0d38a-154c-4be5-bd22-f9879c77e895",
+      "context": "SAML2_SP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "FrodoSPAdapter - imported (1)",
+      "script": "file://FrodoSPAdapter-imported-(1).script.js",
+    },
+  },
+}
+`;
 
-        /**
-         * Returns claim value from a set.
-         * If the set contains a single value, returns the value.
-         * If the set contains multiple values, returns the set.
-         * Otherwise, returns undefined.
-         *
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.
-         * @returns {string|java.util.HashSet|undefined}
-         */
-        function getClaimValueFromSet (claim, set) {
-            if (set && set.size()) {
-                if (set.size() === 1) {
-                    return set.toArray()[0];
-                } else {
-                    return set;
-                }
-            } else if (logger.warningEnabled()) {
-                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());
-            }
-        }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter-imported-(2).script.js 1`] = `
+"/*
+ * Copyright 2023 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-        function isClaimValueValid (claimValue) {
-            if (typeof claimValue === 'undefined' || claimValue === null) {
-                return false;
-            }
+/*
+ * The script has these top level functions that could be executed during a SAML2 flow.
+ *      - preSingleSignOnRequest
+ *      - preSingleSignOnProcess
+ *      - postSingleSignOnSuccess
+ *      - postSingleSignOnFailure
+ *      - postNewNameIDSuccess
+ *      - postTerminateNameIDSuccess
+ *      - preSingleLogoutProcess
+ *      - postSingleLogoutSuccess
+ *
+ * Please see the JavaDoc for the interface for more information about these methods.
+ * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
+ * Note that the initialize method is not supported in the scripts.
+ *
+ * Defined variables. Check the documentation on the respective functions for the variables available to it.
+ *
+ * hostedEntityId - String
+ *     Entity ID for the hosted IDP
+ * realm - String
+ *     Realm of the hosted IDP
+ * idpEntityId - String
+ *     The entity ID for the Identity Provider for which the sign-on request will be sent.
+ * request - HttpServletRequest (1)
+ *     Servlet request object
+ * response - HttpServletResponse (2)
+ *     Servlet response object
+ * authnRequest - AuthnRequest (3)
+ *     The authentication request sent that is sent from the Service Provider.
+ * session - SSOToken (4)
+ *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
+ * res - Response (5)
+ *     The SSO Response received from the Identity Provider.
+ * profile - String
+ *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
+ *          - SAML2Constants.HTTP_POST
+ *          - SAML2Constants.HTTP_ARTIFACT
+ *          - SAML2Constants.PAOS
+ * out - PrintWriter (7)
+ *     The PrintWriter that can be used to write to.
+ * isFederation - boolean
+ *     Set to true if using federation, otherwise false.
+ * failureCode - int
+ *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
+ * userId - String
+ *     The unique universal ID of the user with whom the new name identifier request was performed.
+ * idRequest - ManageNameIDRequest (8)
+ *     The new name identifier request, this will be null if the request object is not available
+ * idResponse - ManageNameIDResponse (9)
+ *     The new name identifier response, this will be null if the response object is not available
+ * binding - String
+ *     The binding used for the new name identifier request. This will be one of the following values:
+ *          - SAML2Constants.SOAP
+ *          - SAML2Constants.HTTP_REDIRECT
+ * logoutRequest - LogoutRequest (10)
+ *     The single logout request.
+ * logoutResponse - LogoutResponse (11)
+ *     The single logout response.
+ * spAdapterScriptHelper - SpAdapterScriptHelper (12)
+ *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
+ * logger - Logger instance
+ *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *     Corresponding log files will be prefixed with: scripts.<script name>
+ *
+ * Throws SAML2Exception (13):
+ *     for any exceptions occurring in the adapter. The federation process will continue
+ *
+ * Class reference:
+ * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
+ * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
+ * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
+ * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
+ * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
+ * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
+ * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
+ * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
+ * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
+ * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
+ * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
+ * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
+ * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
+ */
 
-            return true;
-        }
+/*
+ * Template/default script for SAML2 SP Adapter scripted plugin.
+ */
 
-        // CLAIM PROCESSING
+/*
+ * Available variables for preSingleSignOnRequest:
+ *     hostedEntityId
+ *     idpEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleSignOnRequest() {
+}
 
-        /**
-         * Constructs and returns an object populated with the computed claim values
-         * and the requested scopes mapped to the claim names.
-         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-         * @see RESULTS section for the use of this function.
-         */
-        function getUserInfoClaims () {
-            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());
-        }
+/*
+ * Available variables for preSingleSignOnProcess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     res
+ *     profile
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleSignOnProcess() {
+}
 
-        /**
-         * Creates a map of (requested) claim names populated with the computed claim values.
-         * @returns {java.util.LinkedHashMap}
-         * A map of the requested claim names and the corresponding claim values.
-         */
-        function getComputedClaims () {
-            /**
-             * Creates a complete list of claim objects from:
-             * the claims derived from the scopes,
-             * the claims provided by the authorization server,
-             * and the claims requested by the client.
-             * @returns {java.util.ArrayList}
-             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-             */
-            function getClaims() {
-                /**
-                 * Returns a list of claim objects for the requested scopes.
-                 * Uses the scopeClaimsMap configuration option to derive the claim names;
-                 * no other properties of a claim derived from a scope are populated.
-                 * @returns {java.util.ArrayList}
-                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.
-                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-                 */
-                function convertScopeToClaims() {
-                    var claims = new frJava.ArrayList();
+/*
+ * Available variables for postSingleSignOnSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     out
+ *     session
+ *     authnRequest
+ *     res
+ *     profile
+ *     isFederation
+ *     spAdapterScriptHelper
+ *     logger
+ *
+ * Return - true if response is being redirected, false if not. Default to false.
+ */
+function postSingleSignOnSuccess() {
+    return false;
+}
 
-                    scopes.toArray().forEach(function (scope) {
-                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {
-                            scopeClaimsMap[scope].forEach(function (claimName) {
-                                claims.add(new frJava.Claim(claimName));
-                            });
-                        }
-                    });
+/*
+ * Available variables for postSingleSignOnFailure:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     authnRequest
+ *     res
+ *     profile
+ *     failureCode
+ *     spAdapterScriptHelper
+ *     logger
+ *
+ * Return - true if response is being redirected, false if not. Default to false.
+ */
+function postSingleSignOnFailure() {
+    return false;
+}
 
-                    return claims;
-                }
+/*
+ * Available variables for postNewNameIDSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     idRequest
+ *     idResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postNewNameIDSuccess() {
+}
 
-                var claims = new frJava.ArrayList();
+/*
+ * Available variables for postTerminateNameIDSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     idRequest
+ *     idResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postTerminateNameIDSuccess() {
+}
 
-                claims.addAll(convertScopeToClaims());
-                claims.addAll(claimObjects);
-                claims.addAll(requestedTypedClaims);
+/*
+ * Available variables for preSingleLogoutProcess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     logoutRequest
+ *     logoutResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function preSingleLogoutProcess() {
+}
 
-                return claims;
-            }
+/*
+ * Available variables for postSingleLogoutSuccess:
+ *     hostedEntityId
+ *     realm
+ *     request
+ *     response
+ *     userId
+ *     logoutRequest
+ *     logoutResponse
+ *     binding
+ *     spAdapterScriptHelper
+ *     logger
+ */
+function postSingleLogoutSuccess() {
+}
+"
+`;
 
-            /**
-             * Computes and returns a claim value.
-             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.
-             * @see claimResolvers
-             * If no resolver function is found, uses the default claim resolver function.
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*} Claim value.
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             * Rethrows this exception if a claim resolver throws it.
-             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver
-             * if you want to terminate the claim processing.
-             */
-            function computeClaim(claim) {
-                var resolveClaim;
-                var message;
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: FrodoSPAdapter-imported-(2).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd": {
+      "_id": "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd",
+      "context": "SAML2_SP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "FrodoSPAdapter - imported (2)",
+      "script": "file://FrodoSPAdapter-imported-(2).script.js",
+    },
+  },
+}
+`;
 
-                try {
-                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization.script.groovy 1`] = `
+"/*
+ * Copyright 2022 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-                    return resolveClaim(claim);
-                } catch (e) {
-                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;
+import static org.forgerock.json.JsonValue.field
+import static org.forgerock.json.JsonValue.json
+import static org.forgerock.json.JsonValue.object
 
-                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {
-                        throw e;
-                    }
+return json(object(
+        field("id", rawProfile.id),
+        field("displayName", rawProfile.name),
+        field("username", rawProfile.login)))
+"
+`;
 
-                    if (logger.warningEnabled()) {
-                        logger.warning(message);
-                    }
-                }
-            }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS).script.groovy 1`] = `
+"/*
+ * Copyright 2020 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-            var computedClaims = new frJava.LinkedHashMap();
+import static org.forgerock.json.JsonValue.field
+import static org.forgerock.json.JsonValue.json
+import static org.forgerock.json.JsonValue.object
 
-            getClaims().toArray().forEach(function (claim) {
-                var claimValue = computeClaim(claim);
+logger.warning("GitHub rawProfile: "+rawProfile)
 
-                if (isClaimValueValid(claimValue)) {
-                    computedClaims.put(claim.getName(), claimValue);
-                } else {
-                    /**
-                     * If a claim has been processed, but appears in the list again,
-                     * and its value cannot be computed under the new conditions,
-                     * the claim is removed from the final result.
-                     *
-                     * For example, a claim could be mapped to a scope and found in the user profile,
-                     * but also requested by the client with required values that don't match the computed one.
-                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.
-                     * for the relevant OIDC specification details.
-                     */
-                    computedClaims.remove(claim.getName());
-                }
-            });
+return json(object(
+        field("id", rawProfile.id),
+        field("displayName", rawProfile.name),
+        field("givenName", rawProfile.first_name),
+        field("familyName", rawProfile.last_name),
+        field("photoUrl", rawProfile.picture.data.url),
+        field("email", rawProfile.email),
+        field("username", rawProfile.email)))
+"
+`;
 
-            return computedClaims;
-        }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "23143919-6b78-40c3-b25e-beca19b229e0": {
+      "_id": "23143919-6b78-40c3-b25e-beca19b229e0",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "GitHub Profile Normalization (VS)",
+      "script": "file://GitHub-Profile-Normalization-(VS).script.groovy",
+    },
+  },
+}
+`;
 
-        /**
-         * Creates a map of requested scopes and the corresponding claim names.
-         * @returns {java.util.LinkedHashMap}
-         */
-        function getCompositeScopes () {
-            var compositeScopes = new frJava.LinkedHashMap();
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS)-imported-(1).script.groovy 1`] = `
+"/*
+ * Copyright 2020 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-            scopes.toArray().forEach(function (scope) {
-                var scopeClaims = new frJava.ArrayList();
+import static org.forgerock.json.JsonValue.field
+import static org.forgerock.json.JsonValue.json
+import static org.forgerock.json.JsonValue.object
 
-                if (scopeClaimsMap[scope]) {
-                    scopeClaimsMap[scope].forEach(function (claimName) {
-                        scopeClaims.add(claimName);
-                    });
-                }
+logger.warning("GitHub rawProfile: "+rawProfile)
 
-                if (scopeClaims.size()) {
-                    compositeScopes.put(scope, scopeClaims);
-                }
-            });
+return json(object(
+        field("id", rawProfile.id),
+        field("displayName", rawProfile.name),
+        field("givenName", rawProfile.first_name),
+        field("familyName", rawProfile.last_name),
+        field("photoUrl", rawProfile.picture.data.url),
+        field("email", rawProfile.email),
+        field("username", rawProfile.email)))
+"
+`;
 
-            return compositeScopes;
-        }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS)-imported-(1).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "207f172f-ffb5-439d-b7df-e8e80408830b": {
+      "_id": "207f172f-ffb5-439d-b7df-e8e80408830b",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "GitHub Profile Normalization (VS) - imported (1)",
+      "script": "file://GitHub-Profile-Normalization-(VS)-imported-(1).script.groovy",
+    },
+  },
+}
+`;
 
-        // PUBLIC METHODS
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS)-imported-(2).script.groovy 1`] = `
+"/*
+ * Copyright 2020 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-        return {
-            setScopeClaimsMap: setScopeClaimsMap,
-            setClaimResolvers: setClaimResolvers,
-            getUserProfileClaimResolver: getUserProfileClaimResolver,
-            getAddressClaimResolver: getAddressClaimResolver,
-            getEssentialClaimResolver: getEssentialClaimResolver,
-            getUserInfoClaims: getUserInfoClaims
-        };
-    }
+import static org.forgerock.json.JsonValue.field
+import static org.forgerock.json.JsonValue.json
+import static org.forgerock.json.JsonValue.object
 
-    // RESULTS
+logger.warning("GitHub rawProfile: "+rawProfile)
 
-    /**
-     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class
-     * populated with the computed claim values and
-     * the requested scopes mapped to the claim names.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-     *
-     * Assigning it to a variable gives you an opportunity
-     * to log the content of the returned value during development.
-     */
-    var userInfoClaims = utils.getUserInfoClaims();
+return json(object(
+        field("id", rawProfile.id),
+        field("displayName", rawProfile.name),
+        field("givenName", rawProfile.first_name),
+        field("familyName", rawProfile.last_name),
+        field("photoUrl", rawProfile.picture.data.url),
+        field("email", rawProfile.email),
+        field("username", rawProfile.email)))
+"
+`;
 
-    /*
-    logger.error(scriptName + ' results:')
-    logger.error('Values: ' + userInfoClaims.getValues())
-    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())
-    */
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: GitHub-Profile-Normalization-(VS)-imported-(2).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "fdb60c75-d58b-409f-bef2-ce4ebb04c77c": {
+      "_id": "fdb60c75-d58b-409f-bef2-ce4ebb04c77c",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "GitHub Profile Normalization (VS) - imported (2)",
+      "script": "file://GitHub-Profile-Normalization-(VS)-imported-(2).script.groovy",
+    },
+  },
+}
+`;
 
-    return userInfoClaims;
-}());
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Inactive-Device-Match-Script.script.js 1`] = `
+"/*
+ * Inactive Device Match Script
+ */
+
+outcome = "true";
 "
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-OIDC-Claims-Script.script.json 1`] = `
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Inactive-Device-Match-Script.script.json 1`] = `
 {
+  "meta": Any<Object>,
   "script": {
-    "cf3515f0-8278-4ee3-a530-1bad7424c416": {
-      "_id": "cf3515f0-8278-4ee3-a530-1bad7424c416",
-      "context": "OIDC_CLAIMS",
+    "3bd13a46-61c4-4974-8efb-1700c80c64e3": {
+      "_id": "3bd13a46-61c4-4974-8efb-1700c80c64e3",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Default alpha realm script for OIDC claims",
+      "description": "Inactive Device Match Script",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Alpha OIDC Claims Script",
-      "script": "file://Alpha-OIDC-Claims-Script.script.js",
+      "name": "Inactive Device Match Script",
+      "script": "file://Inactive-Device-Match-Script.script.js",
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.js 1`] = `
-"(function () {
-  if (scopes.contains('fr:autoaccess:*') || scopes.contains('fr:iga:*') || scopes.contains('fr:idc:analytics:*')) {
-    var fr = JavaImporter(
-      com.sun.identity.idm.IdType
-    );
-    var groups = [];
-    identity.getMemberships(fr.IdType.GROUP).toArray().forEach(function (group) {
-      groups.push(group.getAttribute('cn').toArray()[0]);
-    });
-    accessToken.setField('groups', groups);
-  }
-}());
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Example-Library.script.js 1`] = `
+"var i = 0;
+
+function add(j) {i += j};
+function logTotal(log) { log.info("Total: " + i) };
+
+// export constant
+exports.MSG = 'Final sum';
+
+// export functions
+exports.add = add;
+exports.logTotal = logTotal;
+
+//direct export using an inline declaration
+exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);
 "
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Example-Library.script.json 1`] = `
 {
+  "meta": Any<Object>,
   "script": {
-    "e232cff3-2460-47cd-80b2-36c86c0d0f06": {
-      "_id": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
-      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+    "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
+      "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
+      "context": "LIBRARY",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Used by endUserUIClient",
-      "evaluatorVersion": "1.0",
+      "description": "My Example Library",
+      "evaluatorVersion": "2.0",
+      "exports": [
+        {
+          "id": "MSG",
+          "type": "String",
+        },
+        {
+          "arity": 1,
+          "id": "add",
+          "type": "Function",
+        },
+        {
+          "arity": 1,
+          "id": "logTotal",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logTotalWithMessage",
+          "type": "Function",
+        },
+      ],
       "language": "JAVASCRIPT",
-      "name": "Alpha endUserUIClient OAuth2 Access Token Modification Script",
-      "script": "file://Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.js",
+      "name": "My Example Library",
+      "script": "file://My-Example-Library.script.js",
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-endUserUIClient-OIDC-Claims-Script.script.js 1`] = `
-"/*
- * Copyright 2014-2021 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Example-Script-Using-Libraries.script.js 1`] = `
+"/**
+ * Testing library scripts
  */
+var mylib = require('My Example Library');
+var loggers = require('Library Script');
 
-/*
- * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.
- * The claim values are computed for:
- * the claims derived from the requested scopes,
- * the claims provided by the authorization server,
- * and the claims requested by the client via the claims parameter.
- *
- * In the CONFIGURATION AND CUSTOMIZATION section, you can
- * define the scope-to-claims mapping, and
- * assign to each claim a resolver function that will compute the claim value.
- *
- * Defined variables (class references are provided below):
- * scopes - Set<String> (6).
- *          Always present, the requested scopes.
- * claims - Map<String, Object> (5).
- *          Always present, default server provided claims.
- * claimObjects - List<Claim> (7, 2).
- *                Always present, the default server provided claims.
- * requestedClaims - Map<String, Set<String>> (5).
- *                   Always present, not empty if the request contains the claims parameter and the server has enabled
- *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;
- *                   requested claims with no requested values will have a key but no value in the map. A key with
- *                   a single value in its Set (6) indicates that this is the only value that should be returned.
- * requestedTypedClaims - List<Claim> (7, 2).
- *                        Always present, the requested claims.
- *                        Requested claims with no requested values will have a claim with no values.
- *                        A claim with a single value indicates this is the only value that should be returned.
- * claimsLocales - List<String> (7).
- *                 The values from the 'claims_locales' parameter.
- *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.
- * requestProperties - Unmodifiable Map (5).
- *                     Always present, contains a map of request properties:
- *                     requestUri - The request URI.
- *                     realm - The realm that the request relates to.
- *                     requestParams - A map of the request params and/or posted data.
- *                                     Each value is a list of one or more properties.
- *                                     Please note that these should be handled in accordance with OWASP best practices:
- *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.
- * clientProperties - Unmodifiable Map (5).
- *                    Present if the client specified in the request was identified, contains a map of client properties:
- *                    clientId - The client's URI for the request locale.
- *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.
- *                    allowedResponseTypes - List of the allowed response types for the client.
- *                    allowedScopes - List of the allowed scopes for the client.
- *                    customProperties - A map of the custom properties of the client.
- *                                       Lists or maps will be included as sub-maps; for example:
- *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.
- *                                       To add custom properties to a client, update the Custom Properties field
- *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.
- * identity - AMIdentity (3).
- *            Always present, the identity of the resource owner.
- * session - SSOToken (4).
- *           Present if the request contains the session cookie, the user's session object.
- * scriptName - String (primitive).
- *              Always present, the display name of the script.
- * logger - Always present, the "OAuth2Provider" debug logger instance:
- *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.
- * httpClient - HTTP Client (8).
- *              Always present, the HTTP Client instance:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.
- *              In order to use the client, you may need to add
- *              org.forgerock.http.Client,
- *              org.forgerock.http.protocol.*,
- *              and org.forgerock.util.promise.PromiseImpl
- *              to the allowed Java classes in the scripting engine configuration, as described in:
- *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html
- *
- * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.
- *          The result of the last statement in the script is returned to the server.
- *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)
- *          is the last (and only) statement in this script, and its return value will become the script result.
- *          Do not use "return variable" statement outside of a function definition.
- *          See RESULTS section for additional details.
- *
- * Class reference:
- * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.
- * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).
- *         An instance of org.forgerock.openidconnect.Claim has methods to access
- *         the claim name, requested values, locale, and whether the claim is essential.
- * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,
- *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.
- * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.
- * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.
- * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.
-*/
-
-(function () {
-    // SETUP
-
-    /**
-     * Claim processing utilities.
-     * An object that contains reusable functions for processing claims.
-     * @see CLAIM PROCESSING UTILITIES section for details.
-     */
-    var utils = getUtils();
-
-    // CONFIGURATION AND CUSTOMIZATION
-
-    /**
-     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a scope value to an array of claim names
-     * to specify which claims need to be processed and returned for the requested scopes.
-     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}
-     * for the scope values that could be used to request claims as defined in the OIDC specification.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     *
-     * CUSTOMIZATION
-     * You can choose the claim names returned for a scope.
-     */
-    utils.setScopeClaimsMap({
-        profile: [
-            'name',
-            'family_name',
-            'given_name',
-            'zoneinfo',
-            'locale'
-        ],
-        email: ['email'],
-        address: ['address'],
-        phone: ['phone_number']
-    });
+mylib.add(1);
+mylib.logTotal(logger);
+mylib.add(3);
+mylib.logTotalWithMessage(logger, mylib.MSG);
 
-    /**
-     * In this script, each claim
-     * derived from the requested scopes,
-     * provided by the authorization server, and
-     * requested by the client via the claims parameter
-     * will be processed by a function associated with the claim name.
-     *
-     * Call this configuration method, and pass in as the first argument
-     * an object that maps a claim name to a resolver function,
-     * which will be automatically executed for each claim processed by the script.
-     *
-     * The claim resolver function will receive the requested claim information
-     * in an instance of org.forgerock.openidconnect.Claim as the first argument.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}
-     * for details on the Claim class.
-     *
-     * If the claim resolver function returns a value,
-     * other than undefined or null,
-     * the claim will be included in the script's results.
-     *
-     * The Claim instance provides methods to check
-     * what the name of the claim is,
-     * which values the claim request contains,
-     * whether the claim is essential, and
-     * which locale the claim is associated with.
-     * The resolver function can consider this information when computing and returning the claim value.
-     *
-     * Below, find a default configuration that is expected to work in the current environment.
-     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),
-     * is called to return a claim resolver function based on a user profile attribute.
-     * @see CLAIM RESOLVERS section for the implementation details and examples.
-     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.
-     *
-     * CUSTOMIZATION
-     * You can reuse the predefined utils methods with your custom arguments.
-     * You can also specify a custom resolver function for a claim name,
-     * that will compute and return the claim value—as shown in the commented out example below.
-     */
-    utils.setClaimResolvers({
-        /*
-        // An example of a simple claim resolver function that is defined for a claim
-        // directly in the configuration object:
-        custom-claim-name: function (requestedClaim) {
-            // In this case, initially, the claim value comes straight from a user profile attribute value:
-            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]
+outcome = 'true';
+"
+`;
 
-            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.
-            // You can use:
-            // requestedClaim.getName()
-            // requestedClaim.getValues()
-            // requestedClaim.getLocale()
-            // requestedClaim.isEssential()
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Example-Script-Using-Libraries.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
+      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "My Example Script Using Libraries",
+      "evaluatorVersion": "2.0",
+      "language": "JAVASCRIPT",
+      "name": "My Example Script Using Libraries",
+      "script": "file://My-Example-Script-Using-Libraries.script.js",
+    },
+  },
+}
+`;
 
-            return claimValue
-        },
-        */
-        /**
-         * The use of utils.getUserProfileClaimResolver shows how
-         * an argument passed to a function that returns a claim resolver
-         * becomes available to the resolver function (via its lexical context).
-         */
-        name: utils.getUserProfileClaimResolver('cn'),
-        family_name: utils.getUserProfileClaimResolver('sn'),
-        given_name: utils.getUserProfileClaimResolver('givenname'),
-        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),
-        locale: utils.getUserProfileClaimResolver('preferredlocale'),
-        email: utils.getUserProfileClaimResolver('mail'),
-        address: utils.getAddressClaimResolver(
-            /**
-             * The passed in user profile claim resolver function
-             * can be used by the address claim resolver function
-             * to obtain the claim value to be formatted as per the OIDC specification:
-             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.
-             */
-            utils.getUserProfileClaimResolver('postaladdress')
-        ),
-        phone_number: utils.getUserProfileClaimResolver('telephonenumber')
-    });
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Other-Example-Library-Script.script.js 1`] = `
+"console.log("hi there");
+"
+`;
 
-    // CLAIM PROCESSING UTILITIES
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: My-Other-Example-Library-Script.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "4e053815-adde-46ac-9fe2-d3ae93517c14": {
+      "_id": "4e053815-adde-46ac-9fe2-d3ae93517c14",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "2.0",
+      "exports": [],
+      "language": "JAVASCRIPT",
+      "name": "My Other Example Library Script",
+      "script": "file://My-Other-Example-Library-Script.script.js",
+    },
+  },
+}
+`;
 
-    /**
-     * @returns {object} An object that contains reusable claim processing utilities.
-     * @see PUBLIC METHODS section and the return statement for the list of exported functions.
-     */
-    function getUtils () {
-        // IMPORT JAVA
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization.script.groovy 1`] = `
+"/*
+ * Copyright 2022 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-        /**
-         * Provides Java scripting functionality.
-         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.
-         */
-        var frJava = JavaImporter(
-            org.forgerock.oauth2.core.exceptions.InvalidRequestException,
-            org.forgerock.oauth2.core.UserInfoClaims,
-            org.forgerock.openidconnect.Claim,
+import static org.forgerock.json.JsonValue.field
+import static org.forgerock.json.JsonValue.json
+import static org.forgerock.json.JsonValue.object
 
-            java.util.LinkedHashMap,
-            java.util.ArrayList
-        );
+logger.warning("Okta rawProfile: "+rawProfile)
 
-        // SET UP CONFIGURATION
+return json(object(
+        field("id", rawProfile.id),
+        field("displayName", rawProfile.name),
+        field("givenName", rawProfile.first_name),
+        field("familyName", rawProfile.last_name),
+        field("photoUrl", rawProfile.picture.data.url),
+        field("email", rawProfile.email),
+        field("username", rawProfile.preferred_username)))
+"
+`;
 
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported scope values (scopes)
-         * and the corresponding claim names for each scope value.
-         */
-        var scopeClaimsMap;
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "6325cf19-a49b-471e-8d26-7e4df76df0e2": {
+      "_id": "6325cf19-a49b-471e-8d26-7e4df76df0e2",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "Okta Profile Normalization",
+      "script": "file://Okta-Profile-Normalization.script.groovy",
+    },
+  },
+}
+`;
 
-        /**
-         * Placeholder for a configuration option that contains
-         * an object that maps the supported claim names
-         * and the resolver functions returning the claim value.
-         */
-        var claimResolvers;
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization-imported-(1).script.groovy 1`] = `
+"/*
+ * Copyright 2022 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-        /**
-         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps each supported scope value to an array of claim names,
-         * in order to specify which claims need to be processed for the requested scopes.
-         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.
-         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.
-         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.
-         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.
-         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.
-         * @returns {undefined}
-         */
-        function setScopeClaimsMap(params) {
-            scopeClaimsMap = params;
-        }
+import static org.forgerock.json.JsonValue.field
+import static org.forgerock.json.JsonValue.json
+import static org.forgerock.json.JsonValue.object
 
-        /**
-         * A (public) method that accepts an object that maps the supported claim names
-         * and the resolver functions returning the claim value,
-         * and assigns it to a (private) variable that serves as a configuration option.
-         * @param {object} params - An object that maps
-         * each supported claim name to a function that computes and returns the claim value.
-         */
-        function setClaimResolvers(params) {
-            claimResolvers = params;
-        }
+logger.warning("Okta rawProfile: "+rawProfile)
 
-        // CLAIM RESOLVERS
+return json(object(
+        field("id", rawProfile.id),
+        field("displayName", rawProfile.name),
+        field("givenName", rawProfile.first_name),
+        field("familyName", rawProfile.last_name),
+        field("photoUrl", rawProfile.picture.data.url),
+        field("email", rawProfile.email),
+        field("username", rawProfile.preferred_username)))
+"
+`;
 
-        /**
-         * Claim resolvers are functions that return a claim value.
-         * @param {*}
-         * @returns {*}
-         */
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization-imported-(1).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "6002c349-f1d0-4317-baa2-a18590fc3cff": {
+      "_id": "6002c349-f1d0-4317-baa2-a18590fc3cff",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "Okta Profile Normalization - imported (1)",
+      "script": "file://Okta-Profile-Normalization-imported-(1).script.groovy",
+    },
+  },
+}
+`;
 
-        /**
-         * Defines a claim resolver based on a user profile attribute.
-         * @param {string} attributeName - Name of the user profile attribute.
-         * @returns {function} A function that will determine the claim value
-         * based on the user profile attribute and the (requested) claim properties.
-         */
-        function getUserProfileClaimResolver (attributeName) {
-            /**
-             * Resolves a claim with a user profile attribute value.
-             * Returns undefined if the identity attribute is not populated,
-             * OR if the claim has requested values that do not contain the identity attribute value.
-             * ATTENTION: the aforementioned comparison is case-sensitive.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {string|HashSet|undefined}
-             */
-            function resolveClaim(claim) {
-                var userProfileValue;
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization-imported-(2).script.groovy 1`] = `
+"/*
+ * Copyright 2022 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-                if (identity) {
-                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));
+import static org.forgerock.json.JsonValue.field
+import static org.forgerock.json.JsonValue.json
+import static org.forgerock.json.JsonValue.object
 
-                    if (userProfileValue && !userProfileValue.isEmpty()) {
-                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {
-                            return userProfileValue;
-                        }
-                    }
-                }
-            }
+logger.warning("Okta rawProfile: "+rawProfile)
 
-            return resolveClaim;
-        }
+return json(object(
+        field("id", rawProfile.id),
+        field("displayName", rawProfile.name),
+        field("givenName", rawProfile.first_name),
+        field("familyName", rawProfile.last_name),
+        field("photoUrl", rawProfile.picture.data.url),
+        field("email", rawProfile.email),
+        field("username", rawProfile.preferred_username)))
+"
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Okta-Profile-Normalization-imported-(2).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "647f2a33-9211-4315-a83f-a521d8b77d7b": {
+      "_id": "647f2a33-9211-4315-a83f-a521d8b77d7b",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "Okta Profile Normalization - imported (2)",
+      "script": "file://Okta-Profile-Normalization-imported-(2).script.groovy",
+    },
+  },
+}
+`;
 
-        /**
-         * Returns an address claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional formatting to the value before returning it.
-         */
-        function getAddressClaimResolver (resolveClaim) {
-            /**
-             * Creates an address claim object from a value returned by a claim resolver,
-             * and returns the address claim object as the claim value.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.
-             */
-            function resolveAddressClaim(claim) {
-                var claimValue = resolveClaim(claim);
-                var addressObject;
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Remove-Button.script.js 1`] = `
+"/* Remove Button
+ *
+ * Author: volker.scheuber@forgerock.com
+ * 
+ * Hide buttons on the journey page.
+ * 
+ * This script does not need to be parametrized. It will work properly as is.
+ * 
+ * The Scripted Decision Node needs the following outcomes defined:
+ * - true
+ */
+(function () {
+    var script = "Array.prototype.slice.call(document.getElementsByTagName('button')).forEach(function (e) {e.style.display = 'none'})"
+    var fr = JavaImporter(
+        org.forgerock.openam.auth.node.api.Action,
+        javax.security.auth.callback.TextOutputCallback,
+        com.sun.identity.authentication.callbacks.ScriptTextOutputCallback
+    )
+    var message = " "
+    if (callbacks.isEmpty()) {
+        action = fr.Action.send(
+            new fr.TextOutputCallback(
+                fr.TextOutputCallback.INFORMATION,
+                message
+            ),
+            new fr.ScriptTextOutputCallback(script)
+        ).build()
+    }
+}());
+"
+`;
 
-                if (isClaimValueValid(claimValue)) {
-                    addressObject = new frJava.LinkedHashMap();
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Remove-Button.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "9535446c-0ff6-4a76-8576-616599119d64": {
+      "_id": "9535446c-0ff6-4a76-8576-616599119d64",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Remove button from page.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Remove Button",
+      "script": "file://Remove-Button.script.js",
+    },
+  },
+}
+`;
 
-                    addressObject.put('formatted', claimValue);
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth.script.js 1`] = `
+"/*
+ * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-                    return addressObject;
-                }
-            }
+/*
+ * The script has these top level functions that could be executed during a SAML2 flow.
+ *      - preSingleSignOn
+ *      - preAuthentication
+ *      - preSendResponse
+ *      - preSignResponse
+ *      - preSendFailureResponse
+ *
+ * Please see the javadoc for the interface definition and more information about these methods.
+ * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
+ * Note that the initialize method is not supported in the scripts.
+ *
+ * Defined variables. Check the documentation on the respective functions for the variables available to it.
+ *
+ * hostedEntityId - String
+ *     Entity ID for the hosted IDP
+ * realm - String
+ *     Realm of the hosted IDP
+ * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
+ *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
+ * request - HttpServletRequest (2)
+ *     Servlet request object
+ * response - HttpServletResponse (3)
+ *     Servlet response object
+ * authnRequest - AuthnRequest (4)
+ *     The original authentication request sent from SP
+ * reqId - String
+ *     The id to use for continuation of processing if the adapter redirects
+ * res - Response (5)
+ *     The SAML Response
+ * session - SSOToken (6)
+ *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
+ * relayState - String
+ *     The relayState that will be used in the redirect
+ * faultCode - String
+ *     the fault code that will be returned in the SAML response
+ * faultDetail - String
+ *     the fault detail that will be returned in the SAML response
+ * logger - Logger instance
+ *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *     Corresponding log files will be prefixed with: scripts.<script name>
+ *
+ * Throws SAML2Exception (7):
+ *     for any exceptions occurring in the adapter. The federation process will continue
+ *
+ * Class reference:
+ * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
+ * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
+ * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
+ * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
+ * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
+ * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
+ * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
+ */
 
-            return resolveAddressClaim;
-        }
+/*
+ * Template/default script for SAML2 IDP Adapter scripted plugin.
+ */
 
-        /**
-         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.
-         * @param {function} resolveClaim - A function that returns a claim value.
-         * @returns {function} A function that will accept a claim as an argument,
-         * run the claim resolver function for the claim and obtain the claim value,
-         * and apply additional logic for essential claims.
-         */
-        function getEssentialClaimResolver (resolveClaim) {
-            /**
-             * Returns a claim value or throws an error.
-             * The claim value is obtained with a claim resolving function available from the closure.
-             * Throws an exception if the claim is essential and no value is returned for the claim.
-             *
-             * Use of this resolver is optional.
-             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:
-             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,
-             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,
-             * unless otherwise specified in the description of the specific claim."
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*}
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             */
-            function resolveEssentialClaim(claim) {
-                var claimValue = resolveClaim(claim);
+/*
+ * Available variables for preSingleSignOn:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     logger
+ *
+ * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
+ */
+function preSingleSignOn () {
+      logger.error("Chicago: preSingleSignOn");
+    return true;
+}
 
-                if (claim.isEssential() && !isClaimValueValid(claimValue)) {
-                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());
-                }
+/*
+ * Available variables for preAuthentication:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     session
+ *     relayState
+ *     logger
+ *
+ * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
+ */
+function preAuthentication () {
+      logger.error("Chicago: preAuthentication");
+    return true;
+}
 
-                return claimValue;
-            }
+/*
+ * Available variables for preSendResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     session
+ *     relayState
+ *     logger
+ *
+ * Return - true if browser redirection happened after processing, false otherwise. Default to false.
+ */
+function preSendResponse () {
+      logger.error("Chicago: preSendResponse");
+      logger.error("Chicago: authnRequest: "+authnRequest);
+      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
+    return true;
+}
 
-            return resolveEssentialClaim;
-        }
+/*
+ * Available variables for preSignResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     session
+ *     relayState
+ *     res
+ *     logger
+ */
+function preSignResponse () {
+      logger.error("Chicago: preSignResponse");
+}
 
-        /**
-         * Provides default resolution for a claim.
-         * Use it if a claim-specific resolver is not defined in the configuration.
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @returns {*} A single value associated with this claim.
-         */
-        function resolveAnyClaim (claim) {
-            if (claim.getValues().size() === 1) {
-                return claim.getValues().toArray()[0];
-            }
-        }
+/*
+ * Available variables for preSendFailureResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     response
+ *     faultCode
+ *     faultDetail
+ *     logger
+ */
+function preSendFailureResponse () {
+      logger.error("Chicago: preSendFailureResponse");
+}
+"
+`;
 
-        // UTILITIES
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "85523e71-2d77-4577-b078-6f9674cc54e2": {
+      "_id": "85523e71-2d77-4577-b078-6f9674cc54e2",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Always redirect browser pre-auth",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Saml2 IDP Adapter Always Auth",
+      "script": "file://Saml2-IDP-Adapter-Always-Auth.script.js",
+    },
+  },
+}
+`;
 
-        /**
-         * Returns claim value from a set.
-         * If the set contains a single value, returns the value.
-         * If the set contains multiple values, returns the set.
-         * Otherwise, returns undefined.
-         *
-         * @param {org.forgerock.openidconnect.Claim} claim
-         * An object that provides methods to obtain information/requirements associated with a claim.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.
-         * @returns {string|java.util.HashSet|undefined}
-         */
-        function getClaimValueFromSet (claim, set) {
-            if (set && set.size()) {
-                if (set.size() === 1) {
-                    return set.toArray()[0];
-                } else {
-                    return set;
-                }
-            } else if (logger.warningEnabled()) {
-                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());
-            }
-        }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth-imported-(1).script.js 1`] = `
+"/*
+ * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-        function isClaimValueValid (claimValue) {
-            if (typeof claimValue === 'undefined' || claimValue === null) {
-                return false;
-            }
+/*
+ * The script has these top level functions that could be executed during a SAML2 flow.
+ *      - preSingleSignOn
+ *      - preAuthentication
+ *      - preSendResponse
+ *      - preSignResponse
+ *      - preSendFailureResponse
+ *
+ * Please see the javadoc for the interface definition and more information about these methods.
+ * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
+ * Note that the initialize method is not supported in the scripts.
+ *
+ * Defined variables. Check the documentation on the respective functions for the variables available to it.
+ *
+ * hostedEntityId - String
+ *     Entity ID for the hosted IDP
+ * realm - String
+ *     Realm of the hosted IDP
+ * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
+ *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
+ * request - HttpServletRequest (2)
+ *     Servlet request object
+ * response - HttpServletResponse (3)
+ *     Servlet response object
+ * authnRequest - AuthnRequest (4)
+ *     The original authentication request sent from SP
+ * reqId - String
+ *     The id to use for continuation of processing if the adapter redirects
+ * res - Response (5)
+ *     The SAML Response
+ * session - SSOToken (6)
+ *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
+ * relayState - String
+ *     The relayState that will be used in the redirect
+ * faultCode - String
+ *     the fault code that will be returned in the SAML response
+ * faultDetail - String
+ *     the fault detail that will be returned in the SAML response
+ * logger - Logger instance
+ *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *     Corresponding log files will be prefixed with: scripts.<script name>
+ *
+ * Throws SAML2Exception (7):
+ *     for any exceptions occurring in the adapter. The federation process will continue
+ *
+ * Class reference:
+ * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
+ * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
+ * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
+ * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
+ * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
+ * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
+ * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
+ */
 
-            return true;
-        }
+/*
+ * Template/default script for SAML2 IDP Adapter scripted plugin.
+ */
 
-        // CLAIM PROCESSING
+/*
+ * Available variables for preSingleSignOn:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     logger
+ *
+ * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
+ */
+function preSingleSignOn () {
+      logger.error("Chicago: preSingleSignOn");
+    return true;
+}
 
-        /**
-         * Constructs and returns an object populated with the computed claim values
-         * and the requested scopes mapped to the claim names.
-         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.
-         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-         * @see RESULTS section for the use of this function.
-         */
-        function getUserInfoClaims () {
-            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());
-        }
+/*
+ * Available variables for preAuthentication:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     session
+ *     relayState
+ *     logger
+ *
+ * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
+ */
+function preAuthentication () {
+      logger.error("Chicago: preAuthentication");
+    return true;
+}
 
-        /**
-         * Creates a map of (requested) claim names populated with the computed claim values.
-         * @returns {java.util.LinkedHashMap}
-         * A map of the requested claim names and the corresponding claim values.
-         */
-        function getComputedClaims () {
-            /**
-             * Creates a complete list of claim objects from:
-             * the claims derived from the scopes,
-             * the claims provided by the authorization server,
-             * and the claims requested by the client.
-             * @returns {java.util.ArrayList}
-             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-             */
-            function getClaims() {
-                /**
-                 * Returns a list of claim objects for the requested scopes.
-                 * Uses the scopeClaimsMap configuration option to derive the claim names;
-                 * no other properties of a claim derived from a scope are populated.
-                 * @returns {java.util.ArrayList}
-                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.
-                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.
-                 */
-                function convertScopeToClaims() {
-                    var claims = new frJava.ArrayList();
+/*
+ * Available variables for preSendResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     session
+ *     relayState
+ *     logger
+ *
+ * Return - true if browser redirection happened after processing, false otherwise. Default to false.
+ */
+function preSendResponse () {
+      logger.error("Chicago: preSendResponse");
+      logger.error("Chicago: authnRequest: "+authnRequest);
+      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
+    return true;
+}
 
-                    scopes.toArray().forEach(function (scope) {
-                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {
-                            scopeClaimsMap[scope].forEach(function (claimName) {
-                                claims.add(new frJava.Claim(claimName));
-                            });
-                        }
-                    });
+/*
+ * Available variables for preSignResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     session
+ *     relayState
+ *     res
+ *     logger
+ */
+function preSignResponse () {
+      logger.error("Chicago: preSignResponse");
+}
 
-                    return claims;
-                }
+/*
+ * Available variables for preSendFailureResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     response
+ *     faultCode
+ *     faultDetail
+ *     logger
+ */
+function preSendFailureResponse () {
+      logger.error("Chicago: preSendFailureResponse");
+}
+"
+`;
 
-                var claims = new frJava.ArrayList();
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth-imported-(1).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1": {
+      "_id": "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Always redirect browser pre-auth",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Saml2 IDP Adapter Always Auth - imported (1)",
+      "script": "file://Saml2-IDP-Adapter-Always-Auth-imported-(1).script.js",
+    },
+  },
+}
+`;
 
-                claims.addAll(convertScopeToClaims());
-                claims.addAll(claimObjects);
-                claims.addAll(requestedTypedClaims);
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth-imported-(2).script.js 1`] = `
+"/*
+ * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
+ *
+ * Use of this code requires a commercial software license with ForgeRock AS.
+ * or with one of its affiliates. All use shall be exclusively subject
+ * to such license between the licensee and ForgeRock AS.
+ */
 
-                return claims;
-            }
+/*
+ * The script has these top level functions that could be executed during a SAML2 flow.
+ *      - preSingleSignOn
+ *      - preAuthentication
+ *      - preSendResponse
+ *      - preSignResponse
+ *      - preSendFailureResponse
+ *
+ * Please see the javadoc for the interface definition and more information about these methods.
+ * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
+ * Note that the initialize method is not supported in the scripts.
+ *
+ * Defined variables. Check the documentation on the respective functions for the variables available to it.
+ *
+ * hostedEntityId - String
+ *     Entity ID for the hosted IDP
+ * realm - String
+ *     Realm of the hosted IDP
+ * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
+ *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
+ * request - HttpServletRequest (2)
+ *     Servlet request object
+ * response - HttpServletResponse (3)
+ *     Servlet response object
+ * authnRequest - AuthnRequest (4)
+ *     The original authentication request sent from SP
+ * reqId - String
+ *     The id to use for continuation of processing if the adapter redirects
+ * res - Response (5)
+ *     The SAML Response
+ * session - SSOToken (6)
+ *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
+ * relayState - String
+ *     The relayState that will be used in the redirect
+ * faultCode - String
+ *     the fault code that will be returned in the SAML response
+ * faultDetail - String
+ *     the fault detail that will be returned in the SAML response
+ * logger - Logger instance
+ *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
+ *     Corresponding log files will be prefixed with: scripts.<script name>
+ *
+ * Throws SAML2Exception (7):
+ *     for any exceptions occurring in the adapter. The federation process will continue
+ *
+ * Class reference:
+ * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
+ * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
+ * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
+ * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
+ * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
+ * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
+ * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
+ */
 
-            /**
-             * Computes and returns a claim value.
-             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.
-             * @see claimResolvers
-             * If no resolver function is found, uses the default claim resolver function.
-             *
-             * @param {org.forgerock.openidconnect.Claim} claim
-             * An object that provides methods to obtain information/requirements associated with a claim.
-             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.
-             * @returns {*} Claim value.
-             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}
-             * Rethrows this exception if a claim resolver throws it.
-             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver
-             * if you want to terminate the claim processing.
-             */
-            function computeClaim(claim) {
-                var resolveClaim;
-                var message;
+/*
+ * Template/default script for SAML2 IDP Adapter scripted plugin.
+ */
 
-                try {
-                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;
+/*
+ * Available variables for preSingleSignOn:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     logger
+ *
+ * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
+ */
+function preSingleSignOn () {
+      logger.error("Chicago: preSingleSignOn");
+    return true;
+}
 
-                    return resolveClaim(claim);
-                } catch (e) {
-                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;
+/*
+ * Available variables for preAuthentication:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     session
+ *     relayState
+ *     logger
+ *
+ * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
+ */
+function preAuthentication () {
+      logger.error("Chicago: preAuthentication");
+    return true;
+}
 
-                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {
-                        throw e;
-                    }
+/*
+ * Available variables for preSendResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     response
+ *     reqId
+ *     session
+ *     relayState
+ *     logger
+ *
+ * Return - true if browser redirection happened after processing, false otherwise. Default to false.
+ */
+function preSendResponse () {
+      logger.error("Chicago: preSendResponse");
+      logger.error("Chicago: authnRequest: "+authnRequest);
+      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
+    return true;
+}
 
-                    if (logger.warningEnabled()) {
-                        logger.warning(message);
-                    }
-                }
-            }
+/*
+ * Available variables for preSignResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     authnRequest
+ *     session
+ *     relayState
+ *     res
+ *     logger
+ */
+function preSignResponse () {
+      logger.error("Chicago: preSignResponse");
+}
 
-            var computedClaims = new frJava.LinkedHashMap();
+/*
+ * Available variables for preSendFailureResponse:
+ *     hostedEntityId
+ *     realm
+ *     idpAdapterScriptHelper
+ *     request
+ *     response
+ *     faultCode
+ *     faultDetail
+ *     logger
+ */
+function preSendFailureResponse () {
+      logger.error("Chicago: preSendFailureResponse");
+}
+"
+`;
 
-            getClaims().toArray().forEach(function (claim) {
-                var claimValue = computeClaim(claim);
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: Saml2-IDP-Adapter-Always-Auth-imported-(2).script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "994a4e8f-2741-424a-83e7-3c5f78da01f5": {
+      "_id": "994a4e8f-2741-424a-83e7-3c5f78da01f5",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Always redirect browser pre-auth",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Saml2 IDP Adapter Always Auth - imported (2)",
+      "script": "file://Saml2-IDP-Adapter-Always-Auth-imported-(2).script.js",
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: bb393d07-a121-47e2-9d24-1a1066f39ec0.script.js 1`] = `
+"/**
+ * Testing library scripts
+ */
+var mylib = require('My Example Library');
+var loggers = require('Library Script');
 
-                if (isClaimValueValid(claimValue)) {
-                    computedClaims.put(claim.getName(), claimValue);
-                } else {
-                    /**
-                     * If a claim has been processed, but appears in the list again,
-                     * and its value cannot be computed under the new conditions,
-                     * the claim is removed from the final result.
-                     *
-                     * For example, a claim could be mapped to a scope and found in the user profile,
-                     * but also requested by the client with required values that don't match the computed one.
-                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.
-                     * for the relevant OIDC specification details.
-                     */
-                    computedClaims.remove(claim.getName());
-                }
-            });
+mylib.add(1);
+mylib.logTotal(logger);
+mylib.add(3);
+mylib.logTotalWithMessage(logger, mylib.MSG);
 
-            return computedClaims;
-        }
+outcome = 'true';
+"
+`;
 
-        /**
-         * Creates a map of requested scopes and the corresponding claim names.
-         * @returns {java.util.LinkedHashMap}
-         */
-        function getCompositeScopes () {
-            var compositeScopes = new frJava.LinkedHashMap();
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: debug.script.js 1`] = `
+"/* debug
+ *
+ * Author: volker.scheuber@forgerock.com
+ * 
+ * Display sharedState, transientState, and headers.
+ * 
+ * This script does not need to be parametrized. It will work properly as is.
+ * 
+ * The Scripted Decision Node needs the following outcomes defined:
+ * - true
+ */
+var anchor = "anchor-".concat(generateNumericToken('xxx'));
+var halign = "left";
+var message = "<p><b>Shared State</b>:<br/>".concat(
+      sharedState.toString()).concat("</p>").concat(
+    "<p><b>Transient State</b>:<br/>").concat(
+      transientState.toString()).concat("</p>").concat(
+    "<p><b>Request Headers</b>:<br/>").concat(
+      requestHeaders.toString()).concat("</p>")
+var script = "Array.prototype.slice.call(\\n".concat(
+  "document.getElementsByClassName('callback-component')).forEach(\\n").concat(
+  "function (e) {\\n").concat(
+  "  var message = e.firstElementChild;\\n").concat(
+  "  if (message.firstChild && message.firstChild.nodeName == '#text' && message.firstChild.nodeValue.trim() == '").concat(anchor).concat("') {\\n").concat(
+  "    message.className = \\"text-left\\";\\n").concat(
+  "    message.align = \\"").concat(halign).concat("\\";\\n").concat(
+  "    message.innerHTML = '").concat(message).concat("';\\n").concat(
+  "  }\\n").concat(
+  "})")
+var fr = JavaImporter(
+    org.forgerock.openam.auth.node.api.Action,
+    javax.security.auth.callback.TextOutputCallback,
+    com.sun.identity.authentication.callbacks.ScriptTextOutputCallback
+)
+if (message.length && callbacks.isEmpty()) {
+    action = fr.Action.send(
+        new fr.TextOutputCallback(
+            fr.TextOutputCallback.INFORMATION,
+            anchor
+        ),
+        new fr.ScriptTextOutputCallback(script)
+    ).build()
+}
+else {
+  action = fr.Action.goTo("true").build();
+}
 
-            scopes.toArray().forEach(function (scope) {
-                var scopeClaims = new frJava.ArrayList();
+ /*
+  * Generate a token in the desired format. All 'x' characters will be replaced with a random number 0-9.
+  * 
+  * Example:
+  * 'xxxxx' produces '28535'
+  * 'xxx-xxx' produces '432-521'
+  */
+function generateNumericToken(format) {
+    return format.replace(/[x]/g, function(c) {
+        var r = Math.random()*10|0;
+        var v = r;
+        return v.toString(10);
+    });
+}
+"
+`;
 
-                if (scopeClaimsMap[scope]) {
-                    scopeClaimsMap[scope].forEach(function (claimName) {
-                        scopeClaims.add(claimName);
-                    });
-                }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: debug.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "3cb43516-ae69-433a-8787-501d45db14e9": {
+      "_id": "3cb43516-ae69-433a-8787-501d45db14e9",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Display sharedState, transientState, and headers.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "debug",
+      "script": "file://debug.script.js",
+    },
+  },
+}
+`;
 
-                if (scopeClaims.size()) {
-                    compositeScopes.put(scope, scopeClaims);
-                }
-            });
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: level.script.js 1`] = `
+"(function () {
+  outcome = 'true';
+  var level = nodeState.get('level').asInteger();
+  sharedState.put('level' + level + 'Value', 'Level ' + level + ': This is a longer string value set at each level of the nested journeys. It contains an indicator in which level it was set.');
+}());
+"
+`;
 
-            return compositeScopes;
-        }
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: level.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "41c24257-d7fc-4654-8b46-c2666dc5b56d": {
+      "_id": "41c24257-d7fc-4654-8b46-c2666dc5b56d",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "set per level shared state variable",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "level",
+      "script": "file://level.script.js",
+    },
+  },
+}
+`;
 
-        // PUBLIC METHODS
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: mode.script.js 1`] = `
+"/* mode
+ *
+ * Author: volker.scheuber@forgerock.com
+ * 
+ * Collect mode if not already set and set outcome to mode.
+ * 
+ * This script does not need to be parametrized. It will work properly as is.
+ * 
+ * The Scripted Decision Node needs the following outcomes defined:
+ * - 'shared and level'
+ * - 'shared only'
+ * - 'level only'
+ * - 'none'
+ */
+(function () {
+  var mode = nodeState.get('mode');
+  if (mode) {
+    outcome = mode.asString();
+    var level = nodeState.get('level').asInteger() + 1;
+    logger.error('mode: mode=' + mode.asString() + ', level=' + level);
+    sharedState.put('level', level);
+  }
+  else {
+    var choices = ['shared and level', 'shared only', 'level only', 'none'];
+  
+    var fr = JavaImporter(
+      org.forgerock.openam.auth.node.api.Action,
+      javax.security.auth.callback.ChoiceCallback
+    )
 
-        return {
-            setScopeClaimsMap: setScopeClaimsMap,
-            setClaimResolvers: setClaimResolvers,
-            getUserProfileClaimResolver: getUserProfileClaimResolver,
-            getAddressClaimResolver: getAddressClaimResolver,
-            getEssentialClaimResolver: getEssentialClaimResolver,
-            getUserInfoClaims: getUserInfoClaims
-        };
+    if (callbacks.isEmpty()) {
+      action = fr.Action.send([
+        new fr.ChoiceCallback('Choose test mode', choices, 0, false)
+      ]).build();
+    } else {
+      var choice = parseInt(callbacks.get(0).getSelectedIndexes()[0]);
+      nodeState.putShared('mode', choices[choice]);
+      nodeState.putShared('level', 0);
+      action = fr.Action.goTo(choices[choice]).build();
     }
+  }
+}());
+"
+`;
 
-    // RESULTS
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: mode.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "5bbdaeff-ddee-44b9-b608-8d413d7d65a6": {
+      "_id": "5bbdaeff-ddee-44b9-b608-8d413d7d65a6",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Check if mode has already been set.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "mode",
+      "script": "file://mode.script.js",
+    },
+  },
+}
+`;
 
-    /**
-     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class
-     * populated with the computed claim values and
-     * the requested scopes mapped to the claim names.
-     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.
-     *
-     * Assigning it to a variable gives you an opportunity
-     * to log the content of the returned value during development.
-     */
-    var userInfoClaims = utils.getUserInfoClaims();
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: shared.script.js 1`] = `
+"(function () {
+  outcome = 'true';
+  var level = nodeState.get('level').asInteger();
+  sharedState.put('sharedValue', 'Level ' + level + ': This is a longer string value shared across all nested journeys. It contains an indicator in which level it was last set.');
+}());
+"
+`;
 
-    /*
-    logger.error(scriptName + ' results:')
-    logger.error('Values: ' + userInfoClaims.getValues())
-    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())
-    */
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: shared.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "1b52a7e0-4019-40fa-958a-15a49870e901": {
+      "_id": "1b52a7e0-4019-40fa-958a-15a49870e901",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "set the same shared state variable",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "shared",
+      "script": "file://shared.script.js",
+    },
+  },
+}
+`;
 
-    return userInfoClaims;
-}());
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: test-script-with-secrets-and-variables.script.js 1`] = `
+"console.log(\`pi: \${systemEnv.getProperty("esv.test.var.pi")}\`);
+console.log(\`pi secret: \${systemEnv.getProperty("esv.test.secret.pi")}\`);
+console.log(\`speed of light: \${systemEnv.getProperty("esv.test.variable.light")}\`);
+console.log(\`euler's number: \${systemEnv.getProperty("esv.test.secret.euler")}\`);
+console.log(\`Area of circle with radius 7: \${7 * 7 * systemEnv.getProperty("esv.test.var.pi")}\`);
+console.log(\`Volume of sphere with radius 7: \${4 * 7 * 7 * 7 * systemEnv.getProperty("esv.test.secret.pi") / 3}\`);
 "
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-endUserUIClient-OIDC-Claims-Script.script.json 1`] = `
+exports[`frodo script export "frodo script export -A": should export all scripts to separate files: test-script-with-secrets-and-variables.script.json 1`] = `
+{
+  "meta": Any<Object>,
+  "script": {
+    "da7a96a8-7969-4dab-9c6e-a812938cc76d": {
+      "_id": "da7a96a8-7969-4dab-9c6e-a812938cc76d",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Script that uses secrets and variables",
+      "evaluatorVersion": "2.0",
+      "exports": [],
+      "language": "JAVASCRIPT",
+      "name": "test-script-with-secrets-and-variables",
+      "script": "file://test-script-with-secrets-and-variables.script.js",
+    },
+  },
+}
+`;
+
+exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": should export all scripts to a single file in the directory scriptExportTestDir2 1`] = `0`;
+
+exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": should export all scripts to a single file in the directory scriptExportTestDir2 2`] = `""`;
+
+exports[`frodo script export "frodo script export -MNaD scriptExportTestDir2": should export all scripts to a single file in the directory scriptExportTestDir2: scriptExportTestDir2/allAlphaScripts.script.json 1`] = `
 {
   "script": {
+    "07ee6240-d106-4e25-a781-5fcabc477d22": {
+      "_id": "07ee6240-d106-4e25-a781-5fcabc477d22",
+      "context": "SAML2_SP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "FrodoSPAdapter",
+      "script": [
+        "/*",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
+        " *",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (2)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (13):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnRequest:",
+        " *     hostedEntityId",
+        " *     idpEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnRequest() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     out",
+        " *     session",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnFailure:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postNewNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postNewNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
+        "}",
+      ],
+    },
+    "1b52a7e0-4019-40fa-958a-15a49870e901": {
+      "_id": "1b52a7e0-4019-40fa-958a-15a49870e901",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "set the same shared state variable",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "shared",
+      "script": [
+        "(function () {",
+        "  outcome = 'true';",
+        "  var level = nodeState.get('level').asInteger();",
+        "  sharedState.put('sharedValue', 'Level ' + level + ': This is a longer string value shared across all nested journeys. It contains an indicator in which level it was last set.');",
+        "}());",
+      ],
+    },
+    "207f172f-ffb5-439d-b7df-e8e80408830b": {
+      "_id": "207f172f-ffb5-439d-b7df-e8e80408830b",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "GitHub Profile Normalization (VS) - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
+      ],
+    },
+    "223739f3-9c54-43b7-9572-3c5338786145": {
+      "_id": "223739f3-9c54-43b7-9572-3c5338786145",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Format Username",
+      "script": [
+        "var username = sharedState.get("username");",
+        "",
+        "sharedState.put("displayName", username);",
+        "outcome = "continue";",
+      ],
+    },
+    "23143919-6b78-40c3-b25e-beca19b229e0": {
+      "_id": "23143919-6b78-40c3-b25e-beca19b229e0",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "GitHub Profile Normalization (VS)",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
+      ],
+    },
+    "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
+      "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "My Example Library",
+      "evaluatorVersion": "2.0",
+      "exports": [
+        {
+          "id": "MSG",
+          "type": "String",
+        },
+        {
+          "arity": 1,
+          "id": "add",
+          "type": "Function",
+        },
+        {
+          "arity": 1,
+          "id": "logTotal",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logTotalWithMessage",
+          "type": "Function",
+        },
+      ],
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "My Example Library",
+      "script": [
+        "var i = 0;",
+        "",
+        "function add(j) {i += j};",
+        "function logTotal(log) { log.info("Total: " + i) };",
+        "",
+        "// export constant",
+        "exports.MSG = 'Final sum';",
+        "",
+        "// export functions",
+        "exports.add = add;",
+        "exports.logTotal = logTotal;",
+        "",
+        "//direct export using an inline declaration",
+        "exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);",
+      ],
+    },
+    "39c08084-1238-43e8-857f-2e11005eac49": {
+      "_id": "39c08084-1238-43e8-857f-2e11005eac49",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Default alpha realm script for OAuth2 Access Token Modification",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Alpha OAuth2 Access Token Modification Script",
+      "script": [
+        "/*",
+        " * Copyright 2019-2021 ForgeRock AS. All Rights Reserved.",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script lets you modify information associated with an OAuth2 access token",
+        " * with methods provided by the AccessToken (1) interface.",
+        " * The changes made to OAuth2 access tokens will directly impact the size of the CTS tokens,",
+        " * and, similarly, the size of the JWTs if client-based OAuth2 tokens are utilized.",
+        " * When adding/updating fields make sure that the token size remains within client/user-agent limits.",
+        " *",
+        " * Defined variables:",
+        " * accessToken - AccessToken (1).",
+        " *               The access token to be updated.",
+        " *               Mutable object, all changes to the access token will be reflected.",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *",
+        " * Return - no value is expected, changes shall be made to the accessToken parameter directly.",
+        " *",
+        " * Class reference:",
+        " * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        " */",
+        "",
+        "/* EXAMPLE",
+        "(function () {",
+        "    var frJava = JavaImporter(",
+        "        org.forgerock.http.protocol.Request,",
+        "        org.forgerock.http.protocol.Response",
+        "    );",
+        "",
+        "    // Always includes this field in the token.",
+        "    accessToken.setField('key1', 'value1');",
+        "",
+        "    // Receives and adds to the access token additional values by performing a REST call to an external service.",
+        "    // WARNING: Below, you will find a reference to a third-party site, which is provided only as an example.",
+        "    var uri = 'https://jsonplaceholder.typicode.com/posts';",
+        "",
+        "    try {",
+        "        var request = new frJava.Request();",
+        "",
+        "        // You can chain methods that return the request object.",
+        "        request.setUri(uri)",
+        "            .setMethod('POST')",
+        "            .setEntity(JSON.stringify({",
+        "                updatedFields: {",
+        "                    key2: 'value2',",
+        "                    key3: 'value3'",
+        "                }",
+        "            }));",
+        "",
+        "        // You can call a method when chaining is not possible.",
+        "        request.getHeaders().add('Content-Type', 'application/json; charset=UTF-8');",
+        "",
+        "        // Sends the request and receives the response.",
+        "        var response = httpClient.send(request).getOrThrow();",
+        "",
+        "        // Checks if the response status is as expected.",
+        "        if (response.getStatus() === org.forgerock.http.protocol.Status.CREATED) {",
+        "            var result = JSON.parse(response.getEntity().getString());",
+        "",
+        "            // Set multiple token fields at once.",
+        "            accessToken.setFields(result.updatedFields);",
+        "        } else {",
+        "            logger.error('Unable to obtain access token modifications. Status: ' + response.getStatus() + '. Content: ' + response.getEntity().getString());",
+        "        }",
+        "    } catch (e) {",
+        "        logger.error('The request processing was interrupted. ' + e);",
+        "",
+        "        // The access token request fails with the HTTP 500 error in this case.",
+        "        throw ('Unable to obtain response from: ' + uri);",
+        "    }",
+        "",
+        "    // Adds new fields containing identity attribute values to the access token.",
+        "    accessToken.setField('mail', identity.getAttribute('mail'));",
+        "    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);",
+        "",
+        "    // Adds new fields containing the session property values.",
+        "    // NOTE: session may not be available for non-interactive authorization grants.",
+        "    if (session) {",
+        "        try {",
+        "            accessToken.setField('ipAddress', session.getProperty('Host'));",
+        "        } catch (e) {",
+        "            logger.error('Unable to retrieve session property value. ' + e);",
+        "        }",
+        "    }",
+        "",
+        "    // Removes a native field from the token entry, that was set by AM.",
+        "    // WARNING: removing native fields from the token may result in loss of functionality.",
+        "    // accessToken.removeTokenName()",
+        "",
+        "    // No return value is expected. Let it be undefined.",
+        "}());",
+        "*/",
+        "",
+      ],
+    },
+    "3bd13a46-61c4-4974-8efb-1700c80c64e3": {
+      "_id": "3bd13a46-61c4-4974-8efb-1700c80c64e3",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Inactive Device Match Script",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Inactive Device Match Script",
+      "script": [
+        "/*",
+        " * Inactive Device Match Script",
+        " */",
+        "",
+        "outcome = "true";",
+      ],
+    },
+    "3cb43516-ae69-433a-8787-501d45db14e9": {
+      "_id": "3cb43516-ae69-433a-8787-501d45db14e9",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Display sharedState, transientState, and headers.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "debug",
+      "script": [
+        "/* debug",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Display sharedState, transientState, and headers.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - true",
+        " */",
+        "var anchor = "anchor-".concat(generateNumericToken('xxx'));",
+        "var halign = "left";",
+        "var message = "<p><b>Shared State</b>:<br/>".concat(",
+        "      sharedState.toString()).concat("</p>").concat(",
+        "    "<p><b>Transient State</b>:<br/>").concat(",
+        "      transientState.toString()).concat("</p>").concat(",
+        "    "<p><b>Request Headers</b>:<br/>").concat(",
+        "      requestHeaders.toString()).concat("</p>")",
+        "var script = "Array.prototype.slice.call(\\n".concat(",
+        "  "document.getElementsByClassName('callback-component')).forEach(\\n").concat(",
+        "  "function (e) {\\n").concat(",
+        "  "  var message = e.firstElementChild;\\n").concat(",
+        "  "  if (message.firstChild && message.firstChild.nodeName == '#text' && message.firstChild.nodeValue.trim() == '").concat(anchor).concat("') {\\n").concat(",
+        "  "    message.className = \\"text-left\\";\\n").concat(",
+        "  "    message.align = \\"").concat(halign).concat("\\";\\n").concat(",
+        "  "    message.innerHTML = '").concat(message).concat("';\\n").concat(",
+        "  "  }\\n").concat(",
+        "  "})")",
+        "var fr = JavaImporter(",
+        "    org.forgerock.openam.auth.node.api.Action,",
+        "    javax.security.auth.callback.TextOutputCallback,",
+        "    com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
+        ")",
+        "if (message.length && callbacks.isEmpty()) {",
+        "    action = fr.Action.send(",
+        "        new fr.TextOutputCallback(",
+        "            fr.TextOutputCallback.INFORMATION,",
+        "            anchor",
+        "        ),",
+        "        new fr.ScriptTextOutputCallback(script)",
+        "    ).build()",
+        "}",
+        "else {",
+        "  action = fr.Action.goTo("true").build();",
+        "}",
+        "",
+        " /*",
+        "  * Generate a token in the desired format. All 'x' characters will be replaced with a random number 0-9.",
+        "  * ",
+        "  * Example:",
+        "  * 'xxxxx' produces '28535'",
+        "  * 'xxx-xxx' produces '432-521'",
+        "  */",
+        "function generateNumericToken(format) {",
+        "    return format.replace(/[x]/g, function(c) {",
+        "        var r = Math.random()*10|0;",
+        "        var v = r;",
+        "        return v.toString(10);",
+        "    });",
+        "}",
+      ],
+    },
+    "41c24257-d7fc-4654-8b46-c2666dc5b56d": {
+      "_id": "41c24257-d7fc-4654-8b46-c2666dc5b56d",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "set per level shared state variable",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "level",
+      "script": [
+        "(function () {",
+        "  outcome = 'true';",
+        "  var level = nodeState.get('level').asInteger();",
+        "  sharedState.put('level' + level + 'Value', 'Level ' + level + ': This is a longer string value set at each level of the nested journeys. It contains an indicator in which level it was set.');",
+        "}());",
+      ],
+    },
+    "4c963bb3-7084-43d0-bcdc-a47482cf1825": {
+      "_id": "4c963bb3-7084-43d0-bcdc-a47482cf1825",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Dummy",
+      "evaluatorVersion": "2.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Dummy",
+      "script": [
+        "",
+        "outcome = "true";",
+        "",
+      ],
+    },
+    "4e053815-adde-46ac-9fe2-d3ae93517c14": {
+      "_id": "4e053815-adde-46ac-9fe2-d3ae93517c14",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "2.0",
+      "exports": [],
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "My Other Example Library Script",
+      "script": [
+        "console.log("hi there");",
+      ],
+    },
+    "5bbdaeff-ddee-44b9-b608-8d413d7d65a6": {
+      "_id": "5bbdaeff-ddee-44b9-b608-8d413d7d65a6",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Check if mode has already been set.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "mode",
+      "script": [
+        "/* mode",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Collect mode if not already set and set outcome to mode.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - 'shared and level'",
+        " * - 'shared only'",
+        " * - 'level only'",
+        " * - 'none'",
+        " */",
+        "(function () {",
+        "  var mode = nodeState.get('mode');",
+        "  if (mode) {",
+        "    outcome = mode.asString();",
+        "    var level = nodeState.get('level').asInteger() + 1;",
+        "    logger.error('mode: mode=' + mode.asString() + ', level=' + level);",
+        "    sharedState.put('level', level);",
+        "  }",
+        "  else {",
+        "    var choices = ['shared and level', 'shared only', 'level only', 'none'];",
+        "  ",
+        "    var fr = JavaImporter(",
+        "      org.forgerock.openam.auth.node.api.Action,",
+        "      javax.security.auth.callback.ChoiceCallback",
+        "    )",
+        "",
+        "    if (callbacks.isEmpty()) {",
+        "      action = fr.Action.send([",
+        "        new fr.ChoiceCallback('Choose test mode', choices, 0, false)",
+        "      ]).build();",
+        "    } else {",
+        "      var choice = parseInt(callbacks.get(0).getSelectedIndexes()[0]);",
+        "      nodeState.putShared('mode', choices[choice]);",
+        "      nodeState.putShared('level', 0);",
+        "      action = fr.Action.goTo(choices[choice]).build();",
+        "    }",
+        "  }",
+        "}());",
+      ],
+    },
+    "5ce0d38a-154c-4be5-bd22-f9879c77e895": {
+      "_id": "5ce0d38a-154c-4be5-bd22-f9879c77e895",
+      "context": "SAML2_SP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "FrodoSPAdapter - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
+        " *",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (2)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (13):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnRequest:",
+        " *     hostedEntityId",
+        " *     idpEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnRequest() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     out",
+        " *     session",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnFailure:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postNewNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postNewNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
+        "}",
+      ],
+    },
+    "6002c349-f1d0-4317-baa2-a18590fc3cff": {
+      "_id": "6002c349-f1d0-4317-baa2-a18590fc3cff",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Okta Profile Normalization - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
+    },
+    "6325cf19-a49b-471e-8d26-7e4df76df0e2": {
+      "_id": "6325cf19-a49b-471e-8d26-7e4df76df0e2",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Okta Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
+    },
+    "647f2a33-9211-4315-a83f-a521d8b77d7b": {
+      "_id": "647f2a33-9211-4315-a83f-a521d8b77d7b",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Okta Profile Normalization - imported (2)",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
+    },
+    "739bdc48-fd24-4c52-b353-88706d75558a": {
+      "_id": "739bdc48-fd24-4c52-b353-88706d75558a",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Check if username has already been collected.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Check Username",
+      "script": [
+        "/* Check Username",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Check if username has already been collected.",
+        " * Return "known" if yes, "unknown" otherwise.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - known",
+        " * - unknown",
+        " */",
+        "(function () {",
+        "    if (null != sharedState.get("username")) {",
+        "        outcome = "known";",
+        "    }",
+        "    else {",
+        "        outcome = "unknown";",
+        "    }",
+        "}());",
+      ],
+    },
+    "85523e71-2d77-4577-b078-6f9674cc54e2": {
+      "_id": "85523e71-2d77-4577-b078-6f9674cc54e2",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Always redirect browser pre-auth",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Saml2 IDP Adapter Always Auth",
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
+        " *",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "      logger.error("Chicago: preSingleSignOn");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "      logger.error("Chicago: preAuthentication");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "      logger.error("Chicago: preSendResponse");",
+        "      logger.error("Chicago: authnRequest: "+authnRequest);",
+        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "      logger.error("Chicago: preSignResponse");",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "      logger.error("Chicago: preSendFailureResponse");",
+        "}",
+      ],
+    },
+    "9535446c-0ff6-4a76-8576-616599119d64": {
+      "_id": "9535446c-0ff6-4a76-8576-616599119d64",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Remove button from page.",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Remove Button",
+      "script": [
+        "/* Remove Button",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Hide buttons on the journey page.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - true",
+        " */",
+        "(function () {",
+        "    var script = "Array.prototype.slice.call(document.getElementsByTagName('button')).forEach(function (e) {e.style.display = 'none'})"",
+        "    var fr = JavaImporter(",
+        "        org.forgerock.openam.auth.node.api.Action,",
+        "        javax.security.auth.callback.TextOutputCallback,",
+        "        com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
+        "    )",
+        "    var message = " "",
+        "    if (callbacks.isEmpty()) {",
+        "        action = fr.Action.send(",
+        "            new fr.TextOutputCallback(",
+        "                fr.TextOutputCallback.INFORMATION,",
+        "                message",
+        "            ),",
+        "            new fr.ScriptTextOutputCallback(script)",
+        "        ).build()",
+        "    }",
+        "}());",
+      ],
+    },
+    "994a4e8f-2741-424a-83e7-3c5f78da01f5": {
+      "_id": "994a4e8f-2741-424a-83e7-3c5f78da01f5",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Always redirect browser pre-auth",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Saml2 IDP Adapter Always Auth - imported (2)",
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
+        " *",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "      logger.error("Chicago: preSingleSignOn");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "      logger.error("Chicago: preAuthentication");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "      logger.error("Chicago: preSendResponse");",
+        "      logger.error("Chicago: authnRequest: "+authnRequest);",
+        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "      logger.error("Chicago: preSignResponse");",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "      logger.error("Chicago: preSendFailureResponse");",
+        "}",
+      ],
+    },
+    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
+      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "My Example Script Using Libraries",
+      "evaluatorVersion": "2.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "My Example Script Using Libraries",
+      "script": [
+        "/**",
+        " * Testing library scripts",
+        " */",
+        "var mylib = require('My Example Library');",
+        "var loggers = require('Library Script');",
+        "",
+        "mylib.add(1);",
+        "mylib.logTotal(logger);",
+        "mylib.add(3);",
+        "mylib.logTotalWithMessage(logger, mylib.MSG);",
+        "",
+        "outcome = 'true';",
+      ],
+    },
+    "cf3515f0-8278-4ee3-a530-1bad7424c416": {
+      "_id": "cf3515f0-8278-4ee3-a530-1bad7424c416",
+      "context": "OIDC_CLAIMS",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Default alpha realm script for OIDC claims",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Alpha OIDC Claims Script",
+      "script": [
+        "/*",
+        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
+        " * The claim values are computed for:",
+        " * the claims derived from the requested scopes,",
+        " * the claims provided by the authorization server,",
+        " * and the claims requested by the client via the claims parameter.",
+        " *",
+        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
+        " * define the scope-to-claims mapping, and",
+        " * assign to each claim a resolver function that will compute the claim value.",
+        " *",
+        " * Defined variables (class references are provided below):",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * claims - Map<String, Object> (5).",
+        " *          Always present, default server provided claims.",
+        " * claimObjects - List<Claim> (7, 2).",
+        " *                Always present, the default server provided claims.",
+        " * requestedClaims - Map<String, Set<String>> (5).",
+        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
+        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
+        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
+        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
+        " * requestedTypedClaims - List<Claim> (7, 2).",
+        " *                        Always present, the requested claims.",
+        " *                        Requested claims with no requested values will have a claim with no values.",
+        " *                        A claim with a single value indicates this is the only value that should be returned.",
+        " * claimsLocales - List<String> (7).",
+        " *                 The values from the 'claims_locales' parameter.",
+        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *              In order to use the client, you may need to add",
+        " *              org.forgerock.http.Client,",
+        " *              org.forgerock.http.protocol.*,",
+        " *              and org.forgerock.util.promise.PromiseImpl",
+        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
+        " *",
+        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *          See RESULTS section for additional details.",
+        " *",
+        " * Class reference:",
+        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
+        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
+        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
+        " *         the claim name, requested values, locale, and whether the claim is essential.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        "*/",
+        "",
+        "(function () {",
+        "    // SETUP",
+        "",
+        "    /**",
+        "     * Claim processing utilities.",
+        "     * An object that contains reusable functions for processing claims.",
+        "     * @see CLAIM PROCESSING UTILITIES section for details.",
+        "     */",
+        "    var utils = getUtils();",
+        "",
+        "    // CONFIGURATION AND CUSTOMIZATION",
+        "",
+        "    /**",
+        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a scope value to an array of claim names",
+        "     * to specify which claims need to be processed and returned for the requested scopes.",
+        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
+        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can choose the claim names returned for a scope.",
+        "     */",
+        "    utils.setScopeClaimsMap({",
+        "        profile: [",
+        "            'name',",
+        "            'family_name',",
+        "            'given_name',",
+        "            'zoneinfo',",
+        "            'locale'",
+        "        ],",
+        "        email: ['email'],",
+        "        address: ['address'],",
+        "        phone: ['phone_number']",
+        "    });",
+        "",
+        "    /**",
+        "     * In this script, each claim",
+        "     * derived from the requested scopes,",
+        "     * provided by the authorization server, and",
+        "     * requested by the client via the claims parameter",
+        "     * will be processed by a function associated with the claim name.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a claim name to a resolver function,",
+        "     * which will be automatically executed for each claim processed by the script.",
+        "     *",
+        "     * The claim resolver function will receive the requested claim information",
+        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
+        "     * for details on the Claim class.",
+        "     *",
+        "     * If the claim resolver function returns a value,",
+        "     * other than undefined or null,",
+        "     * the claim will be included in the script's results.",
+        "     *",
+        "     * The Claim instance provides methods to check",
+        "     * what the name of the claim is,",
+        "     * which values the claim request contains,",
+        "     * whether the claim is essential, and",
+        "     * which locale the claim is associated with.",
+        "     * The resolver function can consider this information when computing and returning the claim value.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
+        "     * is called to return a claim resolver function based on a user profile attribute.",
+        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
+        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can reuse the predefined utils methods with your custom arguments.",
+        "     * You can also specify a custom resolver function for a claim name,",
+        "     * that will compute and return the claim value—as shown in the commented out example below.",
+        "     */",
+        "    utils.setClaimResolvers({",
+        "        /*",
+        "        // An example of a simple claim resolver function that is defined for a claim",
+        "        // directly in the configuration object:",
+        "        custom-claim-name: function (requestedClaim) {",
+        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
+        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "",
+        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
+        "            // You can use:",
+        "            // requestedClaim.getName()",
+        "            // requestedClaim.getValues()",
+        "            // requestedClaim.getLocale()",
+        "            // requestedClaim.isEssential()",
+        "",
+        "            return claimValue",
+        "        },",
+        "        */",
+        "        /**",
+        "         * The use of utils.getUserProfileClaimResolver shows how",
+        "         * an argument passed to a function that returns a claim resolver",
+        "         * becomes available to the resolver function (via its lexical context).",
+        "         */",
+        "        name: utils.getUserProfileClaimResolver('cn'),",
+        "        family_name: utils.getUserProfileClaimResolver('sn'),",
+        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
+        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
+        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
+        "        email: utils.getUserProfileClaimResolver('mail'),",
+        "        address: utils.getAddressClaimResolver(",
+        "            /**",
+        "             * The passed in user profile claim resolver function",
+        "             * can be used by the address claim resolver function",
+        "             * to obtain the claim value to be formatted as per the OIDC specification:",
+        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             */",
+        "            utils.getUserProfileClaimResolver('postaladdress')",
+        "        ),",
+        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
+        "    });",
+        "",
+        "    // CLAIM PROCESSING UTILITIES",
+        "",
+        "    /**",
+        "     * @returns {object} An object that contains reusable claim processing utilities.",
+        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
+        "     */",
+        "    function getUtils () {",
+        "        // IMPORT JAVA",
+        "",
+        "        /**",
+        "         * Provides Java scripting functionality.",
+        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
+        "         */",
+        "        var frJava = JavaImporter(",
+        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
+        "            org.forgerock.oauth2.core.UserInfoClaims,",
+        "            org.forgerock.openidconnect.Claim,",
+        "",
+        "            java.util.LinkedHashMap,",
+        "            java.util.ArrayList",
+        "        );",
+        "",
+        "        // SET UP CONFIGURATION",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported scope values (scopes)",
+        "         * and the corresponding claim names for each scope value.",
+        "         */",
+        "        var scopeClaimsMap;",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value.",
+        "         */",
+        "        var claimResolvers;",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
+        "         * in order to specify which claims need to be processed for the requested scopes.",
+        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
+        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
+        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
+        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
+        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
+        "         * @returns {undefined}",
+        "         */",
+        "        function setScopeClaimsMap(params) {",
+        "            scopeClaimsMap = params;",
+        "        }",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps",
+        "         * each supported claim name to a function that computes and returns the claim value.",
+        "         */",
+        "        function setClaimResolvers(params) {",
+        "            claimResolvers = params;",
+        "        }",
+        "",
+        "        // CLAIM RESOLVERS",
+        "",
+        "        /**",
+        "         * Claim resolvers are functions that return a claim value.",
+        "         * @param {*}",
+        "         * @returns {*}",
+        "         */",
+        "",
+        "        /**",
+        "         * Defines a claim resolver based on a user profile attribute.",
+        "         * @param {string} attributeName - Name of the user profile attribute.",
+        "         * @returns {function} A function that will determine the claim value",
+        "         * based on the user profile attribute and the (requested) claim properties.",
+        "         */",
+        "        function getUserProfileClaimResolver (attributeName) {",
+        "            /**",
+        "             * Resolves a claim with a user profile attribute value.",
+        "             * Returns undefined if the identity attribute is not populated,",
+        "             * OR if the claim has requested values that do not contain the identity attribute value.",
+        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {string|HashSet|undefined}",
+        "             */",
+        "            function resolveClaim(claim) {",
+        "                var userProfileValue;",
+        "",
+        "                if (identity) {",
+        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "",
+        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
+        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
+        "                            return userProfileValue;",
+        "                        }",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            return resolveClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional formatting to the value before returning it.",
+        "         */",
+        "        function getAddressClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Creates an address claim object from a value returned by a claim resolver,",
+        "             * and returns the address claim object as the claim value.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
+        "             */",
+        "            function resolveAddressClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "                var addressObject;",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    addressObject = new frJava.LinkedHashMap();",
+        "",
+        "                    addressObject.put('formatted', claimValue);",
+        "",
+        "                    return addressObject;",
+        "                }",
+        "            }",
+        "",
+        "            return resolveAddressClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional logic for essential claims.",
+        "         */",
+        "        function getEssentialClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Returns a claim value or throws an error.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
+        "             *",
+        "             * Use of this resolver is optional.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
+        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
+        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
+        "             * unless otherwise specified in the description of the specific claim."",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*}",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             */",
+        "            function resolveEssentialClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "",
+        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
+        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
+        "                }",
+        "",
+        "                return claimValue;",
+        "            }",
+        "",
+        "            return resolveEssentialClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Provides default resolution for a claim.",
+        "         * Use it if a claim-specific resolver is not defined in the configuration.",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @returns {*} A single value associated with this claim.",
+        "         */",
+        "        function resolveAnyClaim (claim) {",
+        "            if (claim.getValues().size() === 1) {",
+        "                return claim.getValues().toArray()[0];",
+        "            }",
+        "        }",
+        "",
+        "        // UTILITIES",
+        "",
+        "        /**",
+        "         * Returns claim value from a set.",
+        "         * If the set contains a single value, returns the value.",
+        "         * If the set contains multiple values, returns the set.",
+        "         * Otherwise, returns undefined.",
+        "         *",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
+        "         * @returns {string|java.util.HashSet|undefined}",
+        "         */",
+        "        function getClaimValueFromSet (claim, set) {",
+        "            if (set && set.size()) {",
+        "                if (set.size() === 1) {",
+        "                    return set.toArray()[0];",
+        "                } else {",
+        "                    return set;",
+        "                }",
+        "            } else if (logger.warningEnabled()) {",
+        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            }",
+        "        }",
+        "",
+        "        function isClaimValueValid (claimValue) {",
+        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
+        "                return false;",
+        "            }",
+        "",
+        "            return true;",
+        "        }",
+        "",
+        "        // CLAIM PROCESSING",
+        "",
+        "        /**",
+        "         * Constructs and returns an object populated with the computed claim values",
+        "         * and the requested scopes mapped to the claim names.",
+        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "         * @see RESULTS section for the use of this function.",
+        "         */",
+        "        function getUserInfoClaims () {",
+        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of (requested) claim names populated with the computed claim values.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         * A map of the requested claim names and the corresponding claim values.",
+        "         */",
+        "        function getComputedClaims () {",
+        "            /**",
+        "             * Creates a complete list of claim objects from:",
+        "             * the claims derived from the scopes,",
+        "             * the claims provided by the authorization server,",
+        "             * and the claims requested by the client.",
+        "             * @returns {java.util.ArrayList}",
+        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "             */",
+        "            function getClaims() {",
+        "                /**",
+        "                 * Returns a list of claim objects for the requested scopes.",
+        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
+        "                 * no other properties of a claim derived from a scope are populated.",
+        "                 * @returns {java.util.ArrayList}",
+        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
+        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "                 */",
+        "                function convertScopeToClaims() {",
+        "                    var claims = new frJava.ArrayList();",
+        "",
+        "                    scopes.toArray().forEach(function (scope) {",
+        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
+        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                                claims.add(new frJava.Claim(claimName));",
+        "                            });",
+        "                        }",
+        "                    });",
+        "",
+        "                    return claims;",
+        "                }",
+        "",
+        "                var claims = new frJava.ArrayList();",
+        "",
+        "                claims.addAll(convertScopeToClaims());",
+        "                claims.addAll(claimObjects);",
+        "                claims.addAll(requestedTypedClaims);",
+        "",
+        "                return claims;",
+        "            }",
+        "",
+        "            /**",
+        "             * Computes and returns a claim value.",
+        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
+        "             * @see claimResolvers",
+        "             * If no resolver function is found, uses the default claim resolver function.",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*} Claim value.",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             * Rethrows this exception if a claim resolver throws it.",
+        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
+        "             * if you want to terminate the claim processing.",
+        "             */",
+        "            function computeClaim(claim) {",
+        "                var resolveClaim;",
+        "                var message;",
+        "",
+        "                try {",
+        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "",
+        "                    return resolveClaim(claim);",
+        "                } catch (e) {",
+        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "",
+        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
+        "                        throw e;",
+        "                    }",
+        "",
+        "                    if (logger.warningEnabled()) {",
+        "                        logger.warning(message);",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            var computedClaims = new frJava.LinkedHashMap();",
+        "",
+        "            getClaims().toArray().forEach(function (claim) {",
+        "                var claimValue = computeClaim(claim);",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    computedClaims.put(claim.getName(), claimValue);",
+        "                } else {",
+        "                    /**",
+        "                     * If a claim has been processed, but appears in the list again,",
+        "                     * and its value cannot be computed under the new conditions,",
+        "                     * the claim is removed from the final result.",
+        "                     *",
+        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
+        "                     * but also requested by the client with required values that don't match the computed one.",
+        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
+        "                     * for the relevant OIDC specification details.",
+        "                     */",
+        "                    computedClaims.remove(claim.getName());",
+        "                }",
+        "            });",
+        "",
+        "            return computedClaims;",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of requested scopes and the corresponding claim names.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         */",
+        "        function getCompositeScopes () {",
+        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "",
+        "            scopes.toArray().forEach(function (scope) {",
+        "                var scopeClaims = new frJava.ArrayList();",
+        "",
+        "                if (scopeClaimsMap[scope]) {",
+        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                        scopeClaims.add(claimName);",
+        "                    });",
+        "                }",
+        "",
+        "                if (scopeClaims.size()) {",
+        "                    compositeScopes.put(scope, scopeClaims);",
+        "                }",
+        "            });",
+        "",
+        "            return compositeScopes;",
+        "        }",
+        "",
+        "        // PUBLIC METHODS",
+        "",
+        "        return {",
+        "            setScopeClaimsMap: setScopeClaimsMap,",
+        "            setClaimResolvers: setClaimResolvers,",
+        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
+        "            getAddressClaimResolver: getAddressClaimResolver,",
+        "            getEssentialClaimResolver: getEssentialClaimResolver,",
+        "            getUserInfoClaims: getUserInfoClaims",
+        "        };",
+        "    }",
+        "",
+        "    // RESULTS",
+        "",
+        "    /**",
+        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
+        "     * populated with the computed claim values and",
+        "     * the requested scopes mapped to the claim names.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "     *",
+        "     * Assigning it to a variable gives you an opportunity",
+        "     * to log the content of the returned value during development.",
+        "     */",
+        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "",
+        "    /*",
+        "    logger.error(scriptName + ' results:')",
+        "    logger.error('Values: ' + userInfoClaims.getValues())",
+        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
+        "    */",
+        "",
+        "    return userInfoClaims;",
+        "}());",
+        "",
+      ],
+    },
+    "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1": {
+      "_id": "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Always redirect browser pre-auth",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Saml2 IDP Adapter Always Auth - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
+        " *",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "      logger.error("Chicago: preSingleSignOn");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "      logger.error("Chicago: preAuthentication");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "      logger.error("Chicago: preSendResponse");",
+        "      logger.error("Chicago: authnRequest: "+authnRequest);",
+        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "      logger.error("Chicago: preSignResponse");",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "      logger.error("Chicago: preSendFailureResponse");",
+        "}",
+      ],
+    },
+    "d58977ed-0542-4147-8197-973ef7300191": {
+      "_id": "d58977ed-0542-4147-8197-973ef7300191",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Custom Device Match Script",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Custom Device Match Script",
+      "script": [
+        "/*",
+        " * Custom Device Match Script",
+        " */",
+        "",
+        "outcome = "true";",
+      ],
+    },
+    "da7a96a8-7969-4dab-9c6e-a812938cc76d": {
+      "_id": "da7a96a8-7969-4dab-9c6e-a812938cc76d",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Script that uses secrets and variables",
+      "evaluatorVersion": "2.0",
+      "exports": [],
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "test-script-with-secrets-and-variables",
+      "script": [
+        "console.log(\`pi: \${systemEnv.getProperty("esv.test.var.pi")}\`);",
+        "console.log(\`pi secret: \${systemEnv.getProperty("esv.test.secret.pi")}\`);",
+        "console.log(\`speed of light: \${systemEnv.getProperty("esv.test.variable.light")}\`);",
+        "console.log(\`euler's number: \${systemEnv.getProperty("esv.test.secret.euler")}\`);",
+        "console.log(\`Area of circle with radius 7: \${7 * 7 * systemEnv.getProperty("esv.test.var.pi")}\`);",
+        "console.log(\`Volume of sphere with radius 7: \${4 * 7 * 7 * 7 * systemEnv.getProperty("esv.test.secret.pi") / 3}\`);",
+        "",
+      ],
+    },
+    "dbe0bf9a-72aa-49d5-8483-9db147985a47": {
+      "_id": "dbe0bf9a-72aa-49d5-8483-9db147985a47",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from ADFS",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "ADFS Profile Normalization (JS)",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script returns the social identity profile information for the authenticating user",
+        " * in a standard form expected by the Social Provider Handler Node.",
+        " *",
+        " * Defined variables:",
+        " * rawProfile - The social identity provider profile information for the authenticating user.",
+        " *              JsonValue (1).",
+        " * logger - The debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " * realm - String (primitive).",
+        " *         The name of the realm the user is authenticating to.",
+        " * requestHeaders - TreeMap (2).",
+        " *                  The object that provides methods for accessing headers in the login request:",
+        " *                  https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.",
+        " * requestParameters - TreeMap (2).",
+        " *                     The object that contains the authentication request parameters.",
+        " * selectedIdp - String (primitive).",
+        " *               The social identity provider name. For example: google.",
+        " * sharedState - LinkedHashMap (3).",
+        " *               The object that holds the state of the authentication tree and allows data exchange between the stateless nodes:",
+        " *               https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
+        " * transientState - LinkedHashMap (3).",
+        " *                  The object for storing sensitive information that must not leave the server unencrypted,",
+        " *                  and that may not need to persist between authentication requests during the authentication session:",
+        " *                  https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
+        " *",
+        " * Return - a JsonValue (1).",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *",
+        " *          This script's last statement should result in a JsonValue (1) with the following keys:",
+        " *          {",
+        " *              {"displayName": "corresponding-social-identity-provider-value"},",
+        " *              {"email": "corresponding-social-identity-provider-value"},",
+        " *              {"familyName": "corresponding-social-identity-provider-value"},",
+        " *              {"givenName": "corresponding-social-identity-provider-value"},",
+        " *              {"id": "corresponding-social-identity-provider-value"},",
+        " *              {"locale": "corresponding-social-identity-provider-value"},",
+        " *              {"photoUrl": "corresponding-social-identity-provider-value"},",
+        " *              {"username": "corresponding-social-identity-provider-value"}",
+        " *          }",
+        " *",
+        " *          The consumer of this data defines which keys are required and which are optional.",
+        " *          For example, the script associated with the Social Provider Handler Node and,",
+        " *          ultimately, the managed object created/updated with this data",
+        " *          will expect certain keys to be populated.",
+        " *          In some common default configurations, the following keys are required to be not empty:",
+        " *          username, givenName, familyName, email.",
+        " *",
+        " *          From RFC4517: A value of the Directory String syntax is a string of one or more",
+        " *          arbitrary characters from the Universal Character Set (UCS).",
+        " *          A zero-length character string is not permitted.",
+        " *",
+        " * (1) JsonValue - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/json/JsonValue.html.",
+        " * (2) TreeMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/TreeMap.html.",
+        " * (3) LinkedHashMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " */",
+        "",
+        "(function () {",
+        "    var frJava = JavaImporter(",
+        "        org.forgerock.json.JsonValue",
+        "    );",
+        "",
+        "    var normalizedProfileData = frJava.JsonValue.json(frJava.JsonValue.object());",
+        "  ",
+        "      //logger.message('Seguin rawProfile: '+rawProfile);",
+        "",
+        "    normalizedProfileData.put('id', rawProfile.get('sub').asString());",
+        "    normalizedProfileData.put('displayName', rawProfile.get('givenName').asString() + ' ' + rawProfile.get('sn').asString());",
+        "    normalizedProfileData.put('email', rawProfile.get('mail').asString());",
+        "    normalizedProfileData.put('givenName', rawProfile.get('givenName').asString());",
+        "    normalizedProfileData.put('familyName', rawProfile.get('sn').asString());",
+        "    normalizedProfileData.put('username', rawProfile.get('upn').asString());",
+        "    normalizedProfileData.put('roles', rawProfile.get('roles').asString());",
+        "  ",
+        "      //logger.message('Seguin normalizedProfileData: '+normalizedProfileData);",
+        "",
+        "    return normalizedProfileData;",
+        "}());",
+      ],
+    },
     "e1db8a0a-0329-4962-a5bf-ecffaca376ae": {
       "_id": "e1db8a0a-0329-4962-a5bf-ecffaca376ae",
       "context": "OIDC_CLAIMS",
@@ -21573,1238 +18856,3496 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "description": "Used by endUserUIClient",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
       "name": "Alpha endUserUIClient OIDC Claims Script",
-      "script": "file://Alpha-endUserUIClient-OIDC-Claims-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Check-Username.script.js 1`] = `
-"/* Check Username
- *
- * Author: volker.scheuber@forgerock.com
- * 
- * Check if username has already been collected.
- * Return "known" if yes, "unknown" otherwise.
- * 
- * This script does not need to be parametrized. It will work properly as is.
- * 
- * The Scripted Decision Node needs the following outcomes defined:
- * - known
- * - unknown
- */
-(function () {
-    if (null != sharedState.get("username")) {
-        outcome = "known";
-    }
-    else {
-        outcome = "unknown";
-    }
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Check-Username.script.json 1`] = `
-{
-  "script": {
-    "739bdc48-fd24-4c52-b353-88706d75558a": {
-      "_id": "739bdc48-fd24-4c52-b353-88706d75558a",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Check if username has already been collected.",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Check Username",
-      "script": "file://Check-Username.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Custom-Device-Match-Script.script.js 1`] = `
-"/*
- * Custom Device Match Script
- */
-
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Custom-Device-Match-Script.script.json 1`] = `
-{
-  "script": {
-    "d58977ed-0542-4147-8197-973ef7300191": {
-      "_id": "d58977ed-0542-4147-8197-973ef7300191",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Custom Device Match Script",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Custom Device Match Script",
-      "script": "file://Custom-Device-Match-Script.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Dummy.script.js 1`] = `
-"
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Dummy.script.json 1`] = `
-{
-  "script": {
-    "4c963bb3-7084-43d0-bcdc-a47482cf1825": {
-      "_id": "4c963bb3-7084-43d0-bcdc-a47482cf1825",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "Dummy",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "name": "Dummy",
-      "script": "file://Dummy.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/EmailAsUsername.script.js 1`] = `
-"objectAttributes = sharedState.get("objectAttributes")
-userName = objectAttributes.get("userName")
-
-if(userName){
-  //Form Fill
-  objectAttributes.put("mail", userName)
-} else {
-  //Social
-  objectAttributes.put("userName", objectAttributes.get("mail"))
-}
-
-
-sharedState.put("objectAttributes", objectAttributes);
-//sharedState.put("username", mail)
-
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/EmailAsUsername.script.json 1`] = `
-{
-  "script": {
-    "e5c302c8-f838-4698-87cc-d7225fc82454": {
-      "_id": "e5c302c8-f838-4698-87cc-d7225fc82454",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "null",
-      "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "EmailAsUsername",
-      "script": "file://EmailAsUsername.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Format-Username.script.js 1`] = `
-"var username = sharedState.get("username");
-
-sharedState.put("displayName", username);
-outcome = "continue";
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Format-Username.script.json 1`] = `
-{
-  "script": {
-    "223739f3-9c54-43b7-9572-3c5338786145": {
-      "_id": "223739f3-9c54-43b7-9572-3c5338786145",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "script": [
+        "/*",
+        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
+        " * The claim values are computed for:",
+        " * the claims derived from the requested scopes,",
+        " * the claims provided by the authorization server,",
+        " * and the claims requested by the client via the claims parameter.",
+        " *",
+        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
+        " * define the scope-to-claims mapping, and",
+        " * assign to each claim a resolver function that will compute the claim value.",
+        " *",
+        " * Defined variables (class references are provided below):",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * claims - Map<String, Object> (5).",
+        " *          Always present, default server provided claims.",
+        " * claimObjects - List<Claim> (7, 2).",
+        " *                Always present, the default server provided claims.",
+        " * requestedClaims - Map<String, Set<String>> (5).",
+        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
+        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
+        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
+        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
+        " * requestedTypedClaims - List<Claim> (7, 2).",
+        " *                        Always present, the requested claims.",
+        " *                        Requested claims with no requested values will have a claim with no values.",
+        " *                        A claim with a single value indicates this is the only value that should be returned.",
+        " * claimsLocales - List<String> (7).",
+        " *                 The values from the 'claims_locales' parameter.",
+        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *              In order to use the client, you may need to add",
+        " *              org.forgerock.http.Client,",
+        " *              org.forgerock.http.protocol.*,",
+        " *              and org.forgerock.util.promise.PromiseImpl",
+        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
+        " *",
+        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *          See RESULTS section for additional details.",
+        " *",
+        " * Class reference:",
+        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
+        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
+        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
+        " *         the claim name, requested values, locale, and whether the claim is essential.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        "*/",
+        "",
+        "(function () {",
+        "    // SETUP",
+        "",
+        "    /**",
+        "     * Claim processing utilities.",
+        "     * An object that contains reusable functions for processing claims.",
+        "     * @see CLAIM PROCESSING UTILITIES section for details.",
+        "     */",
+        "    var utils = getUtils();",
+        "",
+        "    // CONFIGURATION AND CUSTOMIZATION",
+        "",
+        "    /**",
+        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a scope value to an array of claim names",
+        "     * to specify which claims need to be processed and returned for the requested scopes.",
+        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
+        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can choose the claim names returned for a scope.",
+        "     */",
+        "    utils.setScopeClaimsMap({",
+        "        profile: [",
+        "            'name',",
+        "            'family_name',",
+        "            'given_name',",
+        "            'zoneinfo',",
+        "            'locale'",
+        "        ],",
+        "        email: ['email'],",
+        "        address: ['address'],",
+        "        phone: ['phone_number']",
+        "    });",
+        "",
+        "    /**",
+        "     * In this script, each claim",
+        "     * derived from the requested scopes,",
+        "     * provided by the authorization server, and",
+        "     * requested by the client via the claims parameter",
+        "     * will be processed by a function associated with the claim name.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a claim name to a resolver function,",
+        "     * which will be automatically executed for each claim processed by the script.",
+        "     *",
+        "     * The claim resolver function will receive the requested claim information",
+        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
+        "     * for details on the Claim class.",
+        "     *",
+        "     * If the claim resolver function returns a value,",
+        "     * other than undefined or null,",
+        "     * the claim will be included in the script's results.",
+        "     *",
+        "     * The Claim instance provides methods to check",
+        "     * what the name of the claim is,",
+        "     * which values the claim request contains,",
+        "     * whether the claim is essential, and",
+        "     * which locale the claim is associated with.",
+        "     * The resolver function can consider this information when computing and returning the claim value.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
+        "     * is called to return a claim resolver function based on a user profile attribute.",
+        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
+        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can reuse the predefined utils methods with your custom arguments.",
+        "     * You can also specify a custom resolver function for a claim name,",
+        "     * that will compute and return the claim value—as shown in the commented out example below.",
+        "     */",
+        "    utils.setClaimResolvers({",
+        "        /*",
+        "        // An example of a simple claim resolver function that is defined for a claim",
+        "        // directly in the configuration object:",
+        "        custom-claim-name: function (requestedClaim) {",
+        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
+        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "",
+        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
+        "            // You can use:",
+        "            // requestedClaim.getName()",
+        "            // requestedClaim.getValues()",
+        "            // requestedClaim.getLocale()",
+        "            // requestedClaim.isEssential()",
+        "",
+        "            return claimValue",
+        "        },",
+        "        */",
+        "        /**",
+        "         * The use of utils.getUserProfileClaimResolver shows how",
+        "         * an argument passed to a function that returns a claim resolver",
+        "         * becomes available to the resolver function (via its lexical context).",
+        "         */",
+        "        name: utils.getUserProfileClaimResolver('cn'),",
+        "        family_name: utils.getUserProfileClaimResolver('sn'),",
+        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
+        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
+        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
+        "        email: utils.getUserProfileClaimResolver('mail'),",
+        "        address: utils.getAddressClaimResolver(",
+        "            /**",
+        "             * The passed in user profile claim resolver function",
+        "             * can be used by the address claim resolver function",
+        "             * to obtain the claim value to be formatted as per the OIDC specification:",
+        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             */",
+        "            utils.getUserProfileClaimResolver('postaladdress')",
+        "        ),",
+        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
+        "    });",
+        "",
+        "    // CLAIM PROCESSING UTILITIES",
+        "",
+        "    /**",
+        "     * @returns {object} An object that contains reusable claim processing utilities.",
+        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
+        "     */",
+        "    function getUtils () {",
+        "        // IMPORT JAVA",
+        "",
+        "        /**",
+        "         * Provides Java scripting functionality.",
+        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
+        "         */",
+        "        var frJava = JavaImporter(",
+        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
+        "            org.forgerock.oauth2.core.UserInfoClaims,",
+        "            org.forgerock.openidconnect.Claim,",
+        "",
+        "            java.util.LinkedHashMap,",
+        "            java.util.ArrayList",
+        "        );",
+        "",
+        "        // SET UP CONFIGURATION",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported scope values (scopes)",
+        "         * and the corresponding claim names for each scope value.",
+        "         */",
+        "        var scopeClaimsMap;",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value.",
+        "         */",
+        "        var claimResolvers;",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
+        "         * in order to specify which claims need to be processed for the requested scopes.",
+        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
+        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
+        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
+        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
+        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
+        "         * @returns {undefined}",
+        "         */",
+        "        function setScopeClaimsMap(params) {",
+        "            scopeClaimsMap = params;",
+        "        }",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps",
+        "         * each supported claim name to a function that computes and returns the claim value.",
+        "         */",
+        "        function setClaimResolvers(params) {",
+        "            claimResolvers = params;",
+        "        }",
+        "",
+        "        // CLAIM RESOLVERS",
+        "",
+        "        /**",
+        "         * Claim resolvers are functions that return a claim value.",
+        "         * @param {*}",
+        "         * @returns {*}",
+        "         */",
+        "",
+        "        /**",
+        "         * Defines a claim resolver based on a user profile attribute.",
+        "         * @param {string} attributeName - Name of the user profile attribute.",
+        "         * @returns {function} A function that will determine the claim value",
+        "         * based on the user profile attribute and the (requested) claim properties.",
+        "         */",
+        "        function getUserProfileClaimResolver (attributeName) {",
+        "            /**",
+        "             * Resolves a claim with a user profile attribute value.",
+        "             * Returns undefined if the identity attribute is not populated,",
+        "             * OR if the claim has requested values that do not contain the identity attribute value.",
+        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {string|HashSet|undefined}",
+        "             */",
+        "            function resolveClaim(claim) {",
+        "                var userProfileValue;",
+        "",
+        "                if (identity) {",
+        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "",
+        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
+        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
+        "                            return userProfileValue;",
+        "                        }",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            return resolveClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional formatting to the value before returning it.",
+        "         */",
+        "        function getAddressClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Creates an address claim object from a value returned by a claim resolver,",
+        "             * and returns the address claim object as the claim value.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
+        "             */",
+        "            function resolveAddressClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "                var addressObject;",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    addressObject = new frJava.LinkedHashMap();",
+        "",
+        "                    addressObject.put('formatted', claimValue);",
+        "",
+        "                    return addressObject;",
+        "                }",
+        "            }",
+        "",
+        "            return resolveAddressClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional logic for essential claims.",
+        "         */",
+        "        function getEssentialClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Returns a claim value or throws an error.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
+        "             *",
+        "             * Use of this resolver is optional.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
+        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
+        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
+        "             * unless otherwise specified in the description of the specific claim."",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*}",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             */",
+        "            function resolveEssentialClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "",
+        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
+        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
+        "                }",
+        "",
+        "                return claimValue;",
+        "            }",
+        "",
+        "            return resolveEssentialClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Provides default resolution for a claim.",
+        "         * Use it if a claim-specific resolver is not defined in the configuration.",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @returns {*} A single value associated with this claim.",
+        "         */",
+        "        function resolveAnyClaim (claim) {",
+        "            if (claim.getValues().size() === 1) {",
+        "                return claim.getValues().toArray()[0];",
+        "            }",
+        "        }",
+        "",
+        "        // UTILITIES",
+        "",
+        "        /**",
+        "         * Returns claim value from a set.",
+        "         * If the set contains a single value, returns the value.",
+        "         * If the set contains multiple values, returns the set.",
+        "         * Otherwise, returns undefined.",
+        "         *",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
+        "         * @returns {string|java.util.HashSet|undefined}",
+        "         */",
+        "        function getClaimValueFromSet (claim, set) {",
+        "            if (set && set.size()) {",
+        "                if (set.size() === 1) {",
+        "                    return set.toArray()[0];",
+        "                } else {",
+        "                    return set;",
+        "                }",
+        "            } else if (logger.warningEnabled()) {",
+        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            }",
+        "        }",
+        "",
+        "        function isClaimValueValid (claimValue) {",
+        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
+        "                return false;",
+        "            }",
+        "",
+        "            return true;",
+        "        }",
+        "",
+        "        // CLAIM PROCESSING",
+        "",
+        "        /**",
+        "         * Constructs and returns an object populated with the computed claim values",
+        "         * and the requested scopes mapped to the claim names.",
+        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "         * @see RESULTS section for the use of this function.",
+        "         */",
+        "        function getUserInfoClaims () {",
+        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of (requested) claim names populated with the computed claim values.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         * A map of the requested claim names and the corresponding claim values.",
+        "         */",
+        "        function getComputedClaims () {",
+        "            /**",
+        "             * Creates a complete list of claim objects from:",
+        "             * the claims derived from the scopes,",
+        "             * the claims provided by the authorization server,",
+        "             * and the claims requested by the client.",
+        "             * @returns {java.util.ArrayList}",
+        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "             */",
+        "            function getClaims() {",
+        "                /**",
+        "                 * Returns a list of claim objects for the requested scopes.",
+        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
+        "                 * no other properties of a claim derived from a scope are populated.",
+        "                 * @returns {java.util.ArrayList}",
+        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
+        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "                 */",
+        "                function convertScopeToClaims() {",
+        "                    var claims = new frJava.ArrayList();",
+        "",
+        "                    scopes.toArray().forEach(function (scope) {",
+        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
+        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                                claims.add(new frJava.Claim(claimName));",
+        "                            });",
+        "                        }",
+        "                    });",
+        "",
+        "                    return claims;",
+        "                }",
+        "",
+        "                var claims = new frJava.ArrayList();",
+        "",
+        "                claims.addAll(convertScopeToClaims());",
+        "                claims.addAll(claimObjects);",
+        "                claims.addAll(requestedTypedClaims);",
+        "",
+        "                return claims;",
+        "            }",
+        "",
+        "            /**",
+        "             * Computes and returns a claim value.",
+        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
+        "             * @see claimResolvers",
+        "             * If no resolver function is found, uses the default claim resolver function.",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*} Claim value.",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             * Rethrows this exception if a claim resolver throws it.",
+        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
+        "             * if you want to terminate the claim processing.",
+        "             */",
+        "            function computeClaim(claim) {",
+        "                var resolveClaim;",
+        "                var message;",
+        "",
+        "                try {",
+        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "",
+        "                    return resolveClaim(claim);",
+        "                } catch (e) {",
+        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "",
+        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
+        "                        throw e;",
+        "                    }",
+        "",
+        "                    if (logger.warningEnabled()) {",
+        "                        logger.warning(message);",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            var computedClaims = new frJava.LinkedHashMap();",
+        "",
+        "            getClaims().toArray().forEach(function (claim) {",
+        "                var claimValue = computeClaim(claim);",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    computedClaims.put(claim.getName(), claimValue);",
+        "                } else {",
+        "                    /**",
+        "                     * If a claim has been processed, but appears in the list again,",
+        "                     * and its value cannot be computed under the new conditions,",
+        "                     * the claim is removed from the final result.",
+        "                     *",
+        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
+        "                     * but also requested by the client with required values that don't match the computed one.",
+        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
+        "                     * for the relevant OIDC specification details.",
+        "                     */",
+        "                    computedClaims.remove(claim.getName());",
+        "                }",
+        "            });",
+        "",
+        "            return computedClaims;",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of requested scopes and the corresponding claim names.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         */",
+        "        function getCompositeScopes () {",
+        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "",
+        "            scopes.toArray().forEach(function (scope) {",
+        "                var scopeClaims = new frJava.ArrayList();",
+        "",
+        "                if (scopeClaimsMap[scope]) {",
+        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                        scopeClaims.add(claimName);",
+        "                    });",
+        "                }",
+        "",
+        "                if (scopeClaims.size()) {",
+        "                    compositeScopes.put(scope, scopeClaims);",
+        "                }",
+        "            });",
+        "",
+        "            return compositeScopes;",
+        "        }",
+        "",
+        "        // PUBLIC METHODS",
+        "",
+        "        return {",
+        "            setScopeClaimsMap: setScopeClaimsMap,",
+        "            setClaimResolvers: setClaimResolvers,",
+        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
+        "            getAddressClaimResolver: getAddressClaimResolver,",
+        "            getEssentialClaimResolver: getEssentialClaimResolver,",
+        "            getUserInfoClaims: getUserInfoClaims",
+        "        };",
+        "    }",
+        "",
+        "    // RESULTS",
+        "",
+        "    /**",
+        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
+        "     * populated with the computed claim values and",
+        "     * the requested scopes mapped to the claim names.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "     *",
+        "     * Assigning it to a variable gives you an opportunity",
+        "     * to log the content of the returned value during development.",
+        "     */",
+        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "",
+        "    /*",
+        "    logger.error(scriptName + ' results:')",
+        "    logger.error('Values: ' + userInfoClaims.getValues())",
+        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
+        "    */",
+        "",
+        "    return userInfoClaims;",
+        "}());",
+        "",
+      ],
+    },
+    "e232cff3-2460-47cd-80b2-36c86c0d0f06": {
+      "_id": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "null",
+      "description": "Used by endUserUIClient",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Format Username",
-      "script": "file://Format-Username.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter.script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOnRequest
- *      - preSingleSignOnProcess
- *      - postSingleSignOnSuccess
- *      - postSingleSignOnFailure
- *      - postNewNameIDSuccess
- *      - postTerminateNameIDSuccess
- *      - preSingleLogoutProcess
- *      - postSingleLogoutSuccess
- *
- * Please see the JavaDoc for the interface for more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpEntityId - String
- *     The entity ID for the Identity Provider for which the sign-on request will be sent.
- * request - HttpServletRequest (1)
- *     Servlet request object
- * response - HttpServletResponse (2)
- *     Servlet response object
- * authnRequest - AuthnRequest (3)
- *     The authentication request sent that is sent from the Service Provider.
- * session - SSOToken (4)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * res - Response (5)
- *     The SSO Response received from the Identity Provider.
- * profile - String
- *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
- *          - SAML2Constants.HTTP_POST
- *          - SAML2Constants.HTTP_ARTIFACT
- *          - SAML2Constants.PAOS
- * out - PrintWriter (7)
- *     The PrintWriter that can be used to write to.
- * isFederation - boolean
- *     Set to true if using federation, otherwise false.
- * failureCode - int
- *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
- * userId - String
- *     The unique universal ID of the user with whom the new name identifier request was performed.
- * idRequest - ManageNameIDRequest (8)
- *     The new name identifier request, this will be null if the request object is not available
- * idResponse - ManageNameIDResponse (9)
- *     The new name identifier response, this will be null if the response object is not available
- * binding - String
- *     The binding used for the new name identifier request. This will be one of the following values:
- *          - SAML2Constants.SOAP
- *          - SAML2Constants.HTTP_REDIRECT
- * logoutRequest - LogoutRequest (10)
- *     The single logout request.
- * logoutResponse - LogoutResponse (11)
- *     The single logout response.
- * spAdapterScriptHelper - SpAdapterScriptHelper (12)
- *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (13):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
- * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
- * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
- * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
- * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
- * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
- * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
- * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
- * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 SP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOnRequest:
- *     hostedEntityId
- *     idpEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnRequest() {
-}
-
-/*
- * Available variables for preSingleSignOnProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnProcess() {
-}
-
-/*
- * Available variables for postSingleSignOnSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     out
- *     session
- *     authnRequest
- *     res
- *     profile
- *     isFederation
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnSuccess() {
-    return false;
-}
-
-/*
- * Available variables for postSingleSignOnFailure:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     failureCode
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnFailure() {
-    return false;
-}
-
-/*
- * Available variables for postNewNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postNewNameIDSuccess() {
-}
-
-/*
- * Available variables for postTerminateNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postTerminateNameIDSuccess() {
-}
-
-/*
- * Available variables for preSingleLogoutProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleLogoutProcess() {
-}
-
-/*
- * Available variables for postSingleLogoutSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postSingleLogoutSuccess() {
-}
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter.script.json 1`] = `
-{
-  "script": {
-    "07ee6240-d106-4e25-a781-5fcabc477d22": {
-      "_id": "07ee6240-d106-4e25-a781-5fcabc477d22",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "Alpha endUserUIClient OAuth2 Access Token Modification Script",
+      "script": [
+        "(function () {",
+        "  if (scopes.contains('fr:autoaccess:*') || scopes.contains('fr:iga:*') || scopes.contains('fr:idc:analytics:*')) {",
+        "    var fr = JavaImporter(",
+        "      com.sun.identity.idm.IdType",
+        "    );",
+        "    var groups = [];",
+        "    identity.getMemberships(fr.IdType.GROUP).toArray().forEach(function (group) {",
+        "      groups.push(group.getAttribute('cn').toArray()[0]);",
+        "    });",
+        "    accessToken.setField('groups', groups);",
+        "  }",
+        "}());",
+        "",
+      ],
+    },
+    "e5c302c8-f838-4698-87cc-d7225fc82454": {
+      "_id": "e5c302c8-f838-4698-87cc-d7225fc82454",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "EmailAsUsername",
+      "script": [
+        "objectAttributes = sharedState.get("objectAttributes")",
+        "userName = objectAttributes.get("userName")",
+        "",
+        "if(userName){",
+        "  //Form Fill",
+        "  objectAttributes.put("mail", userName)",
+        "} else {",
+        "  //Social",
+        "  objectAttributes.put("userName", objectAttributes.get("mail"))",
+        "}",
+        "",
+        "",
+        "sharedState.put("objectAttributes", objectAttributes);",
+        "//sharedState.put("username", mail)",
+        "",
+        "outcome = "true";",
+      ],
+    },
+    "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd": {
+      "_id": "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd",
       "context": "SAML2_SP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "null",
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "FrodoSPAdapter - imported (2)",
+      "script": [
+        "/*",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
+        " *",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (2)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (13):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnRequest:",
+        " *     hostedEntityId",
+        " *     idpEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnRequest() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     out",
+        " *     session",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnFailure:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postNewNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postNewNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
+        "}",
+      ],
+    },
+    "fdb60c75-d58b-409f-bef2-ce4ebb04c77c": {
+      "_id": "fdb60c75-d58b-409f-bef2-ce4ebb04c77c",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "FrodoSPAdapter",
-      "script": "file://FrodoSPAdapter.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter-imported-(1).script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOnRequest
- *      - preSingleSignOnProcess
- *      - postSingleSignOnSuccess
- *      - postSingleSignOnFailure
- *      - postNewNameIDSuccess
- *      - postTerminateNameIDSuccess
- *      - preSingleLogoutProcess
- *      - postSingleLogoutSuccess
- *
- * Please see the JavaDoc for the interface for more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpEntityId - String
- *     The entity ID for the Identity Provider for which the sign-on request will be sent.
- * request - HttpServletRequest (1)
- *     Servlet request object
- * response - HttpServletResponse (2)
- *     Servlet response object
- * authnRequest - AuthnRequest (3)
- *     The authentication request sent that is sent from the Service Provider.
- * session - SSOToken (4)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * res - Response (5)
- *     The SSO Response received from the Identity Provider.
- * profile - String
- *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
- *          - SAML2Constants.HTTP_POST
- *          - SAML2Constants.HTTP_ARTIFACT
- *          - SAML2Constants.PAOS
- * out - PrintWriter (7)
- *     The PrintWriter that can be used to write to.
- * isFederation - boolean
- *     Set to true if using federation, otherwise false.
- * failureCode - int
- *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
- * userId - String
- *     The unique universal ID of the user with whom the new name identifier request was performed.
- * idRequest - ManageNameIDRequest (8)
- *     The new name identifier request, this will be null if the request object is not available
- * idResponse - ManageNameIDResponse (9)
- *     The new name identifier response, this will be null if the response object is not available
- * binding - String
- *     The binding used for the new name identifier request. This will be one of the following values:
- *          - SAML2Constants.SOAP
- *          - SAML2Constants.HTTP_REDIRECT
- * logoutRequest - LogoutRequest (10)
- *     The single logout request.
- * logoutResponse - LogoutResponse (11)
- *     The single logout response.
- * spAdapterScriptHelper - SpAdapterScriptHelper (12)
- *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (13):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
- * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
- * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
- * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
- * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
- * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
- * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
- * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
- * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 SP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOnRequest:
- *     hostedEntityId
- *     idpEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnRequest() {
-}
-
-/*
- * Available variables for preSingleSignOnProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnProcess() {
-}
-
-/*
- * Available variables for postSingleSignOnSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     out
- *     session
- *     authnRequest
- *     res
- *     profile
- *     isFederation
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnSuccess() {
-    return false;
-}
-
-/*
- * Available variables for postSingleSignOnFailure:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     failureCode
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnFailure() {
-    return false;
-}
-
-/*
- * Available variables for postNewNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postNewNameIDSuccess() {
-}
-
-/*
- * Available variables for postTerminateNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postTerminateNameIDSuccess() {
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "GitHub Profile Normalization (VS) - imported (2)",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for preSingleLogoutProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleLogoutProcess() {
-}
+exports[`frodo script export "frodo script export -MNxn 'GitHub Profile Normalization' -D scriptExportTestDir1": should export the script named "GitHub Profile Normalization" into the directory scriptExportTestDir1 1`] = `0`;
 
-/*
- * Available variables for postSingleLogoutSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postSingleLogoutSuccess() {
-}
-"
-`;
+exports[`frodo script export "frodo script export -MNxn 'GitHub Profile Normalization' -D scriptExportTestDir1": should export the script named "GitHub Profile Normalization" into the directory scriptExportTestDir1 2`] = `""`;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter-imported-(1).script.json 1`] = `
+exports[`frodo script export "frodo script export -MNxn 'GitHub Profile Normalization' -D scriptExportTestDir1": should export the script named "GitHub Profile Normalization" into the directory scriptExportTestDir1: scriptExportTestDir1/GitHub-Profile-Normalization.script.json 1`] = `
 {
   "script": {
-    "5ce0d38a-154c-4be5-bd22-f9879c77e895": {
-      "_id": "5ce0d38a-154c-4be5-bd22-f9879c77e895",
-      "context": "SAML2_SP_ADAPTER",
+    "a7a78773-445b-4eca-bb93-409e86bced81": {
+      "_id": "a7a78773-445b-4eca-bb93-409e86bced81",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
-      "default": false,
-      "description": "null",
+      "default": true,
+      "description": "Normalizes raw profile data from GitHub",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "FrodoSPAdapter - imported (1)",
-      "script": "file://FrodoSPAdapter-imported-(1).script.js",
+      "language": "GROOVY",
+      "lastModifiedBy": "null",
+      "lastModifiedDate": 0,
+      "name": "GitHub Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("username", rawProfile.login)))",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter-imported-(2).script.js 1`] = `
-"/*
- * Copyright 2023 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOnRequest
- *      - preSingleSignOnProcess
- *      - postSingleSignOnSuccess
- *      - postSingleSignOnFailure
- *      - postNewNameIDSuccess
- *      - postTerminateNameIDSuccess
- *      - preSingleLogoutProcess
- *      - postSingleLogoutSuccess
- *
- * Please see the JavaDoc for the interface for more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpEntityId - String
- *     The entity ID for the Identity Provider for which the sign-on request will be sent.
- * request - HttpServletRequest (1)
- *     Servlet request object
- * response - HttpServletResponse (2)
- *     Servlet response object
- * authnRequest - AuthnRequest (3)
- *     The authentication request sent that is sent from the Service Provider.
- * session - SSOToken (4)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * res - Response (5)
- *     The SSO Response received from the Identity Provider.
- * profile - String
- *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):
- *          - SAML2Constants.HTTP_POST
- *          - SAML2Constants.HTTP_ARTIFACT
- *          - SAML2Constants.PAOS
- * out - PrintWriter (7)
- *     The PrintWriter that can be used to write to.
- * isFederation - boolean
- *     Set to true if using federation, otherwise false.
- * failureCode - int
- *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.
- * userId - String
- *     The unique universal ID of the user with whom the new name identifier request was performed.
- * idRequest - ManageNameIDRequest (8)
- *     The new name identifier request, this will be null if the request object is not available
- * idResponse - ManageNameIDResponse (9)
- *     The new name identifier response, this will be null if the response object is not available
- * binding - String
- *     The binding used for the new name identifier request. This will be one of the following values:
- *          - SAML2Constants.SOAP
- *          - SAML2Constants.HTTP_REDIRECT
- * logoutRequest - LogoutRequest (10)
- *     The single logout request.
- * logoutResponse - LogoutResponse (11)
- *     The single logout response.
- * spAdapterScriptHelper - SpAdapterScriptHelper (12)
- *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (13):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html
- * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html
- * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html
- * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html
- * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html
- * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html
- * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html
- * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.
- * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 SP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOnRequest:
- *     hostedEntityId
- *     idpEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnRequest() {
-}
-
-/*
- * Available variables for preSingleSignOnProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleSignOnProcess() {
-}
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3 1`] = `0`;
 
-/*
- * Available variables for postSingleSignOnSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     out
- *     session
- *     authnRequest
- *     res
- *     profile
- *     isFederation
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnSuccess() {
-    return false;
-}
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3 2`] = `""`;
 
-/*
- * Available variables for postSingleSignOnFailure:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     authnRequest
- *     res
- *     profile
- *     failureCode
- *     spAdapterScriptHelper
- *     logger
- *
- * Return - true if response is being redirected, false if not. Default to false.
- */
-function postSingleSignOnFailure() {
-    return false;
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/ADFS-Profile-Normalization-(JS).script.json 1`] = `
+{
+  "script": {
+    "dbe0bf9a-72aa-49d5-8483-9db147985a47": {
+      "_id": "dbe0bf9a-72aa-49d5-8483-9db147985a47",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from ADFS",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "ADFS Profile Normalization (JS)",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script returns the social identity profile information for the authenticating user",
+        " * in a standard form expected by the Social Provider Handler Node.",
+        " *",
+        " * Defined variables:",
+        " * rawProfile - The social identity provider profile information for the authenticating user.",
+        " *              JsonValue (1).",
+        " * logger - The debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " * realm - String (primitive).",
+        " *         The name of the realm the user is authenticating to.",
+        " * requestHeaders - TreeMap (2).",
+        " *                  The object that provides methods for accessing headers in the login request:",
+        " *                  https://backstage.forgerock.com/docs/am/7/authentication-guide/scripting-api-node.html#scripting-api-node-requestHeaders.",
+        " * requestParameters - TreeMap (2).",
+        " *                     The object that contains the authentication request parameters.",
+        " * selectedIdp - String (primitive).",
+        " *               The social identity provider name. For example: google.",
+        " * sharedState - LinkedHashMap (3).",
+        " *               The object that holds the state of the authentication tree and allows data exchange between the stateless nodes:",
+        " *               https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
+        " * transientState - LinkedHashMap (3).",
+        " *                  The object for storing sensitive information that must not leave the server unencrypted,",
+        " *                  and that may not need to persist between authentication requests during the authentication session:",
+        " *                  https://backstage.forgerock.com/docs/am/7/auth-nodes/core-action.html#accessing-tree-state.",
+        " *",
+        " * Return - a JsonValue (1).",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *",
+        " *          This script's last statement should result in a JsonValue (1) with the following keys:",
+        " *          {",
+        " *              {"displayName": "corresponding-social-identity-provider-value"},",
+        " *              {"email": "corresponding-social-identity-provider-value"},",
+        " *              {"familyName": "corresponding-social-identity-provider-value"},",
+        " *              {"givenName": "corresponding-social-identity-provider-value"},",
+        " *              {"id": "corresponding-social-identity-provider-value"},",
+        " *              {"locale": "corresponding-social-identity-provider-value"},",
+        " *              {"photoUrl": "corresponding-social-identity-provider-value"},",
+        " *              {"username": "corresponding-social-identity-provider-value"}",
+        " *          }",
+        " *",
+        " *          The consumer of this data defines which keys are required and which are optional.",
+        " *          For example, the script associated with the Social Provider Handler Node and,",
+        " *          ultimately, the managed object created/updated with this data",
+        " *          will expect certain keys to be populated.",
+        " *          In some common default configurations, the following keys are required to be not empty:",
+        " *          username, givenName, familyName, email.",
+        " *",
+        " *          From RFC4517: A value of the Directory String syntax is a string of one or more",
+        " *          arbitrary characters from the Universal Character Set (UCS).",
+        " *          A zero-length character string is not permitted.",
+        " *",
+        " * (1) JsonValue - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/json/JsonValue.html.",
+        " * (2) TreeMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/TreeMap.html.",
+        " * (3) LinkedHashMap - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " */",
+        "",
+        "(function () {",
+        "    var frJava = JavaImporter(",
+        "        org.forgerock.json.JsonValue",
+        "    );",
+        "",
+        "    var normalizedProfileData = frJava.JsonValue.json(frJava.JsonValue.object());",
+        "  ",
+        "      //logger.message('Seguin rawProfile: '+rawProfile);",
+        "",
+        "    normalizedProfileData.put('id', rawProfile.get('sub').asString());",
+        "    normalizedProfileData.put('displayName', rawProfile.get('givenName').asString() + ' ' + rawProfile.get('sn').asString());",
+        "    normalizedProfileData.put('email', rawProfile.get('mail').asString());",
+        "    normalizedProfileData.put('givenName', rawProfile.get('givenName').asString());",
+        "    normalizedProfileData.put('familyName', rawProfile.get('sn').asString());",
+        "    normalizedProfileData.put('username', rawProfile.get('upn').asString());",
+        "    normalizedProfileData.put('roles', rawProfile.get('roles').asString());",
+        "  ",
+        "      //logger.message('Seguin normalizedProfileData: '+normalizedProfileData);",
+        "",
+        "    return normalizedProfileData;",
+        "}());",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for postNewNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postNewNameIDSuccess() {
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
+{
+  "script": {
+    "39c08084-1238-43e8-857f-2e11005eac49": {
+      "_id": "39c08084-1238-43e8-857f-2e11005eac49",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Default alpha realm script for OAuth2 Access Token Modification",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Alpha OAuth2 Access Token Modification Script",
+      "script": [
+        "/*",
+        " * Copyright 2019-2021 ForgeRock AS. All Rights Reserved.",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script lets you modify information associated with an OAuth2 access token",
+        " * with methods provided by the AccessToken (1) interface.",
+        " * The changes made to OAuth2 access tokens will directly impact the size of the CTS tokens,",
+        " * and, similarly, the size of the JWTs if client-based OAuth2 tokens are utilized.",
+        " * When adding/updating fields make sure that the token size remains within client/user-agent limits.",
+        " *",
+        " * Defined variables:",
+        " * accessToken - AccessToken (1).",
+        " *               The access token to be updated.",
+        " *               Mutable object, all changes to the access token will be reflected.",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding log files will be prefixed with: scripts.OAUTH2_ACCESS_TOKEN_MODIFICATION.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *",
+        " * Return - no value is expected, changes shall be made to the accessToken parameter directly.",
+        " *",
+        " * Class reference:",
+        " * (1) AccessToken - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/AccessToken.html.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        " */",
+        "",
+        "/* EXAMPLE",
+        "(function () {",
+        "    var frJava = JavaImporter(",
+        "        org.forgerock.http.protocol.Request,",
+        "        org.forgerock.http.protocol.Response",
+        "    );",
+        "",
+        "    // Always includes this field in the token.",
+        "    accessToken.setField('key1', 'value1');",
+        "",
+        "    // Receives and adds to the access token additional values by performing a REST call to an external service.",
+        "    // WARNING: Below, you will find a reference to a third-party site, which is provided only as an example.",
+        "    var uri = 'https://jsonplaceholder.typicode.com/posts';",
+        "",
+        "    try {",
+        "        var request = new frJava.Request();",
+        "",
+        "        // You can chain methods that return the request object.",
+        "        request.setUri(uri)",
+        "            .setMethod('POST')",
+        "            .setEntity(JSON.stringify({",
+        "                updatedFields: {",
+        "                    key2: 'value2',",
+        "                    key3: 'value3'",
+        "                }",
+        "            }));",
+        "",
+        "        // You can call a method when chaining is not possible.",
+        "        request.getHeaders().add('Content-Type', 'application/json; charset=UTF-8');",
+        "",
+        "        // Sends the request and receives the response.",
+        "        var response = httpClient.send(request).getOrThrow();",
+        "",
+        "        // Checks if the response status is as expected.",
+        "        if (response.getStatus() === org.forgerock.http.protocol.Status.CREATED) {",
+        "            var result = JSON.parse(response.getEntity().getString());",
+        "",
+        "            // Set multiple token fields at once.",
+        "            accessToken.setFields(result.updatedFields);",
+        "        } else {",
+        "            logger.error('Unable to obtain access token modifications. Status: ' + response.getStatus() + '. Content: ' + response.getEntity().getString());",
+        "        }",
+        "    } catch (e) {",
+        "        logger.error('The request processing was interrupted. ' + e);",
+        "",
+        "        // The access token request fails with the HTTP 500 error in this case.",
+        "        throw ('Unable to obtain response from: ' + uri);",
+        "    }",
+        "",
+        "    // Adds new fields containing identity attribute values to the access token.",
+        "    accessToken.setField('mail', identity.getAttribute('mail'));",
+        "    accessToken.setField('phone', identity.getAttribute('telephoneNumber').toArray()[0]);",
+        "",
+        "    // Adds new fields containing the session property values.",
+        "    // NOTE: session may not be available for non-interactive authorization grants.",
+        "    if (session) {",
+        "        try {",
+        "            accessToken.setField('ipAddress', session.getProperty('Host'));",
+        "        } catch (e) {",
+        "            logger.error('Unable to retrieve session property value. ' + e);",
+        "        }",
+        "    }",
+        "",
+        "    // Removes a native field from the token entry, that was set by AM.",
+        "    // WARNING: removing native fields from the token may result in loss of functionality.",
+        "    // accessToken.removeTokenName()",
+        "",
+        "    // No return value is expected. Let it be undefined.",
+        "}());",
+        "*/",
+        "",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for postTerminateNameIDSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     idRequest
- *     idResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postTerminateNameIDSuccess() {
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-OIDC-Claims-Script.script.json 1`] = `
+{
+  "script": {
+    "cf3515f0-8278-4ee3-a530-1bad7424c416": {
+      "_id": "cf3515f0-8278-4ee3-a530-1bad7424c416",
+      "context": "OIDC_CLAIMS",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Default alpha realm script for OIDC claims",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Alpha OIDC Claims Script",
+      "script": [
+        "/*",
+        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
+        " * The claim values are computed for:",
+        " * the claims derived from the requested scopes,",
+        " * the claims provided by the authorization server,",
+        " * and the claims requested by the client via the claims parameter.",
+        " *",
+        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
+        " * define the scope-to-claims mapping, and",
+        " * assign to each claim a resolver function that will compute the claim value.",
+        " *",
+        " * Defined variables (class references are provided below):",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * claims - Map<String, Object> (5).",
+        " *          Always present, default server provided claims.",
+        " * claimObjects - List<Claim> (7, 2).",
+        " *                Always present, the default server provided claims.",
+        " * requestedClaims - Map<String, Set<String>> (5).",
+        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
+        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
+        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
+        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
+        " * requestedTypedClaims - List<Claim> (7, 2).",
+        " *                        Always present, the requested claims.",
+        " *                        Requested claims with no requested values will have a claim with no values.",
+        " *                        A claim with a single value indicates this is the only value that should be returned.",
+        " * claimsLocales - List<String> (7).",
+        " *                 The values from the 'claims_locales' parameter.",
+        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *              In order to use the client, you may need to add",
+        " *              org.forgerock.http.Client,",
+        " *              org.forgerock.http.protocol.*,",
+        " *              and org.forgerock.util.promise.PromiseImpl",
+        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
+        " *",
+        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *          See RESULTS section for additional details.",
+        " *",
+        " * Class reference:",
+        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
+        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
+        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
+        " *         the claim name, requested values, locale, and whether the claim is essential.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        "*/",
+        "",
+        "(function () {",
+        "    // SETUP",
+        "",
+        "    /**",
+        "     * Claim processing utilities.",
+        "     * An object that contains reusable functions for processing claims.",
+        "     * @see CLAIM PROCESSING UTILITIES section for details.",
+        "     */",
+        "    var utils = getUtils();",
+        "",
+        "    // CONFIGURATION AND CUSTOMIZATION",
+        "",
+        "    /**",
+        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a scope value to an array of claim names",
+        "     * to specify which claims need to be processed and returned for the requested scopes.",
+        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
+        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can choose the claim names returned for a scope.",
+        "     */",
+        "    utils.setScopeClaimsMap({",
+        "        profile: [",
+        "            'name',",
+        "            'family_name',",
+        "            'given_name',",
+        "            'zoneinfo',",
+        "            'locale'",
+        "        ],",
+        "        email: ['email'],",
+        "        address: ['address'],",
+        "        phone: ['phone_number']",
+        "    });",
+        "",
+        "    /**",
+        "     * In this script, each claim",
+        "     * derived from the requested scopes,",
+        "     * provided by the authorization server, and",
+        "     * requested by the client via the claims parameter",
+        "     * will be processed by a function associated with the claim name.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a claim name to a resolver function,",
+        "     * which will be automatically executed for each claim processed by the script.",
+        "     *",
+        "     * The claim resolver function will receive the requested claim information",
+        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
+        "     * for details on the Claim class.",
+        "     *",
+        "     * If the claim resolver function returns a value,",
+        "     * other than undefined or null,",
+        "     * the claim will be included in the script's results.",
+        "     *",
+        "     * The Claim instance provides methods to check",
+        "     * what the name of the claim is,",
+        "     * which values the claim request contains,",
+        "     * whether the claim is essential, and",
+        "     * which locale the claim is associated with.",
+        "     * The resolver function can consider this information when computing and returning the claim value.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
+        "     * is called to return a claim resolver function based on a user profile attribute.",
+        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
+        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can reuse the predefined utils methods with your custom arguments.",
+        "     * You can also specify a custom resolver function for a claim name,",
+        "     * that will compute and return the claim value—as shown in the commented out example below.",
+        "     */",
+        "    utils.setClaimResolvers({",
+        "        /*",
+        "        // An example of a simple claim resolver function that is defined for a claim",
+        "        // directly in the configuration object:",
+        "        custom-claim-name: function (requestedClaim) {",
+        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
+        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "",
+        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
+        "            // You can use:",
+        "            // requestedClaim.getName()",
+        "            // requestedClaim.getValues()",
+        "            // requestedClaim.getLocale()",
+        "            // requestedClaim.isEssential()",
+        "",
+        "            return claimValue",
+        "        },",
+        "        */",
+        "        /**",
+        "         * The use of utils.getUserProfileClaimResolver shows how",
+        "         * an argument passed to a function that returns a claim resolver",
+        "         * becomes available to the resolver function (via its lexical context).",
+        "         */",
+        "        name: utils.getUserProfileClaimResolver('cn'),",
+        "        family_name: utils.getUserProfileClaimResolver('sn'),",
+        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
+        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
+        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
+        "        email: utils.getUserProfileClaimResolver('mail'),",
+        "        address: utils.getAddressClaimResolver(",
+        "            /**",
+        "             * The passed in user profile claim resolver function",
+        "             * can be used by the address claim resolver function",
+        "             * to obtain the claim value to be formatted as per the OIDC specification:",
+        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             */",
+        "            utils.getUserProfileClaimResolver('postaladdress')",
+        "        ),",
+        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
+        "    });",
+        "",
+        "    // CLAIM PROCESSING UTILITIES",
+        "",
+        "    /**",
+        "     * @returns {object} An object that contains reusable claim processing utilities.",
+        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
+        "     */",
+        "    function getUtils () {",
+        "        // IMPORT JAVA",
+        "",
+        "        /**",
+        "         * Provides Java scripting functionality.",
+        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
+        "         */",
+        "        var frJava = JavaImporter(",
+        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
+        "            org.forgerock.oauth2.core.UserInfoClaims,",
+        "            org.forgerock.openidconnect.Claim,",
+        "",
+        "            java.util.LinkedHashMap,",
+        "            java.util.ArrayList",
+        "        );",
+        "",
+        "        // SET UP CONFIGURATION",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported scope values (scopes)",
+        "         * and the corresponding claim names for each scope value.",
+        "         */",
+        "        var scopeClaimsMap;",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value.",
+        "         */",
+        "        var claimResolvers;",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
+        "         * in order to specify which claims need to be processed for the requested scopes.",
+        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
+        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
+        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
+        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
+        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
+        "         * @returns {undefined}",
+        "         */",
+        "        function setScopeClaimsMap(params) {",
+        "            scopeClaimsMap = params;",
+        "        }",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps",
+        "         * each supported claim name to a function that computes and returns the claim value.",
+        "         */",
+        "        function setClaimResolvers(params) {",
+        "            claimResolvers = params;",
+        "        }",
+        "",
+        "        // CLAIM RESOLVERS",
+        "",
+        "        /**",
+        "         * Claim resolvers are functions that return a claim value.",
+        "         * @param {*}",
+        "         * @returns {*}",
+        "         */",
+        "",
+        "        /**",
+        "         * Defines a claim resolver based on a user profile attribute.",
+        "         * @param {string} attributeName - Name of the user profile attribute.",
+        "         * @returns {function} A function that will determine the claim value",
+        "         * based on the user profile attribute and the (requested) claim properties.",
+        "         */",
+        "        function getUserProfileClaimResolver (attributeName) {",
+        "            /**",
+        "             * Resolves a claim with a user profile attribute value.",
+        "             * Returns undefined if the identity attribute is not populated,",
+        "             * OR if the claim has requested values that do not contain the identity attribute value.",
+        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {string|HashSet|undefined}",
+        "             */",
+        "            function resolveClaim(claim) {",
+        "                var userProfileValue;",
+        "",
+        "                if (identity) {",
+        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "",
+        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
+        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
+        "                            return userProfileValue;",
+        "                        }",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            return resolveClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional formatting to the value before returning it.",
+        "         */",
+        "        function getAddressClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Creates an address claim object from a value returned by a claim resolver,",
+        "             * and returns the address claim object as the claim value.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
+        "             */",
+        "            function resolveAddressClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "                var addressObject;",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    addressObject = new frJava.LinkedHashMap();",
+        "",
+        "                    addressObject.put('formatted', claimValue);",
+        "",
+        "                    return addressObject;",
+        "                }",
+        "            }",
+        "",
+        "            return resolveAddressClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional logic for essential claims.",
+        "         */",
+        "        function getEssentialClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Returns a claim value or throws an error.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
+        "             *",
+        "             * Use of this resolver is optional.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
+        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
+        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
+        "             * unless otherwise specified in the description of the specific claim."",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*}",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             */",
+        "            function resolveEssentialClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "",
+        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
+        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
+        "                }",
+        "",
+        "                return claimValue;",
+        "            }",
+        "",
+        "            return resolveEssentialClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Provides default resolution for a claim.",
+        "         * Use it if a claim-specific resolver is not defined in the configuration.",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @returns {*} A single value associated with this claim.",
+        "         */",
+        "        function resolveAnyClaim (claim) {",
+        "            if (claim.getValues().size() === 1) {",
+        "                return claim.getValues().toArray()[0];",
+        "            }",
+        "        }",
+        "",
+        "        // UTILITIES",
+        "",
+        "        /**",
+        "         * Returns claim value from a set.",
+        "         * If the set contains a single value, returns the value.",
+        "         * If the set contains multiple values, returns the set.",
+        "         * Otherwise, returns undefined.",
+        "         *",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
+        "         * @returns {string|java.util.HashSet|undefined}",
+        "         */",
+        "        function getClaimValueFromSet (claim, set) {",
+        "            if (set && set.size()) {",
+        "                if (set.size() === 1) {",
+        "                    return set.toArray()[0];",
+        "                } else {",
+        "                    return set;",
+        "                }",
+        "            } else if (logger.warningEnabled()) {",
+        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            }",
+        "        }",
+        "",
+        "        function isClaimValueValid (claimValue) {",
+        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
+        "                return false;",
+        "            }",
+        "",
+        "            return true;",
+        "        }",
+        "",
+        "        // CLAIM PROCESSING",
+        "",
+        "        /**",
+        "         * Constructs and returns an object populated with the computed claim values",
+        "         * and the requested scopes mapped to the claim names.",
+        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "         * @see RESULTS section for the use of this function.",
+        "         */",
+        "        function getUserInfoClaims () {",
+        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of (requested) claim names populated with the computed claim values.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         * A map of the requested claim names and the corresponding claim values.",
+        "         */",
+        "        function getComputedClaims () {",
+        "            /**",
+        "             * Creates a complete list of claim objects from:",
+        "             * the claims derived from the scopes,",
+        "             * the claims provided by the authorization server,",
+        "             * and the claims requested by the client.",
+        "             * @returns {java.util.ArrayList}",
+        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "             */",
+        "            function getClaims() {",
+        "                /**",
+        "                 * Returns a list of claim objects for the requested scopes.",
+        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
+        "                 * no other properties of a claim derived from a scope are populated.",
+        "                 * @returns {java.util.ArrayList}",
+        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
+        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "                 */",
+        "                function convertScopeToClaims() {",
+        "                    var claims = new frJava.ArrayList();",
+        "",
+        "                    scopes.toArray().forEach(function (scope) {",
+        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
+        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                                claims.add(new frJava.Claim(claimName));",
+        "                            });",
+        "                        }",
+        "                    });",
+        "",
+        "                    return claims;",
+        "                }",
+        "",
+        "                var claims = new frJava.ArrayList();",
+        "",
+        "                claims.addAll(convertScopeToClaims());",
+        "                claims.addAll(claimObjects);",
+        "                claims.addAll(requestedTypedClaims);",
+        "",
+        "                return claims;",
+        "            }",
+        "",
+        "            /**",
+        "             * Computes and returns a claim value.",
+        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
+        "             * @see claimResolvers",
+        "             * If no resolver function is found, uses the default claim resolver function.",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*} Claim value.",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             * Rethrows this exception if a claim resolver throws it.",
+        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
+        "             * if you want to terminate the claim processing.",
+        "             */",
+        "            function computeClaim(claim) {",
+        "                var resolveClaim;",
+        "                var message;",
+        "",
+        "                try {",
+        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "",
+        "                    return resolveClaim(claim);",
+        "                } catch (e) {",
+        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "",
+        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
+        "                        throw e;",
+        "                    }",
+        "",
+        "                    if (logger.warningEnabled()) {",
+        "                        logger.warning(message);",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            var computedClaims = new frJava.LinkedHashMap();",
+        "",
+        "            getClaims().toArray().forEach(function (claim) {",
+        "                var claimValue = computeClaim(claim);",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    computedClaims.put(claim.getName(), claimValue);",
+        "                } else {",
+        "                    /**",
+        "                     * If a claim has been processed, but appears in the list again,",
+        "                     * and its value cannot be computed under the new conditions,",
+        "                     * the claim is removed from the final result.",
+        "                     *",
+        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
+        "                     * but also requested by the client with required values that don't match the computed one.",
+        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
+        "                     * for the relevant OIDC specification details.",
+        "                     */",
+        "                    computedClaims.remove(claim.getName());",
+        "                }",
+        "            });",
+        "",
+        "            return computedClaims;",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of requested scopes and the corresponding claim names.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         */",
+        "        function getCompositeScopes () {",
+        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "",
+        "            scopes.toArray().forEach(function (scope) {",
+        "                var scopeClaims = new frJava.ArrayList();",
+        "",
+        "                if (scopeClaimsMap[scope]) {",
+        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                        scopeClaims.add(claimName);",
+        "                    });",
+        "                }",
+        "",
+        "                if (scopeClaims.size()) {",
+        "                    compositeScopes.put(scope, scopeClaims);",
+        "                }",
+        "            });",
+        "",
+        "            return compositeScopes;",
+        "        }",
+        "",
+        "        // PUBLIC METHODS",
+        "",
+        "        return {",
+        "            setScopeClaimsMap: setScopeClaimsMap,",
+        "            setClaimResolvers: setClaimResolvers,",
+        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
+        "            getAddressClaimResolver: getAddressClaimResolver,",
+        "            getEssentialClaimResolver: getEssentialClaimResolver,",
+        "            getUserInfoClaims: getUserInfoClaims",
+        "        };",
+        "    }",
+        "",
+        "    // RESULTS",
+        "",
+        "    /**",
+        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
+        "     * populated with the computed claim values and",
+        "     * the requested scopes mapped to the claim names.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "     *",
+        "     * Assigning it to a variable gives you an opportunity",
+        "     * to log the content of the returned value during development.",
+        "     */",
+        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "",
+        "    /*",
+        "    logger.error(scriptName + ' results:')",
+        "    logger.error('Values: ' + userInfoClaims.getValues())",
+        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
+        "    */",
+        "",
+        "    return userInfoClaims;",
+        "}());",
+        "",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for preSingleLogoutProcess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function preSingleLogoutProcess() {
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-endUserUIClient-OAuth2-Access-Token-Modification-Script.script.json 1`] = `
+{
+  "script": {
+    "e232cff3-2460-47cd-80b2-36c86c0d0f06": {
+      "_id": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
+      "context": "OAUTH2_ACCESS_TOKEN_MODIFICATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Used by endUserUIClient",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Alpha endUserUIClient OAuth2 Access Token Modification Script",
+      "script": [
+        "(function () {",
+        "  if (scopes.contains('fr:autoaccess:*') || scopes.contains('fr:iga:*') || scopes.contains('fr:idc:analytics:*')) {",
+        "    var fr = JavaImporter(",
+        "      com.sun.identity.idm.IdType",
+        "    );",
+        "    var groups = [];",
+        "    identity.getMemberships(fr.IdType.GROUP).toArray().forEach(function (group) {",
+        "      groups.push(group.getAttribute('cn').toArray()[0]);",
+        "    });",
+        "    accessToken.setField('groups', groups);",
+        "  }",
+        "}());",
+        "",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for postSingleLogoutSuccess:
- *     hostedEntityId
- *     realm
- *     request
- *     response
- *     userId
- *     logoutRequest
- *     logoutResponse
- *     binding
- *     spAdapterScriptHelper
- *     logger
- */
-function postSingleLogoutSuccess() {
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Alpha-endUserUIClient-OIDC-Claims-Script.script.json 1`] = `
+{
+  "script": {
+    "e1db8a0a-0329-4962-a5bf-ecffaca376ae": {
+      "_id": "e1db8a0a-0329-4962-a5bf-ecffaca376ae",
+      "context": "OIDC_CLAIMS",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Used by endUserUIClient",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Alpha endUserUIClient OIDC Claims Script",
+      "script": [
+        "/*",
+        " * Copyright 2014-2021 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * This script computes claim values returned in ID tokens and/or at the UserInfo Endpoint.",
+        " * The claim values are computed for:",
+        " * the claims derived from the requested scopes,",
+        " * the claims provided by the authorization server,",
+        " * and the claims requested by the client via the claims parameter.",
+        " *",
+        " * In the CONFIGURATION AND CUSTOMIZATION section, you can",
+        " * define the scope-to-claims mapping, and",
+        " * assign to each claim a resolver function that will compute the claim value.",
+        " *",
+        " * Defined variables (class references are provided below):",
+        " * scopes - Set<String> (6).",
+        " *          Always present, the requested scopes.",
+        " * claims - Map<String, Object> (5).",
+        " *          Always present, default server provided claims.",
+        " * claimObjects - List<Claim> (7, 2).",
+        " *                Always present, the default server provided claims.",
+        " * requestedClaims - Map<String, Set<String>> (5).",
+        " *                   Always present, not empty if the request contains the claims parameter and the server has enabled",
+        " *                   claims_parameter_supported. A map of the requested claims to possible values, otherwise empty;",
+        " *                   requested claims with no requested values will have a key but no value in the map. A key with",
+        " *                   a single value in its Set (6) indicates that this is the only value that should be returned.",
+        " * requestedTypedClaims - List<Claim> (7, 2).",
+        " *                        Always present, the requested claims.",
+        " *                        Requested claims with no requested values will have a claim with no values.",
+        " *                        A claim with a single value indicates this is the only value that should be returned.",
+        " * claimsLocales - List<String> (7).",
+        " *                 The values from the 'claims_locales' parameter.",
+        " *                 See https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts for the OIDC specification details.",
+        " * requestProperties - Unmodifiable Map (5).",
+        " *                     Always present, contains a map of request properties:",
+        " *                     requestUri - The request URI.",
+        " *                     realm - The realm that the request relates to.",
+        " *                     requestParams - A map of the request params and/or posted data.",
+        " *                                     Each value is a list of one or more properties.",
+        " *                                     Please note that these should be handled in accordance with OWASP best practices:",
+        " *                                     https://owasp.org/www-community/vulnerabilities/Unsafe_use_of_Reflection.",
+        " * clientProperties - Unmodifiable Map (5).",
+        " *                    Present if the client specified in the request was identified, contains a map of client properties:",
+        " *                    clientId - The client's URI for the request locale.",
+        " *                    allowedGrantTypes - List of the allowed grant types (org.forgerock.oauth2.core.GrantType) for the client.",
+        " *                    allowedResponseTypes - List of the allowed response types for the client.",
+        " *                    allowedScopes - List of the allowed scopes for the client.",
+        " *                    customProperties - A map of the custom properties of the client.",
+        " *                                       Lists or maps will be included as sub-maps; for example:",
+        " *                                       customMap[Key1]=Value1 will be returned as customMap -> Key1 -> Value1.",
+        " *                                       To add custom properties to a client, update the Custom Properties field",
+        " *                                       in AM Console > Realm Name > Applications > OAuth 2.0 > Clients > Client ID > Advanced.",
+        " * identity - AMIdentity (3).",
+        " *            Always present, the identity of the resource owner.",
+        " * session - SSOToken (4).",
+        " *           Present if the request contains the session cookie, the user's session object.",
+        " * scriptName - String (primitive).",
+        " *              Always present, the display name of the script.",
+        " * logger - Always present, the "OAuth2Provider" debug logger instance:",
+        " *          https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *          Corresponding files will be prefixed with: scripts.OIDC_CLAIMS.",
+        " * httpClient - HTTP Client (8).",
+        " *              Always present, the HTTP Client instance:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-http-client.html#scripting-api-global-http-client.",
+        " *              In order to use the client, you may need to add",
+        " *              org.forgerock.http.Client,",
+        " *              org.forgerock.http.protocol.*,",
+        " *              and org.forgerock.util.promise.PromiseImpl",
+        " *              to the allowed Java classes in the scripting engine configuration, as described in:",
+        " *              https://backstage.forgerock.com/docs/am/7/scripting-guide/script-engine-security.html",
+        " *",
+        " * Return - a new UserInfoClaims(Map<String, Object> values, Map<String, List<String>> compositeScopes) (1) object.",
+        " *          The result of the last statement in the script is returned to the server.",
+        " *          Currently, the Immediately Invoked Function Expression (also known as Self-Executing Anonymous Function)",
+        " *          is the last (and only) statement in this script, and its return value will become the script result.",
+        " *          Do not use "return variable" statement outside of a function definition.",
+        " *          See RESULTS section for additional details.",
+        " *",
+        " * Class reference:",
+        " * (1) UserInfoClaims - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html.",
+        " * (2) Claim - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html).",
+        " *         An instance of org.forgerock.openidconnect.Claim has methods to access",
+        " *         the claim name, requested values, locale, and whether the claim is essential.",
+        " * (3) AMIdentity - https://backstage.forgerock.com/docs/am/7/apidocs/com/sun/identity/idm/AMIdentity.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Map - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashMap.html,",
+        " *           or https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/LinkedHashMap.html.",
+        " * (6) Set - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/HashSet.html.",
+        " * (7) List - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/ArrayList.html.",
+        " * (8) Client - https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/http/Client.html.",
+        "*/",
+        "",
+        "(function () {",
+        "    // SETUP",
+        "",
+        "    /**",
+        "     * Claim processing utilities.",
+        "     * An object that contains reusable functions for processing claims.",
+        "     * @see CLAIM PROCESSING UTILITIES section for details.",
+        "     */",
+        "    var utils = getUtils();",
+        "",
+        "    // CONFIGURATION AND CUSTOMIZATION",
+        "",
+        "    /**",
+        "     * OAuth 2.0 scope values (scopes) can be used by the Client to request OIDC claims.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a scope value to an array of claim names",
+        "     * to specify which claims need to be processed and returned for the requested scopes.",
+        "     * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims}",
+        "     * for the scope values that could be used to request claims as defined in the OIDC specification.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can choose the claim names returned for a scope.",
+        "     */",
+        "    utils.setScopeClaimsMap({",
+        "        profile: [",
+        "            'name',",
+        "            'family_name',",
+        "            'given_name',",
+        "            'zoneinfo',",
+        "            'locale'",
+        "        ],",
+        "        email: ['email'],",
+        "        address: ['address'],",
+        "        phone: ['phone_number']",
+        "    });",
+        "",
+        "    /**",
+        "     * In this script, each claim",
+        "     * derived from the requested scopes,",
+        "     * provided by the authorization server, and",
+        "     * requested by the client via the claims parameter",
+        "     * will be processed by a function associated with the claim name.",
+        "     *",
+        "     * Call this configuration method, and pass in as the first argument",
+        "     * an object that maps a claim name to a resolver function,",
+        "     * which will be automatically executed for each claim processed by the script.",
+        "     *",
+        "     * The claim resolver function will receive the requested claim information",
+        "     * in an instance of org.forgerock.openidconnect.Claim as the first argument.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html}",
+        "     * for details on the Claim class.",
+        "     *",
+        "     * If the claim resolver function returns a value,",
+        "     * other than undefined or null,",
+        "     * the claim will be included in the script's results.",
+        "     *",
+        "     * The Claim instance provides methods to check",
+        "     * what the name of the claim is,",
+        "     * which values the claim request contains,",
+        "     * whether the claim is essential, and",
+        "     * which locale the claim is associated with.",
+        "     * The resolver function can consider this information when computing and returning the claim value.",
+        "     *",
+        "     * Below, find a default configuration that is expected to work in the current environment.",
+        "     * A reusable function, utils.getUserProfileClaimResolver(String attribute-name),",
+        "     * is called to return a claim resolver function based on a user profile attribute.",
+        "     * @see CLAIM RESOLVERS section for the implementation details and examples.",
+        "     * For the address claim, an example of a claim resolver that uses another claim resolver is provided.",
+        "     *",
+        "     * CUSTOMIZATION",
+        "     * You can reuse the predefined utils methods with your custom arguments.",
+        "     * You can also specify a custom resolver function for a claim name,",
+        "     * that will compute and return the claim value—as shown in the commented out example below.",
+        "     */",
+        "    utils.setClaimResolvers({",
+        "        /*",
+        "        // An example of a simple claim resolver function that is defined for a claim",
+        "        // directly in the configuration object:",
+        "        custom-claim-name: function (requestedClaim) {",
+        "            // In this case, initially, the claim value comes straight from a user profile attribute value:",
+        "            var claimValue = identity.getAttribute('custom-attribute-name').toArray()[0]",
+        "",
+        "            // Optionally, provide additional logic for processing (filtering, formatting, etc.) the claim value.",
+        "            // You can use:",
+        "            // requestedClaim.getName()",
+        "            // requestedClaim.getValues()",
+        "            // requestedClaim.getLocale()",
+        "            // requestedClaim.isEssential()",
+        "",
+        "            return claimValue",
+        "        },",
+        "        */",
+        "        /**",
+        "         * The use of utils.getUserProfileClaimResolver shows how",
+        "         * an argument passed to a function that returns a claim resolver",
+        "         * becomes available to the resolver function (via its lexical context).",
+        "         */",
+        "        name: utils.getUserProfileClaimResolver('cn'),",
+        "        family_name: utils.getUserProfileClaimResolver('sn'),",
+        "        given_name: utils.getUserProfileClaimResolver('givenname'),",
+        "        zoneinfo: utils.getUserProfileClaimResolver('preferredtimezone'),",
+        "        locale: utils.getUserProfileClaimResolver('preferredlocale'),",
+        "        email: utils.getUserProfileClaimResolver('mail'),",
+        "        address: utils.getAddressClaimResolver(",
+        "            /**",
+        "             * The passed in user profile claim resolver function",
+        "             * can be used by the address claim resolver function",
+        "             * to obtain the claim value to be formatted as per the OIDC specification:",
+        "             * @see https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim.",
+        "             */",
+        "            utils.getUserProfileClaimResolver('postaladdress')",
+        "        ),",
+        "        phone_number: utils.getUserProfileClaimResolver('telephonenumber')",
+        "    });",
+        "",
+        "    // CLAIM PROCESSING UTILITIES",
+        "",
+        "    /**",
+        "     * @returns {object} An object that contains reusable claim processing utilities.",
+        "     * @see PUBLIC METHODS section and the return statement for the list of exported functions.",
+        "     */",
+        "    function getUtils () {",
+        "        // IMPORT JAVA",
+        "",
+        "        /**",
+        "         * Provides Java scripting functionality.",
+        "         * @see {@link https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Rhino/Scripting_Java#javaimporter_constructor}.",
+        "         */",
+        "        var frJava = JavaImporter(",
+        "            org.forgerock.oauth2.core.exceptions.InvalidRequestException,",
+        "            org.forgerock.oauth2.core.UserInfoClaims,",
+        "            org.forgerock.openidconnect.Claim,",
+        "",
+        "            java.util.LinkedHashMap,",
+        "            java.util.ArrayList",
+        "        );",
+        "",
+        "        // SET UP CONFIGURATION",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported scope values (scopes)",
+        "         * and the corresponding claim names for each scope value.",
+        "         */",
+        "        var scopeClaimsMap;",
+        "",
+        "        /**",
+        "         * Placeholder for a configuration option that contains",
+        "         * an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value.",
+        "         */",
+        "        var claimResolvers;",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported scopes and the corresponding claim names,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps each supported scope value to an array of claim names,",
+        "         * in order to specify which claims need to be processed for the requested scopes.",
+        "         * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims} for details.",
+        "         * @param {string[]} [params.profile] - An array of claim names to be returned if the profile scope is requested.",
+        "         * @param {string[]} [params.email] - An array of claim names to be returned if the email scope is requested.",
+        "         * @param {string[]} [params.address] - An array of claim names to be returned if the address scope is requested.",
+        "         * @param {string[]} [params.phone] - An array of claim names to be returned if the phone scope is requested.",
+        "         * @returns {undefined}",
+        "         */",
+        "        function setScopeClaimsMap(params) {",
+        "            scopeClaimsMap = params;",
+        "        }",
+        "",
+        "        /**",
+        "         * A (public) method that accepts an object that maps the supported claim names",
+        "         * and the resolver functions returning the claim value,",
+        "         * and assigns it to a (private) variable that serves as a configuration option.",
+        "         * @param {object} params - An object that maps",
+        "         * each supported claim name to a function that computes and returns the claim value.",
+        "         */",
+        "        function setClaimResolvers(params) {",
+        "            claimResolvers = params;",
+        "        }",
+        "",
+        "        // CLAIM RESOLVERS",
+        "",
+        "        /**",
+        "         * Claim resolvers are functions that return a claim value.",
+        "         * @param {*}",
+        "         * @returns {*}",
+        "         */",
+        "",
+        "        /**",
+        "         * Defines a claim resolver based on a user profile attribute.",
+        "         * @param {string} attributeName - Name of the user profile attribute.",
+        "         * @returns {function} A function that will determine the claim value",
+        "         * based on the user profile attribute and the (requested) claim properties.",
+        "         */",
+        "        function getUserProfileClaimResolver (attributeName) {",
+        "            /**",
+        "             * Resolves a claim with a user profile attribute value.",
+        "             * Returns undefined if the identity attribute is not populated,",
+        "             * OR if the claim has requested values that do not contain the identity attribute value.",
+        "             * ATTENTION: the aforementioned comparison is case-sensitive.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {string|HashSet|undefined}",
+        "             */",
+        "            function resolveClaim(claim) {",
+        "                var userProfileValue;",
+        "",
+        "                if (identity) {",
+        "                    userProfileValue = getClaimValueFromSet(claim, identity.getAttribute(attributeName));",
+        "",
+        "                    if (userProfileValue && !userProfileValue.isEmpty()) {",
+        "                        if (!claim.getValues() || claim.getValues().isEmpty() || claim.getValues().contains(userProfileValue)) {",
+        "                            return userProfileValue;",
+        "                        }",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            return resolveClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an address claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional formatting to the value before returning it.",
+        "         */",
+        "        function getAddressClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Creates an address claim object from a value returned by a claim resolver,",
+        "             * and returns the address claim object as the claim value.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim}.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {java.util.LinkedHashMap|undefined} The address claim object created from a claim value.",
+        "             */",
+        "            function resolveAddressClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "                var addressObject;",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    addressObject = new frJava.LinkedHashMap();",
+        "",
+        "                    addressObject.put('formatted', claimValue);",
+        "",
+        "                    return addressObject;",
+        "                }",
+        "            }",
+        "",
+        "            return resolveAddressClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Returns an essential claim resolver based on a claim value obtained with another claim resolver.",
+        "         * @param {function} resolveClaim - A function that returns a claim value.",
+        "         * @returns {function} A function that will accept a claim as an argument,",
+        "         * run the claim resolver function for the claim and obtain the claim value,",
+        "         * and apply additional logic for essential claims.",
+        "         */",
+        "        function getEssentialClaimResolver (resolveClaim) {",
+        "            /**",
+        "             * Returns a claim value or throws an error.",
+        "             * The claim value is obtained with a claim resolving function available from the closure.",
+        "             * Throws an exception if the claim is essential and no value is returned for the claim.",
+        "             *",
+        "             * Use of this resolver is optional.",
+        "             * @see {@link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests} stating:",
+        "             * "Note that even if the Claims are not available because the End-User did not authorize their release or they are not present,",
+        "             * the Authorization Server MUST NOT generate an error when Claims are not returned, whether they are Essential or Voluntary,",
+        "             * unless otherwise specified in the description of the specific claim."",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*}",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             */",
+        "            function resolveEssentialClaim(claim) {",
+        "                var claimValue = resolveClaim(claim);",
+        "",
+        "                if (claim.isEssential() && !isClaimValueValid(claimValue)) {",
+        "                    throw new frJava.InvalidRequestException('Could not provide value for essential claim: ' + claim.getName());",
+        "                }",
+        "",
+        "                return claimValue;",
+        "            }",
+        "",
+        "            return resolveEssentialClaim;",
+        "        }",
+        "",
+        "        /**",
+        "         * Provides default resolution for a claim.",
+        "         * Use it if a claim-specific resolver is not defined in the configuration.",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @returns {*} A single value associated with this claim.",
+        "         */",
+        "        function resolveAnyClaim (claim) {",
+        "            if (claim.getValues().size() === 1) {",
+        "                return claim.getValues().toArray()[0];",
+        "            }",
+        "        }",
+        "",
+        "        // UTILITIES",
+        "",
+        "        /**",
+        "         * Returns claim value from a set.",
+        "         * If the set contains a single value, returns the value.",
+        "         * If the set contains multiple values, returns the set.",
+        "         * Otherwise, returns undefined.",
+        "         *",
+        "         * @param {org.forgerock.openidconnect.Claim} claim",
+        "         * An object that provides methods to obtain information/requirements associated with a claim.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "         * @param {java.util.HashSet} set The set—for example, a user profile attribute value.",
+        "         * @returns {string|java.util.HashSet|undefined}",
+        "         */",
+        "        function getClaimValueFromSet (claim, set) {",
+        "            if (set && set.size()) {",
+        "                if (set.size() === 1) {",
+        "                    return set.toArray()[0];",
+        "                } else {",
+        "                    return set;",
+        "                }",
+        "            } else if (logger.warningEnabled()) {",
+        "                logger.warning('OIDC Claims script. Got an empty set for claim: ' + claim.getName());",
+        "            }",
+        "        }",
+        "",
+        "        function isClaimValueValid (claimValue) {",
+        "            if (typeof claimValue === 'undefined' || claimValue === null) {",
+        "                return false;",
+        "            }",
+        "",
+        "            return true;",
+        "        }",
+        "",
+        "        // CLAIM PROCESSING",
+        "",
+        "        /**",
+        "         * Constructs and returns an object populated with the computed claim values",
+        "         * and the requested scopes mapped to the claim names.",
+        "         * @returns {org.forgerock.oauth2.core.UserInfoClaims} The object to be returned to the authorization server.",
+        "         * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "         * @see RESULTS section for the use of this function.",
+        "         */",
+        "        function getUserInfoClaims () {",
+        "            return new frJava.UserInfoClaims(getComputedClaims(), getCompositeScopes());",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of (requested) claim names populated with the computed claim values.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         * A map of the requested claim names and the corresponding claim values.",
+        "         */",
+        "        function getComputedClaims () {",
+        "            /**",
+        "             * Creates a complete list of claim objects from:",
+        "             * the claims derived from the scopes,",
+        "             * the claims provided by the authorization server,",
+        "             * and the claims requested by the client.",
+        "             * @returns {java.util.ArrayList}",
+        "             * Returns a complete list of org.forgerock.openidconnect.Claim objects available to the script.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "             */",
+        "            function getClaims() {",
+        "                /**",
+        "                 * Returns a list of claim objects for the requested scopes.",
+        "                 * Uses the scopeClaimsMap configuration option to derive the claim names;",
+        "                 * no other properties of a claim derived from a scope are populated.",
+        "                 * @returns {java.util.ArrayList}",
+        "                 * A list of org.forgerock.openidconnect.Claim objects derived from the requested scopes.",
+        "                 * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for the claim object details.",
+        "                 */",
+        "                function convertScopeToClaims() {",
+        "                    var claims = new frJava.ArrayList();",
+        "",
+        "                    scopes.toArray().forEach(function (scope) {",
+        "                        if (String(scope) !== 'openid' && scopeClaimsMap[scope]) {",
+        "                            scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                                claims.add(new frJava.Claim(claimName));",
+        "                            });",
+        "                        }",
+        "                    });",
+        "",
+        "                    return claims;",
+        "                }",
+        "",
+        "                var claims = new frJava.ArrayList();",
+        "",
+        "                claims.addAll(convertScopeToClaims());",
+        "                claims.addAll(claimObjects);",
+        "                claims.addAll(requestedTypedClaims);",
+        "",
+        "                return claims;",
+        "            }",
+        "",
+        "            /**",
+        "             * Computes and returns a claim value.",
+        "             * To obtain the claim value, uses the resolver function specified for the claim in the claimResolvers configuration object.",
+        "             * @see claimResolvers",
+        "             * If no resolver function is found, uses the default claim resolver function.",
+        "             *",
+        "             * @param {org.forgerock.openidconnect.Claim} claim",
+        "             * An object that provides methods to obtain information/requirements associated with a claim.",
+        "             * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/openidconnect/Claim.html} for details.",
+        "             * @returns {*} Claim value.",
+        "             * @throws {org.forgerock.oauth2.core.exceptions.InvalidRequestException}",
+        "             * Rethrows this exception if a claim resolver throws it.",
+        "             * You can throw org.forgerock.oauth2.core.exceptions.InvalidRequestException from your custom claim resolver",
+        "             * if you want to terminate the claim processing.",
+        "             */",
+        "            function computeClaim(claim) {",
+        "                var resolveClaim;",
+        "                var message;",
+        "",
+        "                try {",
+        "                    resolveClaim = claimResolvers[claim.getName()] || resolveAnyClaim;",
+        "",
+        "                    return resolveClaim(claim);",
+        "                } catch (e) {",
+        "                    message = 'OIDC Claims script exception. Unable to resolve OIDC Claim. ' + e;",
+        "",
+        "                    if (String(e).indexOf('org.forgerock.oauth2.core.exceptions.InvalidRequestException') !== -1) {",
+        "                        throw e;",
+        "                    }",
+        "",
+        "                    if (logger.warningEnabled()) {",
+        "                        logger.warning(message);",
+        "                    }",
+        "                }",
+        "            }",
+        "",
+        "            var computedClaims = new frJava.LinkedHashMap();",
+        "",
+        "            getClaims().toArray().forEach(function (claim) {",
+        "                var claimValue = computeClaim(claim);",
+        "",
+        "                if (isClaimValueValid(claimValue)) {",
+        "                    computedClaims.put(claim.getName(), claimValue);",
+        "                } else {",
+        "                    /**",
+        "                     * If a claim has been processed, but appears in the list again,",
+        "                     * and its value cannot be computed under the new conditions,",
+        "                     * the claim is removed from the final result.",
+        "                     *",
+        "                     * For example, a claim could be mapped to a scope and found in the user profile,",
+        "                     * but also requested by the client with required values that don't match the computed one.",
+        "                     * @see {link https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests}.",
+        "                     * for the relevant OIDC specification details.",
+        "                     */",
+        "                    computedClaims.remove(claim.getName());",
+        "                }",
+        "            });",
+        "",
+        "            return computedClaims;",
+        "        }",
+        "",
+        "        /**",
+        "         * Creates a map of requested scopes and the corresponding claim names.",
+        "         * @returns {java.util.LinkedHashMap}",
+        "         */",
+        "        function getCompositeScopes () {",
+        "            var compositeScopes = new frJava.LinkedHashMap();",
+        "",
+        "            scopes.toArray().forEach(function (scope) {",
+        "                var scopeClaims = new frJava.ArrayList();",
+        "",
+        "                if (scopeClaimsMap[scope]) {",
+        "                    scopeClaimsMap[scope].forEach(function (claimName) {",
+        "                        scopeClaims.add(claimName);",
+        "                    });",
+        "                }",
+        "",
+        "                if (scopeClaims.size()) {",
+        "                    compositeScopes.put(scope, scopeClaims);",
+        "                }",
+        "            });",
+        "",
+        "            return compositeScopes;",
+        "        }",
+        "",
+        "        // PUBLIC METHODS",
+        "",
+        "        return {",
+        "            setScopeClaimsMap: setScopeClaimsMap,",
+        "            setClaimResolvers: setClaimResolvers,",
+        "            getUserProfileClaimResolver: getUserProfileClaimResolver,",
+        "            getAddressClaimResolver: getAddressClaimResolver,",
+        "            getEssentialClaimResolver: getEssentialClaimResolver,",
+        "            getUserInfoClaims: getUserInfoClaims",
+        "        };",
+        "    }",
+        "",
+        "    // RESULTS",
+        "",
+        "    /**",
+        "     * This script returns an instance of the org.forgerock.oauth2.core.UserInfoClaims class",
+        "     * populated with the computed claim values and",
+        "     * the requested scopes mapped to the claim names.",
+        "     * @see {@link https://backstage.forgerock.com/docs/am/7/apidocs/org/forgerock/oauth2/core/UserInfoClaims.html}.",
+        "     *",
+        "     * Assigning it to a variable gives you an opportunity",
+        "     * to log the content of the returned value during development.",
+        "     */",
+        "    var userInfoClaims = utils.getUserInfoClaims();",
+        "",
+        "    /*",
+        "    logger.error(scriptName + ' results:')",
+        "    logger.error('Values: ' + userInfoClaims.getValues())",
+        "    logger.error('Scopes: ' + userInfoClaims.getCompositeScopes())",
+        "    */",
+        "",
+        "    return userInfoClaims;",
+        "}());",
+        "",
+      ],
+    },
+  },
 }
-"
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter-imported-(2).script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Check-Username.script.json 1`] = `
 {
   "script": {
-    "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd": {
-      "_id": "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd",
-      "context": "SAML2_SP_ADAPTER",
+    "739bdc48-fd24-4c52-b353-88706d75558a": {
+      "_id": "739bdc48-fd24-4c52-b353-88706d75558a",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "null",
+      "description": "Check if username has already been collected.",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "FrodoSPAdapter - imported (2)",
-      "script": "file://FrodoSPAdapter-imported-(2).script.js",
+      "name": "Check Username",
+      "script": [
+        "/* Check Username",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Check if username has already been collected.",
+        " * Return "known" if yes, "unknown" otherwise.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - known",
+        " * - unknown",
+        " */",
+        "(function () {",
+        "    if (null != sharedState.get("username")) {",
+        "        outcome = "known";",
+        "    }",
+        "    else {",
+        "        outcome = "unknown";",
+        "    }",
+        "}());",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS).script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("GitHub rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS).script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Custom-Device-Match-Script.script.json 1`] = `
 {
   "script": {
-    "23143919-6b78-40c3-b25e-beca19b229e0": {
-      "_id": "23143919-6b78-40c3-b25e-beca19b229e0",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+    "d58977ed-0542-4147-8197-973ef7300191": {
+      "_id": "d58977ed-0542-4147-8197-973ef7300191",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Normalizes raw profile data from GitHub",
+      "description": "Custom Device Match Script",
       "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "GitHub Profile Normalization (VS)",
-      "script": "file://GitHub-Profile-Normalization-(VS).script.groovy",
+      "language": "JAVASCRIPT",
+      "name": "Custom Device Match Script",
+      "script": [
+        "/*",
+        " * Custom Device Match Script",
+        " */",
+        "",
+        "outcome = "true";",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS)-imported-(1).script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("GitHub rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Dummy.script.json 1`] = `
+{
+  "script": {
+    "4c963bb3-7084-43d0-bcdc-a47482cf1825": {
+      "_id": "4c963bb3-7084-43d0-bcdc-a47482cf1825",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Dummy",
+      "evaluatorVersion": "2.0",
+      "language": "JAVASCRIPT",
+      "name": "Dummy",
+      "script": [
+        "",
+        "outcome = "true";",
+        "",
+      ],
+    },
+  },
+}
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS)-imported-(1).script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/EmailAsUsername.script.json 1`] = `
 {
   "script": {
-    "207f172f-ffb5-439d-b7df-e8e80408830b": {
-      "_id": "207f172f-ffb5-439d-b7df-e8e80408830b",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+    "e5c302c8-f838-4698-87cc-d7225fc82454": {
+      "_id": "e5c302c8-f838-4698-87cc-d7225fc82454",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Normalizes raw profile data from GitHub",
+      "description": "null",
       "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "GitHub Profile Normalization (VS) - imported (1)",
-      "script": "file://GitHub-Profile-Normalization-(VS)-imported-(1).script.groovy",
+      "language": "JAVASCRIPT",
+      "name": "EmailAsUsername",
+      "script": [
+        "objectAttributes = sharedState.get("objectAttributes")",
+        "userName = objectAttributes.get("userName")",
+        "",
+        "if(userName){",
+        "  //Form Fill",
+        "  objectAttributes.put("mail", userName)",
+        "} else {",
+        "  //Social",
+        "  objectAttributes.put("userName", objectAttributes.get("mail"))",
+        "}",
+        "",
+        "",
+        "sharedState.put("objectAttributes", objectAttributes);",
+        "//sharedState.put("username", mail)",
+        "",
+        "outcome = "true";",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS)-imported-(2).script.groovy 1`] = `
-"/*
- * Copyright 2020 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("GitHub rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.email)))
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS)-imported-(2).script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Format-Username.script.json 1`] = `
 {
   "script": {
-    "fdb60c75-d58b-409f-bef2-ce4ebb04c77c": {
-      "_id": "fdb60c75-d58b-409f-bef2-ce4ebb04c77c",
-      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+    "223739f3-9c54-43b7-9572-3c5338786145": {
+      "_id": "223739f3-9c54-43b7-9572-3c5338786145",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Normalizes raw profile data from GitHub",
+      "description": "null",
       "evaluatorVersion": "1.0",
-      "language": "GROOVY",
-      "name": "GitHub Profile Normalization (VS) - imported (2)",
-      "script": "file://GitHub-Profile-Normalization-(VS)-imported-(2).script.groovy",
+      "language": "JAVASCRIPT",
+      "name": "Format Username",
+      "script": [
+        "var username = sharedState.get("username");",
+        "",
+        "sharedState.put("displayName", username);",
+        "outcome = "continue";",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Inactive-Device-Match-Script.script.js 1`] = `
-"/*
- * Inactive Device Match Script
- */
-
-outcome = "true";
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Inactive-Device-Match-Script.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter.script.json 1`] = `
 {
   "script": {
-    "3bd13a46-61c4-4974-8efb-1700c80c64e3": {
-      "_id": "3bd13a46-61c4-4974-8efb-1700c80c64e3",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+    "07ee6240-d106-4e25-a781-5fcabc477d22": {
+      "_id": "07ee6240-d106-4e25-a781-5fcabc477d22",
+      "context": "SAML2_SP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Inactive Device Match Script",
+      "description": "null",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Inactive Device Match Script",
-      "script": "file://Inactive-Device-Match-Script.script.js",
+      "name": "FrodoSPAdapter",
+      "script": [
+        "/*",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
+        " *",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (2)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (13):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnRequest:",
+        " *     hostedEntityId",
+        " *     idpEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnRequest() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     out",
+        " *     session",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnFailure:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postNewNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postNewNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
+        "}",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Example-Library.script.js 1`] = `
-"var i = 0;
-
-function add(j) {i += j};
-function logTotal(log) { log.info("Total: " + i) };
-
-// export constant
-exports.MSG = 'Final sum';
-
-// export functions
-exports.add = add;
-exports.logTotal = logTotal;
-
-//direct export using an inline declaration
-exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Example-Library.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter-imported-(1).script.json 1`] = `
 {
   "script": {
-    "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
-      "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
-      "context": "LIBRARY",
+    "5ce0d38a-154c-4be5-bd22-f9879c77e895": {
+      "_id": "5ce0d38a-154c-4be5-bd22-f9879c77e895",
+      "context": "SAML2_SP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "My Example Library",
-      "evaluatorVersion": "2.0",
-      "exports": [
-        {
-          "id": "MSG",
-          "type": "String",
-        },
-        {
-          "arity": 1,
-          "id": "add",
-          "type": "Function",
-        },
-        {
-          "arity": 1,
-          "id": "logTotal",
-          "type": "Function",
-        },
-        {
-          "arity": 2,
-          "id": "logTotalWithMessage",
-          "type": "Function",
-        },
+      "description": "null",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "FrodoSPAdapter - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
+        " *",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (2)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (13):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnRequest:",
+        " *     hostedEntityId",
+        " *     idpEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnRequest() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     out",
+        " *     session",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnFailure:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postNewNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postNewNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
+        "}",
       ],
-      "language": "JAVASCRIPT",
-      "name": "My Example Library",
-      "script": "file://My-Example-Library.script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Example-Script-Using-Libraries.script.js 1`] = `
-"/**
- * Testing library scripts
- */
-var mylib = require('My Example Library');
-var loggers = require('Library Script');
-
-mylib.add(1);
-mylib.logTotal(logger);
-mylib.add(3);
-mylib.logTotalWithMessage(logger, mylib.MSG);
-
-outcome = 'true';
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Example-Script-Using-Libraries.script.json 1`] = `
-{
-  "script": {
-    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
-      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
-      "context": "AUTHENTICATION_TREE_DECISION_NODE",
-      "createdBy": "null",
-      "creationDate": 0,
-      "default": false,
-      "description": "My Example Script Using Libraries",
-      "evaluatorVersion": "2.0",
-      "language": "JAVASCRIPT",
-      "name": "My Example Script Using Libraries",
-      "script": "file://My-Example-Script-Using-Libraries.script.js",
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Other-Example-Library-Script.script.js 1`] = `
-"console.log("hi there");
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Other-Example-Library-Script.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/FrodoSPAdapter-imported-(2).script.json 1`] = `
 {
   "script": {
-    "4e053815-adde-46ac-9fe2-d3ae93517c14": {
-      "_id": "4e053815-adde-46ac-9fe2-d3ae93517c14",
-      "context": "LIBRARY",
+    "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd": {
+      "_id": "fb09ba1b-e9b9-4517-8f11-a7cfe8b65dfd",
+      "context": "SAML2_SP_ADAPTER",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
       "description": "null",
-      "evaluatorVersion": "2.0",
-      "exports": [],
+      "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "My Other Example Library Script",
-      "script": "file://My-Other-Example-Library-Script.script.js",
+      "name": "FrodoSPAdapter - imported (2)",
+      "script": [
+        "/*",
+        " * Copyright 2023 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOnRequest",
+        " *      - preSingleSignOnProcess",
+        " *      - postSingleSignOnSuccess",
+        " *      - postSingleSignOnFailure",
+        " *      - postNewNameIDSuccess",
+        " *      - postTerminateNameIDSuccess",
+        " *      - preSingleLogoutProcess",
+        " *      - postSingleLogoutSuccess",
+        " *",
+        " * Please see the JavaDoc for the interface for more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/org/forgerock/openam/saml2/plugins/SPAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpEntityId - String",
+        " *     The entity ID for the Identity Provider for which the sign-on request will be sent.",
+        " * request - HttpServletRequest (1)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (2)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (3)",
+        " *     The authentication request sent that is sent from the Service Provider.",
+        " * session - SSOToken (4)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * res - Response (5)",
+        " *     The SSO Response received from the Identity Provider.",
+        " * profile - String",
+        " *     The protocol profile that is used, this will be one of the following values from SAML2Constants (6):",
+        " *          - SAML2Constants.HTTP_POST",
+        " *          - SAML2Constants.HTTP_ARTIFACT",
+        " *          - SAML2Constants.PAOS",
+        " * out - PrintWriter (7)",
+        " *     The PrintWriter that can be used to write to.",
+        " * isFederation - boolean",
+        " *     Set to true if using federation, otherwise false.",
+        " * failureCode - int",
+        " *     An integer holding the failure code when an error has occurred. For potential values see SPAdapter.",
+        " * userId - String",
+        " *     The unique universal ID of the user with whom the new name identifier request was performed.",
+        " * idRequest - ManageNameIDRequest (8)",
+        " *     The new name identifier request, this will be null if the request object is not available",
+        " * idResponse - ManageNameIDResponse (9)",
+        " *     The new name identifier response, this will be null if the response object is not available",
+        " * binding - String",
+        " *     The binding used for the new name identifier request. This will be one of the following values:",
+        " *          - SAML2Constants.SOAP",
+        " *          - SAML2Constants.HTTP_REDIRECT",
+        " * logoutRequest - LogoutRequest (10)",
+        " *     The single logout request.",
+        " * logoutResponse - LogoutResponse (11)",
+        " *     The single logout response.",
+        " * spAdapterScriptHelper - SpAdapterScriptHelper (12)",
+        " *     An instance of SpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (13):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (2) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (3) AuthnRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (4) SSOToken - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/Response.html",
+        " * (6) SAML2Constants - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Constants.html",
+        " * (7) PrintWriter - https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/PrintWriter.html",
+        " * (8) ManageNameIDRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDRequest.html",
+        " * (9) ManageNameIDResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/ManageNameIDResponse.html",
+        " * (10) LogoutRequest - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutRequest.html",
+        " * (11) LogoutResponse - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/protocol/LogoutResponse.html",
+        " * (12) SpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/plugins/scripted/SpAdapterScriptHelper.html.",
+        " * (13) SAML2Exception - https://backstage.forgerock.com/docs/am/7.3/_attachments/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 SP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnRequest:",
+        " *     hostedEntityId",
+        " *     idpEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnRequest() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOnProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleSignOnProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     out",
+        " *     session",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     isFederation",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnSuccess() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleSignOnFailure:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     authnRequest",
+        " *     res",
+        " *     profile",
+        " *     failureCode",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " *",
+        " * Return - true if response is being redirected, false if not. Default to false.",
+        " */",
+        "function postSingleSignOnFailure() {",
+        "    return false;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postNewNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postNewNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postTerminateNameIDSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     idRequest",
+        " *     idResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postTerminateNameIDSuccess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSingleLogoutProcess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function preSingleLogoutProcess() {",
+        "}",
+        "",
+        "/*",
+        " * Available variables for postSingleLogoutSuccess:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     request",
+        " *     response",
+        " *     userId",
+        " *     logoutRequest",
+        " *     logoutResponse",
+        " *     binding",
+        " *     spAdapterScriptHelper",
+        " *     logger",
+        " */",
+        "function postSingleLogoutSuccess() {",
+        "}",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization.script.groovy 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("Okta rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.preferred_username)))
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS).script.json 1`] = `
 {
   "script": {
-    "6325cf19-a49b-471e-8d26-7e4df76df0e2": {
-      "_id": "6325cf19-a49b-471e-8d26-7e4df76df0e2",
+    "23143919-6b78-40c3-b25e-beca19b229e0": {
+      "_id": "23143919-6b78-40c3-b25e-beca19b229e0",
       "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
@@ -22812,44 +22353,41 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "description": "Normalizes raw profile data from GitHub",
       "evaluatorVersion": "1.0",
       "language": "GROOVY",
-      "name": "Okta Profile Normalization",
-      "script": "file://Okta-Profile-Normalization.script.groovy",
+      "name": "GitHub Profile Normalization (VS)",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization-imported-(1).script.groovy 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("Okta rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.preferred_username)))
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization-imported-(1).script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS)-imported-(1).script.json 1`] = `
 {
   "script": {
-    "6002c349-f1d0-4317-baa2-a18590fc3cff": {
-      "_id": "6002c349-f1d0-4317-baa2-a18590fc3cff",
+    "207f172f-ffb5-439d-b7df-e8e80408830b": {
+      "_id": "207f172f-ffb5-439d-b7df-e8e80408830b",
       "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
@@ -22857,44 +22395,41 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "description": "Normalizes raw profile data from GitHub",
       "evaluatorVersion": "1.0",
       "language": "GROOVY",
-      "name": "Okta Profile Normalization - imported (1)",
-      "script": "file://Okta-Profile-Normalization-imported-(1).script.groovy",
+      "name": "GitHub Profile Normalization (VS) - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization-imported-(2).script.groovy 1`] = `
-"/*
- * Copyright 2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-import static org.forgerock.json.JsonValue.field
-import static org.forgerock.json.JsonValue.json
-import static org.forgerock.json.JsonValue.object
-
-logger.warning("Okta rawProfile: "+rawProfile)
-
-return json(object(
-        field("id", rawProfile.id),
-        field("displayName", rawProfile.name),
-        field("givenName", rawProfile.first_name),
-        field("familyName", rawProfile.last_name),
-        field("photoUrl", rawProfile.picture.data.url),
-        field("email", rawProfile.email),
-        field("username", rawProfile.preferred_username)))
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization-imported-(2).script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/GitHub-Profile-Normalization-(VS)-imported-(2).script.json 1`] = `
 {
   "script": {
-    "647f2a33-9211-4315-a83f-a521d8b77d7b": {
-      "_id": "647f2a33-9211-4315-a83f-a521d8b77d7b",
+    "fdb60c75-d58b-409f-bef2-ce4ebb04c77c": {
+      "_id": "fdb60c75-d58b-409f-bef2-ce4ebb04c77c",
       "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
@@ -22902,587 +22437,700 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "description": "Normalizes raw profile data from GitHub",
       "evaluatorVersion": "1.0",
       "language": "GROOVY",
-      "name": "Okta Profile Normalization - imported (2)",
-      "script": "file://Okta-Profile-Normalization-imported-(2).script.groovy",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Remove-Button.script.js 1`] = `
-"/* Remove Button
- *
- * Author: volker.scheuber@forgerock.com
- * 
- * Hide buttons on the journey page.
- * 
- * This script does not need to be parametrized. It will work properly as is.
- * 
- * The Scripted Decision Node needs the following outcomes defined:
- * - true
- */
-(function () {
-    var script = "Array.prototype.slice.call(document.getElementsByTagName('button')).forEach(function (e) {e.style.display = 'none'})"
-    var fr = JavaImporter(
-        org.forgerock.openam.auth.node.api.Action,
-        javax.security.auth.callback.TextOutputCallback,
-        com.sun.identity.authentication.callbacks.ScriptTextOutputCallback
-    )
-    var message = " "
-    if (callbacks.isEmpty()) {
-        action = fr.Action.send(
-            new fr.TextOutputCallback(
-                fr.TextOutputCallback.INFORMATION,
-                message
-            ),
-            new fr.ScriptTextOutputCallback(script)
-        ).build()
-    }
-}());
-"
+      "name": "GitHub Profile Normalization (VS) - imported (2)",
+      "script": [
+        "/*",
+        " * Copyright 2020 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("GitHub rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.email)))",
+      ],
+    },
+  },
+}
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Remove-Button.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Inactive-Device-Match-Script.script.json 1`] = `
 {
   "script": {
-    "9535446c-0ff6-4a76-8576-616599119d64": {
-      "_id": "9535446c-0ff6-4a76-8576-616599119d64",
+    "3bd13a46-61c4-4974-8efb-1700c80c64e3": {
+      "_id": "3bd13a46-61c4-4974-8efb-1700c80c64e3",
       "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Remove button from page.",
+      "description": "Inactive Device Match Script",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Remove Button",
-      "script": "file://Remove-Button.script.js",
+      "name": "Inactive Device Match Script",
+      "script": [
+        "/*",
+        " * Inactive Device Match Script",
+        " */",
+        "",
+        "outcome = "true";",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth.script.js 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOn
- *      - preAuthentication
- *      - preSendResponse
- *      - preSignResponse
- *      - preSendFailureResponse
- *
- * Please see the javadoc for the interface definition and more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
- *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * request - HttpServletRequest (2)
- *     Servlet request object
- * response - HttpServletResponse (3)
- *     Servlet response object
- * authnRequest - AuthnRequest (4)
- *     The original authentication request sent from SP
- * reqId - String
- *     The id to use for continuation of processing if the adapter redirects
- * res - Response (5)
- *     The SAML Response
- * session - SSOToken (6)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * relayState - String
- *     The relayState that will be used in the redirect
- * faultCode - String
- *     the fault code that will be returned in the SAML response
- * faultDetail - String
- *     the fault detail that will be returned in the SAML response
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (7):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
- * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
- * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
- * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 IDP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOn:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preSingleSignOn () {
-      logger.error("Chicago: preSingleSignOn");
-    return true;
-}
-
-/*
- * Available variables for preAuthentication:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preAuthentication () {
-      logger.error("Chicago: preAuthentication");
-    return true;
-}
-
-/*
- * Available variables for preSendResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection happened after processing, false otherwise. Default to false.
- */
-function preSendResponse () {
-      logger.error("Chicago: preSendResponse");
-      logger.error("Chicago: authnRequest: "+authnRequest);
-      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
-    return true;
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Example-Library.script.json 1`] = `
+{
+  "script": {
+    "2c38c998-aec0-4e56-8d46-bff6e24a704e": {
+      "_id": "2c38c998-aec0-4e56-8d46-bff6e24a704e",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "My Example Library",
+      "evaluatorVersion": "2.0",
+      "exports": [
+        {
+          "id": "MSG",
+          "type": "String",
+        },
+        {
+          "arity": 1,
+          "id": "add",
+          "type": "Function",
+        },
+        {
+          "arity": 1,
+          "id": "logTotal",
+          "type": "Function",
+        },
+        {
+          "arity": 2,
+          "id": "logTotalWithMessage",
+          "type": "Function",
+        },
+      ],
+      "language": "JAVASCRIPT",
+      "name": "My Example Library",
+      "script": [
+        "var i = 0;",
+        "",
+        "function add(j) {i += j};",
+        "function logTotal(log) { log.info("Total: " + i) };",
+        "",
+        "// export constant",
+        "exports.MSG = 'Final sum';",
+        "",
+        "// export functions",
+        "exports.add = add;",
+        "exports.logTotal = logTotal;",
+        "",
+        "//direct export using an inline declaration",
+        "exports.logTotalWithMessage = (log, message) => log.info(message + ": " + i);",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for preSignResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     session
- *     relayState
- *     res
- *     logger
- */
-function preSignResponse () {
-      logger.error("Chicago: preSignResponse");
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Example-Script-Using-Libraries.script.json 1`] = `
+{
+  "script": {
+    "bb393d07-a121-47e2-9d24-1a1066f39ec0": {
+      "_id": "bb393d07-a121-47e2-9d24-1a1066f39ec0",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "My Example Script Using Libraries",
+      "evaluatorVersion": "2.0",
+      "language": "JAVASCRIPT",
+      "name": "My Example Script Using Libraries",
+      "script": [
+        "/**",
+        " * Testing library scripts",
+        " */",
+        "var mylib = require('My Example Library');",
+        "var loggers = require('Library Script');",
+        "",
+        "mylib.add(1);",
+        "mylib.logTotal(logger);",
+        "mylib.add(3);",
+        "mylib.logTotalWithMessage(logger, mylib.MSG);",
+        "",
+        "outcome = 'true';",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for preSendFailureResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     response
- *     faultCode
- *     faultDetail
- *     logger
- */
-function preSendFailureResponse () {
-      logger.error("Chicago: preSendFailureResponse");
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/My-Other-Example-Library-Script.script.json 1`] = `
+{
+  "script": {
+    "4e053815-adde-46ac-9fe2-d3ae93517c14": {
+      "_id": "4e053815-adde-46ac-9fe2-d3ae93517c14",
+      "context": "LIBRARY",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "null",
+      "evaluatorVersion": "2.0",
+      "exports": [],
+      "language": "JAVASCRIPT",
+      "name": "My Other Example Library Script",
+      "script": [
+        "console.log("hi there");",
+      ],
+    },
+  },
 }
-"
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization.script.json 1`] = `
 {
   "script": {
-    "85523e71-2d77-4577-b078-6f9674cc54e2": {
-      "_id": "85523e71-2d77-4577-b078-6f9674cc54e2",
-      "context": "SAML2_IDP_ADAPTER",
+    "6325cf19-a49b-471e-8d26-7e4df76df0e2": {
+      "_id": "6325cf19-a49b-471e-8d26-7e4df76df0e2",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Always redirect browser pre-auth",
+      "description": "Normalizes raw profile data from GitHub",
       "evaluatorVersion": "1.0",
-      "language": "JAVASCRIPT",
-      "name": "Saml2 IDP Adapter Always Auth",
-      "script": "file://Saml2-IDP-Adapter-Always-Auth.script.js",
+      "language": "GROOVY",
+      "name": "Okta Profile Normalization",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth-imported-(1).script.js 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOn
- *      - preAuthentication
- *      - preSendResponse
- *      - preSignResponse
- *      - preSendFailureResponse
- *
- * Please see the javadoc for the interface definition and more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
- *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * request - HttpServletRequest (2)
- *     Servlet request object
- * response - HttpServletResponse (3)
- *     Servlet response object
- * authnRequest - AuthnRequest (4)
- *     The original authentication request sent from SP
- * reqId - String
- *     The id to use for continuation of processing if the adapter redirects
- * res - Response (5)
- *     The SAML Response
- * session - SSOToken (6)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * relayState - String
- *     The relayState that will be used in the redirect
- * faultCode - String
- *     the fault code that will be returned in the SAML response
- * faultDetail - String
- *     the fault detail that will be returned in the SAML response
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (7):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
- * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
- * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
- * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 IDP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOn:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preSingleSignOn () {
-      logger.error("Chicago: preSingleSignOn");
-    return true;
-}
-
-/*
- * Available variables for preAuthentication:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preAuthentication () {
-      logger.error("Chicago: preAuthentication");
-    return true;
-}
-
-/*
- * Available variables for preSendResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection happened after processing, false otherwise. Default to false.
- */
-function preSendResponse () {
-      logger.error("Chicago: preSendResponse");
-      logger.error("Chicago: authnRequest: "+authnRequest);
-      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
-    return true;
-}
-
-/*
- * Available variables for preSignResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     session
- *     relayState
- *     res
- *     logger
- */
-function preSignResponse () {
-      logger.error("Chicago: preSignResponse");
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization-imported-(1).script.json 1`] = `
+{
+  "script": {
+    "6002c349-f1d0-4317-baa2-a18590fc3cff": {
+      "_id": "6002c349-f1d0-4317-baa2-a18590fc3cff",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "Okta Profile Normalization - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for preSendFailureResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     response
- *     faultCode
- *     faultDetail
- *     logger
- */
-function preSendFailureResponse () {
-      logger.error("Chicago: preSendFailureResponse");
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Okta-Profile-Normalization-imported-(2).script.json 1`] = `
+{
+  "script": {
+    "647f2a33-9211-4315-a83f-a521d8b77d7b": {
+      "_id": "647f2a33-9211-4315-a83f-a521d8b77d7b",
+      "context": "SOCIAL_IDP_PROFILE_TRANSFORMATION",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Normalizes raw profile data from GitHub",
+      "evaluatorVersion": "1.0",
+      "language": "GROOVY",
+      "name": "Okta Profile Normalization - imported (2)",
+      "script": [
+        "/*",
+        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "import static org.forgerock.json.JsonValue.field",
+        "import static org.forgerock.json.JsonValue.json",
+        "import static org.forgerock.json.JsonValue.object",
+        "",
+        "logger.warning("Okta rawProfile: "+rawProfile)",
+        "",
+        "return json(object(",
+        "        field("id", rawProfile.id),",
+        "        field("displayName", rawProfile.name),",
+        "        field("givenName", rawProfile.first_name),",
+        "        field("familyName", rawProfile.last_name),",
+        "        field("photoUrl", rawProfile.picture.data.url),",
+        "        field("email", rawProfile.email),",
+        "        field("username", rawProfile.preferred_username)))",
+      ],
+    },
+  },
 }
-"
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth-imported-(1).script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Remove-Button.script.json 1`] = `
 {
   "script": {
-    "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1": {
-      "_id": "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1",
-      "context": "SAML2_IDP_ADAPTER",
+    "9535446c-0ff6-4a76-8576-616599119d64": {
+      "_id": "9535446c-0ff6-4a76-8576-616599119d64",
+      "context": "AUTHENTICATION_TREE_DECISION_NODE",
       "createdBy": "null",
       "creationDate": 0,
       "default": false,
-      "description": "Always redirect browser pre-auth",
+      "description": "Remove button from page.",
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
-      "name": "Saml2 IDP Adapter Always Auth - imported (1)",
-      "script": "file://Saml2-IDP-Adapter-Always-Auth-imported-(1).script.js",
+      "name": "Remove Button",
+      "script": [
+        "/* Remove Button",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Hide buttons on the journey page.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - true",
+        " */",
+        "(function () {",
+        "    var script = "Array.prototype.slice.call(document.getElementsByTagName('button')).forEach(function (e) {e.style.display = 'none'})"",
+        "    var fr = JavaImporter(",
+        "        org.forgerock.openam.auth.node.api.Action,",
+        "        javax.security.auth.callback.TextOutputCallback,",
+        "        com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
+        "    )",
+        "    var message = " "",
+        "    if (callbacks.isEmpty()) {",
+        "        action = fr.Action.send(",
+        "            new fr.TextOutputCallback(",
+        "                fr.TextOutputCallback.INFORMATION,",
+        "                message",
+        "            ),",
+        "            new fr.ScriptTextOutputCallback(script)",
+        "        ).build()",
+        "    }",
+        "}());",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth-imported-(2).script.js 1`] = `
-"/*
- * Copyright 2021-2022 ForgeRock AS. All Rights Reserved
- *
- * Use of this code requires a commercial software license with ForgeRock AS.
- * or with one of its affiliates. All use shall be exclusively subject
- * to such license between the licensee and ForgeRock AS.
- */
-
-/*
- * The script has these top level functions that could be executed during a SAML2 flow.
- *      - preSingleSignOn
- *      - preAuthentication
- *      - preSendResponse
- *      - preSignResponse
- *      - preSendFailureResponse
- *
- * Please see the javadoc for the interface definition and more information about these methods.
- * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html
- * Note that the initialize method is not supported in the scripts.
- *
- * Defined variables. Check the documentation on the respective functions for the variables available to it.
- *
- * hostedEntityId - String
- *     Entity ID for the hosted IDP
- * realm - String
- *     Realm of the hosted IDP
- * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)
- *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.
- * request - HttpServletRequest (2)
- *     Servlet request object
- * response - HttpServletResponse (3)
- *     Servlet response object
- * authnRequest - AuthnRequest (4)
- *     The original authentication request sent from SP
- * reqId - String
- *     The id to use for continuation of processing if the adapter redirects
- * res - Response (5)
- *     The SAML Response
- * session - SSOToken (6)
- *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.
- * relayState - String
- *     The relayState that will be used in the redirect
- * faultCode - String
- *     the fault code that will be returned in the SAML response
- * faultDetail - String
- *     the fault detail that will be returned in the SAML response
- * logger - Logger instance
- *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.
- *     Corresponding log files will be prefixed with: scripts.<script name>
- *
- * Throws SAML2Exception (7):
- *     for any exceptions occurring in the adapter. The federation process will continue
- *
- * Class reference:
- * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.
- * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.
- * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.
- * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.
- * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.
- * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.
- * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.
- */
-
-/*
- * Template/default script for SAML2 IDP Adapter scripted plugin.
- */
-
-/*
- * Available variables for preSingleSignOn:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preSingleSignOn () {
-      logger.error("Chicago: preSingleSignOn");
-    return true;
-}
-
-/*
- * Available variables for preAuthentication:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection is happening after processing, false otherwise. Default to false.
- */
-function preAuthentication () {
-      logger.error("Chicago: preAuthentication");
-    return true;
-}
-
-/*
- * Available variables for preSendResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     response
- *     reqId
- *     session
- *     relayState
- *     logger
- *
- * Return - true if browser redirection happened after processing, false otherwise. Default to false.
- */
-function preSendResponse () {
-      logger.error("Chicago: preSendResponse");
-      logger.error("Chicago: authnRequest: "+authnRequest);
-      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);
-    return true;
-}
-
-/*
- * Available variables for preSignResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     authnRequest
- *     session
- *     relayState
- *     res
- *     logger
- */
-function preSignResponse () {
-      logger.error("Chicago: preSignResponse");
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth.script.json 1`] = `
+{
+  "script": {
+    "85523e71-2d77-4577-b078-6f9674cc54e2": {
+      "_id": "85523e71-2d77-4577-b078-6f9674cc54e2",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Always redirect browser pre-auth",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Saml2 IDP Adapter Always Auth",
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
+        " *",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "      logger.error("Chicago: preSingleSignOn");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "      logger.error("Chicago: preAuthentication");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "      logger.error("Chicago: preSendResponse");",
+        "      logger.error("Chicago: authnRequest: "+authnRequest);",
+        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "      logger.error("Chicago: preSignResponse");",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "      logger.error("Chicago: preSendFailureResponse");",
+        "}",
+      ],
+    },
+  },
 }
+`;
 
-/*
- * Available variables for preSendFailureResponse:
- *     hostedEntityId
- *     realm
- *     idpAdapterScriptHelper
- *     request
- *     response
- *     faultCode
- *     faultDetail
- *     logger
- */
-function preSendFailureResponse () {
-      logger.error("Chicago: preSendFailureResponse");
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth-imported-(1).script.json 1`] = `
+{
+  "script": {
+    "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1": {
+      "_id": "d2dc1ae7-ca1b-4ce4-81b8-5d58dfba73b1",
+      "context": "SAML2_IDP_ADAPTER",
+      "createdBy": "null",
+      "creationDate": 0,
+      "default": false,
+      "description": "Always redirect browser pre-auth",
+      "evaluatorVersion": "1.0",
+      "language": "JAVASCRIPT",
+      "name": "Saml2 IDP Adapter Always Auth - imported (1)",
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
+        " *",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "      logger.error("Chicago: preSingleSignOn");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "      logger.error("Chicago: preAuthentication");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "      logger.error("Chicago: preSendResponse");",
+        "      logger.error("Chicago: authnRequest: "+authnRequest);",
+        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "      logger.error("Chicago: preSignResponse");",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "      logger.error("Chicago: preSendFailureResponse");",
+        "}",
+      ],
+    },
+  },
 }
-"
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth-imported-(2).script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/Saml2-IDP-Adapter-Always-Auth-imported-(2).script.json 1`] = `
 {
   "script": {
     "994a4e8f-2741-424a-83e7-3c5f78da01f5": {
@@ -23495,78 +23143,171 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "name": "Saml2 IDP Adapter Always Auth - imported (2)",
-      "script": "file://Saml2-IDP-Adapter-Always-Auth-imported-(2).script.js",
-    },
-  },
-}
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/debug.script.js 1`] = `
-"/* debug
- *
- * Author: volker.scheuber@forgerock.com
- * 
- * Display sharedState, transientState, and headers.
- * 
- * This script does not need to be parametrized. It will work properly as is.
- * 
- * The Scripted Decision Node needs the following outcomes defined:
- * - true
- */
-var anchor = "anchor-".concat(generateNumericToken('xxx'));
-var halign = "left";
-var message = "<p><b>Shared State</b>:<br/>".concat(
-      sharedState.toString()).concat("</p>").concat(
-    "<p><b>Transient State</b>:<br/>").concat(
-      transientState.toString()).concat("</p>").concat(
-    "<p><b>Request Headers</b>:<br/>").concat(
-      requestHeaders.toString()).concat("</p>")
-var script = "Array.prototype.slice.call(\\n".concat(
-  "document.getElementsByClassName('callback-component')).forEach(\\n").concat(
-  "function (e) {\\n").concat(
-  "  var message = e.firstElementChild;\\n").concat(
-  "  if (message.firstChild && message.firstChild.nodeName == '#text' && message.firstChild.nodeValue.trim() == '").concat(anchor).concat("') {\\n").concat(
-  "    message.className = \\"text-left\\";\\n").concat(
-  "    message.align = \\"").concat(halign).concat("\\";\\n").concat(
-  "    message.innerHTML = '").concat(message).concat("';\\n").concat(
-  "  }\\n").concat(
-  "})")
-var fr = JavaImporter(
-    org.forgerock.openam.auth.node.api.Action,
-    javax.security.auth.callback.TextOutputCallback,
-    com.sun.identity.authentication.callbacks.ScriptTextOutputCallback
-)
-if (message.length && callbacks.isEmpty()) {
-    action = fr.Action.send(
-        new fr.TextOutputCallback(
-            fr.TextOutputCallback.INFORMATION,
-            anchor
-        ),
-        new fr.ScriptTextOutputCallback(script)
-    ).build()
-}
-else {
-  action = fr.Action.goTo("true").build();
-}
-
- /*
-  * Generate a token in the desired format. All 'x' characters will be replaced with a random number 0-9.
-  * 
-  * Example:
-  * 'xxxxx' produces '28535'
-  * 'xxx-xxx' produces '432-521'
-  */
-function generateNumericToken(format) {
-    return format.replace(/[x]/g, function(c) {
-        var r = Math.random()*10|0;
-        var v = r;
-        return v.toString(10);
-    });
+      "script": [
+        "/*",
+        " * Copyright 2021-2022 ForgeRock AS. All Rights Reserved",
+        " *",
+        " * Use of this code requires a commercial software license with ForgeRock AS.",
+        " * or with one of its affiliates. All use shall be exclusively subject",
+        " * to such license between the licensee and ForgeRock AS.",
+        " */",
+        "",
+        "/*",
+        " * The script has these top level functions that could be executed during a SAML2 flow.",
+        " *      - preSingleSignOn",
+        " *      - preAuthentication",
+        " *      - preSendResponse",
+        " *      - preSignResponse",
+        " *      - preSendFailureResponse",
+        " *",
+        " * Please see the javadoc for the interface definition and more information about these methods.",
+        " * https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/SAML2IdentityProviderAdapter.html",
+        " * Note that the initialize method is not supported in the scripts.",
+        " *",
+        " * Defined variables. Check the documentation on the respective functions for the variables available to it.",
+        " *",
+        " * hostedEntityId - String",
+        " *     Entity ID for the hosted IDP",
+        " * realm - String",
+        " *     Realm of the hosted IDP",
+        " * idpAdapterScriptHelper - IdpAdapterScriptHelper (1)",
+        " *     An instance of IdpAdapterScriptHelper containing helper methods. See Javadoc for more details.",
+        " * request - HttpServletRequest (2)",
+        " *     Servlet request object",
+        " * response - HttpServletResponse (3)",
+        " *     Servlet response object",
+        " * authnRequest - AuthnRequest (4)",
+        " *     The original authentication request sent from SP",
+        " * reqId - String",
+        " *     The id to use for continuation of processing if the adapter redirects",
+        " * res - Response (5)",
+        " *     The SAML Response",
+        " * session - SSOToken (6)",
+        " *     The single sign-on session. The reference type of this is Object and would need to be casted to SSOToken.",
+        " * relayState - String",
+        " *     The relayState that will be used in the redirect",
+        " * faultCode - String",
+        " *     the fault code that will be returned in the SAML response",
+        " * faultDetail - String",
+        " *     the fault detail that will be returned in the SAML response",
+        " * logger - Logger instance",
+        " *     https://backstage.forgerock.com/docs/am/7/scripting-guide/scripting-api-global-logger.html#scripting-api-global-logger.",
+        " *     Corresponding log files will be prefixed with: scripts.<script name>",
+        " *",
+        " * Throws SAML2Exception (7):",
+        " *     for any exceptions occurring in the adapter. The federation process will continue",
+        " *",
+        " * Class reference:",
+        " * (1) idpAdapterScriptHelper - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/plugins/scripted/IdpAdapterScriptHelper.html.",
+        " * (2) HttpServletRequest - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletRequest.html.",
+        " * (3) HttpServletResponse - https://tomcat.apache.org/tomcat-7.0-doc/servletapi/javax/servlet/http/HttpServletResponse.html.",
+        " * (4) AuthnRequest - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/AuthnRequest.html.",
+        " * (5) Response - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/protocol/Response.html.",
+        " * (6) SSOToken - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/iplanet/sso/SSOToken.html.",
+        " * (7) SAML2Exception - https://backstage.forgerock.com/docs/am/7.2/apidocs/com/sun/identity/saml2/common/SAML2Exception.html.",
+        " */",
+        "",
+        "/*",
+        " * Template/default script for SAML2 IDP Adapter scripted plugin.",
+        " */",
+        "",
+        "/*",
+        " * Available variables for preSingleSignOn:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preSingleSignOn () {",
+        "      logger.error("Chicago: preSingleSignOn");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preAuthentication:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection is happening after processing, false otherwise. Default to false.",
+        " */",
+        "function preAuthentication () {",
+        "      logger.error("Chicago: preAuthentication");",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     response",
+        " *     reqId",
+        " *     session",
+        " *     relayState",
+        " *     logger",
+        " *",
+        " * Return - true if browser redirection happened after processing, false otherwise. Default to false.",
+        " */",
+        "function preSendResponse () {",
+        "      logger.error("Chicago: preSendResponse");",
+        "      logger.error("Chicago: authnRequest: "+authnRequest);",
+        "      response.sendRedirect("https://idc.scheuber.io/am/XUI/?realm=alpha&authIndexType=service&authIndexValue=Dispatcher&ForceAuth=true&goto="+relayState);",
+        "    return true;",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSignResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     authnRequest",
+        " *     session",
+        " *     relayState",
+        " *     res",
+        " *     logger",
+        " */",
+        "function preSignResponse () {",
+        "      logger.error("Chicago: preSignResponse");",
+        "}",
+        "",
+        "/*",
+        " * Available variables for preSendFailureResponse:",
+        " *     hostedEntityId",
+        " *     realm",
+        " *     idpAdapterScriptHelper",
+        " *     request",
+        " *     response",
+        " *     faultCode",
+        " *     faultDetail",
+        " *     logger",
+        " */",
+        "function preSendFailureResponse () {",
+        "      logger.error("Chicago: preSendFailureResponse");",
+        "}",
+      ],
+    },
+  },
 }
-"
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/debug.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/debug.script.json 1`] = `
 {
   "script": {
     "3cb43516-ae69-433a-8787-501d45db14e9": {
@@ -23579,22 +23320,75 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "name": "debug",
-      "script": "file://debug.script.js",
+      "script": [
+        "/* debug",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Display sharedState, transientState, and headers.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - true",
+        " */",
+        "var anchor = "anchor-".concat(generateNumericToken('xxx'));",
+        "var halign = "left";",
+        "var message = "<p><b>Shared State</b>:<br/>".concat(",
+        "      sharedState.toString()).concat("</p>").concat(",
+        "    "<p><b>Transient State</b>:<br/>").concat(",
+        "      transientState.toString()).concat("</p>").concat(",
+        "    "<p><b>Request Headers</b>:<br/>").concat(",
+        "      requestHeaders.toString()).concat("</p>")",
+        "var script = "Array.prototype.slice.call(\\n".concat(",
+        "  "document.getElementsByClassName('callback-component')).forEach(\\n").concat(",
+        "  "function (e) {\\n").concat(",
+        "  "  var message = e.firstElementChild;\\n").concat(",
+        "  "  if (message.firstChild && message.firstChild.nodeName == '#text' && message.firstChild.nodeValue.trim() == '").concat(anchor).concat("') {\\n").concat(",
+        "  "    message.className = \\"text-left\\";\\n").concat(",
+        "  "    message.align = \\"").concat(halign).concat("\\";\\n").concat(",
+        "  "    message.innerHTML = '").concat(message).concat("';\\n").concat(",
+        "  "  }\\n").concat(",
+        "  "})")",
+        "var fr = JavaImporter(",
+        "    org.forgerock.openam.auth.node.api.Action,",
+        "    javax.security.auth.callback.TextOutputCallback,",
+        "    com.sun.identity.authentication.callbacks.ScriptTextOutputCallback",
+        ")",
+        "if (message.length && callbacks.isEmpty()) {",
+        "    action = fr.Action.send(",
+        "        new fr.TextOutputCallback(",
+        "            fr.TextOutputCallback.INFORMATION,",
+        "            anchor",
+        "        ),",
+        "        new fr.ScriptTextOutputCallback(script)",
+        "    ).build()",
+        "}",
+        "else {",
+        "  action = fr.Action.goTo("true").build();",
+        "}",
+        "",
+        " /*",
+        "  * Generate a token in the desired format. All 'x' characters will be replaced with a random number 0-9.",
+        "  * ",
+        "  * Example:",
+        "  * 'xxxxx' produces '28535'",
+        "  * 'xxx-xxx' produces '432-521'",
+        "  */",
+        "function generateNumericToken(format) {",
+        "    return format.replace(/[x]/g, function(c) {",
+        "        var r = Math.random()*10|0;",
+        "        var v = r;",
+        "        return v.toString(10);",
+        "    });",
+        "}",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/level.script.js 1`] = `
-"(function () {
-  outcome = 'true';
-  var level = nodeState.get('level').asInteger();
-  sharedState.put('level' + level + 'Value', 'Level ' + level + ': This is a longer string value set at each level of the nested journeys. It contains an indicator in which level it was set.');
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/level.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/level.script.json 1`] = `
 {
   "script": {
     "41c24257-d7fc-4654-8b46-c2666dc5b56d": {
@@ -23607,59 +23401,19 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "name": "level",
-      "script": "file://level.script.js",
+      "script": [
+        "(function () {",
+        "  outcome = 'true';",
+        "  var level = nodeState.get('level').asInteger();",
+        "  sharedState.put('level' + level + 'Value', 'Level ' + level + ': This is a longer string value set at each level of the nested journeys. It contains an indicator in which level it was set.');",
+        "}());",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/mode.script.js 1`] = `
-"/* mode
- *
- * Author: volker.scheuber@forgerock.com
- * 
- * Collect mode if not already set and set outcome to mode.
- * 
- * This script does not need to be parametrized. It will work properly as is.
- * 
- * The Scripted Decision Node needs the following outcomes defined:
- * - 'shared and level'
- * - 'shared only'
- * - 'level only'
- * - 'none'
- */
-(function () {
-  var mode = nodeState.get('mode');
-  if (mode) {
-    outcome = mode.asString();
-    var level = nodeState.get('level').asInteger() + 1;
-    logger.error('mode: mode=' + mode.asString() + ', level=' + level);
-    sharedState.put('level', level);
-  }
-  else {
-    var choices = ['shared and level', 'shared only', 'level only', 'none'];
-  
-    var fr = JavaImporter(
-      org.forgerock.openam.auth.node.api.Action,
-      javax.security.auth.callback.ChoiceCallback
-    )
-
-    if (callbacks.isEmpty()) {
-      action = fr.Action.send([
-        new fr.ChoiceCallback('Choose test mode', choices, 0, false)
-      ]).build();
-    } else {
-      var choice = parseInt(callbacks.get(0).getSelectedIndexes()[0]);
-      nodeState.putShared('mode', choices[choice]);
-      nodeState.putShared('level', 0);
-      action = fr.Action.goTo(choices[choice]).build();
-    }
-  }
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/mode.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/mode.script.json 1`] = `
 {
   "script": {
     "5bbdaeff-ddee-44b9-b608-8d413d7d65a6": {
@@ -23672,22 +23426,56 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "name": "mode",
-      "script": "file://mode.script.js",
+      "script": [
+        "/* mode",
+        " *",
+        " * Author: volker.scheuber@forgerock.com",
+        " * ",
+        " * Collect mode if not already set and set outcome to mode.",
+        " * ",
+        " * This script does not need to be parametrized. It will work properly as is.",
+        " * ",
+        " * The Scripted Decision Node needs the following outcomes defined:",
+        " * - 'shared and level'",
+        " * - 'shared only'",
+        " * - 'level only'",
+        " * - 'none'",
+        " */",
+        "(function () {",
+        "  var mode = nodeState.get('mode');",
+        "  if (mode) {",
+        "    outcome = mode.asString();",
+        "    var level = nodeState.get('level').asInteger() + 1;",
+        "    logger.error('mode: mode=' + mode.asString() + ', level=' + level);",
+        "    sharedState.put('level', level);",
+        "  }",
+        "  else {",
+        "    var choices = ['shared and level', 'shared only', 'level only', 'none'];",
+        "  ",
+        "    var fr = JavaImporter(",
+        "      org.forgerock.openam.auth.node.api.Action,",
+        "      javax.security.auth.callback.ChoiceCallback",
+        "    )",
+        "",
+        "    if (callbacks.isEmpty()) {",
+        "      action = fr.Action.send([",
+        "        new fr.ChoiceCallback('Choose test mode', choices, 0, false)",
+        "      ]).build();",
+        "    } else {",
+        "      var choice = parseInt(callbacks.get(0).getSelectedIndexes()[0]);",
+        "      nodeState.putShared('mode', choices[choice]);",
+        "      nodeState.putShared('level', 0);",
+        "      action = fr.Action.goTo(choices[choice]).build();",
+        "    }",
+        "  }",
+        "}());",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/shared.script.js 1`] = `
-"(function () {
-  outcome = 'true';
-  var level = nodeState.get('level').asInteger();
-  sharedState.put('sharedValue', 'Level ' + level + ': This is a longer string value shared across all nested journeys. It contains an indicator in which level it was last set.');
-}());
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/shared.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/shared.script.json 1`] = `
 {
   "script": {
     "1b52a7e0-4019-40fa-958a-15a49870e901": {
@@ -23700,23 +23488,19 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "evaluatorVersion": "1.0",
       "language": "JAVASCRIPT",
       "name": "shared",
-      "script": "file://shared.script.js",
+      "script": [
+        "(function () {",
+        "  outcome = 'true';",
+        "  var level = nodeState.get('level').asInteger();",
+        "  sharedState.put('sharedValue', 'Level ' + level + ': This is a longer string value shared across all nested journeys. It contains an indicator in which level it was last set.');",
+        "}());",
+      ],
     },
   },
 }
 `;
 
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/test-script-with-secrets-and-variables.script.js 1`] = `
-"console.log(\`pi: \${systemEnv.getProperty("esv.test.var.pi")}\`);
-console.log(\`pi secret: \${systemEnv.getProperty("esv.test.secret.pi")}\`);
-console.log(\`speed of light: \${systemEnv.getProperty("esv.test.variable.light")}\`);
-console.log(\`euler's number: \${systemEnv.getProperty("esv.test.secret.euler")}\`);
-console.log(\`Area of circle with radius 7: \${7 * 7 * systemEnv.getProperty("esv.test.var.pi")}\`);
-console.log(\`Volume of sphere with radius 7: \${4 * 7 * 7 * 7 * systemEnv.getProperty("esv.test.secret.pi") / 3}\`);
-"
-`;
-
-exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/test-script-with-secrets-and-variables.script.json 1`] = `
+exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3: scriptExportTestDir3/test-script-with-secrets-and-variables.script.json 1`] = `
 {
   "script": {
     "da7a96a8-7969-4dab-9c6e-a812938cc76d": {
@@ -23730,7 +23514,15 @@ exports[`frodo script export "frodo script export -NAxD scriptExportTestDir3": s
       "exports": [],
       "language": "JAVASCRIPT",
       "name": "test-script-with-secrets-and-variables",
-      "script": "file://test-script-with-secrets-and-variables.script.js",
+      "script": [
+        "console.log(\`pi: \${systemEnv.getProperty("esv.test.var.pi")}\`);",
+        "console.log(\`pi secret: \${systemEnv.getProperty("esv.test.secret.pi")}\`);",
+        "console.log(\`speed of light: \${systemEnv.getProperty("esv.test.variable.light")}\`);",
+        "console.log(\`euler's number: \${systemEnv.getProperty("esv.test.secret.euler")}\`);",
+        "console.log(\`Area of circle with radius 7: \${7 * 7 * systemEnv.getProperty("esv.test.var.pi")}\`);",
+        "console.log(\`Volume of sphere with radius 7: \${4 * 7 * 7 * 7 * systemEnv.getProperty("esv.test.secret.pi") / 3}\`);",
+        "",
+      ],
     },
   },
 }
@@ -31991,24 +31783,7 @@ exports[`frodo script export "frodo script export -n 'GitHub Profile Normalizati
       "evaluatorVersion": "1.0",
       "language": "GROOVY",
       "name": "GitHub Profile Normalization",
-      "script": [
-        "/*",
-        " * Copyright 2022 ForgeRock AS. All Rights Reserved",
-        " *",
-        " * Use of this code requires a commercial software license with ForgeRock AS.",
-        " * or with one of its affiliates. All use shall be exclusively subject",
-        " * to such license between the licensee and ForgeRock AS.",
-        " */",
-        "",
-        "import static org.forgerock.json.JsonValue.field",
-        "import static org.forgerock.json.JsonValue.json",
-        "import static org.forgerock.json.JsonValue.object",
-        "",
-        "return json(object(",
-        "        field("id", rawProfile.id),",
-        "        field("displayName", rawProfile.name),",
-        "        field("username", rawProfile.login)))",
-      ],
+      "script": "file://GitHub-Profile-Normalization.script.groovy",
     },
   },
 }
diff --git a/test/e2e/__snapshots__/server-export.e2e.test.js.snap b/test/e2e/__snapshots__/server-export.e2e.test.js.snap
index a121eb5cf..eedd7e391 100644
--- a/test/e2e/__snapshots__/server-export.e2e.test.js.snap
+++ b/test/e2e/__snapshots__/server-export.e2e.test.js.snap
@@ -1754,5213 +1754,23 @@ exports[`frodo server export "frodo server export --all-separate --directory ser
     "01": {
       "_id": "01",
       "properties": {
-        "advanced": {
-          "_id": "01/properties/advanced",
-          "bootstrap.file": "/root/.openamcfg/AMConfig_usr_local_tomcat_webapps_am_",
-          "com.iplanet.am.lbcookie.value": "01",
-          "com.iplanet.am.serverMode": true,
-          "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
-          "com.sun.embedded.replicationport": "",
-          "com.sun.embedded.sync.servers": "on",
-          "com.sun.identity.common.systemtimerpool.size": "3",
-          "com.sun.identity.sm.sms_object_class_name": "com.sun.identity.sm.SmsWrapperObject",
-          "com.sun.identity.urlconnection.useCache": false,
-          "opensso.protocol.handler.pkgs": "",
-          "org.forgerock.embedded.dsadminport": "4444",
-        },
-        "cts": {
-          "_id": "01/properties/cts",
-          "amconfig.org.forgerock.services.cts.store.common.section": {
-            "org.forgerock.services.cts.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.cts.store.max.connections": {
-              "inherited": true,
-              "value": "100",
-            },
-            "org.forgerock.services.cts.store.page.size": {
-              "inherited": true,
-              "value": "0",
-            },
-            "org.forgerock.services.cts.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.vlv.page.size": {
-              "inherited": true,
-              "value": "1000",
-            },
-          },
-          "amconfig.org.forgerock.services.cts.store.external.section": {
-            "org.forgerock.services.cts.store.affinity.enabled": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.cts.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.cts.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.cts.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-        },
-        "directoryConfiguration": {
-          "_id": "01/properties/directoryConfiguration",
-          "directoryConfiguration": {
-            "bindDn": "cn=Directory Manager",
-            "bindPassword": null,
-            "maxConnectionPool": 10,
-            "minConnectionPool": 1,
-            "mtlsAlias": "",
-            "mtlsEnabled": false,
-            "mtlsKeyPasswordFile": "",
-            "mtlsKeyStoreFile": "",
-            "mtlsKeyStorePasswordFile": "",
-            "mtlsKeyStoreType": null,
-          },
-          "directoryServers": [
-            {
-              "connectionType": "SSL",
-              "hostName": "localhost",
-              "portNumber": "50636",
-              "serverName": "Server1",
-            },
-          ],
-        },
-        "general": {
-          "_id": "01/properties/general",
-          "amconfig.header.debug": {
-            "com.iplanet.services.debug.directory": {
-              "inherited": true,
-              "value": "%BASE_DIR%/var/debug",
-            },
-            "com.iplanet.services.debug.level": {
-              "inherited": true,
-              "value": "off",
-            },
-            "com.sun.services.debug.mergeall": {
-              "inherited": true,
-              "value": "on",
-            },
-          },
-          "amconfig.header.installdir": {
-            "com.iplanet.am.locale": {
-              "inherited": false,
-              "value": "en_US",
-            },
-            "com.iplanet.am.util.xml.validating": {
-              "inherited": true,
-              "value": "off",
-            },
-            "com.iplanet.services.configpath": {
-              "inherited": false,
-              "value": "/root/am",
-            },
-            "com.sun.identity.client.notification.url": {
-              "inherited": true,
-              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-            },
-          },
-          "amconfig.header.mailserver": {
-            "com.iplanet.am.smtphost": {
-              "inherited": true,
-              "value": "localhost",
-            },
-            "com.iplanet.am.smtpport": {
-              "inherited": true,
-              "value": "25",
-            },
-          },
-          "amconfig.header.site": {
-            "singleChoiceSite": "[Empty]",
-          },
-        },
-        "sdk": {
-          "_id": "01/properties/sdk",
-          "amconfig.header.cachingreplica": {
-            "com.iplanet.am.sdk.cache.maxSize": {
-              "inherited": true,
-              "value": "10000",
-            },
-          },
-          "amconfig.header.datastore": {
-            "com.sun.identity.sm.enableDataStoreNotification": {
-              "inherited": false,
-              "value": true,
-            },
-            "com.sun.identity.sm.notification.threadpool.size": {
-              "inherited": true,
-              "value": "1",
-            },
-          },
-          "amconfig.header.eventservice": {
-            "com.iplanet.am.event.connection.delay.between.retries": {
-              "inherited": true,
-              "value": "3000",
-            },
-            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
-              "inherited": true,
-              "value": "80,81,91",
-            },
-            "com.iplanet.am.event.connection.num.retries": {
-              "inherited": true,
-              "value": "3",
-            },
-            "com.sun.am.event.connection.disable.list": {
-              "inherited": false,
-              "value": "aci,um",
-            },
-          },
-          "amconfig.header.ldapconnection": {
-            "com.iplanet.am.ldap.connection.delay.between.retries": {
-              "inherited": true,
-              "value": "1000",
-            },
-            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-              "inherited": false,
-              "value": "80,81,91",
-            },
-            "com.iplanet.am.ldap.connection.num.retries": {
-              "inherited": true,
-              "value": "3",
-            },
-          },
-          "amconfig.header.sdktimetoliveconfig": {
-            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
-              "inherited": true,
-              "value": "30",
-            },
-            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
-              "inherited": true,
-              "value": "15",
-            },
-          },
-        },
-        "security": {
-          "_id": "01/properties/security",
-          "amconfig.header.cookie": {
-            "com.iplanet.am.cookie.encode": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.am.cookie.name": {
-              "inherited": true,
-              "value": "iPlanetDirectoryPro",
-            },
-            "com.iplanet.am.cookie.secure": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.crlcache": {
-            "com.sun.identity.crl.cache.directory.host": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.mtlsenabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.crl.cache.directory.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "com.sun.identity.crl.cache.directory.port": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.searchattr": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.searchlocs": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.ssl": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.crl.cache.directory.user": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.header.deserialisationwhitelist": {
-            "openam.deserialisation.classes.whitelist": {
-              "inherited": true,
-              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-            },
-          },
-          "amconfig.header.encryption": {
-            "am.encryption.pwd": {
-              "inherited": false,
-              "value": "efSYcwIhr7uKH30rgciGTVTFzb63LhYu",
-            },
-            "am.encryption.secret.alias": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.enabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "am.encryption.secret.keyPass": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystoreFile": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystorePass": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystoreType": {
-              "inherited": true,
-              "value": "JCEKS",
-            },
-            "com.iplanet.security.SecureRandomFactoryImpl": {
-              "inherited": true,
-              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-            },
-            "com.iplanet.security.encryptor": {
-              "inherited": true,
-              "value": "com.iplanet.services.util.JCEEncryption",
-            },
-          },
-          "amconfig.header.ocsp.check": {
-            "com.sun.identity.authentication.ocsp.responder.nickname": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.authentication.ocsp.responder.url": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.authentication.ocspCheck": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.securitykey": {
-            "com.sun.identity.saml.xmlsig.certalias": {
-              "inherited": true,
-              "value": "test",
-            },
-            "com.sun.identity.saml.xmlsig.keypass": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/secrets/default/.keypass",
-            },
-            "com.sun.identity.saml.xmlsig.keystore": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-            },
-            "com.sun.identity.saml.xmlsig.storepass": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/secrets/default/.storepass",
-            },
-            "com.sun.identity.saml.xmlsig.storetype": {
-              "inherited": true,
-              "value": "JCEKS",
-            },
-          },
-          "amconfig.header.validation": {
-            "com.iplanet.am.clientIPCheckEnabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-              "inherited": true,
-              "value": "16384",
-            },
-          },
-        },
-        "session": {
-          "_id": "01/properties/session",
-          "amconfig.header.sessionlogging": {
-            "com.iplanet.am.stats.interval": {
-              "inherited": true,
-              "value": "60",
-            },
-            "com.iplanet.services.stats.directory": {
-              "inherited": true,
-              "value": "%BASE_DIR%/var/stats",
-            },
-            "com.iplanet.services.stats.state": {
-              "inherited": true,
-              "value": "file",
-            },
-            "com.sun.am.session.enableHostLookUp": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.sessionnotification": {
-            "com.iplanet.am.notification.threadpool.size": {
-              "inherited": true,
-              "value": "10",
-            },
-            "com.iplanet.am.notification.threadpool.threshold": {
-              "inherited": true,
-              "value": "5000",
-            },
-          },
-          "amconfig.header.sessionthresholds": {
-            "com.iplanet.am.session.invalidsessionmaxtime": {
-              "inherited": true,
-              "value": "3",
-            },
-            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-              "inherited": true,
-              "value": "5000",
-            },
-          },
-          "amconfig.header.sessionvalidation": {
-            "com.sun.am.session.caseInsensitiveDN": {
-              "inherited": true,
-              "value": true,
-            },
-          },
-        },
-        "uma": {
-          "_id": "01/properties/uma",
-          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-            "org.forgerock.services.resourcesets.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.resourcesets.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.resourcesets.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-            "org.forgerock.services.resourcesets.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.resourcesets.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.resourcesets.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-            "org.forgerock.services.uma.labels.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.uma.labels.store.max.connections": {
-              "inherited": true,
-              "value": "2",
-            },
-            "org.forgerock.services.uma.labels.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-            "org.forgerock.services.uma.labels.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.labels.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.uma.labels.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-            "org.forgerock.services.uma.pendingrequests.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-            "org.forgerock.services.umaaudit.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.umaaudit.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.umaaudit.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-            "org.forgerock.services.umaaudit.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.umaaudit.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.umaaudit.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-        },
-      },
-      "siteName": null,
-      "url": "http://localhost:8080/am",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03.server.json 1`] = `
-{
-  "defaultProperties": {},
-  "meta": Any<Object>,
-  "server": {
-    "03": {
-      "_id": "03",
-      "properties": {
-        "advanced": {
-          "_id": "03/properties/advanced",
-          "com.iplanet.am.lbcookie.value": "03",
-        },
-        "cts": {
-          "_id": "03/properties/cts",
-          "amconfig.org.forgerock.services.cts.store.common.section": {
-            "org.forgerock.services.cts.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.cts.store.max.connections": {
-              "inherited": true,
-              "value": "100",
-            },
-            "org.forgerock.services.cts.store.page.size": {
-              "inherited": true,
-              "value": "0",
-            },
-            "org.forgerock.services.cts.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.vlv.page.size": {
-              "inherited": true,
-              "value": "1000",
-            },
-          },
-          "amconfig.org.forgerock.services.cts.store.external.section": {
-            "org.forgerock.services.cts.store.affinity.enabled": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.cts.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.cts.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.cts.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-        },
-        "directoryConfiguration": {
-          "_id": "03/properties/directoryConfiguration",
-          "directoryConfiguration": {
-            "bindDn": "cn=Directory Manager",
-            "bindPassword": null,
-            "maxConnectionPool": 10,
-            "minConnectionPool": 1,
-            "mtlsAlias": "",
-            "mtlsEnabled": false,
-            "mtlsKeyPasswordFile": "",
-            "mtlsKeyStoreFile": "",
-            "mtlsKeyStorePasswordFile": "",
-            "mtlsKeyStoreType": null,
-          },
-          "directoryServers": [
-            {
-              "connectionType": "SSL",
-              "hostName": "localhost",
-              "portNumber": "50636",
-              "serverName": "Server1",
-            },
-          ],
-        },
-        "general": {
-          "_id": "03/properties/general",
-          "amconfig.header.debug": {
-            "com.iplanet.services.debug.directory": {
-              "inherited": true,
-              "value": "%BASE_DIR%/var/debug",
-            },
-            "com.iplanet.services.debug.level": {
-              "inherited": true,
-              "value": "off",
-            },
-            "com.sun.services.debug.mergeall": {
-              "inherited": true,
-              "value": "on",
-            },
-          },
-          "amconfig.header.installdir": {
-            "com.iplanet.am.locale": {
-              "inherited": true,
-              "value": "en_US",
-            },
-            "com.iplanet.am.util.xml.validating": {
-              "inherited": true,
-              "value": "off",
-            },
-            "com.iplanet.services.configpath": {
-              "inherited": true,
-              "value": "%BASE_DIR%",
-            },
-            "com.sun.identity.client.notification.url": {
-              "inherited": true,
-              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-            },
-          },
-          "amconfig.header.mailserver": {
-            "com.iplanet.am.smtphost": {
-              "inherited": true,
-              "value": "localhost",
-            },
-            "com.iplanet.am.smtpport": {
-              "inherited": true,
-              "value": "25",
-            },
-          },
-          "amconfig.header.site": {
-            "singleChoiceSite": "testsite",
-          },
-        },
-        "sdk": {
-          "_id": "03/properties/sdk",
-          "amconfig.header.cachingreplica": {
-            "com.iplanet.am.sdk.cache.maxSize": {
-              "inherited": true,
-              "value": "10000",
-            },
-          },
-          "amconfig.header.datastore": {
-            "com.sun.identity.sm.enableDataStoreNotification": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.sm.notification.threadpool.size": {
-              "inherited": true,
-              "value": "1",
-            },
-          },
-          "amconfig.header.eventservice": {
-            "com.iplanet.am.event.connection.delay.between.retries": {
-              "inherited": true,
-              "value": "3000",
-            },
-            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
-              "inherited": true,
-              "value": "80,81,91",
-            },
-            "com.iplanet.am.event.connection.num.retries": {
-              "inherited": true,
-              "value": "3",
-            },
-            "com.sun.am.event.connection.disable.list": {
-              "inherited": true,
-              "value": "aci,um,sm",
-            },
-          },
-          "amconfig.header.ldapconnection": {
-            "com.iplanet.am.ldap.connection.delay.between.retries": {
-              "inherited": true,
-              "value": "1000",
-            },
-            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-              "inherited": true,
-              "value": "80,81,91",
-            },
-            "com.iplanet.am.ldap.connection.num.retries": {
-              "inherited": true,
-              "value": "3",
-            },
-          },
-          "amconfig.header.sdktimetoliveconfig": {
-            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
-              "inherited": true,
-              "value": "30",
-            },
-            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
-              "inherited": true,
-              "value": "15",
-            },
-          },
-        },
-        "security": {
-          "_id": "03/properties/security",
-          "amconfig.header.cookie": {
-            "com.iplanet.am.cookie.encode": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.am.cookie.name": {
-              "inherited": true,
-              "value": "iPlanetDirectoryPro",
-            },
-            "com.iplanet.am.cookie.secure": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.crlcache": {
-            "com.sun.identity.crl.cache.directory.host": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.mtlsenabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.crl.cache.directory.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "com.sun.identity.crl.cache.directory.port": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.searchattr": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.searchlocs": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.ssl": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.crl.cache.directory.user": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.header.deserialisationwhitelist": {
-            "openam.deserialisation.classes.whitelist": {
-              "inherited": true,
-              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-            },
-          },
-          "amconfig.header.encryption": {
-            "am.encryption.pwd": {
-              "inherited": true,
-              "value": "@AM_ENC_PWD@",
-            },
-            "am.encryption.secret.alias": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.enabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "am.encryption.secret.keyPass": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystoreFile": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystorePass": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystoreType": {
-              "inherited": true,
-              "value": "JCEKS",
-            },
-            "com.iplanet.security.SecureRandomFactoryImpl": {
-              "inherited": true,
-              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-            },
-            "com.iplanet.security.encryptor": {
-              "inherited": true,
-              "value": "com.iplanet.services.util.JCEEncryption",
-            },
-          },
-          "amconfig.header.ocsp.check": {
-            "com.sun.identity.authentication.ocsp.responder.nickname": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.authentication.ocsp.responder.url": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.authentication.ocspCheck": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.securitykey": {
-            "com.sun.identity.saml.xmlsig.certalias": {
-              "inherited": true,
-              "value": "test",
-            },
-            "com.sun.identity.saml.xmlsig.keypass": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/secrets/default/.keypass",
-            },
-            "com.sun.identity.saml.xmlsig.keystore": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-            },
-            "com.sun.identity.saml.xmlsig.storepass": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/secrets/default/.storepass",
-            },
-            "com.sun.identity.saml.xmlsig.storetype": {
-              "inherited": true,
-              "value": "JCEKS",
-            },
-          },
-          "amconfig.header.validation": {
-            "com.iplanet.am.clientIPCheckEnabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-              "inherited": true,
-              "value": "16384",
-            },
-          },
-        },
-        "session": {
-          "_id": "03/properties/session",
-          "amconfig.header.sessionlogging": {
-            "com.iplanet.am.stats.interval": {
-              "inherited": true,
-              "value": "60",
-            },
-            "com.iplanet.services.stats.directory": {
-              "inherited": true,
-              "value": "%BASE_DIR%/var/stats",
-            },
-            "com.iplanet.services.stats.state": {
-              "inherited": true,
-              "value": "file",
-            },
-            "com.sun.am.session.enableHostLookUp": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.sessionnotification": {
-            "com.iplanet.am.notification.threadpool.size": {
-              "inherited": true,
-              "value": "10",
-            },
-            "com.iplanet.am.notification.threadpool.threshold": {
-              "inherited": true,
-              "value": "5000",
-            },
-          },
-          "amconfig.header.sessionthresholds": {
-            "com.iplanet.am.session.invalidsessionmaxtime": {
-              "inherited": true,
-              "value": "3",
-            },
-            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-              "inherited": true,
-              "value": "5000",
-            },
-          },
-          "amconfig.header.sessionvalidation": {
-            "com.sun.am.session.caseInsensitiveDN": {
-              "inherited": true,
-              "value": true,
-            },
-          },
-        },
-        "uma": {
-          "_id": "03/properties/uma",
-          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-            "org.forgerock.services.resourcesets.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.resourcesets.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.resourcesets.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-            "org.forgerock.services.resourcesets.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.resourcesets.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.resourcesets.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-            "org.forgerock.services.uma.labels.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.uma.labels.store.max.connections": {
-              "inherited": true,
-              "value": "2",
-            },
-            "org.forgerock.services.uma.labels.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-            "org.forgerock.services.uma.labels.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.labels.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.uma.labels.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-            "org.forgerock.services.uma.pendingrequests.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-            "org.forgerock.services.umaaudit.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.umaaudit.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.umaaudit.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-            "org.forgerock.services.umaaudit.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.umaaudit.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.umaaudit.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-        },
-      },
-      "siteName": "testsite",
-      "url": "http://localhost:8081/am",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04.server.json 1`] = `
-{
-  "defaultProperties": {},
-  "meta": Any<Object>,
-  "server": {
-    "04": {
-      "_id": "04",
-      "properties": {
-        "advanced": {
-          "_id": "04/properties/advanced",
-          "com.iplanet.am.lbcookie.value": "04",
-        },
-        "cts": {
-          "_id": "04/properties/cts",
-          "amconfig.org.forgerock.services.cts.store.common.section": {
-            "org.forgerock.services.cts.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.cts.store.max.connections": {
-              "inherited": true,
-              "value": "100",
-            },
-            "org.forgerock.services.cts.store.page.size": {
-              "inherited": true,
-              "value": "0",
-            },
-            "org.forgerock.services.cts.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.vlv.page.size": {
-              "inherited": true,
-              "value": "1000",
-            },
-          },
-          "amconfig.org.forgerock.services.cts.store.external.section": {
-            "org.forgerock.services.cts.store.affinity.enabled": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.cts.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.cts.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.cts.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-        },
-        "directoryConfiguration": {
-          "_id": "04/properties/directoryConfiguration",
-          "directoryConfiguration": {
-            "bindDn": "cn=Directory Manager",
-            "bindPassword": null,
-            "maxConnectionPool": 10,
-            "minConnectionPool": 1,
-            "mtlsAlias": "",
-            "mtlsEnabled": false,
-            "mtlsKeyPasswordFile": "",
-            "mtlsKeyStoreFile": "",
-            "mtlsKeyStorePasswordFile": "",
-            "mtlsKeyStoreType": null,
-          },
-          "directoryServers": [
-            {
-              "connectionType": "SSL",
-              "hostName": "localhost",
-              "portNumber": "50636",
-              "serverName": "Server1",
-            },
-          ],
-        },
-        "general": {
-          "_id": "04/properties/general",
-          "amconfig.header.debug": {
-            "com.iplanet.services.debug.directory": {
-              "inherited": true,
-              "value": "%BASE_DIR%/var/debug",
-            },
-            "com.iplanet.services.debug.level": {
-              "inherited": true,
-              "value": "off",
-            },
-            "com.sun.services.debug.mergeall": {
-              "inherited": true,
-              "value": "on",
-            },
-          },
-          "amconfig.header.installdir": {
-            "com.iplanet.am.locale": {
-              "inherited": true,
-              "value": "en_US",
-            },
-            "com.iplanet.am.util.xml.validating": {
-              "inherited": true,
-              "value": "off",
-            },
-            "com.iplanet.services.configpath": {
-              "inherited": true,
-              "value": "%BASE_DIR%",
-            },
-            "com.sun.identity.client.notification.url": {
-              "inherited": true,
-              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-            },
-          },
-          "amconfig.header.mailserver": {
-            "com.iplanet.am.smtphost": {
-              "inherited": true,
-              "value": "localhost",
-            },
-            "com.iplanet.am.smtpport": {
-              "inherited": true,
-              "value": "25",
-            },
-          },
-          "amconfig.header.site": {
-            "singleChoiceSite": "[Empty]",
-          },
-        },
-        "sdk": {
-          "_id": "04/properties/sdk",
-          "amconfig.header.cachingreplica": {
-            "com.iplanet.am.sdk.cache.maxSize": {
-              "inherited": true,
-              "value": "10000",
-            },
-          },
-          "amconfig.header.datastore": {
-            "com.sun.identity.sm.enableDataStoreNotification": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.sm.notification.threadpool.size": {
-              "inherited": true,
-              "value": "1",
-            },
-          },
-          "amconfig.header.eventservice": {
-            "com.iplanet.am.event.connection.delay.between.retries": {
-              "inherited": true,
-              "value": "3000",
-            },
-            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
-              "inherited": true,
-              "value": "80,81,91",
-            },
-            "com.iplanet.am.event.connection.num.retries": {
-              "inherited": true,
-              "value": "3",
-            },
-            "com.sun.am.event.connection.disable.list": {
-              "inherited": true,
-              "value": "aci,um,sm",
-            },
-          },
-          "amconfig.header.ldapconnection": {
-            "com.iplanet.am.ldap.connection.delay.between.retries": {
-              "inherited": true,
-              "value": "1000",
-            },
-            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-              "inherited": true,
-              "value": "80,81,91",
-            },
-            "com.iplanet.am.ldap.connection.num.retries": {
-              "inherited": true,
-              "value": "3",
-            },
-          },
-          "amconfig.header.sdktimetoliveconfig": {
-            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
-              "inherited": true,
-              "value": "30",
-            },
-            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
-              "inherited": true,
-              "value": "15",
-            },
-          },
-        },
-        "security": {
-          "_id": "04/properties/security",
-          "amconfig.header.cookie": {
-            "com.iplanet.am.cookie.encode": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.am.cookie.name": {
-              "inherited": true,
-              "value": "iPlanetDirectoryPro",
-            },
-            "com.iplanet.am.cookie.secure": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.crlcache": {
-            "com.sun.identity.crl.cache.directory.host": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.mtlsenabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.crl.cache.directory.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "com.sun.identity.crl.cache.directory.port": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.searchattr": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.searchlocs": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.ssl": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.crl.cache.directory.user": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.header.deserialisationwhitelist": {
-            "openam.deserialisation.classes.whitelist": {
-              "inherited": true,
-              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-            },
-          },
-          "amconfig.header.encryption": {
-            "am.encryption.pwd": {
-              "inherited": true,
-              "value": "@AM_ENC_PWD@",
-            },
-            "am.encryption.secret.alias": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.enabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "am.encryption.secret.keyPass": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystoreFile": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystorePass": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystoreType": {
-              "inherited": true,
-              "value": "JCEKS",
-            },
-            "com.iplanet.security.SecureRandomFactoryImpl": {
-              "inherited": true,
-              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-            },
-            "com.iplanet.security.encryptor": {
-              "inherited": true,
-              "value": "com.iplanet.services.util.JCEEncryption",
-            },
-          },
-          "amconfig.header.ocsp.check": {
-            "com.sun.identity.authentication.ocsp.responder.nickname": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.authentication.ocsp.responder.url": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.authentication.ocspCheck": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.securitykey": {
-            "com.sun.identity.saml.xmlsig.certalias": {
-              "inherited": true,
-              "value": "test",
-            },
-            "com.sun.identity.saml.xmlsig.keypass": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/secrets/default/.keypass",
-            },
-            "com.sun.identity.saml.xmlsig.keystore": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-            },
-            "com.sun.identity.saml.xmlsig.storepass": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/secrets/default/.storepass",
-            },
-            "com.sun.identity.saml.xmlsig.storetype": {
-              "inherited": true,
-              "value": "JCEKS",
-            },
-          },
-          "amconfig.header.validation": {
-            "com.iplanet.am.clientIPCheckEnabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-              "inherited": true,
-              "value": "16384",
-            },
-          },
-        },
-        "session": {
-          "_id": "04/properties/session",
-          "amconfig.header.sessionlogging": {
-            "com.iplanet.am.stats.interval": {
-              "inherited": true,
-              "value": "60",
-            },
-            "com.iplanet.services.stats.directory": {
-              "inherited": true,
-              "value": "%BASE_DIR%/var/stats",
-            },
-            "com.iplanet.services.stats.state": {
-              "inherited": true,
-              "value": "file",
-            },
-            "com.sun.am.session.enableHostLookUp": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.sessionnotification": {
-            "com.iplanet.am.notification.threadpool.size": {
-              "inherited": true,
-              "value": "10",
-            },
-            "com.iplanet.am.notification.threadpool.threshold": {
-              "inherited": true,
-              "value": "5000",
-            },
-          },
-          "amconfig.header.sessionthresholds": {
-            "com.iplanet.am.session.invalidsessionmaxtime": {
-              "inherited": true,
-              "value": "3",
-            },
-            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-              "inherited": true,
-              "value": "5000",
-            },
-          },
-          "amconfig.header.sessionvalidation": {
-            "com.sun.am.session.caseInsensitiveDN": {
-              "inherited": true,
-              "value": true,
-            },
-          },
-        },
-        "uma": {
-          "_id": "04/properties/uma",
-          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-            "org.forgerock.services.resourcesets.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.resourcesets.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.resourcesets.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-            "org.forgerock.services.resourcesets.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.resourcesets.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.resourcesets.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-            "org.forgerock.services.uma.labels.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.uma.labels.store.max.connections": {
-              "inherited": true,
-              "value": "2",
-            },
-            "org.forgerock.services.uma.labels.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-            "org.forgerock.services.uma.labels.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.labels.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.uma.labels.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-            "org.forgerock.services.uma.pendingrequests.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-            "org.forgerock.services.umaaudit.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.umaaudit.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.umaaudit.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-            "org.forgerock.services.umaaudit.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.umaaudit.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.umaaudit.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-        },
-      },
-      "siteName": null,
-      "url": "http://localhost:8082/am",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --server-id 01": should export the server with server id "01". 1`] = `0`;
-
-exports[`frodo server export "frodo server export --server-id 01": should export the server with server id "01". 2`] = `""`;
-
-exports[`frodo server export "frodo server export --server-id 01": should export the server with server id "01".: 01.server.json 1`] = `
-{
-  "defaultProperties": {},
-  "meta": Any<Object>,
-  "server": {
-    "01": {
-      "_id": "01",
-      "properties": {
-        "advanced": {
-          "_id": "01/properties/advanced",
-          "bootstrap.file": "/root/.openamcfg/AMConfig_usr_local_tomcat_webapps_am_",
-          "com.iplanet.am.lbcookie.value": "01",
-          "com.iplanet.am.serverMode": true,
-          "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
-          "com.sun.embedded.replicationport": "",
-          "com.sun.embedded.sync.servers": "on",
-          "com.sun.identity.common.systemtimerpool.size": "3",
-          "com.sun.identity.sm.sms_object_class_name": "com.sun.identity.sm.SmsWrapperObject",
-          "com.sun.identity.urlconnection.useCache": false,
-          "opensso.protocol.handler.pkgs": "",
-          "org.forgerock.embedded.dsadminport": "4444",
-        },
-        "cts": {
-          "_id": "01/properties/cts",
-          "amconfig.org.forgerock.services.cts.store.common.section": {
-            "org.forgerock.services.cts.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.cts.store.max.connections": {
-              "inherited": true,
-              "value": "100",
-            },
-            "org.forgerock.services.cts.store.page.size": {
-              "inherited": true,
-              "value": "0",
-            },
-            "org.forgerock.services.cts.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.vlv.page.size": {
-              "inherited": true,
-              "value": "1000",
-            },
-          },
-          "amconfig.org.forgerock.services.cts.store.external.section": {
-            "org.forgerock.services.cts.store.affinity.enabled": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.cts.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.cts.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.cts.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.cts.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-        },
-        "directoryConfiguration": {
-          "_id": "01/properties/directoryConfiguration",
-          "directoryConfiguration": {
-            "bindDn": "cn=Directory Manager",
-            "bindPassword": null,
-            "maxConnectionPool": 10,
-            "minConnectionPool": 1,
-            "mtlsAlias": "",
-            "mtlsEnabled": false,
-            "mtlsKeyPasswordFile": "",
-            "mtlsKeyStoreFile": "",
-            "mtlsKeyStorePasswordFile": "",
-            "mtlsKeyStoreType": null,
-          },
-          "directoryServers": [
-            {
-              "connectionType": "SSL",
-              "hostName": "localhost",
-              "portNumber": "50636",
-              "serverName": "Server1",
-            },
-          ],
-        },
-        "general": {
-          "_id": "01/properties/general",
-          "amconfig.header.debug": {
-            "com.iplanet.services.debug.directory": {
-              "inherited": true,
-              "value": "%BASE_DIR%/var/debug",
-            },
-            "com.iplanet.services.debug.level": {
-              "inherited": true,
-              "value": "off",
-            },
-            "com.sun.services.debug.mergeall": {
-              "inherited": true,
-              "value": "on",
-            },
-          },
-          "amconfig.header.installdir": {
-            "com.iplanet.am.locale": {
-              "inherited": false,
-              "value": "en_US",
-            },
-            "com.iplanet.am.util.xml.validating": {
-              "inherited": true,
-              "value": "off",
-            },
-            "com.iplanet.services.configpath": {
-              "inherited": false,
-              "value": "/root/am",
-            },
-            "com.sun.identity.client.notification.url": {
-              "inherited": true,
-              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-            },
-          },
-          "amconfig.header.mailserver": {
-            "com.iplanet.am.smtphost": {
-              "inherited": true,
-              "value": "localhost",
-            },
-            "com.iplanet.am.smtpport": {
-              "inherited": true,
-              "value": "25",
-            },
-          },
-          "amconfig.header.site": {
-            "singleChoiceSite": "[Empty]",
-          },
-        },
-        "sdk": {
-          "_id": "01/properties/sdk",
-          "amconfig.header.cachingreplica": {
-            "com.iplanet.am.sdk.cache.maxSize": {
-              "inherited": true,
-              "value": "10000",
-            },
-          },
-          "amconfig.header.datastore": {
-            "com.sun.identity.sm.enableDataStoreNotification": {
-              "inherited": false,
-              "value": true,
-            },
-            "com.sun.identity.sm.notification.threadpool.size": {
-              "inherited": true,
-              "value": "1",
-            },
-          },
-          "amconfig.header.eventservice": {
-            "com.iplanet.am.event.connection.delay.between.retries": {
-              "inherited": true,
-              "value": "3000",
-            },
-            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
-              "inherited": true,
-              "value": "80,81,91",
-            },
-            "com.iplanet.am.event.connection.num.retries": {
-              "inherited": true,
-              "value": "3",
-            },
-            "com.sun.am.event.connection.disable.list": {
-              "inherited": false,
-              "value": "aci,um",
-            },
-          },
-          "amconfig.header.ldapconnection": {
-            "com.iplanet.am.ldap.connection.delay.between.retries": {
-              "inherited": true,
-              "value": "1000",
-            },
-            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-              "inherited": false,
-              "value": "80,81,91",
-            },
-            "com.iplanet.am.ldap.connection.num.retries": {
-              "inherited": true,
-              "value": "3",
-            },
-          },
-          "amconfig.header.sdktimetoliveconfig": {
-            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
-              "inherited": true,
-              "value": "30",
-            },
-            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
-              "inherited": true,
-              "value": "15",
-            },
-          },
-        },
-        "security": {
-          "_id": "01/properties/security",
-          "amconfig.header.cookie": {
-            "com.iplanet.am.cookie.encode": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.am.cookie.name": {
-              "inherited": true,
-              "value": "iPlanetDirectoryPro",
-            },
-            "com.iplanet.am.cookie.secure": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.crlcache": {
-            "com.sun.identity.crl.cache.directory.host": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.mtlsenabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.crl.cache.directory.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "com.sun.identity.crl.cache.directory.port": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.searchattr": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.searchlocs": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.crl.cache.directory.ssl": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.sun.identity.crl.cache.directory.user": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.header.deserialisationwhitelist": {
-            "openam.deserialisation.classes.whitelist": {
-              "inherited": true,
-              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-            },
-          },
-          "amconfig.header.encryption": {
-            "am.encryption.pwd": {
-              "inherited": false,
-              "value": "efSYcwIhr7uKH30rgciGTVTFzb63LhYu",
-            },
-            "am.encryption.secret.alias": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.enabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "am.encryption.secret.keyPass": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystoreFile": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystorePass": {
-              "inherited": true,
-              "value": null,
-            },
-            "am.encryption.secret.keystoreType": {
-              "inherited": true,
-              "value": "JCEKS",
-            },
-            "com.iplanet.security.SecureRandomFactoryImpl": {
-              "inherited": true,
-              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-            },
-            "com.iplanet.security.encryptor": {
-              "inherited": true,
-              "value": "com.iplanet.services.util.JCEEncryption",
-            },
-          },
-          "amconfig.header.ocsp.check": {
-            "com.sun.identity.authentication.ocsp.responder.nickname": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.authentication.ocsp.responder.url": {
-              "inherited": true,
-              "value": "",
-            },
-            "com.sun.identity.authentication.ocspCheck": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.securitykey": {
-            "com.sun.identity.saml.xmlsig.certalias": {
-              "inherited": true,
-              "value": "test",
-            },
-            "com.sun.identity.saml.xmlsig.keypass": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/secrets/default/.keypass",
-            },
-            "com.sun.identity.saml.xmlsig.keystore": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-            },
-            "com.sun.identity.saml.xmlsig.storepass": {
-              "inherited": true,
-              "value": "%BASE_DIR%/security/secrets/default/.storepass",
-            },
-            "com.sun.identity.saml.xmlsig.storetype": {
-              "inherited": true,
-              "value": "JCEKS",
-            },
-          },
-          "amconfig.header.validation": {
-            "com.iplanet.am.clientIPCheckEnabled": {
-              "inherited": true,
-              "value": false,
-            },
-            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-              "inherited": true,
-              "value": "16384",
-            },
-          },
-        },
-        "session": {
-          "_id": "01/properties/session",
-          "amconfig.header.sessionlogging": {
-            "com.iplanet.am.stats.interval": {
-              "inherited": true,
-              "value": "60",
-            },
-            "com.iplanet.services.stats.directory": {
-              "inherited": true,
-              "value": "%BASE_DIR%/var/stats",
-            },
-            "com.iplanet.services.stats.state": {
-              "inherited": true,
-              "value": "file",
-            },
-            "com.sun.am.session.enableHostLookUp": {
-              "inherited": true,
-              "value": false,
-            },
-          },
-          "amconfig.header.sessionnotification": {
-            "com.iplanet.am.notification.threadpool.size": {
-              "inherited": true,
-              "value": "10",
-            },
-            "com.iplanet.am.notification.threadpool.threshold": {
-              "inherited": true,
-              "value": "5000",
-            },
-          },
-          "amconfig.header.sessionthresholds": {
-            "com.iplanet.am.session.invalidsessionmaxtime": {
-              "inherited": true,
-              "value": "3",
-            },
-            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-              "inherited": true,
-              "value": "5000",
-            },
-          },
-          "amconfig.header.sessionvalidation": {
-            "com.sun.am.session.caseInsensitiveDN": {
-              "inherited": true,
-              "value": true,
-            },
-          },
-        },
-        "uma": {
-          "_id": "01/properties/uma",
-          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-            "org.forgerock.services.resourcesets.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.resourcesets.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.resourcesets.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-            "org.forgerock.services.resourcesets.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.resourcesets.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.resourcesets.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.resourcesets.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-            "org.forgerock.services.uma.labels.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.uma.labels.store.max.connections": {
-              "inherited": true,
-              "value": "2",
-            },
-            "org.forgerock.services.uma.labels.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-            "org.forgerock.services.uma.labels.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.labels.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.uma.labels.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.labels.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-            "org.forgerock.services.uma.pendingrequests.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-            "org.forgerock.services.umaaudit.store.location": {
-              "inherited": true,
-              "value": "default",
-            },
-            "org.forgerock.services.umaaudit.store.max.connections": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.umaaudit.store.root.suffix": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-            "org.forgerock.services.umaaudit.store.directory.name": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.heartbeat": {
-              "inherited": true,
-              "value": "10",
-            },
-            "org.forgerock.services.umaaudit.store.loginid": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.mtls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.password": {
-              "inherited": true,
-              "value": null,
-            },
-            "org.forgerock.services.umaaudit.store.ssl.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-            "org.forgerock.services.umaaudit.store.starttls.enabled": {
-              "inherited": true,
-              "value": "",
-            },
-          },
-        },
-      },
-      "siteName": null,
-      "url": "http://localhost:8080/am",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties. 1`] = `0`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties. 2`] = `""`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03.server.json 1`] = `
-{
-  "defaultProperties": {},
-  "meta": Any<Object>,
-  "server": {
-    "03": {
-      "_id": "03",
-      "properties": {
-        "advanced": "file://03/advanced.properties.server.json",
-        "cts": "file://03/cts.properties.server.json",
-        "directoryConfiguration": "file://03/directoryConfiguration.properties.server.json",
-        "general": "file://03/general.properties.server.json",
-        "sdk": "file://03/sdk.properties.server.json",
-        "security": "file://03/security.properties.server.json",
-        "session": "file://03/session.properties.server.json",
-        "uma": "file://03/uma.properties.server.json",
-      },
-      "siteName": "testsite",
-      "url": "http://localhost:8081/am",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03/advanced.properties.server.json 1`] = `
-{
-  "_id": "03/properties/advanced",
-  "com.iplanet.am.lbcookie.value": "03",
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03/cts.properties.server.json 1`] = `
-{
-  "_id": "03/properties/cts",
-  "amconfig.org.forgerock.services.cts.store.common.section": {
-    "org.forgerock.services.cts.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.cts.store.max.connections": {
-      "inherited": true,
-      "value": "100",
-    },
-    "org.forgerock.services.cts.store.page.size": {
-      "inherited": true,
-      "value": "0",
-    },
-    "org.forgerock.services.cts.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.vlv.page.size": {
-      "inherited": true,
-      "value": "1000",
-    },
-  },
-  "amconfig.org.forgerock.services.cts.store.external.section": {
-    "org.forgerock.services.cts.store.affinity.enabled": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.cts.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.cts.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.cts.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03/directoryConfiguration.properties.server.json 1`] = `
-{
-  "_id": "03/properties/directoryConfiguration",
-  "directoryConfiguration": {
-    "bindDn": "cn=Directory Manager",
-    "bindPassword": null,
-    "maxConnectionPool": 10,
-    "minConnectionPool": 1,
-    "mtlsAlias": "",
-    "mtlsEnabled": false,
-    "mtlsKeyPasswordFile": "",
-    "mtlsKeyStoreFile": "",
-    "mtlsKeyStorePasswordFile": "",
-    "mtlsKeyStoreType": null,
-  },
-  "directoryServers": [
-    {
-      "connectionType": "SSL",
-      "hostName": "localhost",
-      "portNumber": "50636",
-      "serverName": "Server1",
-    },
-  ],
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03/general.properties.server.json 1`] = `
-{
-  "_id": "03/properties/general",
-  "amconfig.header.debug": {
-    "com.iplanet.services.debug.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/debug",
-    },
-    "com.iplanet.services.debug.level": {
-      "inherited": true,
-      "value": "off",
-    },
-    "com.sun.services.debug.mergeall": {
-      "inherited": true,
-      "value": "on",
-    },
-  },
-  "amconfig.header.installdir": {
-    "com.iplanet.am.locale": {
-      "inherited": true,
-      "value": "en_US",
-    },
-    "com.iplanet.am.util.xml.validating": {
-      "inherited": true,
-      "value": "off",
-    },
-    "com.iplanet.services.configpath": {
-      "inherited": true,
-      "value": "%BASE_DIR%",
-    },
-    "com.sun.identity.client.notification.url": {
-      "inherited": true,
-      "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-    },
-  },
-  "amconfig.header.mailserver": {
-    "com.iplanet.am.smtphost": {
-      "inherited": true,
-      "value": "localhost",
-    },
-    "com.iplanet.am.smtpport": {
-      "inherited": true,
-      "value": "25",
-    },
-  },
-  "amconfig.header.site": {
-    "singleChoiceSite": "testsite",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03/sdk.properties.server.json 1`] = `
-{
-  "_id": "03/properties/sdk",
-  "amconfig.header.cachingreplica": {
-    "com.iplanet.am.sdk.cache.maxSize": {
-      "inherited": true,
-      "value": "10000",
-    },
-  },
-  "amconfig.header.datastore": {
-    "com.sun.identity.sm.enableDataStoreNotification": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.sm.notification.threadpool.size": {
-      "inherited": true,
-      "value": "1",
-    },
-  },
-  "amconfig.header.eventservice": {
-    "com.iplanet.am.event.connection.delay.between.retries": {
-      "inherited": true,
-      "value": "3000",
-    },
-    "com.iplanet.am.event.connection.ldap.error.codes.retries": {
-      "inherited": true,
-      "value": "80,81,91",
-    },
-    "com.iplanet.am.event.connection.num.retries": {
-      "inherited": true,
-      "value": "3",
-    },
-    "com.sun.am.event.connection.disable.list": {
-      "inherited": true,
-      "value": "aci,um,sm",
-    },
-  },
-  "amconfig.header.ldapconnection": {
-    "com.iplanet.am.ldap.connection.delay.between.retries": {
-      "inherited": true,
-      "value": "1000",
-    },
-    "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-      "inherited": true,
-      "value": "80,81,91",
-    },
-    "com.iplanet.am.ldap.connection.num.retries": {
-      "inherited": true,
-      "value": "3",
-    },
-  },
-  "amconfig.header.sdktimetoliveconfig": {
-    "com.iplanet.am.sdk.cache.entry.default.expire.time": {
-      "inherited": true,
-      "value": "30",
-    },
-    "com.iplanet.am.sdk.cache.entry.expire.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.sdk.cache.entry.user.expire.time": {
-      "inherited": true,
-      "value": "15",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03/security.properties.server.json 1`] = `
-{
-  "_id": "03/properties/security",
-  "amconfig.header.cookie": {
-    "com.iplanet.am.cookie.encode": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.cookie.name": {
-      "inherited": true,
-      "value": "iPlanetDirectoryPro",
-    },
-    "com.iplanet.am.cookie.secure": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.mtlsenabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "com.sun.identity.crl.cache.directory.port": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchattr": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchlocs": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.ssl": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.user": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": {
-      "inherited": true,
-      "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-    },
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": {
-      "inherited": true,
-      "value": "@AM_ENC_PWD@",
-    },
-    "am.encryption.secret.alias": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "am.encryption.secret.keyPass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreFile": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystorePass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreType": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-    "com.iplanet.security.SecureRandomFactoryImpl": {
-      "inherited": true,
-      "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    },
-    "com.iplanet.security.encryptor": {
-      "inherited": true,
-      "value": "com.iplanet.services.util.JCEEncryption",
-    },
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocsp.responder.url": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocspCheck": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": {
-      "inherited": true,
-      "value": "test",
-    },
-    "com.sun.identity.saml.xmlsig.keypass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.keypass",
-    },
-    "com.sun.identity.saml.xmlsig.keystore": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-    },
-    "com.sun.identity.saml.xmlsig.storepass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.storepass",
-    },
-    "com.sun.identity.saml.xmlsig.storetype": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-  },
-  "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-      "inherited": true,
-      "value": "16384",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03/session.properties.server.json 1`] = `
-{
-  "_id": "03/properties/session",
-  "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": {
-      "inherited": true,
-      "value": "60",
-    },
-    "com.iplanet.services.stats.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/stats",
-    },
-    "com.iplanet.services.stats.state": {
-      "inherited": true,
-      "value": "file",
-    },
-    "com.sun.am.session.enableHostLookUp": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": {
-      "inherited": true,
-      "value": "10",
-    },
-    "com.iplanet.am.notification.threadpool.threshold": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": {
-      "inherited": true,
-      "value": "3",
-    },
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": {
-      "inherited": true,
-      "value": true,
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.: serverExportTestDir2/03/uma.properties.server.json 1`] = `
-{
-  "_id": "03/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.resourcesets.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.resourcesets.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.labels.store.max.connections": {
-      "inherited": true,
-      "value": "2",
-    },
-    "org.forgerock.services.uma.labels.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.labels.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.labels.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.umaaudit.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.umaaudit.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.umaaudit.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.umaaudit.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties 1`] = `0`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties 2`] = `""`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01.server.json 1`] = `
-{
-  "defaultProperties": {
-    "advanced": "file://default/advanced.default.properties.server.json",
-    "cts": "file://default/cts.default.properties.server.json",
-    "general": "file://default/general.default.properties.server.json",
-    "sdk": "file://default/sdk.default.properties.server.json",
-    "security": "file://default/security.default.properties.server.json",
-    "session": "file://default/session.default.properties.server.json",
-    "uma": "file://default/uma.default.properties.server.json",
-  },
-  "server": {
-    "01": {
-      "_id": "01",
-      "properties": {
-        "advanced": "file://01/advanced.properties.server.json",
-        "cts": "file://01/cts.properties.server.json",
-        "directoryConfiguration": "file://01/directoryConfiguration.properties.server.json",
-        "general": "file://01/general.properties.server.json",
-        "sdk": "file://01/sdk.properties.server.json",
-        "security": "file://01/security.properties.server.json",
-        "session": "file://01/session.properties.server.json",
-        "uma": "file://01/uma.properties.server.json",
-      },
-      "siteName": null,
-      "url": "http://localhost:8080/am",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01/advanced.properties.server.json 1`] = `
-{
-  "_id": "01/properties/advanced",
-  "bootstrap.file": "/root/.openamcfg/AMConfig_usr_local_tomcat_webapps_am_",
-  "com.iplanet.am.lbcookie.value": "01",
-  "com.iplanet.am.serverMode": true,
-  "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
-  "com.sun.embedded.replicationport": "",
-  "com.sun.embedded.sync.servers": "on",
-  "com.sun.identity.common.systemtimerpool.size": "3",
-  "com.sun.identity.sm.sms_object_class_name": "com.sun.identity.sm.SmsWrapperObject",
-  "com.sun.identity.urlconnection.useCache": false,
-  "opensso.protocol.handler.pkgs": "",
-  "org.forgerock.embedded.dsadminport": "4444",
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01/cts.properties.server.json 1`] = `
-{
-  "_id": "01/properties/cts",
-  "amconfig.org.forgerock.services.cts.store.common.section": {
-    "org.forgerock.services.cts.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.cts.store.max.connections": {
-      "inherited": true,
-      "value": "100",
-    },
-    "org.forgerock.services.cts.store.page.size": {
-      "inherited": true,
-      "value": "0",
-    },
-    "org.forgerock.services.cts.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.vlv.page.size": {
-      "inherited": true,
-      "value": "1000",
-    },
-  },
-  "amconfig.org.forgerock.services.cts.store.external.section": {
-    "org.forgerock.services.cts.store.affinity.enabled": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.cts.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.cts.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.cts.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01/directoryConfiguration.properties.server.json 1`] = `
-{
-  "_id": "01/properties/directoryConfiguration",
-  "directoryConfiguration": {
-    "bindDn": "cn=Directory Manager",
-    "bindPassword": null,
-    "maxConnectionPool": 10,
-    "minConnectionPool": 1,
-    "mtlsAlias": "",
-    "mtlsEnabled": false,
-    "mtlsKeyPasswordFile": "",
-    "mtlsKeyStoreFile": "",
-    "mtlsKeyStorePasswordFile": "",
-    "mtlsKeyStoreType": null,
-  },
-  "directoryServers": [
-    {
-      "connectionType": "SSL",
-      "hostName": "localhost",
-      "portNumber": "50636",
-      "serverName": "Server1",
-    },
-  ],
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01/general.properties.server.json 1`] = `
-{
-  "_id": "01/properties/general",
-  "amconfig.header.debug": {
-    "com.iplanet.services.debug.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/debug",
-    },
-    "com.iplanet.services.debug.level": {
-      "inherited": true,
-      "value": "off",
-    },
-    "com.sun.services.debug.mergeall": {
-      "inherited": true,
-      "value": "on",
-    },
-  },
-  "amconfig.header.installdir": {
-    "com.iplanet.am.locale": {
-      "inherited": false,
-      "value": "en_US",
-    },
-    "com.iplanet.am.util.xml.validating": {
-      "inherited": true,
-      "value": "off",
-    },
-    "com.iplanet.services.configpath": {
-      "inherited": false,
-      "value": "/root/am",
-    },
-    "com.sun.identity.client.notification.url": {
-      "inherited": true,
-      "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-    },
-  },
-  "amconfig.header.mailserver": {
-    "com.iplanet.am.smtphost": {
-      "inherited": true,
-      "value": "localhost",
-    },
-    "com.iplanet.am.smtpport": {
-      "inherited": true,
-      "value": "25",
-    },
-  },
-  "amconfig.header.site": {
-    "singleChoiceSite": "[Empty]",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01/sdk.properties.server.json 1`] = `
-{
-  "_id": "01/properties/sdk",
-  "amconfig.header.cachingreplica": {
-    "com.iplanet.am.sdk.cache.maxSize": {
-      "inherited": true,
-      "value": "10000",
-    },
-  },
-  "amconfig.header.datastore": {
-    "com.sun.identity.sm.enableDataStoreNotification": {
-      "inherited": false,
-      "value": true,
-    },
-    "com.sun.identity.sm.notification.threadpool.size": {
-      "inherited": true,
-      "value": "1",
-    },
-  },
-  "amconfig.header.eventservice": {
-    "com.iplanet.am.event.connection.delay.between.retries": {
-      "inherited": true,
-      "value": "3000",
-    },
-    "com.iplanet.am.event.connection.ldap.error.codes.retries": {
-      "inherited": true,
-      "value": "80,81,91",
-    },
-    "com.iplanet.am.event.connection.num.retries": {
-      "inherited": true,
-      "value": "3",
-    },
-    "com.sun.am.event.connection.disable.list": {
-      "inherited": false,
-      "value": "aci,um",
-    },
-  },
-  "amconfig.header.ldapconnection": {
-    "com.iplanet.am.ldap.connection.delay.between.retries": {
-      "inherited": true,
-      "value": "1000",
-    },
-    "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-      "inherited": false,
-      "value": "80,81,91",
-    },
-    "com.iplanet.am.ldap.connection.num.retries": {
-      "inherited": true,
-      "value": "3",
-    },
-  },
-  "amconfig.header.sdktimetoliveconfig": {
-    "com.iplanet.am.sdk.cache.entry.default.expire.time": {
-      "inherited": true,
-      "value": "30",
-    },
-    "com.iplanet.am.sdk.cache.entry.expire.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.sdk.cache.entry.user.expire.time": {
-      "inherited": true,
-      "value": "15",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01/security.properties.server.json 1`] = `
-{
-  "_id": "01/properties/security",
-  "amconfig.header.cookie": {
-    "com.iplanet.am.cookie.encode": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.cookie.name": {
-      "inherited": true,
-      "value": "iPlanetDirectoryPro",
-    },
-    "com.iplanet.am.cookie.secure": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.mtlsenabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "com.sun.identity.crl.cache.directory.port": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchattr": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchlocs": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.ssl": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.user": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": {
-      "inherited": true,
-      "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-    },
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": {
-      "inherited": false,
-      "value": "efSYcwIhr7uKH30rgciGTVTFzb63LhYu",
-    },
-    "am.encryption.secret.alias": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "am.encryption.secret.keyPass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreFile": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystorePass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreType": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-    "com.iplanet.security.SecureRandomFactoryImpl": {
-      "inherited": true,
-      "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    },
-    "com.iplanet.security.encryptor": {
-      "inherited": true,
-      "value": "com.iplanet.services.util.JCEEncryption",
-    },
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocsp.responder.url": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocspCheck": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": {
-      "inherited": true,
-      "value": "test",
-    },
-    "com.sun.identity.saml.xmlsig.keypass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.keypass",
-    },
-    "com.sun.identity.saml.xmlsig.keystore": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-    },
-    "com.sun.identity.saml.xmlsig.storepass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.storepass",
-    },
-    "com.sun.identity.saml.xmlsig.storetype": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-  },
-  "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-      "inherited": true,
-      "value": "16384",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01/session.properties.server.json 1`] = `
-{
-  "_id": "01/properties/session",
-  "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": {
-      "inherited": true,
-      "value": "60",
-    },
-    "com.iplanet.services.stats.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/stats",
-    },
-    "com.iplanet.services.stats.state": {
-      "inherited": true,
-      "value": "file",
-    },
-    "com.sun.am.session.enableHostLookUp": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": {
-      "inherited": true,
-      "value": "10",
-    },
-    "com.iplanet.am.notification.threadpool.threshold": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": {
-      "inherited": true,
-      "value": "3",
-    },
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": {
-      "inherited": true,
-      "value": true,
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/01/uma.properties.server.json 1`] = `
-{
-  "_id": "01/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.resourcesets.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.resourcesets.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.labels.store.max.connections": {
-      "inherited": true,
-      "value": "2",
-    },
-    "org.forgerock.services.uma.labels.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.labels.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.labels.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.umaaudit.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.umaaudit.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.umaaudit.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.umaaudit.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03.server.json 1`] = `
-{
-  "defaultProperties": {
-    "advanced": "file://default/advanced.default.properties.server.json",
-    "cts": "file://default/cts.default.properties.server.json",
-    "general": "file://default/general.default.properties.server.json",
-    "sdk": "file://default/sdk.default.properties.server.json",
-    "security": "file://default/security.default.properties.server.json",
-    "session": "file://default/session.default.properties.server.json",
-    "uma": "file://default/uma.default.properties.server.json",
-  },
-  "server": {
-    "03": {
-      "_id": "03",
-      "properties": {
-        "advanced": "file://03/advanced.properties.server.json",
-        "cts": "file://03/cts.properties.server.json",
-        "directoryConfiguration": "file://03/directoryConfiguration.properties.server.json",
-        "general": "file://03/general.properties.server.json",
-        "sdk": "file://03/sdk.properties.server.json",
-        "security": "file://03/security.properties.server.json",
-        "session": "file://03/session.properties.server.json",
-        "uma": "file://03/uma.properties.server.json",
-      },
-      "siteName": "testsite",
-      "url": "http://localhost:8081/am",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03/advanced.properties.server.json 1`] = `
-{
-  "_id": "03/properties/advanced",
-  "com.iplanet.am.lbcookie.value": "03",
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03/cts.properties.server.json 1`] = `
-{
-  "_id": "03/properties/cts",
-  "amconfig.org.forgerock.services.cts.store.common.section": {
-    "org.forgerock.services.cts.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.cts.store.max.connections": {
-      "inherited": true,
-      "value": "100",
-    },
-    "org.forgerock.services.cts.store.page.size": {
-      "inherited": true,
-      "value": "0",
-    },
-    "org.forgerock.services.cts.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.vlv.page.size": {
-      "inherited": true,
-      "value": "1000",
-    },
-  },
-  "amconfig.org.forgerock.services.cts.store.external.section": {
-    "org.forgerock.services.cts.store.affinity.enabled": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.cts.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.cts.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.cts.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03/directoryConfiguration.properties.server.json 1`] = `
-{
-  "_id": "03/properties/directoryConfiguration",
-  "directoryConfiguration": {
-    "bindDn": "cn=Directory Manager",
-    "bindPassword": null,
-    "maxConnectionPool": 10,
-    "minConnectionPool": 1,
-    "mtlsAlias": "",
-    "mtlsEnabled": false,
-    "mtlsKeyPasswordFile": "",
-    "mtlsKeyStoreFile": "",
-    "mtlsKeyStorePasswordFile": "",
-    "mtlsKeyStoreType": null,
-  },
-  "directoryServers": [
-    {
-      "connectionType": "SSL",
-      "hostName": "localhost",
-      "portNumber": "50636",
-      "serverName": "Server1",
-    },
-  ],
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03/general.properties.server.json 1`] = `
-{
-  "_id": "03/properties/general",
-  "amconfig.header.debug": {
-    "com.iplanet.services.debug.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/debug",
-    },
-    "com.iplanet.services.debug.level": {
-      "inherited": true,
-      "value": "off",
-    },
-    "com.sun.services.debug.mergeall": {
-      "inherited": true,
-      "value": "on",
-    },
-  },
-  "amconfig.header.installdir": {
-    "com.iplanet.am.locale": {
-      "inherited": true,
-      "value": "en_US",
-    },
-    "com.iplanet.am.util.xml.validating": {
-      "inherited": true,
-      "value": "off",
-    },
-    "com.iplanet.services.configpath": {
-      "inherited": true,
-      "value": "%BASE_DIR%",
-    },
-    "com.sun.identity.client.notification.url": {
-      "inherited": true,
-      "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-    },
-  },
-  "amconfig.header.mailserver": {
-    "com.iplanet.am.smtphost": {
-      "inherited": true,
-      "value": "localhost",
-    },
-    "com.iplanet.am.smtpport": {
-      "inherited": true,
-      "value": "25",
-    },
-  },
-  "amconfig.header.site": {
-    "singleChoiceSite": "testsite",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03/sdk.properties.server.json 1`] = `
-{
-  "_id": "03/properties/sdk",
-  "amconfig.header.cachingreplica": {
-    "com.iplanet.am.sdk.cache.maxSize": {
-      "inherited": true,
-      "value": "10000",
-    },
-  },
-  "amconfig.header.datastore": {
-    "com.sun.identity.sm.enableDataStoreNotification": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.sm.notification.threadpool.size": {
-      "inherited": true,
-      "value": "1",
-    },
-  },
-  "amconfig.header.eventservice": {
-    "com.iplanet.am.event.connection.delay.between.retries": {
-      "inherited": true,
-      "value": "3000",
-    },
-    "com.iplanet.am.event.connection.ldap.error.codes.retries": {
-      "inherited": true,
-      "value": "80,81,91",
-    },
-    "com.iplanet.am.event.connection.num.retries": {
-      "inherited": true,
-      "value": "3",
-    },
-    "com.sun.am.event.connection.disable.list": {
-      "inherited": true,
-      "value": "aci,um,sm",
-    },
-  },
-  "amconfig.header.ldapconnection": {
-    "com.iplanet.am.ldap.connection.delay.between.retries": {
-      "inherited": true,
-      "value": "1000",
-    },
-    "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-      "inherited": true,
-      "value": "80,81,91",
-    },
-    "com.iplanet.am.ldap.connection.num.retries": {
-      "inherited": true,
-      "value": "3",
-    },
-  },
-  "amconfig.header.sdktimetoliveconfig": {
-    "com.iplanet.am.sdk.cache.entry.default.expire.time": {
-      "inherited": true,
-      "value": "30",
-    },
-    "com.iplanet.am.sdk.cache.entry.expire.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.sdk.cache.entry.user.expire.time": {
-      "inherited": true,
-      "value": "15",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03/security.properties.server.json 1`] = `
-{
-  "_id": "03/properties/security",
-  "amconfig.header.cookie": {
-    "com.iplanet.am.cookie.encode": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.cookie.name": {
-      "inherited": true,
-      "value": "iPlanetDirectoryPro",
-    },
-    "com.iplanet.am.cookie.secure": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.mtlsenabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "com.sun.identity.crl.cache.directory.port": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchattr": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchlocs": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.ssl": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.user": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": {
-      "inherited": true,
-      "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-    },
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": {
-      "inherited": true,
-      "value": "@AM_ENC_PWD@",
-    },
-    "am.encryption.secret.alias": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "am.encryption.secret.keyPass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreFile": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystorePass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreType": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-    "com.iplanet.security.SecureRandomFactoryImpl": {
-      "inherited": true,
-      "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    },
-    "com.iplanet.security.encryptor": {
-      "inherited": true,
-      "value": "com.iplanet.services.util.JCEEncryption",
-    },
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocsp.responder.url": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocspCheck": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": {
-      "inherited": true,
-      "value": "test",
-    },
-    "com.sun.identity.saml.xmlsig.keypass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.keypass",
-    },
-    "com.sun.identity.saml.xmlsig.keystore": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-    },
-    "com.sun.identity.saml.xmlsig.storepass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.storepass",
-    },
-    "com.sun.identity.saml.xmlsig.storetype": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-  },
-  "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-      "inherited": true,
-      "value": "16384",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03/session.properties.server.json 1`] = `
-{
-  "_id": "03/properties/session",
-  "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": {
-      "inherited": true,
-      "value": "60",
-    },
-    "com.iplanet.services.stats.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/stats",
-    },
-    "com.iplanet.services.stats.state": {
-      "inherited": true,
-      "value": "file",
-    },
-    "com.sun.am.session.enableHostLookUp": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": {
-      "inherited": true,
-      "value": "10",
-    },
-    "com.iplanet.am.notification.threadpool.threshold": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": {
-      "inherited": true,
-      "value": "3",
-    },
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": {
-      "inherited": true,
-      "value": true,
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/03/uma.properties.server.json 1`] = `
-{
-  "_id": "03/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.resourcesets.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.resourcesets.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.labels.store.max.connections": {
-      "inherited": true,
-      "value": "2",
-    },
-    "org.forgerock.services.uma.labels.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.labels.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.labels.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.umaaudit.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.umaaudit.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.umaaudit.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.umaaudit.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04.server.json 1`] = `
-{
-  "defaultProperties": {
-    "advanced": "file://default/advanced.default.properties.server.json",
-    "cts": "file://default/cts.default.properties.server.json",
-    "general": "file://default/general.default.properties.server.json",
-    "sdk": "file://default/sdk.default.properties.server.json",
-    "security": "file://default/security.default.properties.server.json",
-    "session": "file://default/session.default.properties.server.json",
-    "uma": "file://default/uma.default.properties.server.json",
-  },
-  "server": {
-    "04": {
-      "_id": "04",
-      "properties": {
-        "advanced": "file://04/advanced.properties.server.json",
-        "cts": "file://04/cts.properties.server.json",
-        "directoryConfiguration": "file://04/directoryConfiguration.properties.server.json",
-        "general": "file://04/general.properties.server.json",
-        "sdk": "file://04/sdk.properties.server.json",
-        "security": "file://04/security.properties.server.json",
-        "session": "file://04/session.properties.server.json",
-        "uma": "file://04/uma.properties.server.json",
-      },
-      "siteName": null,
-      "url": "http://localhost:8082/am",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04/advanced.properties.server.json 1`] = `
-{
-  "_id": "04/properties/advanced",
-  "com.iplanet.am.lbcookie.value": "04",
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04/cts.properties.server.json 1`] = `
-{
-  "_id": "04/properties/cts",
-  "amconfig.org.forgerock.services.cts.store.common.section": {
-    "org.forgerock.services.cts.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.cts.store.max.connections": {
-      "inherited": true,
-      "value": "100",
-    },
-    "org.forgerock.services.cts.store.page.size": {
-      "inherited": true,
-      "value": "0",
-    },
-    "org.forgerock.services.cts.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.vlv.page.size": {
-      "inherited": true,
-      "value": "1000",
-    },
-  },
-  "amconfig.org.forgerock.services.cts.store.external.section": {
-    "org.forgerock.services.cts.store.affinity.enabled": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.cts.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.cts.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.cts.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.cts.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04/directoryConfiguration.properties.server.json 1`] = `
-{
-  "_id": "04/properties/directoryConfiguration",
-  "directoryConfiguration": {
-    "bindDn": "cn=Directory Manager",
-    "bindPassword": null,
-    "maxConnectionPool": 10,
-    "minConnectionPool": 1,
-    "mtlsAlias": "",
-    "mtlsEnabled": false,
-    "mtlsKeyPasswordFile": "",
-    "mtlsKeyStoreFile": "",
-    "mtlsKeyStorePasswordFile": "",
-    "mtlsKeyStoreType": null,
-  },
-  "directoryServers": [
-    {
-      "connectionType": "SSL",
-      "hostName": "localhost",
-      "portNumber": "50636",
-      "serverName": "Server1",
-    },
-  ],
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04/general.properties.server.json 1`] = `
-{
-  "_id": "04/properties/general",
-  "amconfig.header.debug": {
-    "com.iplanet.services.debug.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/debug",
-    },
-    "com.iplanet.services.debug.level": {
-      "inherited": true,
-      "value": "off",
-    },
-    "com.sun.services.debug.mergeall": {
-      "inherited": true,
-      "value": "on",
-    },
-  },
-  "amconfig.header.installdir": {
-    "com.iplanet.am.locale": {
-      "inherited": true,
-      "value": "en_US",
-    },
-    "com.iplanet.am.util.xml.validating": {
-      "inherited": true,
-      "value": "off",
-    },
-    "com.iplanet.services.configpath": {
-      "inherited": true,
-      "value": "%BASE_DIR%",
-    },
-    "com.sun.identity.client.notification.url": {
-      "inherited": true,
-      "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-    },
-  },
-  "amconfig.header.mailserver": {
-    "com.iplanet.am.smtphost": {
-      "inherited": true,
-      "value": "localhost",
-    },
-    "com.iplanet.am.smtpport": {
-      "inherited": true,
-      "value": "25",
-    },
-  },
-  "amconfig.header.site": {
-    "singleChoiceSite": "[Empty]",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04/sdk.properties.server.json 1`] = `
-{
-  "_id": "04/properties/sdk",
-  "amconfig.header.cachingreplica": {
-    "com.iplanet.am.sdk.cache.maxSize": {
-      "inherited": true,
-      "value": "10000",
-    },
-  },
-  "amconfig.header.datastore": {
-    "com.sun.identity.sm.enableDataStoreNotification": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.sm.notification.threadpool.size": {
-      "inherited": true,
-      "value": "1",
-    },
-  },
-  "amconfig.header.eventservice": {
-    "com.iplanet.am.event.connection.delay.between.retries": {
-      "inherited": true,
-      "value": "3000",
-    },
-    "com.iplanet.am.event.connection.ldap.error.codes.retries": {
-      "inherited": true,
-      "value": "80,81,91",
-    },
-    "com.iplanet.am.event.connection.num.retries": {
-      "inherited": true,
-      "value": "3",
-    },
-    "com.sun.am.event.connection.disable.list": {
-      "inherited": true,
-      "value": "aci,um,sm",
-    },
-  },
-  "amconfig.header.ldapconnection": {
-    "com.iplanet.am.ldap.connection.delay.between.retries": {
-      "inherited": true,
-      "value": "1000",
-    },
-    "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-      "inherited": true,
-      "value": "80,81,91",
-    },
-    "com.iplanet.am.ldap.connection.num.retries": {
-      "inherited": true,
-      "value": "3",
-    },
-  },
-  "amconfig.header.sdktimetoliveconfig": {
-    "com.iplanet.am.sdk.cache.entry.default.expire.time": {
-      "inherited": true,
-      "value": "30",
-    },
-    "com.iplanet.am.sdk.cache.entry.expire.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.sdk.cache.entry.user.expire.time": {
-      "inherited": true,
-      "value": "15",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04/security.properties.server.json 1`] = `
-{
-  "_id": "04/properties/security",
-  "amconfig.header.cookie": {
-    "com.iplanet.am.cookie.encode": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.cookie.name": {
-      "inherited": true,
-      "value": "iPlanetDirectoryPro",
-    },
-    "com.iplanet.am.cookie.secure": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.mtlsenabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "com.sun.identity.crl.cache.directory.port": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchattr": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchlocs": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.ssl": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.user": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": {
-      "inherited": true,
-      "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-    },
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": {
-      "inherited": true,
-      "value": "@AM_ENC_PWD@",
-    },
-    "am.encryption.secret.alias": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "am.encryption.secret.keyPass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreFile": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystorePass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreType": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-    "com.iplanet.security.SecureRandomFactoryImpl": {
-      "inherited": true,
-      "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    },
-    "com.iplanet.security.encryptor": {
-      "inherited": true,
-      "value": "com.iplanet.services.util.JCEEncryption",
-    },
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocsp.responder.url": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocspCheck": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": {
-      "inherited": true,
-      "value": "test",
-    },
-    "com.sun.identity.saml.xmlsig.keypass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.keypass",
-    },
-    "com.sun.identity.saml.xmlsig.keystore": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-    },
-    "com.sun.identity.saml.xmlsig.storepass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.storepass",
-    },
-    "com.sun.identity.saml.xmlsig.storetype": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-  },
-  "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-      "inherited": true,
-      "value": "16384",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04/session.properties.server.json 1`] = `
-{
-  "_id": "04/properties/session",
-  "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": {
-      "inherited": true,
-      "value": "60",
-    },
-    "com.iplanet.services.stats.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/stats",
-    },
-    "com.iplanet.services.stats.state": {
-      "inherited": true,
-      "value": "file",
-    },
-    "com.sun.am.session.enableHostLookUp": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": {
-      "inherited": true,
-      "value": "10",
-    },
-    "com.iplanet.am.notification.threadpool.threshold": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": {
-      "inherited": true,
-      "value": "3",
-    },
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": {
-      "inherited": true,
-      "value": true,
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/04/uma.properties.server.json 1`] = `
-{
-  "_id": "04/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.resourcesets.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.resourcesets.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.labels.store.max.connections": {
-      "inherited": true,
-      "value": "2",
-    },
-    "org.forgerock.services.uma.labels.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.labels.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.labels.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.umaaudit.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.umaaudit.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.umaaudit.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.umaaudit.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.umaaudit.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
+        "advanced": "file://01/advanced.properties.server.json",
+        "cts": "file://01/cts.properties.server.json",
+        "directoryConfiguration": "file://01/directoryConfiguration.properties.server.json",
+        "general": "file://01/general.properties.server.json",
+        "sdk": "file://01/sdk.properties.server.json",
+        "security": "file://01/security.properties.server.json",
+        "session": "file://01/session.properties.server.json",
+        "uma": "file://01/uma.properties.server.json",
+      },
+      "siteName": null,
+      "url": "http://localhost:8080/am",
     },
   },
 }
 `;
 
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/default/advanced.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/advanced",
-  "com.iplanet.am.buildDate": "2024-March-28 16:00",
-  "com.iplanet.am.buildRevision": "89116d59a1ebe73ed1931dd3649adb7f217cd06b",
-  "com.iplanet.am.buildVersion": "ForgeRock Access Management 7.5.0",
-  "com.iplanet.am.cookie.c66Encode": true,
-  "com.iplanet.am.daemons": "securid",
-  "com.iplanet.am.directory.ssl.enabled": false,
-  "com.iplanet.am.installdir": "%BASE_DIR%",
-  "com.iplanet.am.jssproxy.SSLTrustHostList": "",
-  "com.iplanet.am.jssproxy.checkSubjectAltName": false,
-  "com.iplanet.am.jssproxy.resolveIPAddress": false,
-  "com.iplanet.am.jssproxy.trustAllServerCerts": false,
-  "com.iplanet.am.lbcookie.name": "amlbcookie",
-  "com.iplanet.am.lbcookie.value": "00",
-  "com.iplanet.am.logstatus": "ACTIVE",
-  "com.iplanet.am.pcookie.name": "DProPCookie",
-  "com.iplanet.am.profile.host": "%SERVER_HOST%",
-  "com.iplanet.am.profile.port": "%SERVER_PORT%",
-  "com.iplanet.am.serverMode": true,
-  "com.iplanet.am.session.agentSessionIdleTime": "1440",
-  "com.iplanet.am.session.client.polling.enable": false,
-  "com.iplanet.am.session.client.polling.period": "180",
-  "com.iplanet.am.session.httpSession.enabled": "true",
-  "com.iplanet.am.version": "ForgeRock Access Management 7.5.0 Build 89116d59a1ebe73ed1931dd3649adb7f217cd06b (2024-March-28 16:00)",
-  "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
-  "com.sun.am.event.notification.expire.time": "5",
-  "com.sun.embedded.sync.servers": "on",
-  "com.sun.identity.am.cookie.check": false,
-  "com.sun.identity.auth.cookieName": "AMAuthCookie",
-  "com.sun.identity.authentication.multiple.tabs.used": false,
-  "com.sun.identity.authentication.setCookieToAllDomains": true,
-  "com.sun.identity.authentication.special.users": "cn=dsameuser,ou=DSAME Users,%ROOT_SUFFIX%|cn=amService-UrlAccessAgent,ou=DSAME Users,%ROOT_SUFFIX%",
-  "com.sun.identity.authentication.super.user": "uid=amAdmin,ou=People,%ROOT_SUFFIX%",
-  "com.sun.identity.authentication.uniqueCookieName": "sunIdentityServerAuthNServer",
-  "com.sun.identity.cookie.httponly": true,
-  "com.sun.identity.cookie.samesite": "off",
-  "com.sun.identity.enableUniqueSSOTokenCookie": false,
-  "com.sun.identity.jss.donotInstallAtHighestPriority": true,
-  "com.sun.identity.monitoring": "off",
-  "com.sun.identity.monitoring.local.conn.server.url": "service:jmx:rmi://",
-  "com.sun.identity.password.deploymentDescriptor": "%SERVER_URI%",
-  "com.sun.identity.plugin.configuration.class": "@CONFIGURATION_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.datastore.class.default": "@DATASTORE_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.log.class": "@LOG_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.monitoring.agent.class": "@MONAGENT_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.monitoring.saml2.class": "@MONSAML2_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.session.class": "@SESSION_PROVIDER_CLASS@",
-  "com.sun.identity.policy.Policy.policy_evaluation_weights": "10:10:10",
-  "com.sun.identity.policy.resultsCacheMaxSize": "10000",
-  "com.sun.identity.policy.resultsCacheResourceCap": "20",
-  "com.sun.identity.saml.xmlsig.keyprovider.class": "@XMLSIG_KEY_PROVIDER@",
-  "com.sun.identity.saml.xmlsig.passwordDecoder": "@PASSWORD_DECODER_CLASS@",
-  "com.sun.identity.saml.xmlsig.signatureprovider.class": "@XML_SIGNATURE_PROVIDER@",
-  "com.sun.identity.security.checkcaller": false,
-  "com.sun.identity.server.fqdnMap[dnsfirst]": "dnsfirst",
-  "com.sun.identity.server.fqdnMap[hello]": "hello",
-  "com.sun.identity.server.fqdnMap[localhost]": "localhost",
-  "com.sun.identity.server.fqdnMap[openam-frodo-dev.classic.com]": "openam-frodo-dev.classic.com",
-  "com.sun.identity.server.fqdnMap[openam]": "openam",
-  "com.sun.identity.server.fqdnMap[secondDNS]": "secondDNS",
-  "com.sun.identity.session.repository.enableAttributeCompression": false,
-  "com.sun.identity.session.repository.enableCompression": false,
-  "com.sun.identity.session.repository.enableEncryption": false,
-  "com.sun.identity.sm.cache.ttl": "30",
-  "com.sun.identity.sm.cache.ttl.enable": false,
-  "com.sun.identity.url.readTimeout": "30000",
-  "com.sun.identity.webcontainer": "WEB_CONTAINER",
-  "dynamic.datastore.creation.enabled": false,
-  "openam.auth.destroy_session_after_upgrade": true,
-  "openam.auth.distAuthCookieName": "AMDistAuthCookie",
-  "openam.auth.session_property_upgrader": "org.forgerock.openam.authentication.service.DefaultSessionPropertyUpgrader",
-  "openam.auth.version.header.enabled": false,
-  "openam.authentication.ignore_goto_during_logout": false,
-  "openam.cdm.default.charset": "UTF-8",
-  "openam.forbidden.to.copy.headers": "connection",
-  "openam.forbidden.to.copy.request.headers": "connection",
-  "openam.oauth2.client.jwt.encryption.algorithm.allow.list": "RSA-OAEP,RSA-OAEP-256,ECDH-ES",
-  "openam.oauth2.client.jwt.unreasonable.lifetime.limit.minutes": "30",
-  "openam.retained.http.headers": "X-DSAMEVersion",
-  "openam.retained.http.request.headers": "X-DSAMEVersion",
-  "openam.serviceattributevalidator.classes.whitelist": "org.forgerock.openam.auth.nodes.validators.GreaterThanZeroValidator,org.forgerock.openam.auth.nodes.validators.HMACKeyLengthValidator,org.forgerock.openam.auth.nodes.validators.HmacSigningKeyValidator,org.forgerock.openam.auth.nodes.validators.PercentageValidator,org.forgerock.openam.auth.nodes.validators.QueryFilterValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyNameValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyValidator,org.forgerock.openam.auth.nodes.framework.validators.NodeValueValidator,org.forgerock.openam.audit.validation.PositiveIntegerValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.AlphaNumericValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.CodeLengthValidator,org.forgerock.openam.authentication.modules.persistentcookie.validation.SigningKeyValidator,com.sun.identity.common.configuration.DuplicateKeyMapValueValidator,com.sun.identity.common.configuration.AgentClientIpModeValueValidator,com.sun.identity.common.configuration.FilterModeValueValidator,com.sun.identity.common.configuration.GlobalMapValueValidator,com.sun.identity.common.configuration.ListValueValidator,com.sun.identity.common.configuration.MapValueValidator,com.sun.identity.common.configuration.ServerPropertyValidator,com.sun.identity.policy.ResourceComparatorValidator,com.sun.identity.sm.EmailValidator,com.sun.identity.sm.IPAddressValidator,com.sun.identity.sm.RequiredValueValidator,com.sun.identity.sm.ServerIDValidator,com.sun.identity.sm.SiteIDValidator,org.forgerock.openam.sm.validation.Base64EncodedBinaryValidator,org.forgerock.openam.sm.validation.BlankValueValidator,org.forgerock.openam.sm.validation.DurationValidator,org.forgerock.openam.sm.validation.EndpointValidator,org.forgerock.openam.sm.validation.HostnameValidator,org.forgerock.openam.sm.validation.PortValidator,org.forgerock.openam.sm.validation.SecretIdValidator,org.forgerock.openam.sm.validation.StatelessSessionSigningAlgorithmValidator,org.forgerock.openam.sm.validation.StringMapValidator,org.forgerock.openam.sm.validation.URLValidator,org.forgerock.openam.selfservice.config.KeyAliasValidator,org.forgerock.openam.sm.validation.UniqueIndexedValuesValidator,org.forgerock.openam.webhook.HttpHeaderValidator,org.forgerock.oauth2.core.ClientRedirectUriValidator",
-  "openam.session.case.sensitive.uuid": false,
-  "org.forgerock.allow.http.client.debug": false,
-  "org.forgerock.am.auth.chains.authindexuser.strict": true,
-  "org.forgerock.am.auth.node.otp.inSharedState": false,
-  "org.forgerock.am.auth.trees.authenticate.identified.identity": true,
-  "org.forgerock.openam.audit.additionalSuccessStatusCodesEnabled": true,
-  "org.forgerock.openam.audit.identity.activity.events.blacklist": "AM-ACCESS-ATTEMPT,AM-IDENTITY-CHANGE,AM-GROUP-CHANGE",
-  "org.forgerock.openam.auth.transactionauth.returnErrorOnAuthFailure": false,
-  "org.forgerock.openam.authLevel.excludeRequiredOrRequisite": false,
-  "org.forgerock.openam.authentication.forceAuth.enabled": false,
-  "org.forgerock.openam.console.autocomplete.enabled": true,
-  "org.forgerock.openam.core.resource.lookup.cache.enabled": true,
-  "org.forgerock.openam.core.sms.placeholder_api_enabled": "OFF",
-  "org.forgerock.openam.devices.recovery.use_insecure_storage": false,
-  "org.forgerock.openam.encryption.key.digest": "SHA1",
-  "org.forgerock.openam.encryption.key.iterations": "10000",
-  "org.forgerock.openam.encryption.key.size": "128",
-  "org.forgerock.openam.httpclienthandler.system.clients.connection.timeout": "10 seconds",
-  "org.forgerock.openam.httpclienthandler.system.clients.max.connections": "64",
-  "org.forgerock.openam.httpclienthandler.system.clients.pool.ttl": "-1",
-  "org.forgerock.openam.httpclienthandler.system.clients.response.timeout": "10 seconds",
-  "org.forgerock.openam.httpclienthandler.system.clients.retry.failed.requests.enabled": true,
-  "org.forgerock.openam.httpclienthandler.system.clients.reuse.connections.enabled": true,
-  "org.forgerock.openam.httpclienthandler.system.nonProxyHosts": "localhost,127.*,[::1],0.0.0.0,[::0]",
-  "org.forgerock.openam.httpclienthandler.system.proxy.enabled": false,
-  "org.forgerock.openam.httpclienthandler.system.proxy.password": null,
-  "org.forgerock.openam.httpclienthandler.system.proxy.uri": "",
-  "org.forgerock.openam.httpclienthandler.system.proxy.username": "",
-  "org.forgerock.openam.idm.attribute.names.lower.case": false,
-  "org.forgerock.openam.idrepo.ldapv3.passwordpolicy.allowDiagnosticMessage": false,
-  "org.forgerock.openam.idrepo.ldapv3.proxyauth.passwordreset.adminRequest": "isAdminPasswordChangeRequest",
-  "org.forgerock.openam.introspect.token.query.param.allowed": false,
-  "org.forgerock.openam.ldap.dncache.expire.time": "0",
-  "org.forgerock.openam.ldap.heartbeat.timeout": "10",
-  "org.forgerock.openam.ldap.keepalive.search.base": "",
-  "org.forgerock.openam.ldap.keepalive.search.filter": "(objectClass=*)",
-  "org.forgerock.openam.ldap.secure.protocol.version": "TLSv1.3,TLSv1.2",
-  "org.forgerock.openam.notifications.agents.enabled": true,
-  "org.forgerock.openam.oauth2.checkIssuerForIdTokenInfo": true,
-  "org.forgerock.openam.radius.server.context.cache.size": "5000",
-  "org.forgerock.openam.redirecturlvalidator.maxUrlLength": "2000",
-  "org.forgerock.openam.request.max.bytes.entity.size": "1048576",
-  "org.forgerock.openam.saml2.authenticatorlookup.skewAllowance": "60",
-  "org.forgerock.openam.scripting.maxinterpreterstackdepth": "10000",
-  "org.forgerock.openam.secrets.special.user.passwords.format": "ENCRYPTED_PLAIN",
-  "org.forgerock.openam.secrets.special.user.secret.refresh.seconds": "900",
-  "org.forgerock.openam.session.service.persistence.deleteAsynchronously": true,
-  "org.forgerock.openam.session.stateless.encryption.method": "A128CBC-HS256",
-  "org.forgerock.openam.session.stateless.rsa.padding": "RSA-OAEP-256",
-  "org.forgerock.openam.session.stateless.signing.allownone": false,
-  "org.forgerock.openam.showServletTraceInBrowser": false,
-  "org.forgerock.openam.slf4j.enableTraceInMessage": false,
-  "org.forgerock.openam.smtp.system.connect.timeout": "10000",
-  "org.forgerock.openam.smtp.system.socket.read.timeout": "10000",
-  "org.forgerock.openam.smtp.system.socket.write.timeout": "10000",
-  "org.forgerock.openam.sso.providers.list": "org.forgerock.openidconnect.ssoprovider.OpenIdConnectSSOProvider",
-  "org.forgerock.openam.timerpool.shutdown.retry.interval": "15000",
-  "org.forgerock.openam.timerpool.shutdown.retry.limit": "3",
-  "org.forgerock.openam.timerpool.shutdown.retry.multiplier": "1.5",
-  "org.forgerock.openam.trees.consumedstatedata.cache.size": "15",
-  "org.forgerock.openam.trees.ids.cache.size": "50",
-  "org.forgerock.openam.url.connectTimeout": "1000",
-  "org.forgerock.openam.xui.user.session.validation.enabled": true,
-  "org.forgerock.openidconnect.ssoprovider.maxcachesize": "5000",
-  "org.forgerock.security.entitlement.enforce.realm": true,
-  "org.forgerock.security.oauth2.enforce.sub.claim.uniqueness": true,
-  "org.forgerock.services.cts.store.reaper.enabled": true,
-  "org.forgerock.services.cts.store.ttlsupport.enabled": false,
-  "org.forgerock.services.cts.store.ttlsupport.exclusionlist": "",
-  "org.forgerock.services.default.store.max.connections": "",
-  "org.forgerock.services.default.store.min.connections": "",
-  "org.forgerock.services.openid.request.object.lifespan": "120000",
-  "securidHelper.ports": "58943",
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/default/cts.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/cts",
-  "amconfig.org.forgerock.services.cts.store.common.section": {
-    "org.forgerock.services.cts.store.location": "default",
-    "org.forgerock.services.cts.store.max.connections": "100",
-    "org.forgerock.services.cts.store.page.size": "0",
-    "org.forgerock.services.cts.store.root.suffix": "",
-    "org.forgerock.services.cts.store.vlv.page.size": "1000",
-  },
-  "amconfig.org.forgerock.services.cts.store.external.section": {
-    "org.forgerock.services.cts.store.directory.name": "",
-    "org.forgerock.services.cts.store.heartbeat": "10",
-    "org.forgerock.services.cts.store.loginid": "",
-    "org.forgerock.services.cts.store.mtls.enabled": "",
-    "org.forgerock.services.cts.store.password": null,
-    "org.forgerock.services.cts.store.ssl.enabled": "",
-    "org.forgerock.services.cts.store.starttls.enabled": "",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/default/general.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/general",
-  "amconfig.header.debug": {
-    "com.iplanet.services.debug.directory": "%BASE_DIR%/var/debug",
-    "com.iplanet.services.debug.level": "off",
-    "com.sun.services.debug.mergeall": "on",
-  },
-  "amconfig.header.installdir": {
-    "com.iplanet.am.locale": "en_US",
-    "com.iplanet.am.util.xml.validating": "off",
-    "com.iplanet.services.configpath": "%BASE_DIR%",
-    "com.sun.identity.client.notification.url": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-  },
-  "amconfig.header.mailserver": {
-    "com.iplanet.am.smtphost": "localhost",
-    "com.iplanet.am.smtpport": "25",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/default/sdk.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/sdk",
-  "amconfig.header.cachingreplica": {
-    "com.iplanet.am.sdk.cache.maxSize": "10000",
-  },
-  "amconfig.header.datastore": {
-    "com.sun.identity.sm.enableDataStoreNotification": false,
-    "com.sun.identity.sm.notification.threadpool.size": "1",
-  },
-  "amconfig.header.eventservice": {
-    "com.iplanet.am.event.connection.delay.between.retries": "3000",
-    "com.iplanet.am.event.connection.ldap.error.codes.retries": "80,81,91",
-    "com.iplanet.am.event.connection.num.retries": "3",
-    "com.sun.am.event.connection.disable.list": "aci,um,sm",
-  },
-  "amconfig.header.ldapconnection": {
-    "com.iplanet.am.ldap.connection.delay.between.retries": "1000",
-    "com.iplanet.am.ldap.connection.ldap.error.codes.retries": "80,81,91",
-    "com.iplanet.am.ldap.connection.num.retries": "3",
-  },
-  "amconfig.header.sdktimetoliveconfig": {
-    "com.iplanet.am.sdk.cache.entry.default.expire.time": "30",
-    "com.iplanet.am.sdk.cache.entry.expire.enabled": false,
-    "com.iplanet.am.sdk.cache.entry.user.expire.time": "15",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/default/security.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/security",
-  "amconfig.header.cookie": {
-    "com.iplanet.am.cookie.encode": false,
-    "com.iplanet.am.cookie.name": "iPlanetDirectoryPro",
-    "com.iplanet.am.cookie.secure": false,
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": "",
-    "com.sun.identity.crl.cache.directory.mtlsenabled": false,
-    "com.sun.identity.crl.cache.directory.password": null,
-    "com.sun.identity.crl.cache.directory.port": "",
-    "com.sun.identity.crl.cache.directory.searchattr": "",
-    "com.sun.identity.crl.cache.directory.searchlocs": "",
-    "com.sun.identity.crl.cache.directory.ssl": false,
-    "com.sun.identity.crl.cache.directory.user": "",
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": "@AM_ENC_PWD@",
-    "am.encryption.secret.enabled": false,
-    "am.encryption.secret.keystoreType": "JCEKS",
-    "com.iplanet.security.SecureRandomFactoryImpl": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    "com.iplanet.security.encryptor": "com.iplanet.services.util.JCEEncryption",
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": "",
-    "com.sun.identity.authentication.ocsp.responder.url": "",
-    "com.sun.identity.authentication.ocspCheck": false,
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": "test",
-    "com.sun.identity.saml.xmlsig.keypass": "%BASE_DIR%/security/secrets/default/.keypass",
-    "com.sun.identity.saml.xmlsig.keystore": "%BASE_DIR%/security/keystores/keystore.jceks",
-    "com.sun.identity.saml.xmlsig.storepass": "%BASE_DIR%/security/secrets/default/.storepass",
-    "com.sun.identity.saml.xmlsig.storetype": "JCEKS",
-  },
-  "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": false,
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": "16384",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/default/session.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/session",
-  "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": "60",
-    "com.iplanet.services.stats.directory": "%BASE_DIR%/var/stats",
-    "com.iplanet.services.stats.state": "file",
-    "com.sun.am.session.enableHostLookUp": false,
-  },
-  "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": "10",
-    "com.iplanet.am.notification.threadpool.threshold": "5000",
-  },
-  "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": "3",
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": "5000",
-  },
-  "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": true,
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties: serverExportTestDir4/default/uma.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": "default",
-    "org.forgerock.services.resourcesets.store.max.connections": "10",
-    "org.forgerock.services.resourcesets.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": "",
-    "org.forgerock.services.resourcesets.store.heartbeat": "10",
-    "org.forgerock.services.resourcesets.store.loginid": "",
-    "org.forgerock.services.resourcesets.store.mtls.enabled": "",
-    "org.forgerock.services.resourcesets.store.password": null,
-    "org.forgerock.services.resourcesets.store.ssl.enabled": "",
-    "org.forgerock.services.resourcesets.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": "default",
-    "org.forgerock.services.uma.labels.store.max.connections": "2",
-    "org.forgerock.services.uma.labels.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": "",
-    "org.forgerock.services.uma.labels.store.heartbeat": "10",
-    "org.forgerock.services.uma.labels.store.loginid": "",
-    "org.forgerock.services.uma.labels.store.mtls.enabled": "",
-    "org.forgerock.services.uma.labels.store.password": null,
-    "org.forgerock.services.uma.labels.store.ssl.enabled": "",
-    "org.forgerock.services.uma.labels.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": "default",
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": "10",
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": "",
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": "10",
-    "org.forgerock.services.uma.pendingrequests.store.loginid": "",
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": "",
-    "org.forgerock.services.uma.pendingrequests.store.password": null,
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": "",
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": "default",
-    "org.forgerock.services.umaaudit.store.max.connections": "10",
-    "org.forgerock.services.umaaudit.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": "",
-    "org.forgerock.services.umaaudit.store.heartbeat": "10",
-    "org.forgerock.services.umaaudit.store.loginid": "",
-    "org.forgerock.services.umaaudit.store.mtls.enabled": "",
-    "org.forgerock.services.umaaudit.store.password": null,
-    "org.forgerock.services.umaaudit.store.ssl.enabled": "",
-    "org.forgerock.services.umaaudit.store.starttls.enabled": "",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties. 1`] = `0`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties. 2`] = `""`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/01/advanced.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/01/advanced.properties.server.json 1`] = `
 {
   "_id": "01/properties/advanced",
   "bootstrap.file": "/root/.openamcfg/AMConfig_usr_local_tomcat_webapps_am_",
@@ -6977,7 +1787,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/01/cts.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/01/cts.properties.server.json 1`] = `
 {
   "_id": "01/properties/cts",
   "amconfig.org.forgerock.services.cts.store.common.section": {
@@ -7039,7 +1849,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/01/directoryConfiguration.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/01/directoryConfiguration.properties.server.json 1`] = `
 {
   "_id": "01/properties/directoryConfiguration",
   "directoryConfiguration": {
@@ -7065,7 +1875,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/01/general.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/01/general.properties.server.json 1`] = `
 {
   "_id": "01/properties/general",
   "amconfig.header.debug": {
@@ -7116,7 +1926,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/01/sdk.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/01/sdk.properties.server.json 1`] = `
 {
   "_id": "01/properties/sdk",
   "amconfig.header.cachingreplica": {
@@ -7184,7 +1994,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/01/security.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/01/security.properties.server.json 1`] = `
 {
   "_id": "01/properties/security",
   "amconfig.header.cookie": {
@@ -7328,7 +2138,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/01/session.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/01/session.properties.server.json 1`] = `
 {
   "_id": "01/properties/session",
   "amconfig.header.sessionlogging": {
@@ -7378,7 +2188,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/01/uma.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/01/uma.properties.server.json 1`] = `
 {
   "_id": "01/properties/uma",
   "amconfig.org.forgerock.services.resourcesets.store.common.section": {
@@ -7560,14 +2370,38 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/03/advanced.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03.server.json 1`] = `
+{
+  "defaultProperties": {},
+  "meta": Any<Object>,
+  "server": {
+    "03": {
+      "_id": "03",
+      "properties": {
+        "advanced": "file://03/advanced.properties.server.json",
+        "cts": "file://03/cts.properties.server.json",
+        "directoryConfiguration": "file://03/directoryConfiguration.properties.server.json",
+        "general": "file://03/general.properties.server.json",
+        "sdk": "file://03/sdk.properties.server.json",
+        "security": "file://03/security.properties.server.json",
+        "session": "file://03/session.properties.server.json",
+        "uma": "file://03/uma.properties.server.json",
+      },
+      "siteName": "testsite",
+      "url": "http://localhost:8081/am",
+    },
+  },
+}
+`;
+
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03/advanced.properties.server.json 1`] = `
 {
   "_id": "03/properties/advanced",
   "com.iplanet.am.lbcookie.value": "03",
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/03/cts.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03/cts.properties.server.json 1`] = `
 {
   "_id": "03/properties/cts",
   "amconfig.org.forgerock.services.cts.store.common.section": {
@@ -7629,7 +2463,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/03/directoryConfiguration.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03/directoryConfiguration.properties.server.json 1`] = `
 {
   "_id": "03/properties/directoryConfiguration",
   "directoryConfiguration": {
@@ -7655,7 +2489,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/03/general.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03/general.properties.server.json 1`] = `
 {
   "_id": "03/properties/general",
   "amconfig.header.debug": {
@@ -7706,7 +2540,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/03/sdk.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03/sdk.properties.server.json 1`] = `
 {
   "_id": "03/properties/sdk",
   "amconfig.header.cachingreplica": {
@@ -7774,7 +2608,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/03/security.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03/security.properties.server.json 1`] = `
 {
   "_id": "03/properties/security",
   "amconfig.header.cookie": {
@@ -7918,7 +2752,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/03/session.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03/session.properties.server.json 1`] = `
 {
   "_id": "03/properties/session",
   "amconfig.header.sessionlogging": {
@@ -7968,7 +2802,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/03/uma.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/03/uma.properties.server.json 1`] = `
 {
   "_id": "03/properties/uma",
   "amconfig.org.forgerock.services.resourcesets.store.common.section": {
@@ -8150,14 +2984,38 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/04/advanced.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04.server.json 1`] = `
+{
+  "defaultProperties": {},
+  "meta": Any<Object>,
+  "server": {
+    "04": {
+      "_id": "04",
+      "properties": {
+        "advanced": "file://04/advanced.properties.server.json",
+        "cts": "file://04/cts.properties.server.json",
+        "directoryConfiguration": "file://04/directoryConfiguration.properties.server.json",
+        "general": "file://04/general.properties.server.json",
+        "sdk": "file://04/sdk.properties.server.json",
+        "security": "file://04/security.properties.server.json",
+        "session": "file://04/session.properties.server.json",
+        "uma": "file://04/uma.properties.server.json",
+      },
+      "siteName": null,
+      "url": "http://localhost:8082/am",
+    },
+  },
+}
+`;
+
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04/advanced.properties.server.json 1`] = `
 {
   "_id": "04/properties/advanced",
   "com.iplanet.am.lbcookie.value": "04",
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/04/cts.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04/cts.properties.server.json 1`] = `
 {
   "_id": "04/properties/cts",
   "amconfig.org.forgerock.services.cts.store.common.section": {
@@ -8219,7 +3077,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/04/directoryConfiguration.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04/directoryConfiguration.properties.server.json 1`] = `
 {
   "_id": "04/properties/directoryConfiguration",
   "directoryConfiguration": {
@@ -8245,7 +3103,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/04/general.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04/general.properties.server.json 1`] = `
 {
   "_id": "04/properties/general",
   "amconfig.header.debug": {
@@ -8296,7 +3154,7 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/04/sdk.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04/sdk.properties.server.json 1`] = `
 {
   "_id": "04/properties/sdk",
   "amconfig.header.cachingreplica": {
@@ -8364,1717 +3222,5871 @@ exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.j
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/04/security.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04/security.properties.server.json 1`] = `
 {
   "_id": "04/properties/security",
   "amconfig.header.cookie": {
     "com.iplanet.am.cookie.encode": {
       "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.cookie.name": {
-      "inherited": true,
-      "value": "iPlanetDirectoryPro",
-    },
-    "com.iplanet.am.cookie.secure": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.mtlsenabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "com.sun.identity.crl.cache.directory.port": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchattr": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchlocs": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.ssl": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.user": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": {
-      "inherited": true,
-      "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-    },
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": {
-      "inherited": true,
-      "value": "@AM_ENC_PWD@",
-    },
-    "am.encryption.secret.alias": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "am.encryption.secret.keyPass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreFile": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystorePass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreType": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-    "com.iplanet.security.SecureRandomFactoryImpl": {
-      "inherited": true,
-      "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    },
-    "com.iplanet.security.encryptor": {
-      "inherited": true,
-      "value": "com.iplanet.services.util.JCEEncryption",
-    },
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocsp.responder.url": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocspCheck": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": {
-      "inherited": true,
-      "value": "test",
-    },
-    "com.sun.identity.saml.xmlsig.keypass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.keypass",
-    },
-    "com.sun.identity.saml.xmlsig.keystore": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/keystores/keystore.jceks",
-    },
-    "com.sun.identity.saml.xmlsig.storepass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.storepass",
-    },
-    "com.sun.identity.saml.xmlsig.storetype": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-  },
-  "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-      "inherited": true,
-      "value": "16384",
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/04/session.properties.server.json 1`] = `
-{
-  "_id": "04/properties/session",
-  "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": {
-      "inherited": true,
-      "value": "60",
-    },
-    "com.iplanet.services.stats.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/stats",
-    },
-    "com.iplanet.services.stats.state": {
-      "inherited": true,
-      "value": "file",
-    },
-    "com.sun.am.session.enableHostLookUp": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": {
-      "inherited": true,
-      "value": "10",
-    },
-    "com.iplanet.am.notification.threadpool.threshold": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": {
-      "inherited": true,
-      "value": "3",
-    },
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-      "inherited": true,
-      "value": "5000",
-    },
-  },
-  "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": {
-      "inherited": true,
-      "value": true,
-    },
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/04/uma.properties.server.json 1`] = `
-{
-  "_id": "04/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.resourcesets.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.resourcesets.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": {
-      "inherited": true,
-      "value": "default",
+      "value": false,
     },
-    "org.forgerock.services.uma.labels.store.max.connections": {
+    "com.iplanet.am.cookie.name": {
       "inherited": true,
-      "value": "2",
+      "value": "iPlanetDirectoryPro",
     },
-    "org.forgerock.services.uma.labels.store.root.suffix": {
+    "com.iplanet.am.cookie.secure": {
       "inherited": true,
-      "value": "",
+      "value": false,
     },
   },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": {
+  "amconfig.header.crlcache": {
+    "com.sun.identity.crl.cache.directory.host": {
       "inherited": true,
       "value": "",
     },
-    "org.forgerock.services.uma.labels.store.heartbeat": {
+    "com.sun.identity.crl.cache.directory.mtlsenabled": {
       "inherited": true,
-      "value": "10",
+      "value": false,
     },
-    "org.forgerock.services.uma.labels.store.loginid": {
+    "com.sun.identity.crl.cache.directory.password": {
       "inherited": true,
-      "value": "",
+      "value": null,
     },
-    "org.forgerock.services.uma.labels.store.mtls.enabled": {
+    "com.sun.identity.crl.cache.directory.port": {
       "inherited": true,
       "value": "",
     },
-    "org.forgerock.services.uma.labels.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.labels.store.ssl.enabled": {
+    "com.sun.identity.crl.cache.directory.searchattr": {
       "inherited": true,
       "value": "",
     },
-    "org.forgerock.services.uma.labels.store.starttls.enabled": {
+    "com.sun.identity.crl.cache.directory.searchlocs": {
       "inherited": true,
       "value": "",
     },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": {
+    "com.sun.identity.crl.cache.directory.ssl": {
       "inherited": true,
-      "value": "default",
+      "value": false,
     },
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": {
+    "com.sun.identity.crl.cache.directory.user": {
       "inherited": true,
-      "value": "10",
+      "value": "",
     },
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
+  },
+  "amconfig.header.deserialisationwhitelist": {
+    "openam.deserialisation.classes.whitelist": {
       "inherited": true,
-      "value": "",
+      "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
     },
   },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+  "amconfig.header.encryption": {
+    "am.encryption.pwd": {
       "inherited": true,
-      "value": "",
+      "value": "@AM_ENC_PWD@",
     },
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
+    "am.encryption.secret.alias": {
       "inherited": true,
-      "value": "10",
+      "value": null,
     },
-    "org.forgerock.services.uma.pendingrequests.store.loginid": {
+    "am.encryption.secret.enabled": {
       "inherited": true,
-      "value": "",
+      "value": false,
     },
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
+    "am.encryption.secret.keyPass": {
       "inherited": true,
-      "value": "",
+      "value": null,
     },
-    "org.forgerock.services.uma.pendingrequests.store.password": {
+    "am.encryption.secret.keystoreFile": {
       "inherited": true,
       "value": null,
     },
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+    "am.encryption.secret.keystorePass": {
       "inherited": true,
-      "value": "",
+      "value": null,
     },
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+    "am.encryption.secret.keystoreType": {
       "inherited": true,
-      "value": "",
+      "value": "JCEKS",
     },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": {
+    "com.iplanet.security.SecureRandomFactoryImpl": {
       "inherited": true,
-      "value": "default",
+      "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
     },
-    "org.forgerock.services.umaaudit.store.max.connections": {
+    "com.iplanet.security.encryptor": {
       "inherited": true,
-      "value": "10",
+      "value": "com.iplanet.services.util.JCEEncryption",
     },
-    "org.forgerock.services.umaaudit.store.root.suffix": {
+  },
+  "amconfig.header.ocsp.check": {
+    "com.sun.identity.authentication.ocsp.responder.nickname": {
       "inherited": true,
       "value": "",
     },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": {
+    "com.sun.identity.authentication.ocsp.responder.url": {
       "inherited": true,
       "value": "",
     },
-    "org.forgerock.services.umaaudit.store.heartbeat": {
+    "com.sun.identity.authentication.ocspCheck": {
       "inherited": true,
-      "value": "10",
+      "value": false,
     },
-    "org.forgerock.services.umaaudit.store.loginid": {
+  },
+  "amconfig.header.securitykey": {
+    "com.sun.identity.saml.xmlsig.certalias": {
       "inherited": true,
-      "value": "",
+      "value": "test",
     },
-    "org.forgerock.services.umaaudit.store.mtls.enabled": {
+    "com.sun.identity.saml.xmlsig.keypass": {
       "inherited": true,
-      "value": "",
+      "value": "%BASE_DIR%/security/secrets/default/.keypass",
     },
-    "org.forgerock.services.umaaudit.store.password": {
+    "com.sun.identity.saml.xmlsig.keystore": {
       "inherited": true,
-      "value": null,
+      "value": "%BASE_DIR%/security/keystores/keystore.jceks",
     },
-    "org.forgerock.services.umaaudit.store.ssl.enabled": {
+    "com.sun.identity.saml.xmlsig.storepass": {
       "inherited": true,
-      "value": "",
+      "value": "%BASE_DIR%/security/secrets/default/.storepass",
     },
-    "org.forgerock.services.umaaudit.store.starttls.enabled": {
+    "com.sun.identity.saml.xmlsig.storetype": {
       "inherited": true,
-      "value": "",
+      "value": "JCEKS",
     },
   },
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/default/advanced.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/advanced",
-  "com.iplanet.am.buildDate": "2024-March-28 16:00",
-  "com.iplanet.am.buildRevision": "89116d59a1ebe73ed1931dd3649adb7f217cd06b",
-  "com.iplanet.am.buildVersion": "ForgeRock Access Management 7.5.0",
-  "com.iplanet.am.cookie.c66Encode": true,
-  "com.iplanet.am.daemons": "securid",
-  "com.iplanet.am.directory.ssl.enabled": false,
-  "com.iplanet.am.installdir": "%BASE_DIR%",
-  "com.iplanet.am.jssproxy.SSLTrustHostList": "",
-  "com.iplanet.am.jssproxy.checkSubjectAltName": false,
-  "com.iplanet.am.jssproxy.resolveIPAddress": false,
-  "com.iplanet.am.jssproxy.trustAllServerCerts": false,
-  "com.iplanet.am.lbcookie.name": "amlbcookie",
-  "com.iplanet.am.lbcookie.value": "00",
-  "com.iplanet.am.logstatus": "ACTIVE",
-  "com.iplanet.am.pcookie.name": "DProPCookie",
-  "com.iplanet.am.profile.host": "%SERVER_HOST%",
-  "com.iplanet.am.profile.port": "%SERVER_PORT%",
-  "com.iplanet.am.serverMode": true,
-  "com.iplanet.am.session.agentSessionIdleTime": "1440",
-  "com.iplanet.am.session.client.polling.enable": false,
-  "com.iplanet.am.session.client.polling.period": "180",
-  "com.iplanet.am.session.httpSession.enabled": "true",
-  "com.iplanet.am.version": "ForgeRock Access Management 7.5.0 Build 89116d59a1ebe73ed1931dd3649adb7f217cd06b (2024-March-28 16:00)",
-  "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
-  "com.sun.am.event.notification.expire.time": "5",
-  "com.sun.embedded.sync.servers": "on",
-  "com.sun.identity.am.cookie.check": false,
-  "com.sun.identity.auth.cookieName": "AMAuthCookie",
-  "com.sun.identity.authentication.multiple.tabs.used": false,
-  "com.sun.identity.authentication.setCookieToAllDomains": true,
-  "com.sun.identity.authentication.special.users": "cn=dsameuser,ou=DSAME Users,%ROOT_SUFFIX%|cn=amService-UrlAccessAgent,ou=DSAME Users,%ROOT_SUFFIX%",
-  "com.sun.identity.authentication.super.user": "uid=amAdmin,ou=People,%ROOT_SUFFIX%",
-  "com.sun.identity.authentication.uniqueCookieName": "sunIdentityServerAuthNServer",
-  "com.sun.identity.cookie.httponly": true,
-  "com.sun.identity.cookie.samesite": "off",
-  "com.sun.identity.enableUniqueSSOTokenCookie": false,
-  "com.sun.identity.jss.donotInstallAtHighestPriority": true,
-  "com.sun.identity.monitoring": "off",
-  "com.sun.identity.monitoring.local.conn.server.url": "service:jmx:rmi://",
-  "com.sun.identity.password.deploymentDescriptor": "%SERVER_URI%",
-  "com.sun.identity.plugin.configuration.class": "@CONFIGURATION_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.datastore.class.default": "@DATASTORE_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.log.class": "@LOG_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.monitoring.agent.class": "@MONAGENT_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.monitoring.saml2.class": "@MONSAML2_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.session.class": "@SESSION_PROVIDER_CLASS@",
-  "com.sun.identity.policy.Policy.policy_evaluation_weights": "10:10:10",
-  "com.sun.identity.policy.resultsCacheMaxSize": "10000",
-  "com.sun.identity.policy.resultsCacheResourceCap": "20",
-  "com.sun.identity.saml.xmlsig.keyprovider.class": "@XMLSIG_KEY_PROVIDER@",
-  "com.sun.identity.saml.xmlsig.passwordDecoder": "@PASSWORD_DECODER_CLASS@",
-  "com.sun.identity.saml.xmlsig.signatureprovider.class": "@XML_SIGNATURE_PROVIDER@",
-  "com.sun.identity.security.checkcaller": false,
-  "com.sun.identity.server.fqdnMap[dnsfirst]": "dnsfirst",
-  "com.sun.identity.server.fqdnMap[hello]": "hello",
-  "com.sun.identity.server.fqdnMap[localhost]": "localhost",
-  "com.sun.identity.server.fqdnMap[openam-frodo-dev.classic.com]": "openam-frodo-dev.classic.com",
-  "com.sun.identity.server.fqdnMap[openam]": "openam",
-  "com.sun.identity.server.fqdnMap[secondDNS]": "secondDNS",
-  "com.sun.identity.session.repository.enableAttributeCompression": false,
-  "com.sun.identity.session.repository.enableCompression": false,
-  "com.sun.identity.session.repository.enableEncryption": false,
-  "com.sun.identity.sm.cache.ttl": "30",
-  "com.sun.identity.sm.cache.ttl.enable": false,
-  "com.sun.identity.url.readTimeout": "30000",
-  "com.sun.identity.webcontainer": "WEB_CONTAINER",
-  "dynamic.datastore.creation.enabled": false,
-  "openam.auth.destroy_session_after_upgrade": true,
-  "openam.auth.distAuthCookieName": "AMDistAuthCookie",
-  "openam.auth.session_property_upgrader": "org.forgerock.openam.authentication.service.DefaultSessionPropertyUpgrader",
-  "openam.auth.version.header.enabled": false,
-  "openam.authentication.ignore_goto_during_logout": false,
-  "openam.cdm.default.charset": "UTF-8",
-  "openam.forbidden.to.copy.headers": "connection",
-  "openam.forbidden.to.copy.request.headers": "connection",
-  "openam.oauth2.client.jwt.encryption.algorithm.allow.list": "RSA-OAEP,RSA-OAEP-256,ECDH-ES",
-  "openam.oauth2.client.jwt.unreasonable.lifetime.limit.minutes": "30",
-  "openam.retained.http.headers": "X-DSAMEVersion",
-  "openam.retained.http.request.headers": "X-DSAMEVersion",
-  "openam.serviceattributevalidator.classes.whitelist": "org.forgerock.openam.auth.nodes.validators.GreaterThanZeroValidator,org.forgerock.openam.auth.nodes.validators.HMACKeyLengthValidator,org.forgerock.openam.auth.nodes.validators.HmacSigningKeyValidator,org.forgerock.openam.auth.nodes.validators.PercentageValidator,org.forgerock.openam.auth.nodes.validators.QueryFilterValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyNameValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyValidator,org.forgerock.openam.auth.nodes.framework.validators.NodeValueValidator,org.forgerock.openam.audit.validation.PositiveIntegerValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.AlphaNumericValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.CodeLengthValidator,org.forgerock.openam.authentication.modules.persistentcookie.validation.SigningKeyValidator,com.sun.identity.common.configuration.DuplicateKeyMapValueValidator,com.sun.identity.common.configuration.AgentClientIpModeValueValidator,com.sun.identity.common.configuration.FilterModeValueValidator,com.sun.identity.common.configuration.GlobalMapValueValidator,com.sun.identity.common.configuration.ListValueValidator,com.sun.identity.common.configuration.MapValueValidator,com.sun.identity.common.configuration.ServerPropertyValidator,com.sun.identity.policy.ResourceComparatorValidator,com.sun.identity.sm.EmailValidator,com.sun.identity.sm.IPAddressValidator,com.sun.identity.sm.RequiredValueValidator,com.sun.identity.sm.ServerIDValidator,com.sun.identity.sm.SiteIDValidator,org.forgerock.openam.sm.validation.Base64EncodedBinaryValidator,org.forgerock.openam.sm.validation.BlankValueValidator,org.forgerock.openam.sm.validation.DurationValidator,org.forgerock.openam.sm.validation.EndpointValidator,org.forgerock.openam.sm.validation.HostnameValidator,org.forgerock.openam.sm.validation.PortValidator,org.forgerock.openam.sm.validation.SecretIdValidator,org.forgerock.openam.sm.validation.StatelessSessionSigningAlgorithmValidator,org.forgerock.openam.sm.validation.StringMapValidator,org.forgerock.openam.sm.validation.URLValidator,org.forgerock.openam.selfservice.config.KeyAliasValidator,org.forgerock.openam.sm.validation.UniqueIndexedValuesValidator,org.forgerock.openam.webhook.HttpHeaderValidator,org.forgerock.oauth2.core.ClientRedirectUriValidator",
-  "openam.session.case.sensitive.uuid": false,
-  "org.forgerock.allow.http.client.debug": false,
-  "org.forgerock.am.auth.chains.authindexuser.strict": true,
-  "org.forgerock.am.auth.node.otp.inSharedState": false,
-  "org.forgerock.am.auth.trees.authenticate.identified.identity": true,
-  "org.forgerock.openam.audit.additionalSuccessStatusCodesEnabled": true,
-  "org.forgerock.openam.audit.identity.activity.events.blacklist": "AM-ACCESS-ATTEMPT,AM-IDENTITY-CHANGE,AM-GROUP-CHANGE",
-  "org.forgerock.openam.auth.transactionauth.returnErrorOnAuthFailure": false,
-  "org.forgerock.openam.authLevel.excludeRequiredOrRequisite": false,
-  "org.forgerock.openam.authentication.forceAuth.enabled": false,
-  "org.forgerock.openam.console.autocomplete.enabled": true,
-  "org.forgerock.openam.core.resource.lookup.cache.enabled": true,
-  "org.forgerock.openam.core.sms.placeholder_api_enabled": "OFF",
-  "org.forgerock.openam.devices.recovery.use_insecure_storage": false,
-  "org.forgerock.openam.encryption.key.digest": "SHA1",
-  "org.forgerock.openam.encryption.key.iterations": "10000",
-  "org.forgerock.openam.encryption.key.size": "128",
-  "org.forgerock.openam.httpclienthandler.system.clients.connection.timeout": "10 seconds",
-  "org.forgerock.openam.httpclienthandler.system.clients.max.connections": "64",
-  "org.forgerock.openam.httpclienthandler.system.clients.pool.ttl": "-1",
-  "org.forgerock.openam.httpclienthandler.system.clients.response.timeout": "10 seconds",
-  "org.forgerock.openam.httpclienthandler.system.clients.retry.failed.requests.enabled": true,
-  "org.forgerock.openam.httpclienthandler.system.clients.reuse.connections.enabled": true,
-  "org.forgerock.openam.httpclienthandler.system.nonProxyHosts": "localhost,127.*,[::1],0.0.0.0,[::0]",
-  "org.forgerock.openam.httpclienthandler.system.proxy.enabled": false,
-  "org.forgerock.openam.httpclienthandler.system.proxy.password": null,
-  "org.forgerock.openam.httpclienthandler.system.proxy.uri": "",
-  "org.forgerock.openam.httpclienthandler.system.proxy.username": "",
-  "org.forgerock.openam.idm.attribute.names.lower.case": false,
-  "org.forgerock.openam.idrepo.ldapv3.passwordpolicy.allowDiagnosticMessage": false,
-  "org.forgerock.openam.idrepo.ldapv3.proxyauth.passwordreset.adminRequest": "isAdminPasswordChangeRequest",
-  "org.forgerock.openam.introspect.token.query.param.allowed": false,
-  "org.forgerock.openam.ldap.dncache.expire.time": "0",
-  "org.forgerock.openam.ldap.heartbeat.timeout": "10",
-  "org.forgerock.openam.ldap.keepalive.search.base": "",
-  "org.forgerock.openam.ldap.keepalive.search.filter": "(objectClass=*)",
-  "org.forgerock.openam.ldap.secure.protocol.version": "TLSv1.3,TLSv1.2",
-  "org.forgerock.openam.notifications.agents.enabled": true,
-  "org.forgerock.openam.oauth2.checkIssuerForIdTokenInfo": true,
-  "org.forgerock.openam.radius.server.context.cache.size": "5000",
-  "org.forgerock.openam.redirecturlvalidator.maxUrlLength": "2000",
-  "org.forgerock.openam.request.max.bytes.entity.size": "1048576",
-  "org.forgerock.openam.saml2.authenticatorlookup.skewAllowance": "60",
-  "org.forgerock.openam.scripting.maxinterpreterstackdepth": "10000",
-  "org.forgerock.openam.secrets.special.user.passwords.format": "ENCRYPTED_PLAIN",
-  "org.forgerock.openam.secrets.special.user.secret.refresh.seconds": "900",
-  "org.forgerock.openam.session.service.persistence.deleteAsynchronously": true,
-  "org.forgerock.openam.session.stateless.encryption.method": "A128CBC-HS256",
-  "org.forgerock.openam.session.stateless.rsa.padding": "RSA-OAEP-256",
-  "org.forgerock.openam.session.stateless.signing.allownone": false,
-  "org.forgerock.openam.showServletTraceInBrowser": false,
-  "org.forgerock.openam.slf4j.enableTraceInMessage": false,
-  "org.forgerock.openam.smtp.system.connect.timeout": "10000",
-  "org.forgerock.openam.smtp.system.socket.read.timeout": "10000",
-  "org.forgerock.openam.smtp.system.socket.write.timeout": "10000",
-  "org.forgerock.openam.sso.providers.list": "org.forgerock.openidconnect.ssoprovider.OpenIdConnectSSOProvider",
-  "org.forgerock.openam.timerpool.shutdown.retry.interval": "15000",
-  "org.forgerock.openam.timerpool.shutdown.retry.limit": "3",
-  "org.forgerock.openam.timerpool.shutdown.retry.multiplier": "1.5",
-  "org.forgerock.openam.trees.consumedstatedata.cache.size": "15",
-  "org.forgerock.openam.trees.ids.cache.size": "50",
-  "org.forgerock.openam.url.connectTimeout": "1000",
-  "org.forgerock.openam.xui.user.session.validation.enabled": true,
-  "org.forgerock.openidconnect.ssoprovider.maxcachesize": "5000",
-  "org.forgerock.security.entitlement.enforce.realm": true,
-  "org.forgerock.security.oauth2.enforce.sub.claim.uniqueness": true,
-  "org.forgerock.services.cts.store.reaper.enabled": true,
-  "org.forgerock.services.cts.store.ttlsupport.enabled": false,
-  "org.forgerock.services.cts.store.ttlsupport.exclusionlist": "",
-  "org.forgerock.services.default.store.max.connections": "",
-  "org.forgerock.services.default.store.min.connections": "",
-  "org.forgerock.services.openid.request.object.lifespan": "120000",
-  "securidHelper.ports": "58943",
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/default/cts.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/cts",
-  "amconfig.org.forgerock.services.cts.store.common.section": {
-    "org.forgerock.services.cts.store.location": "default",
-    "org.forgerock.services.cts.store.max.connections": "100",
-    "org.forgerock.services.cts.store.page.size": "0",
-    "org.forgerock.services.cts.store.root.suffix": "",
-    "org.forgerock.services.cts.store.vlv.page.size": "1000",
-  },
-  "amconfig.org.forgerock.services.cts.store.external.section": {
-    "org.forgerock.services.cts.store.directory.name": "",
-    "org.forgerock.services.cts.store.heartbeat": "10",
-    "org.forgerock.services.cts.store.loginid": "",
-    "org.forgerock.services.cts.store.mtls.enabled": "",
-    "org.forgerock.services.cts.store.password": null,
-    "org.forgerock.services.cts.store.ssl.enabled": "",
-    "org.forgerock.services.cts.store.starttls.enabled": "",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/default/general.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/general",
-  "amconfig.header.debug": {
-    "com.iplanet.services.debug.directory": "%BASE_DIR%/var/debug",
-    "com.iplanet.services.debug.level": "off",
-    "com.sun.services.debug.mergeall": "on",
-  },
-  "amconfig.header.installdir": {
-    "com.iplanet.am.locale": "en_US",
-    "com.iplanet.am.util.xml.validating": "off",
-    "com.iplanet.services.configpath": "%BASE_DIR%",
-    "com.sun.identity.client.notification.url": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-  },
-  "amconfig.header.mailserver": {
-    "com.iplanet.am.smtphost": "localhost",
-    "com.iplanet.am.smtpport": "25",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/default/sdk.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/sdk",
-  "amconfig.header.cachingreplica": {
-    "com.iplanet.am.sdk.cache.maxSize": "10000",
-  },
-  "amconfig.header.datastore": {
-    "com.sun.identity.sm.enableDataStoreNotification": false,
-    "com.sun.identity.sm.notification.threadpool.size": "1",
-  },
-  "amconfig.header.eventservice": {
-    "com.iplanet.am.event.connection.delay.between.retries": "3000",
-    "com.iplanet.am.event.connection.ldap.error.codes.retries": "80,81,91",
-    "com.iplanet.am.event.connection.num.retries": "3",
-    "com.sun.am.event.connection.disable.list": "aci,um,sm",
-  },
-  "amconfig.header.ldapconnection": {
-    "com.iplanet.am.ldap.connection.delay.between.retries": "1000",
-    "com.iplanet.am.ldap.connection.ldap.error.codes.retries": "80,81,91",
-    "com.iplanet.am.ldap.connection.num.retries": "3",
-  },
-  "amconfig.header.sdktimetoliveconfig": {
-    "com.iplanet.am.sdk.cache.entry.default.expire.time": "30",
-    "com.iplanet.am.sdk.cache.entry.expire.enabled": false,
-    "com.iplanet.am.sdk.cache.entry.user.expire.time": "15",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/default/security.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/security",
-  "amconfig.header.cookie": {
-    "com.iplanet.am.cookie.encode": false,
-    "com.iplanet.am.cookie.name": "iPlanetDirectoryPro",
-    "com.iplanet.am.cookie.secure": false,
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": "",
-    "com.sun.identity.crl.cache.directory.mtlsenabled": false,
-    "com.sun.identity.crl.cache.directory.password": null,
-    "com.sun.identity.crl.cache.directory.port": "",
-    "com.sun.identity.crl.cache.directory.searchattr": "",
-    "com.sun.identity.crl.cache.directory.searchlocs": "",
-    "com.sun.identity.crl.cache.directory.ssl": false,
-    "com.sun.identity.crl.cache.directory.user": "",
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": "@AM_ENC_PWD@",
-    "am.encryption.secret.enabled": false,
-    "am.encryption.secret.keystoreType": "JCEKS",
-    "com.iplanet.security.SecureRandomFactoryImpl": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    "com.iplanet.security.encryptor": "com.iplanet.services.util.JCEEncryption",
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": "",
-    "com.sun.identity.authentication.ocsp.responder.url": "",
-    "com.sun.identity.authentication.ocspCheck": false,
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": "test",
-    "com.sun.identity.saml.xmlsig.keypass": "%BASE_DIR%/security/secrets/default/.keypass",
-    "com.sun.identity.saml.xmlsig.keystore": "%BASE_DIR%/security/keystores/keystore.jceks",
-    "com.sun.identity.saml.xmlsig.storepass": "%BASE_DIR%/security/secrets/default/.storepass",
-    "com.sun.identity.saml.xmlsig.storetype": "JCEKS",
-  },
   "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": false,
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": "16384",
+    "com.iplanet.am.clientIPCheckEnabled": {
+      "inherited": true,
+      "value": false,
+    },
+    "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
+      "inherited": true,
+      "value": "16384",
+    },
   },
 }
 `;
 
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/default/session.default.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04/session.properties.server.json 1`] = `
 {
-  "_id": "null/properties/session",
+  "_id": "04/properties/session",
   "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": "60",
-    "com.iplanet.services.stats.directory": "%BASE_DIR%/var/stats",
-    "com.iplanet.services.stats.state": "file",
-    "com.sun.am.session.enableHostLookUp": false,
+    "com.iplanet.am.stats.interval": {
+      "inherited": true,
+      "value": "60",
+    },
+    "com.iplanet.services.stats.directory": {
+      "inherited": true,
+      "value": "%BASE_DIR%/var/stats",
+    },
+    "com.iplanet.services.stats.state": {
+      "inherited": true,
+      "value": "file",
+    },
+    "com.sun.am.session.enableHostLookUp": {
+      "inherited": true,
+      "value": false,
+    },
   },
   "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": "10",
-    "com.iplanet.am.notification.threadpool.threshold": "5000",
+    "com.iplanet.am.notification.threadpool.size": {
+      "inherited": true,
+      "value": "10",
+    },
+    "com.iplanet.am.notification.threadpool.threshold": {
+      "inherited": true,
+      "value": "5000",
+    },
   },
   "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": "3",
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": "5000",
+    "com.iplanet.am.session.invalidsessionmaxtime": {
+      "inherited": true,
+      "value": "3",
+    },
+    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
+      "inherited": true,
+      "value": "5000",
+    },
   },
   "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": true,
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.: serverExportTestDir3/default/uma.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": "default",
-    "org.forgerock.services.resourcesets.store.max.connections": "10",
-    "org.forgerock.services.resourcesets.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": "",
-    "org.forgerock.services.resourcesets.store.heartbeat": "10",
-    "org.forgerock.services.resourcesets.store.loginid": "",
-    "org.forgerock.services.resourcesets.store.mtls.enabled": "",
-    "org.forgerock.services.resourcesets.store.password": null,
-    "org.forgerock.services.resourcesets.store.ssl.enabled": "",
-    "org.forgerock.services.resourcesets.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": "default",
-    "org.forgerock.services.uma.labels.store.max.connections": "2",
-    "org.forgerock.services.uma.labels.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": "",
-    "org.forgerock.services.uma.labels.store.heartbeat": "10",
-    "org.forgerock.services.uma.labels.store.loginid": "",
-    "org.forgerock.services.uma.labels.store.mtls.enabled": "",
-    "org.forgerock.services.uma.labels.store.password": null,
-    "org.forgerock.services.uma.labels.store.ssl.enabled": "",
-    "org.forgerock.services.uma.labels.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": "default",
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": "10",
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": "",
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": "10",
-    "org.forgerock.services.uma.pendingrequests.store.loginid": "",
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": "",
-    "org.forgerock.services.uma.pendingrequests.store.password": null,
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": "",
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": "default",
-    "org.forgerock.services.umaaudit.store.max.connections": "10",
-    "org.forgerock.services.umaaudit.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": "",
-    "org.forgerock.services.umaaudit.store.heartbeat": "10",
-    "org.forgerock.services.umaaudit.store.loginid": "",
-    "org.forgerock.services.umaaudit.store.mtls.enabled": "",
-    "org.forgerock.services.umaaudit.store.password": null,
-    "org.forgerock.services.umaaudit.store.ssl.enabled": "",
-    "org.forgerock.services.umaaudit.store.starttls.enabled": "",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties. 1`] = `0`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties. 2`] = `""`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/01/advanced.properties.server.json 1`] = `
-{
-  "_id": "01/properties/advanced",
-  "bootstrap.file": "/root/.openamcfg/AMConfig_usr_local_tomcat_webapps_am_",
-  "com.iplanet.am.lbcookie.value": "01",
-  "com.iplanet.am.serverMode": true,
-  "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
-  "com.sun.embedded.replicationport": "",
-  "com.sun.embedded.sync.servers": "on",
-  "com.sun.identity.common.systemtimerpool.size": "3",
-  "com.sun.identity.sm.sms_object_class_name": "com.sun.identity.sm.SmsWrapperObject",
-  "com.sun.identity.urlconnection.useCache": false,
-  "opensso.protocol.handler.pkgs": "",
-  "org.forgerock.embedded.dsadminport": "4444",
+    "com.sun.am.session.caseInsensitiveDN": {
+      "inherited": true,
+      "value": true,
+    },
+  },
 }
 `;
 
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/01/cts.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export --all-separate --directory serverExportTestDir5": should export all servers to separate files in the directory serverExportTestDir5: serverExportTestDir5/04/uma.properties.server.json 1`] = `
 {
-  "_id": "01/properties/cts",
-  "amconfig.org.forgerock.services.cts.store.common.section": {
-    "org.forgerock.services.cts.store.location": {
+  "_id": "04/properties/uma",
+  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+    "org.forgerock.services.resourcesets.store.location": {
       "inherited": true,
       "value": "default",
     },
-    "org.forgerock.services.cts.store.max.connections": {
+    "org.forgerock.services.resourcesets.store.max.connections": {
       "inherited": true,
-      "value": "100",
+      "value": "10",
     },
-    "org.forgerock.services.cts.store.page.size": {
+    "org.forgerock.services.resourcesets.store.root.suffix": {
       "inherited": true,
-      "value": "0",
+      "value": "",
     },
-    "org.forgerock.services.cts.store.root.suffix": {
+  },
+  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+    "org.forgerock.services.resourcesets.store.directory.name": {
       "inherited": true,
       "value": "",
     },
-    "org.forgerock.services.cts.store.vlv.page.size": {
+    "org.forgerock.services.resourcesets.store.heartbeat": {
       "inherited": true,
-      "value": "1000",
+      "value": "10",
     },
-  },
-  "amconfig.org.forgerock.services.cts.store.external.section": {
-    "org.forgerock.services.cts.store.affinity.enabled": {
+    "org.forgerock.services.resourcesets.store.loginid": {
       "inherited": true,
-      "value": null,
+      "value": "",
     },
-    "org.forgerock.services.cts.store.directory.name": {
+    "org.forgerock.services.resourcesets.store.mtls.enabled": {
       "inherited": true,
       "value": "",
     },
-    "org.forgerock.services.cts.store.heartbeat": {
+    "org.forgerock.services.resourcesets.store.password": {
       "inherited": true,
-      "value": "10",
+      "value": null,
     },
-    "org.forgerock.services.cts.store.loginid": {
+    "org.forgerock.services.resourcesets.store.ssl.enabled": {
       "inherited": true,
       "value": "",
     },
-    "org.forgerock.services.cts.store.mtls.enabled": {
+    "org.forgerock.services.resourcesets.store.starttls.enabled": {
       "inherited": true,
       "value": "",
     },
-    "org.forgerock.services.cts.store.password": {
+  },
+  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+    "org.forgerock.services.uma.labels.store.location": {
       "inherited": true,
-      "value": null,
+      "value": "default",
     },
-    "org.forgerock.services.cts.store.ssl.enabled": {
+    "org.forgerock.services.uma.labels.store.max.connections": {
       "inherited": true,
-      "value": "",
+      "value": "2",
     },
-    "org.forgerock.services.cts.store.starttls.enabled": {
+    "org.forgerock.services.uma.labels.store.root.suffix": {
       "inherited": true,
       "value": "",
     },
   },
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/01/directoryConfiguration.properties.server.json 1`] = `
-{
-  "_id": "01/properties/directoryConfiguration",
-  "directoryConfiguration": {
-    "bindDn": "cn=Directory Manager",
-    "bindPassword": null,
-    "maxConnectionPool": 10,
-    "minConnectionPool": 1,
-    "mtlsAlias": "",
-    "mtlsEnabled": false,
-    "mtlsKeyPasswordFile": "",
-    "mtlsKeyStoreFile": "",
-    "mtlsKeyStorePasswordFile": "",
-    "mtlsKeyStoreType": null,
-  },
-  "directoryServers": [
-    {
-      "connectionType": "SSL",
-      "hostName": "localhost",
-      "portNumber": "50636",
-      "serverName": "Server1",
-    },
-  ],
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/01/general.properties.server.json 1`] = `
-{
-  "_id": "01/properties/general",
-  "amconfig.header.debug": {
-    "com.iplanet.services.debug.directory": {
+  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+    "org.forgerock.services.uma.labels.store.directory.name": {
       "inherited": true,
-      "value": "%BASE_DIR%/var/debug",
+      "value": "",
     },
-    "com.iplanet.services.debug.level": {
+    "org.forgerock.services.uma.labels.store.heartbeat": {
       "inherited": true,
-      "value": "off",
+      "value": "10",
     },
-    "com.sun.services.debug.mergeall": {
+    "org.forgerock.services.uma.labels.store.loginid": {
       "inherited": true,
-      "value": "on",
+      "value": "",
     },
-  },
-  "amconfig.header.installdir": {
-    "com.iplanet.am.locale": {
-      "inherited": false,
-      "value": "en_US",
+    "org.forgerock.services.uma.labels.store.mtls.enabled": {
+      "inherited": true,
+      "value": "",
     },
-    "com.iplanet.am.util.xml.validating": {
+    "org.forgerock.services.uma.labels.store.password": {
       "inherited": true,
-      "value": "off",
+      "value": null,
     },
-    "com.iplanet.services.configpath": {
-      "inherited": false,
-      "value": "/root/am",
+    "org.forgerock.services.uma.labels.store.ssl.enabled": {
+      "inherited": true,
+      "value": "",
     },
-    "com.sun.identity.client.notification.url": {
+    "org.forgerock.services.uma.labels.store.starttls.enabled": {
       "inherited": true,
-      "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+      "value": "",
     },
   },
-  "amconfig.header.mailserver": {
-    "com.iplanet.am.smtphost": {
+  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+    "org.forgerock.services.uma.pendingrequests.store.location": {
       "inherited": true,
-      "value": "localhost",
+      "value": "default",
     },
-    "com.iplanet.am.smtpport": {
+    "org.forgerock.services.uma.pendingrequests.store.max.connections": {
       "inherited": true,
-      "value": "25",
+      "value": "10",
     },
-  },
-  "amconfig.header.site": {
-    "singleChoiceSite": "[Empty]",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/01/sdk.properties.server.json 1`] = `
-{
-  "_id": "01/properties/sdk",
-  "amconfig.header.cachingreplica": {
-    "com.iplanet.am.sdk.cache.maxSize": {
+    "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
       "inherited": true,
-      "value": "10000",
+      "value": "",
     },
   },
-  "amconfig.header.datastore": {
-    "com.sun.identity.sm.enableDataStoreNotification": {
-      "inherited": false,
-      "value": true,
+  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+    "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+      "inherited": true,
+      "value": "",
     },
-    "com.sun.identity.sm.notification.threadpool.size": {
+    "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
       "inherited": true,
-      "value": "1",
+      "value": "10",
     },
-  },
-  "amconfig.header.eventservice": {
-    "com.iplanet.am.event.connection.delay.between.retries": {
+    "org.forgerock.services.uma.pendingrequests.store.loginid": {
       "inherited": true,
-      "value": "3000",
+      "value": "",
     },
-    "com.iplanet.am.event.connection.ldap.error.codes.retries": {
+    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
       "inherited": true,
-      "value": "80,81,91",
+      "value": "",
     },
-    "com.iplanet.am.event.connection.num.retries": {
+    "org.forgerock.services.uma.pendingrequests.store.password": {
       "inherited": true,
-      "value": "3",
+      "value": null,
     },
-    "com.sun.am.event.connection.disable.list": {
-      "inherited": false,
-      "value": "aci,um",
+    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+      "inherited": true,
+      "value": "",
+    },
+    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+      "inherited": true,
+      "value": "",
     },
   },
-  "amconfig.header.ldapconnection": {
-    "com.iplanet.am.ldap.connection.delay.between.retries": {
+  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+    "org.forgerock.services.umaaudit.store.location": {
       "inherited": true,
-      "value": "1000",
+      "value": "default",
     },
-    "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-      "inherited": false,
-      "value": "80,81,91",
+    "org.forgerock.services.umaaudit.store.max.connections": {
+      "inherited": true,
+      "value": "10",
     },
-    "com.iplanet.am.ldap.connection.num.retries": {
+    "org.forgerock.services.umaaudit.store.root.suffix": {
       "inherited": true,
-      "value": "3",
+      "value": "",
     },
   },
-  "amconfig.header.sdktimetoliveconfig": {
-    "com.iplanet.am.sdk.cache.entry.default.expire.time": {
+  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+    "org.forgerock.services.umaaudit.store.directory.name": {
       "inherited": true,
-      "value": "30",
+      "value": "",
     },
-    "com.iplanet.am.sdk.cache.entry.expire.enabled": {
+    "org.forgerock.services.umaaudit.store.heartbeat": {
       "inherited": true,
-      "value": false,
+      "value": "10",
     },
-    "com.iplanet.am.sdk.cache.entry.user.expire.time": {
+    "org.forgerock.services.umaaudit.store.loginid": {
       "inherited": true,
-      "value": "15",
+      "value": "",
+    },
+    "org.forgerock.services.umaaudit.store.mtls.enabled": {
+      "inherited": true,
+      "value": "",
+    },
+    "org.forgerock.services.umaaudit.store.password": {
+      "inherited": true,
+      "value": null,
+    },
+    "org.forgerock.services.umaaudit.store.ssl.enabled": {
+      "inherited": true,
+      "value": "",
+    },
+    "org.forgerock.services.umaaudit.store.starttls.enabled": {
+      "inherited": true,
+      "value": "",
+    },
+  },
+}
+`;
+
+exports[`frodo server export "frodo server export --server-id 01 --directory serverExportTestDir6": should export the server with server id "01". 1`] = `0`;
+
+exports[`frodo server export "frodo server export --server-id 01 --directory serverExportTestDir6": should export the server with server id "01". 2`] = `""`;
+
+exports[`frodo server export "frodo server export --server-id 01 --directory serverExportTestDir6": should export the server with server id "01".: serverExportTestDir6/01.server.json 1`] = `
+{
+  "defaultProperties": {},
+  "meta": Any<Object>,
+  "server": {
+    "01": {
+      "_id": "01",
+      "properties": {
+        "advanced": "file://01/advanced.properties.server.json",
+        "cts": "file://01/cts.properties.server.json",
+        "directoryConfiguration": "file://01/directoryConfiguration.properties.server.json",
+        "general": "file://01/general.properties.server.json",
+        "sdk": "file://01/sdk.properties.server.json",
+        "security": "file://01/security.properties.server.json",
+        "session": "file://01/session.properties.server.json",
+        "uma": "file://01/uma.properties.server.json",
+      },
+      "siteName": null,
+      "url": "http://localhost:8080/am",
+    },
+  },
+}
+`;
+
+exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --no-extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am". 1`] = `0`;
+
+exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --no-extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am". 2`] = `""`;
+
+exports[`frodo server export "frodo server export --server-url http://localhost:8081/am --no-extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am".: serverExportTestDir2/03.server.json 1`] = `
+{
+  "defaultProperties": {},
+  "meta": Any<Object>,
+  "server": {
+    "03": {
+      "_id": "03",
+      "properties": {
+        "advanced": {
+          "_id": "03/properties/advanced",
+          "com.iplanet.am.lbcookie.value": "03",
+        },
+        "cts": {
+          "_id": "03/properties/cts",
+          "amconfig.org.forgerock.services.cts.store.common.section": {
+            "org.forgerock.services.cts.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.cts.store.max.connections": {
+              "inherited": true,
+              "value": "100",
+            },
+            "org.forgerock.services.cts.store.page.size": {
+              "inherited": true,
+              "value": "0",
+            },
+            "org.forgerock.services.cts.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.vlv.page.size": {
+              "inherited": true,
+              "value": "1000",
+            },
+          },
+          "amconfig.org.forgerock.services.cts.store.external.section": {
+            "org.forgerock.services.cts.store.affinity.enabled": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.cts.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+        "directoryConfiguration": {
+          "_id": "03/properties/directoryConfiguration",
+          "directoryConfiguration": {
+            "bindDn": "cn=Directory Manager",
+            "bindPassword": null,
+            "maxConnectionPool": 10,
+            "minConnectionPool": 1,
+            "mtlsAlias": "",
+            "mtlsEnabled": false,
+            "mtlsKeyPasswordFile": "",
+            "mtlsKeyStoreFile": "",
+            "mtlsKeyStorePasswordFile": "",
+            "mtlsKeyStoreType": null,
+          },
+          "directoryServers": [
+            {
+              "connectionType": "SSL",
+              "hostName": "localhost",
+              "portNumber": "50636",
+              "serverName": "Server1",
+            },
+          ],
+        },
+        "general": {
+          "_id": "03/properties/general",
+          "amconfig.header.debug": {
+            "com.iplanet.services.debug.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/debug",
+            },
+            "com.iplanet.services.debug.level": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.sun.services.debug.mergeall": {
+              "inherited": true,
+              "value": "on",
+            },
+          },
+          "amconfig.header.installdir": {
+            "com.iplanet.am.locale": {
+              "inherited": true,
+              "value": "en_US",
+            },
+            "com.iplanet.am.util.xml.validating": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.iplanet.services.configpath": {
+              "inherited": true,
+              "value": "%BASE_DIR%",
+            },
+            "com.sun.identity.client.notification.url": {
+              "inherited": true,
+              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+            },
+          },
+          "amconfig.header.mailserver": {
+            "com.iplanet.am.smtphost": {
+              "inherited": true,
+              "value": "localhost",
+            },
+            "com.iplanet.am.smtpport": {
+              "inherited": true,
+              "value": "25",
+            },
+          },
+          "amconfig.header.site": {
+            "singleChoiceSite": "testsite",
+          },
+        },
+        "sdk": {
+          "_id": "03/properties/sdk",
+          "amconfig.header.cachingreplica": {
+            "com.iplanet.am.sdk.cache.maxSize": {
+              "inherited": true,
+              "value": "10000",
+            },
+          },
+          "amconfig.header.datastore": {
+            "com.sun.identity.sm.enableDataStoreNotification": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.sm.notification.threadpool.size": {
+              "inherited": true,
+              "value": "1",
+            },
+          },
+          "amconfig.header.eventservice": {
+            "com.iplanet.am.event.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "3000",
+            },
+            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.event.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+            "com.sun.am.event.connection.disable.list": {
+              "inherited": true,
+              "value": "aci,um,sm",
+            },
+          },
+          "amconfig.header.ldapconnection": {
+            "com.iplanet.am.ldap.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "1000",
+            },
+            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.ldap.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+          },
+          "amconfig.header.sdktimetoliveconfig": {
+            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
+              "inherited": true,
+              "value": "30",
+            },
+            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
+              "inherited": true,
+              "value": "15",
+            },
+          },
+        },
+        "security": {
+          "_id": "03/properties/security",
+          "amconfig.header.cookie": {
+            "com.iplanet.am.cookie.encode": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.cookie.name": {
+              "inherited": true,
+              "value": "iPlanetDirectoryPro",
+            },
+            "com.iplanet.am.cookie.secure": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.crlcache": {
+            "com.sun.identity.crl.cache.directory.host": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.mtlsenabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "com.sun.identity.crl.cache.directory.port": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchattr": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchlocs": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.ssl": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.user": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.header.deserialisationwhitelist": {
+            "openam.deserialisation.classes.whitelist": {
+              "inherited": true,
+              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+            },
+          },
+          "amconfig.header.encryption": {
+            "am.encryption.pwd": {
+              "inherited": true,
+              "value": "@AM_ENC_PWD@",
+            },
+            "am.encryption.secret.alias": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "am.encryption.secret.keyPass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreFile": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystorePass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreType": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+            "com.iplanet.security.SecureRandomFactoryImpl": {
+              "inherited": true,
+              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
+            },
+            "com.iplanet.security.encryptor": {
+              "inherited": true,
+              "value": "com.iplanet.services.util.JCEEncryption",
+            },
+          },
+          "amconfig.header.ocsp.check": {
+            "com.sun.identity.authentication.ocsp.responder.nickname": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocsp.responder.url": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocspCheck": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.securitykey": {
+            "com.sun.identity.saml.xmlsig.certalias": {
+              "inherited": true,
+              "value": "test",
+            },
+            "com.sun.identity.saml.xmlsig.keypass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.keypass",
+            },
+            "com.sun.identity.saml.xmlsig.keystore": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
+            },
+            "com.sun.identity.saml.xmlsig.storepass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.storepass",
+            },
+            "com.sun.identity.saml.xmlsig.storetype": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+          },
+          "amconfig.header.validation": {
+            "com.iplanet.am.clientIPCheckEnabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
+              "inherited": true,
+              "value": "16384",
+            },
+          },
+        },
+        "session": {
+          "_id": "03/properties/session",
+          "amconfig.header.sessionlogging": {
+            "com.iplanet.am.stats.interval": {
+              "inherited": true,
+              "value": "60",
+            },
+            "com.iplanet.services.stats.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/stats",
+            },
+            "com.iplanet.services.stats.state": {
+              "inherited": true,
+              "value": "file",
+            },
+            "com.sun.am.session.enableHostLookUp": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.sessionnotification": {
+            "com.iplanet.am.notification.threadpool.size": {
+              "inherited": true,
+              "value": "10",
+            },
+            "com.iplanet.am.notification.threadpool.threshold": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionthresholds": {
+            "com.iplanet.am.session.invalidsessionmaxtime": {
+              "inherited": true,
+              "value": "3",
+            },
+            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionvalidation": {
+            "com.sun.am.session.caseInsensitiveDN": {
+              "inherited": true,
+              "value": true,
+            },
+          },
+        },
+        "uma": {
+          "_id": "03/properties/uma",
+          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+            "org.forgerock.services.resourcesets.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.resourcesets.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+            "org.forgerock.services.resourcesets.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.resourcesets.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+            "org.forgerock.services.uma.labels.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.labels.store.max.connections": {
+              "inherited": true,
+              "value": "2",
+            },
+            "org.forgerock.services.uma.labels.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+            "org.forgerock.services.uma.labels.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.labels.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.labels.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+            "org.forgerock.services.uma.pendingrequests.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+            "org.forgerock.services.umaaudit.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.umaaudit.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+            "org.forgerock.services.umaaudit.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.umaaudit.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+      },
+      "siteName": "testsite",
+      "url": "http://localhost:8081/am",
     },
   },
 }
 `;
 
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/01/security.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with default properties 1`] = `0`;
+
+exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with default properties 2`] = `""`;
+
+exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with default properties: serverExportTestDir4/01.server.json 1`] = `
 {
-  "_id": "01/properties/security",
-  "amconfig.header.cookie": {
-    "com.iplanet.am.cookie.encode": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.am.cookie.name": {
-      "inherited": true,
-      "value": "iPlanetDirectoryPro",
-    },
-    "com.iplanet.am.cookie.secure": {
-      "inherited": true,
-      "value": false,
-    },
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.mtlsenabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "com.sun.identity.crl.cache.directory.port": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchattr": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.searchlocs": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.crl.cache.directory.ssl": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.sun.identity.crl.cache.directory.user": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": {
-      "inherited": true,
-      "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-    },
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": {
-      "inherited": false,
-      "value": "efSYcwIhr7uKH30rgciGTVTFzb63LhYu",
-    },
-    "am.encryption.secret.alias": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.enabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "am.encryption.secret.keyPass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreFile": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystorePass": {
-      "inherited": true,
-      "value": null,
-    },
-    "am.encryption.secret.keystoreType": {
-      "inherited": true,
-      "value": "JCEKS",
-    },
-    "com.iplanet.security.SecureRandomFactoryImpl": {
-      "inherited": true,
-      "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    },
-    "com.iplanet.security.encryptor": {
-      "inherited": true,
-      "value": "com.iplanet.services.util.JCEEncryption",
-    },
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": {
-      "inherited": true,
-      "value": "",
-    },
-    "com.sun.identity.authentication.ocsp.responder.url": {
-      "inherited": true,
-      "value": "",
+  "defaultProperties": {
+    "advanced": {
+      "_id": "null/properties/advanced",
+      "com.iplanet.am.buildDate": "2024-March-28 16:00",
+      "com.iplanet.am.buildRevision": "89116d59a1ebe73ed1931dd3649adb7f217cd06b",
+      "com.iplanet.am.buildVersion": "ForgeRock Access Management 7.5.0",
+      "com.iplanet.am.cookie.c66Encode": true,
+      "com.iplanet.am.daemons": "securid",
+      "com.iplanet.am.directory.ssl.enabled": false,
+      "com.iplanet.am.installdir": "%BASE_DIR%",
+      "com.iplanet.am.jssproxy.SSLTrustHostList": "",
+      "com.iplanet.am.jssproxy.checkSubjectAltName": false,
+      "com.iplanet.am.jssproxy.resolveIPAddress": false,
+      "com.iplanet.am.jssproxy.trustAllServerCerts": false,
+      "com.iplanet.am.lbcookie.name": "amlbcookie",
+      "com.iplanet.am.lbcookie.value": "00",
+      "com.iplanet.am.logstatus": "ACTIVE",
+      "com.iplanet.am.pcookie.name": "DProPCookie",
+      "com.iplanet.am.profile.host": "%SERVER_HOST%",
+      "com.iplanet.am.profile.port": "%SERVER_PORT%",
+      "com.iplanet.am.serverMode": true,
+      "com.iplanet.am.session.agentSessionIdleTime": "1440",
+      "com.iplanet.am.session.client.polling.enable": false,
+      "com.iplanet.am.session.client.polling.period": "180",
+      "com.iplanet.am.session.httpSession.enabled": "true",
+      "com.iplanet.am.version": "ForgeRock Access Management 7.5.0 Build 89116d59a1ebe73ed1931dd3649adb7f217cd06b (2024-March-28 16:00)",
+      "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
+      "com.sun.am.event.notification.expire.time": "5",
+      "com.sun.embedded.sync.servers": "on",
+      "com.sun.identity.am.cookie.check": false,
+      "com.sun.identity.auth.cookieName": "AMAuthCookie",
+      "com.sun.identity.authentication.multiple.tabs.used": false,
+      "com.sun.identity.authentication.setCookieToAllDomains": true,
+      "com.sun.identity.authentication.special.users": "cn=dsameuser,ou=DSAME Users,%ROOT_SUFFIX%|cn=amService-UrlAccessAgent,ou=DSAME Users,%ROOT_SUFFIX%",
+      "com.sun.identity.authentication.super.user": "uid=amAdmin,ou=People,%ROOT_SUFFIX%",
+      "com.sun.identity.authentication.uniqueCookieName": "sunIdentityServerAuthNServer",
+      "com.sun.identity.cookie.httponly": true,
+      "com.sun.identity.cookie.samesite": "off",
+      "com.sun.identity.enableUniqueSSOTokenCookie": false,
+      "com.sun.identity.jss.donotInstallAtHighestPriority": true,
+      "com.sun.identity.monitoring": "off",
+      "com.sun.identity.monitoring.local.conn.server.url": "service:jmx:rmi://",
+      "com.sun.identity.password.deploymentDescriptor": "%SERVER_URI%",
+      "com.sun.identity.plugin.configuration.class": "@CONFIGURATION_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.datastore.class.default": "@DATASTORE_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.log.class": "@LOG_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.monitoring.agent.class": "@MONAGENT_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.monitoring.saml2.class": "@MONSAML2_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.session.class": "@SESSION_PROVIDER_CLASS@",
+      "com.sun.identity.policy.Policy.policy_evaluation_weights": "10:10:10",
+      "com.sun.identity.policy.resultsCacheMaxSize": "10000",
+      "com.sun.identity.policy.resultsCacheResourceCap": "20",
+      "com.sun.identity.saml.xmlsig.keyprovider.class": "@XMLSIG_KEY_PROVIDER@",
+      "com.sun.identity.saml.xmlsig.passwordDecoder": "@PASSWORD_DECODER_CLASS@",
+      "com.sun.identity.saml.xmlsig.signatureprovider.class": "@XML_SIGNATURE_PROVIDER@",
+      "com.sun.identity.security.checkcaller": false,
+      "com.sun.identity.server.fqdnMap[dnsfirst]": "dnsfirst",
+      "com.sun.identity.server.fqdnMap[hello]": "hello",
+      "com.sun.identity.server.fqdnMap[localhost]": "localhost",
+      "com.sun.identity.server.fqdnMap[openam-frodo-dev.classic.com]": "openam-frodo-dev.classic.com",
+      "com.sun.identity.server.fqdnMap[openam]": "openam",
+      "com.sun.identity.server.fqdnMap[secondDNS]": "secondDNS",
+      "com.sun.identity.session.repository.enableAttributeCompression": false,
+      "com.sun.identity.session.repository.enableCompression": false,
+      "com.sun.identity.session.repository.enableEncryption": false,
+      "com.sun.identity.sm.cache.ttl": "30",
+      "com.sun.identity.sm.cache.ttl.enable": false,
+      "com.sun.identity.url.readTimeout": "30000",
+      "com.sun.identity.webcontainer": "WEB_CONTAINER",
+      "dynamic.datastore.creation.enabled": false,
+      "openam.auth.destroy_session_after_upgrade": true,
+      "openam.auth.distAuthCookieName": "AMDistAuthCookie",
+      "openam.auth.session_property_upgrader": "org.forgerock.openam.authentication.service.DefaultSessionPropertyUpgrader",
+      "openam.auth.version.header.enabled": false,
+      "openam.authentication.ignore_goto_during_logout": false,
+      "openam.cdm.default.charset": "UTF-8",
+      "openam.forbidden.to.copy.headers": "connection",
+      "openam.forbidden.to.copy.request.headers": "connection",
+      "openam.oauth2.client.jwt.encryption.algorithm.allow.list": "RSA-OAEP,RSA-OAEP-256,ECDH-ES",
+      "openam.oauth2.client.jwt.unreasonable.lifetime.limit.minutes": "30",
+      "openam.retained.http.headers": "X-DSAMEVersion",
+      "openam.retained.http.request.headers": "X-DSAMEVersion",
+      "openam.serviceattributevalidator.classes.whitelist": "org.forgerock.openam.auth.nodes.validators.GreaterThanZeroValidator,org.forgerock.openam.auth.nodes.validators.HMACKeyLengthValidator,org.forgerock.openam.auth.nodes.validators.HmacSigningKeyValidator,org.forgerock.openam.auth.nodes.validators.PercentageValidator,org.forgerock.openam.auth.nodes.validators.QueryFilterValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyNameValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyValidator,org.forgerock.openam.auth.nodes.framework.validators.NodeValueValidator,org.forgerock.openam.audit.validation.PositiveIntegerValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.AlphaNumericValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.CodeLengthValidator,org.forgerock.openam.authentication.modules.persistentcookie.validation.SigningKeyValidator,com.sun.identity.common.configuration.DuplicateKeyMapValueValidator,com.sun.identity.common.configuration.AgentClientIpModeValueValidator,com.sun.identity.common.configuration.FilterModeValueValidator,com.sun.identity.common.configuration.GlobalMapValueValidator,com.sun.identity.common.configuration.ListValueValidator,com.sun.identity.common.configuration.MapValueValidator,com.sun.identity.common.configuration.ServerPropertyValidator,com.sun.identity.policy.ResourceComparatorValidator,com.sun.identity.sm.EmailValidator,com.sun.identity.sm.IPAddressValidator,com.sun.identity.sm.RequiredValueValidator,com.sun.identity.sm.ServerIDValidator,com.sun.identity.sm.SiteIDValidator,org.forgerock.openam.sm.validation.Base64EncodedBinaryValidator,org.forgerock.openam.sm.validation.BlankValueValidator,org.forgerock.openam.sm.validation.DurationValidator,org.forgerock.openam.sm.validation.EndpointValidator,org.forgerock.openam.sm.validation.HostnameValidator,org.forgerock.openam.sm.validation.PortValidator,org.forgerock.openam.sm.validation.SecretIdValidator,org.forgerock.openam.sm.validation.StatelessSessionSigningAlgorithmValidator,org.forgerock.openam.sm.validation.StringMapValidator,org.forgerock.openam.sm.validation.URLValidator,org.forgerock.openam.selfservice.config.KeyAliasValidator,org.forgerock.openam.sm.validation.UniqueIndexedValuesValidator,org.forgerock.openam.webhook.HttpHeaderValidator,org.forgerock.oauth2.core.ClientRedirectUriValidator",
+      "openam.session.case.sensitive.uuid": false,
+      "org.forgerock.allow.http.client.debug": false,
+      "org.forgerock.am.auth.chains.authindexuser.strict": true,
+      "org.forgerock.am.auth.node.otp.inSharedState": false,
+      "org.forgerock.am.auth.trees.authenticate.identified.identity": true,
+      "org.forgerock.openam.audit.additionalSuccessStatusCodesEnabled": true,
+      "org.forgerock.openam.audit.identity.activity.events.blacklist": "AM-ACCESS-ATTEMPT,AM-IDENTITY-CHANGE,AM-GROUP-CHANGE",
+      "org.forgerock.openam.auth.transactionauth.returnErrorOnAuthFailure": false,
+      "org.forgerock.openam.authLevel.excludeRequiredOrRequisite": false,
+      "org.forgerock.openam.authentication.forceAuth.enabled": false,
+      "org.forgerock.openam.console.autocomplete.enabled": true,
+      "org.forgerock.openam.core.resource.lookup.cache.enabled": true,
+      "org.forgerock.openam.core.sms.placeholder_api_enabled": "OFF",
+      "org.forgerock.openam.devices.recovery.use_insecure_storage": false,
+      "org.forgerock.openam.encryption.key.digest": "SHA1",
+      "org.forgerock.openam.encryption.key.iterations": "10000",
+      "org.forgerock.openam.encryption.key.size": "128",
+      "org.forgerock.openam.httpclienthandler.system.clients.connection.timeout": "10 seconds",
+      "org.forgerock.openam.httpclienthandler.system.clients.max.connections": "64",
+      "org.forgerock.openam.httpclienthandler.system.clients.pool.ttl": "-1",
+      "org.forgerock.openam.httpclienthandler.system.clients.response.timeout": "10 seconds",
+      "org.forgerock.openam.httpclienthandler.system.clients.retry.failed.requests.enabled": true,
+      "org.forgerock.openam.httpclienthandler.system.clients.reuse.connections.enabled": true,
+      "org.forgerock.openam.httpclienthandler.system.nonProxyHosts": "localhost,127.*,[::1],0.0.0.0,[::0]",
+      "org.forgerock.openam.httpclienthandler.system.proxy.enabled": false,
+      "org.forgerock.openam.httpclienthandler.system.proxy.password": null,
+      "org.forgerock.openam.httpclienthandler.system.proxy.uri": "",
+      "org.forgerock.openam.httpclienthandler.system.proxy.username": "",
+      "org.forgerock.openam.idm.attribute.names.lower.case": false,
+      "org.forgerock.openam.idrepo.ldapv3.passwordpolicy.allowDiagnosticMessage": false,
+      "org.forgerock.openam.idrepo.ldapv3.proxyauth.passwordreset.adminRequest": "isAdminPasswordChangeRequest",
+      "org.forgerock.openam.introspect.token.query.param.allowed": false,
+      "org.forgerock.openam.ldap.dncache.expire.time": "0",
+      "org.forgerock.openam.ldap.heartbeat.timeout": "10",
+      "org.forgerock.openam.ldap.keepalive.search.base": "",
+      "org.forgerock.openam.ldap.keepalive.search.filter": "(objectClass=*)",
+      "org.forgerock.openam.ldap.secure.protocol.version": "TLSv1.3,TLSv1.2",
+      "org.forgerock.openam.notifications.agents.enabled": true,
+      "org.forgerock.openam.oauth2.checkIssuerForIdTokenInfo": true,
+      "org.forgerock.openam.radius.server.context.cache.size": "5000",
+      "org.forgerock.openam.redirecturlvalidator.maxUrlLength": "2000",
+      "org.forgerock.openam.request.max.bytes.entity.size": "1048576",
+      "org.forgerock.openam.saml2.authenticatorlookup.skewAllowance": "60",
+      "org.forgerock.openam.scripting.maxinterpreterstackdepth": "10000",
+      "org.forgerock.openam.secrets.special.user.passwords.format": "ENCRYPTED_PLAIN",
+      "org.forgerock.openam.secrets.special.user.secret.refresh.seconds": "900",
+      "org.forgerock.openam.session.service.persistence.deleteAsynchronously": true,
+      "org.forgerock.openam.session.stateless.encryption.method": "A128CBC-HS256",
+      "org.forgerock.openam.session.stateless.rsa.padding": "RSA-OAEP-256",
+      "org.forgerock.openam.session.stateless.signing.allownone": false,
+      "org.forgerock.openam.showServletTraceInBrowser": false,
+      "org.forgerock.openam.slf4j.enableTraceInMessage": false,
+      "org.forgerock.openam.smtp.system.connect.timeout": "10000",
+      "org.forgerock.openam.smtp.system.socket.read.timeout": "10000",
+      "org.forgerock.openam.smtp.system.socket.write.timeout": "10000",
+      "org.forgerock.openam.sso.providers.list": "org.forgerock.openidconnect.ssoprovider.OpenIdConnectSSOProvider",
+      "org.forgerock.openam.timerpool.shutdown.retry.interval": "15000",
+      "org.forgerock.openam.timerpool.shutdown.retry.limit": "3",
+      "org.forgerock.openam.timerpool.shutdown.retry.multiplier": "1.5",
+      "org.forgerock.openam.trees.consumedstatedata.cache.size": "15",
+      "org.forgerock.openam.trees.ids.cache.size": "50",
+      "org.forgerock.openam.url.connectTimeout": "1000",
+      "org.forgerock.openam.xui.user.session.validation.enabled": true,
+      "org.forgerock.openidconnect.ssoprovider.maxcachesize": "5000",
+      "org.forgerock.security.entitlement.enforce.realm": true,
+      "org.forgerock.security.oauth2.enforce.sub.claim.uniqueness": true,
+      "org.forgerock.services.cts.store.reaper.enabled": true,
+      "org.forgerock.services.cts.store.ttlsupport.enabled": false,
+      "org.forgerock.services.cts.store.ttlsupport.exclusionlist": "",
+      "org.forgerock.services.default.store.max.connections": "",
+      "org.forgerock.services.default.store.min.connections": "",
+      "org.forgerock.services.openid.request.object.lifespan": "120000",
+      "securidHelper.ports": "58943",
     },
-    "com.sun.identity.authentication.ocspCheck": {
-      "inherited": true,
-      "value": false,
+    "cts": {
+      "_id": "null/properties/cts",
+      "amconfig.org.forgerock.services.cts.store.common.section": {
+        "org.forgerock.services.cts.store.location": "default",
+        "org.forgerock.services.cts.store.max.connections": "100",
+        "org.forgerock.services.cts.store.page.size": "0",
+        "org.forgerock.services.cts.store.root.suffix": "",
+        "org.forgerock.services.cts.store.vlv.page.size": "1000",
+      },
+      "amconfig.org.forgerock.services.cts.store.external.section": {
+        "org.forgerock.services.cts.store.directory.name": "",
+        "org.forgerock.services.cts.store.heartbeat": "10",
+        "org.forgerock.services.cts.store.loginid": "",
+        "org.forgerock.services.cts.store.mtls.enabled": "",
+        "org.forgerock.services.cts.store.password": null,
+        "org.forgerock.services.cts.store.ssl.enabled": "",
+        "org.forgerock.services.cts.store.starttls.enabled": "",
+      },
     },
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": {
-      "inherited": true,
-      "value": "test",
+    "general": {
+      "_id": "null/properties/general",
+      "amconfig.header.debug": {
+        "com.iplanet.services.debug.directory": "%BASE_DIR%/var/debug",
+        "com.iplanet.services.debug.level": "off",
+        "com.sun.services.debug.mergeall": "on",
+      },
+      "amconfig.header.installdir": {
+        "com.iplanet.am.locale": "en_US",
+        "com.iplanet.am.util.xml.validating": "off",
+        "com.iplanet.services.configpath": "%BASE_DIR%",
+        "com.sun.identity.client.notification.url": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+      },
+      "amconfig.header.mailserver": {
+        "com.iplanet.am.smtphost": "localhost",
+        "com.iplanet.am.smtpport": "25",
+      },
     },
-    "com.sun.identity.saml.xmlsig.keypass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.keypass",
+    "sdk": {
+      "_id": "null/properties/sdk",
+      "amconfig.header.cachingreplica": {
+        "com.iplanet.am.sdk.cache.maxSize": "10000",
+      },
+      "amconfig.header.datastore": {
+        "com.sun.identity.sm.enableDataStoreNotification": false,
+        "com.sun.identity.sm.notification.threadpool.size": "1",
+      },
+      "amconfig.header.eventservice": {
+        "com.iplanet.am.event.connection.delay.between.retries": "3000",
+        "com.iplanet.am.event.connection.ldap.error.codes.retries": "80,81,91",
+        "com.iplanet.am.event.connection.num.retries": "3",
+        "com.sun.am.event.connection.disable.list": "aci,um,sm",
+      },
+      "amconfig.header.ldapconnection": {
+        "com.iplanet.am.ldap.connection.delay.between.retries": "1000",
+        "com.iplanet.am.ldap.connection.ldap.error.codes.retries": "80,81,91",
+        "com.iplanet.am.ldap.connection.num.retries": "3",
+      },
+      "amconfig.header.sdktimetoliveconfig": {
+        "com.iplanet.am.sdk.cache.entry.default.expire.time": "30",
+        "com.iplanet.am.sdk.cache.entry.expire.enabled": false,
+        "com.iplanet.am.sdk.cache.entry.user.expire.time": "15",
+      },
     },
-    "com.sun.identity.saml.xmlsig.keystore": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/keystores/keystore.jceks",
+    "security": {
+      "_id": "null/properties/security",
+      "amconfig.header.cookie": {
+        "com.iplanet.am.cookie.encode": false,
+        "com.iplanet.am.cookie.name": "iPlanetDirectoryPro",
+        "com.iplanet.am.cookie.secure": false,
+      },
+      "amconfig.header.crlcache": {
+        "com.sun.identity.crl.cache.directory.host": "",
+        "com.sun.identity.crl.cache.directory.mtlsenabled": false,
+        "com.sun.identity.crl.cache.directory.password": null,
+        "com.sun.identity.crl.cache.directory.port": "",
+        "com.sun.identity.crl.cache.directory.searchattr": "",
+        "com.sun.identity.crl.cache.directory.searchlocs": "",
+        "com.sun.identity.crl.cache.directory.ssl": false,
+        "com.sun.identity.crl.cache.directory.user": "",
+      },
+      "amconfig.header.deserialisationwhitelist": {
+        "openam.deserialisation.classes.whitelist": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+      },
+      "amconfig.header.encryption": {
+        "am.encryption.pwd": "@AM_ENC_PWD@",
+        "am.encryption.secret.enabled": false,
+        "am.encryption.secret.keystoreType": "JCEKS",
+        "com.iplanet.security.SecureRandomFactoryImpl": "com.iplanet.am.util.SecureRandomFactoryImpl",
+        "com.iplanet.security.encryptor": "com.iplanet.services.util.JCEEncryption",
+      },
+      "amconfig.header.ocsp.check": {
+        "com.sun.identity.authentication.ocsp.responder.nickname": "",
+        "com.sun.identity.authentication.ocsp.responder.url": "",
+        "com.sun.identity.authentication.ocspCheck": false,
+      },
+      "amconfig.header.securitykey": {
+        "com.sun.identity.saml.xmlsig.certalias": "test",
+        "com.sun.identity.saml.xmlsig.keypass": "%BASE_DIR%/security/secrets/default/.keypass",
+        "com.sun.identity.saml.xmlsig.keystore": "%BASE_DIR%/security/keystores/keystore.jceks",
+        "com.sun.identity.saml.xmlsig.storepass": "%BASE_DIR%/security/secrets/default/.storepass",
+        "com.sun.identity.saml.xmlsig.storetype": "JCEKS",
+      },
+      "amconfig.header.validation": {
+        "com.iplanet.am.clientIPCheckEnabled": false,
+        "com.iplanet.services.comm.server.pllrequest.maxContentLength": "16384",
+      },
     },
-    "com.sun.identity.saml.xmlsig.storepass": {
-      "inherited": true,
-      "value": "%BASE_DIR%/security/secrets/default/.storepass",
+    "session": {
+      "_id": "null/properties/session",
+      "amconfig.header.sessionlogging": {
+        "com.iplanet.am.stats.interval": "60",
+        "com.iplanet.services.stats.directory": "%BASE_DIR%/var/stats",
+        "com.iplanet.services.stats.state": "file",
+        "com.sun.am.session.enableHostLookUp": false,
+      },
+      "amconfig.header.sessionnotification": {
+        "com.iplanet.am.notification.threadpool.size": "10",
+        "com.iplanet.am.notification.threadpool.threshold": "5000",
+      },
+      "amconfig.header.sessionthresholds": {
+        "com.iplanet.am.session.invalidsessionmaxtime": "3",
+        "org.forgerock.openam.session.service.access.persistence.caching.maxsize": "5000",
+      },
+      "amconfig.header.sessionvalidation": {
+        "com.sun.am.session.caseInsensitiveDN": true,
+      },
     },
-    "com.sun.identity.saml.xmlsig.storetype": {
-      "inherited": true,
-      "value": "JCEKS",
+    "uma": {
+      "_id": "null/properties/uma",
+      "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+        "org.forgerock.services.resourcesets.store.location": "default",
+        "org.forgerock.services.resourcesets.store.max.connections": "10",
+        "org.forgerock.services.resourcesets.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+        "org.forgerock.services.resourcesets.store.directory.name": "",
+        "org.forgerock.services.resourcesets.store.heartbeat": "10",
+        "org.forgerock.services.resourcesets.store.loginid": "",
+        "org.forgerock.services.resourcesets.store.mtls.enabled": "",
+        "org.forgerock.services.resourcesets.store.password": null,
+        "org.forgerock.services.resourcesets.store.ssl.enabled": "",
+        "org.forgerock.services.resourcesets.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+        "org.forgerock.services.uma.labels.store.location": "default",
+        "org.forgerock.services.uma.labels.store.max.connections": "2",
+        "org.forgerock.services.uma.labels.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+        "org.forgerock.services.uma.labels.store.directory.name": "",
+        "org.forgerock.services.uma.labels.store.heartbeat": "10",
+        "org.forgerock.services.uma.labels.store.loginid": "",
+        "org.forgerock.services.uma.labels.store.mtls.enabled": "",
+        "org.forgerock.services.uma.labels.store.password": null,
+        "org.forgerock.services.uma.labels.store.ssl.enabled": "",
+        "org.forgerock.services.uma.labels.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+        "org.forgerock.services.uma.pendingrequests.store.location": "default",
+        "org.forgerock.services.uma.pendingrequests.store.max.connections": "10",
+        "org.forgerock.services.uma.pendingrequests.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+        "org.forgerock.services.uma.pendingrequests.store.directory.name": "",
+        "org.forgerock.services.uma.pendingrequests.store.heartbeat": "10",
+        "org.forgerock.services.uma.pendingrequests.store.loginid": "",
+        "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": "",
+        "org.forgerock.services.uma.pendingrequests.store.password": null,
+        "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": "",
+        "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+        "org.forgerock.services.umaaudit.store.location": "default",
+        "org.forgerock.services.umaaudit.store.max.connections": "10",
+        "org.forgerock.services.umaaudit.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+        "org.forgerock.services.umaaudit.store.directory.name": "",
+        "org.forgerock.services.umaaudit.store.heartbeat": "10",
+        "org.forgerock.services.umaaudit.store.loginid": "",
+        "org.forgerock.services.umaaudit.store.mtls.enabled": "",
+        "org.forgerock.services.umaaudit.store.password": null,
+        "org.forgerock.services.umaaudit.store.ssl.enabled": "",
+        "org.forgerock.services.umaaudit.store.starttls.enabled": "",
+      },
     },
   },
-  "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": {
-      "inherited": true,
-      "value": false,
-    },
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
-      "inherited": true,
-      "value": "16384",
+  "server": {
+    "01": {
+      "_id": "01",
+      "properties": {
+        "advanced": {
+          "_id": "01/properties/advanced",
+          "bootstrap.file": "/root/.openamcfg/AMConfig_usr_local_tomcat_webapps_am_",
+          "com.iplanet.am.lbcookie.value": "01",
+          "com.iplanet.am.serverMode": true,
+          "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
+          "com.sun.embedded.replicationport": "",
+          "com.sun.embedded.sync.servers": "on",
+          "com.sun.identity.common.systemtimerpool.size": "3",
+          "com.sun.identity.sm.sms_object_class_name": "com.sun.identity.sm.SmsWrapperObject",
+          "com.sun.identity.urlconnection.useCache": false,
+          "opensso.protocol.handler.pkgs": "",
+          "org.forgerock.embedded.dsadminport": "4444",
+        },
+        "cts": {
+          "_id": "01/properties/cts",
+          "amconfig.org.forgerock.services.cts.store.common.section": {
+            "org.forgerock.services.cts.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.cts.store.max.connections": {
+              "inherited": true,
+              "value": "100",
+            },
+            "org.forgerock.services.cts.store.page.size": {
+              "inherited": true,
+              "value": "0",
+            },
+            "org.forgerock.services.cts.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.vlv.page.size": {
+              "inherited": true,
+              "value": "1000",
+            },
+          },
+          "amconfig.org.forgerock.services.cts.store.external.section": {
+            "org.forgerock.services.cts.store.affinity.enabled": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.cts.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+        "directoryConfiguration": {
+          "_id": "01/properties/directoryConfiguration",
+          "directoryConfiguration": {
+            "bindDn": "cn=Directory Manager",
+            "bindPassword": null,
+            "maxConnectionPool": 10,
+            "minConnectionPool": 1,
+            "mtlsAlias": "",
+            "mtlsEnabled": false,
+            "mtlsKeyPasswordFile": "",
+            "mtlsKeyStoreFile": "",
+            "mtlsKeyStorePasswordFile": "",
+            "mtlsKeyStoreType": null,
+          },
+          "directoryServers": [
+            {
+              "connectionType": "SSL",
+              "hostName": "localhost",
+              "portNumber": "50636",
+              "serverName": "Server1",
+            },
+          ],
+        },
+        "general": {
+          "_id": "01/properties/general",
+          "amconfig.header.debug": {
+            "com.iplanet.services.debug.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/debug",
+            },
+            "com.iplanet.services.debug.level": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.sun.services.debug.mergeall": {
+              "inherited": true,
+              "value": "on",
+            },
+          },
+          "amconfig.header.installdir": {
+            "com.iplanet.am.locale": {
+              "inherited": false,
+              "value": "en_US",
+            },
+            "com.iplanet.am.util.xml.validating": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.iplanet.services.configpath": {
+              "inherited": false,
+              "value": "/root/am",
+            },
+            "com.sun.identity.client.notification.url": {
+              "inherited": true,
+              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+            },
+          },
+          "amconfig.header.mailserver": {
+            "com.iplanet.am.smtphost": {
+              "inherited": true,
+              "value": "localhost",
+            },
+            "com.iplanet.am.smtpport": {
+              "inherited": true,
+              "value": "25",
+            },
+          },
+          "amconfig.header.site": {
+            "singleChoiceSite": "[Empty]",
+          },
+        },
+        "sdk": {
+          "_id": "01/properties/sdk",
+          "amconfig.header.cachingreplica": {
+            "com.iplanet.am.sdk.cache.maxSize": {
+              "inherited": true,
+              "value": "10000",
+            },
+          },
+          "amconfig.header.datastore": {
+            "com.sun.identity.sm.enableDataStoreNotification": {
+              "inherited": false,
+              "value": true,
+            },
+            "com.sun.identity.sm.notification.threadpool.size": {
+              "inherited": true,
+              "value": "1",
+            },
+          },
+          "amconfig.header.eventservice": {
+            "com.iplanet.am.event.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "3000",
+            },
+            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.event.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+            "com.sun.am.event.connection.disable.list": {
+              "inherited": false,
+              "value": "aci,um",
+            },
+          },
+          "amconfig.header.ldapconnection": {
+            "com.iplanet.am.ldap.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "1000",
+            },
+            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
+              "inherited": false,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.ldap.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+          },
+          "amconfig.header.sdktimetoliveconfig": {
+            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
+              "inherited": true,
+              "value": "30",
+            },
+            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
+              "inherited": true,
+              "value": "15",
+            },
+          },
+        },
+        "security": {
+          "_id": "01/properties/security",
+          "amconfig.header.cookie": {
+            "com.iplanet.am.cookie.encode": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.cookie.name": {
+              "inherited": true,
+              "value": "iPlanetDirectoryPro",
+            },
+            "com.iplanet.am.cookie.secure": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.crlcache": {
+            "com.sun.identity.crl.cache.directory.host": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.mtlsenabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "com.sun.identity.crl.cache.directory.port": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchattr": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchlocs": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.ssl": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.user": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.header.deserialisationwhitelist": {
+            "openam.deserialisation.classes.whitelist": {
+              "inherited": true,
+              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+            },
+          },
+          "amconfig.header.encryption": {
+            "am.encryption.pwd": {
+              "inherited": false,
+              "value": "efSYcwIhr7uKH30rgciGTVTFzb63LhYu",
+            },
+            "am.encryption.secret.alias": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "am.encryption.secret.keyPass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreFile": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystorePass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreType": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+            "com.iplanet.security.SecureRandomFactoryImpl": {
+              "inherited": true,
+              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
+            },
+            "com.iplanet.security.encryptor": {
+              "inherited": true,
+              "value": "com.iplanet.services.util.JCEEncryption",
+            },
+          },
+          "amconfig.header.ocsp.check": {
+            "com.sun.identity.authentication.ocsp.responder.nickname": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocsp.responder.url": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocspCheck": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.securitykey": {
+            "com.sun.identity.saml.xmlsig.certalias": {
+              "inherited": true,
+              "value": "test",
+            },
+            "com.sun.identity.saml.xmlsig.keypass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.keypass",
+            },
+            "com.sun.identity.saml.xmlsig.keystore": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
+            },
+            "com.sun.identity.saml.xmlsig.storepass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.storepass",
+            },
+            "com.sun.identity.saml.xmlsig.storetype": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+          },
+          "amconfig.header.validation": {
+            "com.iplanet.am.clientIPCheckEnabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
+              "inherited": true,
+              "value": "16384",
+            },
+          },
+        },
+        "session": {
+          "_id": "01/properties/session",
+          "amconfig.header.sessionlogging": {
+            "com.iplanet.am.stats.interval": {
+              "inherited": true,
+              "value": "60",
+            },
+            "com.iplanet.services.stats.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/stats",
+            },
+            "com.iplanet.services.stats.state": {
+              "inherited": true,
+              "value": "file",
+            },
+            "com.sun.am.session.enableHostLookUp": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.sessionnotification": {
+            "com.iplanet.am.notification.threadpool.size": {
+              "inherited": true,
+              "value": "10",
+            },
+            "com.iplanet.am.notification.threadpool.threshold": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionthresholds": {
+            "com.iplanet.am.session.invalidsessionmaxtime": {
+              "inherited": true,
+              "value": "3",
+            },
+            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionvalidation": {
+            "com.sun.am.session.caseInsensitiveDN": {
+              "inherited": true,
+              "value": true,
+            },
+          },
+        },
+        "uma": {
+          "_id": "01/properties/uma",
+          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+            "org.forgerock.services.resourcesets.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.resourcesets.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+            "org.forgerock.services.resourcesets.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.resourcesets.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+            "org.forgerock.services.uma.labels.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.labels.store.max.connections": {
+              "inherited": true,
+              "value": "2",
+            },
+            "org.forgerock.services.uma.labels.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+            "org.forgerock.services.uma.labels.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.labels.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.labels.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+            "org.forgerock.services.uma.pendingrequests.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+            "org.forgerock.services.umaaudit.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.umaaudit.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+            "org.forgerock.services.umaaudit.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.umaaudit.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+      },
+      "siteName": null,
+      "url": "http://localhost:8080/am",
     },
   },
 }
 `;
 
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/01/session.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with default properties: serverExportTestDir4/03.server.json 1`] = `
 {
-  "_id": "01/properties/session",
-  "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": {
-      "inherited": true,
-      "value": "60",
-    },
-    "com.iplanet.services.stats.directory": {
-      "inherited": true,
-      "value": "%BASE_DIR%/var/stats",
+  "defaultProperties": {
+    "advanced": {
+      "_id": "null/properties/advanced",
+      "com.iplanet.am.buildDate": "2024-March-28 16:00",
+      "com.iplanet.am.buildRevision": "89116d59a1ebe73ed1931dd3649adb7f217cd06b",
+      "com.iplanet.am.buildVersion": "ForgeRock Access Management 7.5.0",
+      "com.iplanet.am.cookie.c66Encode": true,
+      "com.iplanet.am.daemons": "securid",
+      "com.iplanet.am.directory.ssl.enabled": false,
+      "com.iplanet.am.installdir": "%BASE_DIR%",
+      "com.iplanet.am.jssproxy.SSLTrustHostList": "",
+      "com.iplanet.am.jssproxy.checkSubjectAltName": false,
+      "com.iplanet.am.jssproxy.resolveIPAddress": false,
+      "com.iplanet.am.jssproxy.trustAllServerCerts": false,
+      "com.iplanet.am.lbcookie.name": "amlbcookie",
+      "com.iplanet.am.lbcookie.value": "00",
+      "com.iplanet.am.logstatus": "ACTIVE",
+      "com.iplanet.am.pcookie.name": "DProPCookie",
+      "com.iplanet.am.profile.host": "%SERVER_HOST%",
+      "com.iplanet.am.profile.port": "%SERVER_PORT%",
+      "com.iplanet.am.serverMode": true,
+      "com.iplanet.am.session.agentSessionIdleTime": "1440",
+      "com.iplanet.am.session.client.polling.enable": false,
+      "com.iplanet.am.session.client.polling.period": "180",
+      "com.iplanet.am.session.httpSession.enabled": "true",
+      "com.iplanet.am.version": "ForgeRock Access Management 7.5.0 Build 89116d59a1ebe73ed1931dd3649adb7f217cd06b (2024-March-28 16:00)",
+      "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
+      "com.sun.am.event.notification.expire.time": "5",
+      "com.sun.embedded.sync.servers": "on",
+      "com.sun.identity.am.cookie.check": false,
+      "com.sun.identity.auth.cookieName": "AMAuthCookie",
+      "com.sun.identity.authentication.multiple.tabs.used": false,
+      "com.sun.identity.authentication.setCookieToAllDomains": true,
+      "com.sun.identity.authentication.special.users": "cn=dsameuser,ou=DSAME Users,%ROOT_SUFFIX%|cn=amService-UrlAccessAgent,ou=DSAME Users,%ROOT_SUFFIX%",
+      "com.sun.identity.authentication.super.user": "uid=amAdmin,ou=People,%ROOT_SUFFIX%",
+      "com.sun.identity.authentication.uniqueCookieName": "sunIdentityServerAuthNServer",
+      "com.sun.identity.cookie.httponly": true,
+      "com.sun.identity.cookie.samesite": "off",
+      "com.sun.identity.enableUniqueSSOTokenCookie": false,
+      "com.sun.identity.jss.donotInstallAtHighestPriority": true,
+      "com.sun.identity.monitoring": "off",
+      "com.sun.identity.monitoring.local.conn.server.url": "service:jmx:rmi://",
+      "com.sun.identity.password.deploymentDescriptor": "%SERVER_URI%",
+      "com.sun.identity.plugin.configuration.class": "@CONFIGURATION_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.datastore.class.default": "@DATASTORE_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.log.class": "@LOG_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.monitoring.agent.class": "@MONAGENT_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.monitoring.saml2.class": "@MONSAML2_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.session.class": "@SESSION_PROVIDER_CLASS@",
+      "com.sun.identity.policy.Policy.policy_evaluation_weights": "10:10:10",
+      "com.sun.identity.policy.resultsCacheMaxSize": "10000",
+      "com.sun.identity.policy.resultsCacheResourceCap": "20",
+      "com.sun.identity.saml.xmlsig.keyprovider.class": "@XMLSIG_KEY_PROVIDER@",
+      "com.sun.identity.saml.xmlsig.passwordDecoder": "@PASSWORD_DECODER_CLASS@",
+      "com.sun.identity.saml.xmlsig.signatureprovider.class": "@XML_SIGNATURE_PROVIDER@",
+      "com.sun.identity.security.checkcaller": false,
+      "com.sun.identity.server.fqdnMap[dnsfirst]": "dnsfirst",
+      "com.sun.identity.server.fqdnMap[hello]": "hello",
+      "com.sun.identity.server.fqdnMap[localhost]": "localhost",
+      "com.sun.identity.server.fqdnMap[openam-frodo-dev.classic.com]": "openam-frodo-dev.classic.com",
+      "com.sun.identity.server.fqdnMap[openam]": "openam",
+      "com.sun.identity.server.fqdnMap[secondDNS]": "secondDNS",
+      "com.sun.identity.session.repository.enableAttributeCompression": false,
+      "com.sun.identity.session.repository.enableCompression": false,
+      "com.sun.identity.session.repository.enableEncryption": false,
+      "com.sun.identity.sm.cache.ttl": "30",
+      "com.sun.identity.sm.cache.ttl.enable": false,
+      "com.sun.identity.url.readTimeout": "30000",
+      "com.sun.identity.webcontainer": "WEB_CONTAINER",
+      "dynamic.datastore.creation.enabled": false,
+      "openam.auth.destroy_session_after_upgrade": true,
+      "openam.auth.distAuthCookieName": "AMDistAuthCookie",
+      "openam.auth.session_property_upgrader": "org.forgerock.openam.authentication.service.DefaultSessionPropertyUpgrader",
+      "openam.auth.version.header.enabled": false,
+      "openam.authentication.ignore_goto_during_logout": false,
+      "openam.cdm.default.charset": "UTF-8",
+      "openam.forbidden.to.copy.headers": "connection",
+      "openam.forbidden.to.copy.request.headers": "connection",
+      "openam.oauth2.client.jwt.encryption.algorithm.allow.list": "RSA-OAEP,RSA-OAEP-256,ECDH-ES",
+      "openam.oauth2.client.jwt.unreasonable.lifetime.limit.minutes": "30",
+      "openam.retained.http.headers": "X-DSAMEVersion",
+      "openam.retained.http.request.headers": "X-DSAMEVersion",
+      "openam.serviceattributevalidator.classes.whitelist": "org.forgerock.openam.auth.nodes.validators.GreaterThanZeroValidator,org.forgerock.openam.auth.nodes.validators.HMACKeyLengthValidator,org.forgerock.openam.auth.nodes.validators.HmacSigningKeyValidator,org.forgerock.openam.auth.nodes.validators.PercentageValidator,org.forgerock.openam.auth.nodes.validators.QueryFilterValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyNameValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyValidator,org.forgerock.openam.auth.nodes.framework.validators.NodeValueValidator,org.forgerock.openam.audit.validation.PositiveIntegerValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.AlphaNumericValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.CodeLengthValidator,org.forgerock.openam.authentication.modules.persistentcookie.validation.SigningKeyValidator,com.sun.identity.common.configuration.DuplicateKeyMapValueValidator,com.sun.identity.common.configuration.AgentClientIpModeValueValidator,com.sun.identity.common.configuration.FilterModeValueValidator,com.sun.identity.common.configuration.GlobalMapValueValidator,com.sun.identity.common.configuration.ListValueValidator,com.sun.identity.common.configuration.MapValueValidator,com.sun.identity.common.configuration.ServerPropertyValidator,com.sun.identity.policy.ResourceComparatorValidator,com.sun.identity.sm.EmailValidator,com.sun.identity.sm.IPAddressValidator,com.sun.identity.sm.RequiredValueValidator,com.sun.identity.sm.ServerIDValidator,com.sun.identity.sm.SiteIDValidator,org.forgerock.openam.sm.validation.Base64EncodedBinaryValidator,org.forgerock.openam.sm.validation.BlankValueValidator,org.forgerock.openam.sm.validation.DurationValidator,org.forgerock.openam.sm.validation.EndpointValidator,org.forgerock.openam.sm.validation.HostnameValidator,org.forgerock.openam.sm.validation.PortValidator,org.forgerock.openam.sm.validation.SecretIdValidator,org.forgerock.openam.sm.validation.StatelessSessionSigningAlgorithmValidator,org.forgerock.openam.sm.validation.StringMapValidator,org.forgerock.openam.sm.validation.URLValidator,org.forgerock.openam.selfservice.config.KeyAliasValidator,org.forgerock.openam.sm.validation.UniqueIndexedValuesValidator,org.forgerock.openam.webhook.HttpHeaderValidator,org.forgerock.oauth2.core.ClientRedirectUriValidator",
+      "openam.session.case.sensitive.uuid": false,
+      "org.forgerock.allow.http.client.debug": false,
+      "org.forgerock.am.auth.chains.authindexuser.strict": true,
+      "org.forgerock.am.auth.node.otp.inSharedState": false,
+      "org.forgerock.am.auth.trees.authenticate.identified.identity": true,
+      "org.forgerock.openam.audit.additionalSuccessStatusCodesEnabled": true,
+      "org.forgerock.openam.audit.identity.activity.events.blacklist": "AM-ACCESS-ATTEMPT,AM-IDENTITY-CHANGE,AM-GROUP-CHANGE",
+      "org.forgerock.openam.auth.transactionauth.returnErrorOnAuthFailure": false,
+      "org.forgerock.openam.authLevel.excludeRequiredOrRequisite": false,
+      "org.forgerock.openam.authentication.forceAuth.enabled": false,
+      "org.forgerock.openam.console.autocomplete.enabled": true,
+      "org.forgerock.openam.core.resource.lookup.cache.enabled": true,
+      "org.forgerock.openam.core.sms.placeholder_api_enabled": "OFF",
+      "org.forgerock.openam.devices.recovery.use_insecure_storage": false,
+      "org.forgerock.openam.encryption.key.digest": "SHA1",
+      "org.forgerock.openam.encryption.key.iterations": "10000",
+      "org.forgerock.openam.encryption.key.size": "128",
+      "org.forgerock.openam.httpclienthandler.system.clients.connection.timeout": "10 seconds",
+      "org.forgerock.openam.httpclienthandler.system.clients.max.connections": "64",
+      "org.forgerock.openam.httpclienthandler.system.clients.pool.ttl": "-1",
+      "org.forgerock.openam.httpclienthandler.system.clients.response.timeout": "10 seconds",
+      "org.forgerock.openam.httpclienthandler.system.clients.retry.failed.requests.enabled": true,
+      "org.forgerock.openam.httpclienthandler.system.clients.reuse.connections.enabled": true,
+      "org.forgerock.openam.httpclienthandler.system.nonProxyHosts": "localhost,127.*,[::1],0.0.0.0,[::0]",
+      "org.forgerock.openam.httpclienthandler.system.proxy.enabled": false,
+      "org.forgerock.openam.httpclienthandler.system.proxy.password": null,
+      "org.forgerock.openam.httpclienthandler.system.proxy.uri": "",
+      "org.forgerock.openam.httpclienthandler.system.proxy.username": "",
+      "org.forgerock.openam.idm.attribute.names.lower.case": false,
+      "org.forgerock.openam.idrepo.ldapv3.passwordpolicy.allowDiagnosticMessage": false,
+      "org.forgerock.openam.idrepo.ldapv3.proxyauth.passwordreset.adminRequest": "isAdminPasswordChangeRequest",
+      "org.forgerock.openam.introspect.token.query.param.allowed": false,
+      "org.forgerock.openam.ldap.dncache.expire.time": "0",
+      "org.forgerock.openam.ldap.heartbeat.timeout": "10",
+      "org.forgerock.openam.ldap.keepalive.search.base": "",
+      "org.forgerock.openam.ldap.keepalive.search.filter": "(objectClass=*)",
+      "org.forgerock.openam.ldap.secure.protocol.version": "TLSv1.3,TLSv1.2",
+      "org.forgerock.openam.notifications.agents.enabled": true,
+      "org.forgerock.openam.oauth2.checkIssuerForIdTokenInfo": true,
+      "org.forgerock.openam.radius.server.context.cache.size": "5000",
+      "org.forgerock.openam.redirecturlvalidator.maxUrlLength": "2000",
+      "org.forgerock.openam.request.max.bytes.entity.size": "1048576",
+      "org.forgerock.openam.saml2.authenticatorlookup.skewAllowance": "60",
+      "org.forgerock.openam.scripting.maxinterpreterstackdepth": "10000",
+      "org.forgerock.openam.secrets.special.user.passwords.format": "ENCRYPTED_PLAIN",
+      "org.forgerock.openam.secrets.special.user.secret.refresh.seconds": "900",
+      "org.forgerock.openam.session.service.persistence.deleteAsynchronously": true,
+      "org.forgerock.openam.session.stateless.encryption.method": "A128CBC-HS256",
+      "org.forgerock.openam.session.stateless.rsa.padding": "RSA-OAEP-256",
+      "org.forgerock.openam.session.stateless.signing.allownone": false,
+      "org.forgerock.openam.showServletTraceInBrowser": false,
+      "org.forgerock.openam.slf4j.enableTraceInMessage": false,
+      "org.forgerock.openam.smtp.system.connect.timeout": "10000",
+      "org.forgerock.openam.smtp.system.socket.read.timeout": "10000",
+      "org.forgerock.openam.smtp.system.socket.write.timeout": "10000",
+      "org.forgerock.openam.sso.providers.list": "org.forgerock.openidconnect.ssoprovider.OpenIdConnectSSOProvider",
+      "org.forgerock.openam.timerpool.shutdown.retry.interval": "15000",
+      "org.forgerock.openam.timerpool.shutdown.retry.limit": "3",
+      "org.forgerock.openam.timerpool.shutdown.retry.multiplier": "1.5",
+      "org.forgerock.openam.trees.consumedstatedata.cache.size": "15",
+      "org.forgerock.openam.trees.ids.cache.size": "50",
+      "org.forgerock.openam.url.connectTimeout": "1000",
+      "org.forgerock.openam.xui.user.session.validation.enabled": true,
+      "org.forgerock.openidconnect.ssoprovider.maxcachesize": "5000",
+      "org.forgerock.security.entitlement.enforce.realm": true,
+      "org.forgerock.security.oauth2.enforce.sub.claim.uniqueness": true,
+      "org.forgerock.services.cts.store.reaper.enabled": true,
+      "org.forgerock.services.cts.store.ttlsupport.enabled": false,
+      "org.forgerock.services.cts.store.ttlsupport.exclusionlist": "",
+      "org.forgerock.services.default.store.max.connections": "",
+      "org.forgerock.services.default.store.min.connections": "",
+      "org.forgerock.services.openid.request.object.lifespan": "120000",
+      "securidHelper.ports": "58943",
     },
-    "com.iplanet.services.stats.state": {
-      "inherited": true,
-      "value": "file",
+    "cts": {
+      "_id": "null/properties/cts",
+      "amconfig.org.forgerock.services.cts.store.common.section": {
+        "org.forgerock.services.cts.store.location": "default",
+        "org.forgerock.services.cts.store.max.connections": "100",
+        "org.forgerock.services.cts.store.page.size": "0",
+        "org.forgerock.services.cts.store.root.suffix": "",
+        "org.forgerock.services.cts.store.vlv.page.size": "1000",
+      },
+      "amconfig.org.forgerock.services.cts.store.external.section": {
+        "org.forgerock.services.cts.store.directory.name": "",
+        "org.forgerock.services.cts.store.heartbeat": "10",
+        "org.forgerock.services.cts.store.loginid": "",
+        "org.forgerock.services.cts.store.mtls.enabled": "",
+        "org.forgerock.services.cts.store.password": null,
+        "org.forgerock.services.cts.store.ssl.enabled": "",
+        "org.forgerock.services.cts.store.starttls.enabled": "",
+      },
     },
-    "com.sun.am.session.enableHostLookUp": {
-      "inherited": true,
-      "value": false,
+    "general": {
+      "_id": "null/properties/general",
+      "amconfig.header.debug": {
+        "com.iplanet.services.debug.directory": "%BASE_DIR%/var/debug",
+        "com.iplanet.services.debug.level": "off",
+        "com.sun.services.debug.mergeall": "on",
+      },
+      "amconfig.header.installdir": {
+        "com.iplanet.am.locale": "en_US",
+        "com.iplanet.am.util.xml.validating": "off",
+        "com.iplanet.services.configpath": "%BASE_DIR%",
+        "com.sun.identity.client.notification.url": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+      },
+      "amconfig.header.mailserver": {
+        "com.iplanet.am.smtphost": "localhost",
+        "com.iplanet.am.smtpport": "25",
+      },
     },
-  },
-  "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": {
-      "inherited": true,
-      "value": "10",
+    "sdk": {
+      "_id": "null/properties/sdk",
+      "amconfig.header.cachingreplica": {
+        "com.iplanet.am.sdk.cache.maxSize": "10000",
+      },
+      "amconfig.header.datastore": {
+        "com.sun.identity.sm.enableDataStoreNotification": false,
+        "com.sun.identity.sm.notification.threadpool.size": "1",
+      },
+      "amconfig.header.eventservice": {
+        "com.iplanet.am.event.connection.delay.between.retries": "3000",
+        "com.iplanet.am.event.connection.ldap.error.codes.retries": "80,81,91",
+        "com.iplanet.am.event.connection.num.retries": "3",
+        "com.sun.am.event.connection.disable.list": "aci,um,sm",
+      },
+      "amconfig.header.ldapconnection": {
+        "com.iplanet.am.ldap.connection.delay.between.retries": "1000",
+        "com.iplanet.am.ldap.connection.ldap.error.codes.retries": "80,81,91",
+        "com.iplanet.am.ldap.connection.num.retries": "3",
+      },
+      "amconfig.header.sdktimetoliveconfig": {
+        "com.iplanet.am.sdk.cache.entry.default.expire.time": "30",
+        "com.iplanet.am.sdk.cache.entry.expire.enabled": false,
+        "com.iplanet.am.sdk.cache.entry.user.expire.time": "15",
+      },
     },
-    "com.iplanet.am.notification.threadpool.threshold": {
-      "inherited": true,
-      "value": "5000",
+    "security": {
+      "_id": "null/properties/security",
+      "amconfig.header.cookie": {
+        "com.iplanet.am.cookie.encode": false,
+        "com.iplanet.am.cookie.name": "iPlanetDirectoryPro",
+        "com.iplanet.am.cookie.secure": false,
+      },
+      "amconfig.header.crlcache": {
+        "com.sun.identity.crl.cache.directory.host": "",
+        "com.sun.identity.crl.cache.directory.mtlsenabled": false,
+        "com.sun.identity.crl.cache.directory.password": null,
+        "com.sun.identity.crl.cache.directory.port": "",
+        "com.sun.identity.crl.cache.directory.searchattr": "",
+        "com.sun.identity.crl.cache.directory.searchlocs": "",
+        "com.sun.identity.crl.cache.directory.ssl": false,
+        "com.sun.identity.crl.cache.directory.user": "",
+      },
+      "amconfig.header.deserialisationwhitelist": {
+        "openam.deserialisation.classes.whitelist": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+      },
+      "amconfig.header.encryption": {
+        "am.encryption.pwd": "@AM_ENC_PWD@",
+        "am.encryption.secret.enabled": false,
+        "am.encryption.secret.keystoreType": "JCEKS",
+        "com.iplanet.security.SecureRandomFactoryImpl": "com.iplanet.am.util.SecureRandomFactoryImpl",
+        "com.iplanet.security.encryptor": "com.iplanet.services.util.JCEEncryption",
+      },
+      "amconfig.header.ocsp.check": {
+        "com.sun.identity.authentication.ocsp.responder.nickname": "",
+        "com.sun.identity.authentication.ocsp.responder.url": "",
+        "com.sun.identity.authentication.ocspCheck": false,
+      },
+      "amconfig.header.securitykey": {
+        "com.sun.identity.saml.xmlsig.certalias": "test",
+        "com.sun.identity.saml.xmlsig.keypass": "%BASE_DIR%/security/secrets/default/.keypass",
+        "com.sun.identity.saml.xmlsig.keystore": "%BASE_DIR%/security/keystores/keystore.jceks",
+        "com.sun.identity.saml.xmlsig.storepass": "%BASE_DIR%/security/secrets/default/.storepass",
+        "com.sun.identity.saml.xmlsig.storetype": "JCEKS",
+      },
+      "amconfig.header.validation": {
+        "com.iplanet.am.clientIPCheckEnabled": false,
+        "com.iplanet.services.comm.server.pllrequest.maxContentLength": "16384",
+      },
     },
-  },
-  "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": {
-      "inherited": true,
-      "value": "3",
+    "session": {
+      "_id": "null/properties/session",
+      "amconfig.header.sessionlogging": {
+        "com.iplanet.am.stats.interval": "60",
+        "com.iplanet.services.stats.directory": "%BASE_DIR%/var/stats",
+        "com.iplanet.services.stats.state": "file",
+        "com.sun.am.session.enableHostLookUp": false,
+      },
+      "amconfig.header.sessionnotification": {
+        "com.iplanet.am.notification.threadpool.size": "10",
+        "com.iplanet.am.notification.threadpool.threshold": "5000",
+      },
+      "amconfig.header.sessionthresholds": {
+        "com.iplanet.am.session.invalidsessionmaxtime": "3",
+        "org.forgerock.openam.session.service.access.persistence.caching.maxsize": "5000",
+      },
+      "amconfig.header.sessionvalidation": {
+        "com.sun.am.session.caseInsensitiveDN": true,
+      },
     },
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
-      "inherited": true,
-      "value": "5000",
+    "uma": {
+      "_id": "null/properties/uma",
+      "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+        "org.forgerock.services.resourcesets.store.location": "default",
+        "org.forgerock.services.resourcesets.store.max.connections": "10",
+        "org.forgerock.services.resourcesets.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+        "org.forgerock.services.resourcesets.store.directory.name": "",
+        "org.forgerock.services.resourcesets.store.heartbeat": "10",
+        "org.forgerock.services.resourcesets.store.loginid": "",
+        "org.forgerock.services.resourcesets.store.mtls.enabled": "",
+        "org.forgerock.services.resourcesets.store.password": null,
+        "org.forgerock.services.resourcesets.store.ssl.enabled": "",
+        "org.forgerock.services.resourcesets.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+        "org.forgerock.services.uma.labels.store.location": "default",
+        "org.forgerock.services.uma.labels.store.max.connections": "2",
+        "org.forgerock.services.uma.labels.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+        "org.forgerock.services.uma.labels.store.directory.name": "",
+        "org.forgerock.services.uma.labels.store.heartbeat": "10",
+        "org.forgerock.services.uma.labels.store.loginid": "",
+        "org.forgerock.services.uma.labels.store.mtls.enabled": "",
+        "org.forgerock.services.uma.labels.store.password": null,
+        "org.forgerock.services.uma.labels.store.ssl.enabled": "",
+        "org.forgerock.services.uma.labels.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+        "org.forgerock.services.uma.pendingrequests.store.location": "default",
+        "org.forgerock.services.uma.pendingrequests.store.max.connections": "10",
+        "org.forgerock.services.uma.pendingrequests.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+        "org.forgerock.services.uma.pendingrequests.store.directory.name": "",
+        "org.forgerock.services.uma.pendingrequests.store.heartbeat": "10",
+        "org.forgerock.services.uma.pendingrequests.store.loginid": "",
+        "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": "",
+        "org.forgerock.services.uma.pendingrequests.store.password": null,
+        "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": "",
+        "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+        "org.forgerock.services.umaaudit.store.location": "default",
+        "org.forgerock.services.umaaudit.store.max.connections": "10",
+        "org.forgerock.services.umaaudit.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+        "org.forgerock.services.umaaudit.store.directory.name": "",
+        "org.forgerock.services.umaaudit.store.heartbeat": "10",
+        "org.forgerock.services.umaaudit.store.loginid": "",
+        "org.forgerock.services.umaaudit.store.mtls.enabled": "",
+        "org.forgerock.services.umaaudit.store.password": null,
+        "org.forgerock.services.umaaudit.store.ssl.enabled": "",
+        "org.forgerock.services.umaaudit.store.starttls.enabled": "",
+      },
     },
   },
-  "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": {
-      "inherited": true,
-      "value": true,
+  "server": {
+    "03": {
+      "_id": "03",
+      "properties": {
+        "advanced": {
+          "_id": "03/properties/advanced",
+          "com.iplanet.am.lbcookie.value": "03",
+        },
+        "cts": {
+          "_id": "03/properties/cts",
+          "amconfig.org.forgerock.services.cts.store.common.section": {
+            "org.forgerock.services.cts.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.cts.store.max.connections": {
+              "inherited": true,
+              "value": "100",
+            },
+            "org.forgerock.services.cts.store.page.size": {
+              "inherited": true,
+              "value": "0",
+            },
+            "org.forgerock.services.cts.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.vlv.page.size": {
+              "inherited": true,
+              "value": "1000",
+            },
+          },
+          "amconfig.org.forgerock.services.cts.store.external.section": {
+            "org.forgerock.services.cts.store.affinity.enabled": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.cts.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+        "directoryConfiguration": {
+          "_id": "03/properties/directoryConfiguration",
+          "directoryConfiguration": {
+            "bindDn": "cn=Directory Manager",
+            "bindPassword": null,
+            "maxConnectionPool": 10,
+            "minConnectionPool": 1,
+            "mtlsAlias": "",
+            "mtlsEnabled": false,
+            "mtlsKeyPasswordFile": "",
+            "mtlsKeyStoreFile": "",
+            "mtlsKeyStorePasswordFile": "",
+            "mtlsKeyStoreType": null,
+          },
+          "directoryServers": [
+            {
+              "connectionType": "SSL",
+              "hostName": "localhost",
+              "portNumber": "50636",
+              "serverName": "Server1",
+            },
+          ],
+        },
+        "general": {
+          "_id": "03/properties/general",
+          "amconfig.header.debug": {
+            "com.iplanet.services.debug.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/debug",
+            },
+            "com.iplanet.services.debug.level": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.sun.services.debug.mergeall": {
+              "inherited": true,
+              "value": "on",
+            },
+          },
+          "amconfig.header.installdir": {
+            "com.iplanet.am.locale": {
+              "inherited": true,
+              "value": "en_US",
+            },
+            "com.iplanet.am.util.xml.validating": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.iplanet.services.configpath": {
+              "inherited": true,
+              "value": "%BASE_DIR%",
+            },
+            "com.sun.identity.client.notification.url": {
+              "inherited": true,
+              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+            },
+          },
+          "amconfig.header.mailserver": {
+            "com.iplanet.am.smtphost": {
+              "inherited": true,
+              "value": "localhost",
+            },
+            "com.iplanet.am.smtpport": {
+              "inherited": true,
+              "value": "25",
+            },
+          },
+          "amconfig.header.site": {
+            "singleChoiceSite": "testsite",
+          },
+        },
+        "sdk": {
+          "_id": "03/properties/sdk",
+          "amconfig.header.cachingreplica": {
+            "com.iplanet.am.sdk.cache.maxSize": {
+              "inherited": true,
+              "value": "10000",
+            },
+          },
+          "amconfig.header.datastore": {
+            "com.sun.identity.sm.enableDataStoreNotification": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.sm.notification.threadpool.size": {
+              "inherited": true,
+              "value": "1",
+            },
+          },
+          "amconfig.header.eventservice": {
+            "com.iplanet.am.event.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "3000",
+            },
+            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.event.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+            "com.sun.am.event.connection.disable.list": {
+              "inherited": true,
+              "value": "aci,um,sm",
+            },
+          },
+          "amconfig.header.ldapconnection": {
+            "com.iplanet.am.ldap.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "1000",
+            },
+            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.ldap.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+          },
+          "amconfig.header.sdktimetoliveconfig": {
+            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
+              "inherited": true,
+              "value": "30",
+            },
+            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
+              "inherited": true,
+              "value": "15",
+            },
+          },
+        },
+        "security": {
+          "_id": "03/properties/security",
+          "amconfig.header.cookie": {
+            "com.iplanet.am.cookie.encode": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.cookie.name": {
+              "inherited": true,
+              "value": "iPlanetDirectoryPro",
+            },
+            "com.iplanet.am.cookie.secure": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.crlcache": {
+            "com.sun.identity.crl.cache.directory.host": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.mtlsenabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "com.sun.identity.crl.cache.directory.port": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchattr": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchlocs": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.ssl": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.user": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.header.deserialisationwhitelist": {
+            "openam.deserialisation.classes.whitelist": {
+              "inherited": true,
+              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+            },
+          },
+          "amconfig.header.encryption": {
+            "am.encryption.pwd": {
+              "inherited": true,
+              "value": "@AM_ENC_PWD@",
+            },
+            "am.encryption.secret.alias": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "am.encryption.secret.keyPass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreFile": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystorePass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreType": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+            "com.iplanet.security.SecureRandomFactoryImpl": {
+              "inherited": true,
+              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
+            },
+            "com.iplanet.security.encryptor": {
+              "inherited": true,
+              "value": "com.iplanet.services.util.JCEEncryption",
+            },
+          },
+          "amconfig.header.ocsp.check": {
+            "com.sun.identity.authentication.ocsp.responder.nickname": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocsp.responder.url": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocspCheck": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.securitykey": {
+            "com.sun.identity.saml.xmlsig.certalias": {
+              "inherited": true,
+              "value": "test",
+            },
+            "com.sun.identity.saml.xmlsig.keypass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.keypass",
+            },
+            "com.sun.identity.saml.xmlsig.keystore": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
+            },
+            "com.sun.identity.saml.xmlsig.storepass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.storepass",
+            },
+            "com.sun.identity.saml.xmlsig.storetype": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+          },
+          "amconfig.header.validation": {
+            "com.iplanet.am.clientIPCheckEnabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
+              "inherited": true,
+              "value": "16384",
+            },
+          },
+        },
+        "session": {
+          "_id": "03/properties/session",
+          "amconfig.header.sessionlogging": {
+            "com.iplanet.am.stats.interval": {
+              "inherited": true,
+              "value": "60",
+            },
+            "com.iplanet.services.stats.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/stats",
+            },
+            "com.iplanet.services.stats.state": {
+              "inherited": true,
+              "value": "file",
+            },
+            "com.sun.am.session.enableHostLookUp": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.sessionnotification": {
+            "com.iplanet.am.notification.threadpool.size": {
+              "inherited": true,
+              "value": "10",
+            },
+            "com.iplanet.am.notification.threadpool.threshold": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionthresholds": {
+            "com.iplanet.am.session.invalidsessionmaxtime": {
+              "inherited": true,
+              "value": "3",
+            },
+            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionvalidation": {
+            "com.sun.am.session.caseInsensitiveDN": {
+              "inherited": true,
+              "value": true,
+            },
+          },
+        },
+        "uma": {
+          "_id": "03/properties/uma",
+          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+            "org.forgerock.services.resourcesets.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.resourcesets.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+            "org.forgerock.services.resourcesets.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.resourcesets.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+            "org.forgerock.services.uma.labels.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.labels.store.max.connections": {
+              "inherited": true,
+              "value": "2",
+            },
+            "org.forgerock.services.uma.labels.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+            "org.forgerock.services.uma.labels.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.labels.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.labels.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+            "org.forgerock.services.uma.pendingrequests.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+            "org.forgerock.services.umaaudit.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.umaaudit.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+            "org.forgerock.services.umaaudit.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.umaaudit.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+      },
+      "siteName": "testsite",
+      "url": "http://localhost:8081/am",
     },
   },
 }
 `;
 
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/01/uma.properties.server.json 1`] = `
+exports[`frodo server export "frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with default properties: serverExportTestDir4/04.server.json 1`] = `
 {
-  "_id": "01/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.resourcesets.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.resourcesets.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.resourcesets.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.resourcesets.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.labels.store.max.connections": {
-      "inherited": true,
-      "value": "2",
-    },
-    "org.forgerock.services.uma.labels.store.root.suffix": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.labels.store.loginid": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.password": {
-      "inherited": true,
-      "value": null,
-    },
-    "org.forgerock.services.uma.labels.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-    "org.forgerock.services.uma.labels.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
-    },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": {
-      "inherited": true,
-      "value": "default",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": {
-      "inherited": true,
-      "value": "10",
-    },
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
-      "inherited": true,
-      "value": "",
+  "defaultProperties": {
+    "advanced": {
+      "_id": "null/properties/advanced",
+      "com.iplanet.am.buildDate": "2024-March-28 16:00",
+      "com.iplanet.am.buildRevision": "89116d59a1ebe73ed1931dd3649adb7f217cd06b",
+      "com.iplanet.am.buildVersion": "ForgeRock Access Management 7.5.0",
+      "com.iplanet.am.cookie.c66Encode": true,
+      "com.iplanet.am.daemons": "securid",
+      "com.iplanet.am.directory.ssl.enabled": false,
+      "com.iplanet.am.installdir": "%BASE_DIR%",
+      "com.iplanet.am.jssproxy.SSLTrustHostList": "",
+      "com.iplanet.am.jssproxy.checkSubjectAltName": false,
+      "com.iplanet.am.jssproxy.resolveIPAddress": false,
+      "com.iplanet.am.jssproxy.trustAllServerCerts": false,
+      "com.iplanet.am.lbcookie.name": "amlbcookie",
+      "com.iplanet.am.lbcookie.value": "00",
+      "com.iplanet.am.logstatus": "ACTIVE",
+      "com.iplanet.am.pcookie.name": "DProPCookie",
+      "com.iplanet.am.profile.host": "%SERVER_HOST%",
+      "com.iplanet.am.profile.port": "%SERVER_PORT%",
+      "com.iplanet.am.serverMode": true,
+      "com.iplanet.am.session.agentSessionIdleTime": "1440",
+      "com.iplanet.am.session.client.polling.enable": false,
+      "com.iplanet.am.session.client.polling.period": "180",
+      "com.iplanet.am.session.httpSession.enabled": "true",
+      "com.iplanet.am.version": "ForgeRock Access Management 7.5.0 Build 89116d59a1ebe73ed1931dd3649adb7f217cd06b (2024-March-28 16:00)",
+      "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
+      "com.sun.am.event.notification.expire.time": "5",
+      "com.sun.embedded.sync.servers": "on",
+      "com.sun.identity.am.cookie.check": false,
+      "com.sun.identity.auth.cookieName": "AMAuthCookie",
+      "com.sun.identity.authentication.multiple.tabs.used": false,
+      "com.sun.identity.authentication.setCookieToAllDomains": true,
+      "com.sun.identity.authentication.special.users": "cn=dsameuser,ou=DSAME Users,%ROOT_SUFFIX%|cn=amService-UrlAccessAgent,ou=DSAME Users,%ROOT_SUFFIX%",
+      "com.sun.identity.authentication.super.user": "uid=amAdmin,ou=People,%ROOT_SUFFIX%",
+      "com.sun.identity.authentication.uniqueCookieName": "sunIdentityServerAuthNServer",
+      "com.sun.identity.cookie.httponly": true,
+      "com.sun.identity.cookie.samesite": "off",
+      "com.sun.identity.enableUniqueSSOTokenCookie": false,
+      "com.sun.identity.jss.donotInstallAtHighestPriority": true,
+      "com.sun.identity.monitoring": "off",
+      "com.sun.identity.monitoring.local.conn.server.url": "service:jmx:rmi://",
+      "com.sun.identity.password.deploymentDescriptor": "%SERVER_URI%",
+      "com.sun.identity.plugin.configuration.class": "@CONFIGURATION_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.datastore.class.default": "@DATASTORE_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.log.class": "@LOG_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.monitoring.agent.class": "@MONAGENT_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.monitoring.saml2.class": "@MONSAML2_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.session.class": "@SESSION_PROVIDER_CLASS@",
+      "com.sun.identity.policy.Policy.policy_evaluation_weights": "10:10:10",
+      "com.sun.identity.policy.resultsCacheMaxSize": "10000",
+      "com.sun.identity.policy.resultsCacheResourceCap": "20",
+      "com.sun.identity.saml.xmlsig.keyprovider.class": "@XMLSIG_KEY_PROVIDER@",
+      "com.sun.identity.saml.xmlsig.passwordDecoder": "@PASSWORD_DECODER_CLASS@",
+      "com.sun.identity.saml.xmlsig.signatureprovider.class": "@XML_SIGNATURE_PROVIDER@",
+      "com.sun.identity.security.checkcaller": false,
+      "com.sun.identity.server.fqdnMap[dnsfirst]": "dnsfirst",
+      "com.sun.identity.server.fqdnMap[hello]": "hello",
+      "com.sun.identity.server.fqdnMap[localhost]": "localhost",
+      "com.sun.identity.server.fqdnMap[openam-frodo-dev.classic.com]": "openam-frodo-dev.classic.com",
+      "com.sun.identity.server.fqdnMap[openam]": "openam",
+      "com.sun.identity.server.fqdnMap[secondDNS]": "secondDNS",
+      "com.sun.identity.session.repository.enableAttributeCompression": false,
+      "com.sun.identity.session.repository.enableCompression": false,
+      "com.sun.identity.session.repository.enableEncryption": false,
+      "com.sun.identity.sm.cache.ttl": "30",
+      "com.sun.identity.sm.cache.ttl.enable": false,
+      "com.sun.identity.url.readTimeout": "30000",
+      "com.sun.identity.webcontainer": "WEB_CONTAINER",
+      "dynamic.datastore.creation.enabled": false,
+      "openam.auth.destroy_session_after_upgrade": true,
+      "openam.auth.distAuthCookieName": "AMDistAuthCookie",
+      "openam.auth.session_property_upgrader": "org.forgerock.openam.authentication.service.DefaultSessionPropertyUpgrader",
+      "openam.auth.version.header.enabled": false,
+      "openam.authentication.ignore_goto_during_logout": false,
+      "openam.cdm.default.charset": "UTF-8",
+      "openam.forbidden.to.copy.headers": "connection",
+      "openam.forbidden.to.copy.request.headers": "connection",
+      "openam.oauth2.client.jwt.encryption.algorithm.allow.list": "RSA-OAEP,RSA-OAEP-256,ECDH-ES",
+      "openam.oauth2.client.jwt.unreasonable.lifetime.limit.minutes": "30",
+      "openam.retained.http.headers": "X-DSAMEVersion",
+      "openam.retained.http.request.headers": "X-DSAMEVersion",
+      "openam.serviceattributevalidator.classes.whitelist": "org.forgerock.openam.auth.nodes.validators.GreaterThanZeroValidator,org.forgerock.openam.auth.nodes.validators.HMACKeyLengthValidator,org.forgerock.openam.auth.nodes.validators.HmacSigningKeyValidator,org.forgerock.openam.auth.nodes.validators.PercentageValidator,org.forgerock.openam.auth.nodes.validators.QueryFilterValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyNameValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyValidator,org.forgerock.openam.auth.nodes.framework.validators.NodeValueValidator,org.forgerock.openam.audit.validation.PositiveIntegerValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.AlphaNumericValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.CodeLengthValidator,org.forgerock.openam.authentication.modules.persistentcookie.validation.SigningKeyValidator,com.sun.identity.common.configuration.DuplicateKeyMapValueValidator,com.sun.identity.common.configuration.AgentClientIpModeValueValidator,com.sun.identity.common.configuration.FilterModeValueValidator,com.sun.identity.common.configuration.GlobalMapValueValidator,com.sun.identity.common.configuration.ListValueValidator,com.sun.identity.common.configuration.MapValueValidator,com.sun.identity.common.configuration.ServerPropertyValidator,com.sun.identity.policy.ResourceComparatorValidator,com.sun.identity.sm.EmailValidator,com.sun.identity.sm.IPAddressValidator,com.sun.identity.sm.RequiredValueValidator,com.sun.identity.sm.ServerIDValidator,com.sun.identity.sm.SiteIDValidator,org.forgerock.openam.sm.validation.Base64EncodedBinaryValidator,org.forgerock.openam.sm.validation.BlankValueValidator,org.forgerock.openam.sm.validation.DurationValidator,org.forgerock.openam.sm.validation.EndpointValidator,org.forgerock.openam.sm.validation.HostnameValidator,org.forgerock.openam.sm.validation.PortValidator,org.forgerock.openam.sm.validation.SecretIdValidator,org.forgerock.openam.sm.validation.StatelessSessionSigningAlgorithmValidator,org.forgerock.openam.sm.validation.StringMapValidator,org.forgerock.openam.sm.validation.URLValidator,org.forgerock.openam.selfservice.config.KeyAliasValidator,org.forgerock.openam.sm.validation.UniqueIndexedValuesValidator,org.forgerock.openam.webhook.HttpHeaderValidator,org.forgerock.oauth2.core.ClientRedirectUriValidator",
+      "openam.session.case.sensitive.uuid": false,
+      "org.forgerock.allow.http.client.debug": false,
+      "org.forgerock.am.auth.chains.authindexuser.strict": true,
+      "org.forgerock.am.auth.node.otp.inSharedState": false,
+      "org.forgerock.am.auth.trees.authenticate.identified.identity": true,
+      "org.forgerock.openam.audit.additionalSuccessStatusCodesEnabled": true,
+      "org.forgerock.openam.audit.identity.activity.events.blacklist": "AM-ACCESS-ATTEMPT,AM-IDENTITY-CHANGE,AM-GROUP-CHANGE",
+      "org.forgerock.openam.auth.transactionauth.returnErrorOnAuthFailure": false,
+      "org.forgerock.openam.authLevel.excludeRequiredOrRequisite": false,
+      "org.forgerock.openam.authentication.forceAuth.enabled": false,
+      "org.forgerock.openam.console.autocomplete.enabled": true,
+      "org.forgerock.openam.core.resource.lookup.cache.enabled": true,
+      "org.forgerock.openam.core.sms.placeholder_api_enabled": "OFF",
+      "org.forgerock.openam.devices.recovery.use_insecure_storage": false,
+      "org.forgerock.openam.encryption.key.digest": "SHA1",
+      "org.forgerock.openam.encryption.key.iterations": "10000",
+      "org.forgerock.openam.encryption.key.size": "128",
+      "org.forgerock.openam.httpclienthandler.system.clients.connection.timeout": "10 seconds",
+      "org.forgerock.openam.httpclienthandler.system.clients.max.connections": "64",
+      "org.forgerock.openam.httpclienthandler.system.clients.pool.ttl": "-1",
+      "org.forgerock.openam.httpclienthandler.system.clients.response.timeout": "10 seconds",
+      "org.forgerock.openam.httpclienthandler.system.clients.retry.failed.requests.enabled": true,
+      "org.forgerock.openam.httpclienthandler.system.clients.reuse.connections.enabled": true,
+      "org.forgerock.openam.httpclienthandler.system.nonProxyHosts": "localhost,127.*,[::1],0.0.0.0,[::0]",
+      "org.forgerock.openam.httpclienthandler.system.proxy.enabled": false,
+      "org.forgerock.openam.httpclienthandler.system.proxy.password": null,
+      "org.forgerock.openam.httpclienthandler.system.proxy.uri": "",
+      "org.forgerock.openam.httpclienthandler.system.proxy.username": "",
+      "org.forgerock.openam.idm.attribute.names.lower.case": false,
+      "org.forgerock.openam.idrepo.ldapv3.passwordpolicy.allowDiagnosticMessage": false,
+      "org.forgerock.openam.idrepo.ldapv3.proxyauth.passwordreset.adminRequest": "isAdminPasswordChangeRequest",
+      "org.forgerock.openam.introspect.token.query.param.allowed": false,
+      "org.forgerock.openam.ldap.dncache.expire.time": "0",
+      "org.forgerock.openam.ldap.heartbeat.timeout": "10",
+      "org.forgerock.openam.ldap.keepalive.search.base": "",
+      "org.forgerock.openam.ldap.keepalive.search.filter": "(objectClass=*)",
+      "org.forgerock.openam.ldap.secure.protocol.version": "TLSv1.3,TLSv1.2",
+      "org.forgerock.openam.notifications.agents.enabled": true,
+      "org.forgerock.openam.oauth2.checkIssuerForIdTokenInfo": true,
+      "org.forgerock.openam.radius.server.context.cache.size": "5000",
+      "org.forgerock.openam.redirecturlvalidator.maxUrlLength": "2000",
+      "org.forgerock.openam.request.max.bytes.entity.size": "1048576",
+      "org.forgerock.openam.saml2.authenticatorlookup.skewAllowance": "60",
+      "org.forgerock.openam.scripting.maxinterpreterstackdepth": "10000",
+      "org.forgerock.openam.secrets.special.user.passwords.format": "ENCRYPTED_PLAIN",
+      "org.forgerock.openam.secrets.special.user.secret.refresh.seconds": "900",
+      "org.forgerock.openam.session.service.persistence.deleteAsynchronously": true,
+      "org.forgerock.openam.session.stateless.encryption.method": "A128CBC-HS256",
+      "org.forgerock.openam.session.stateless.rsa.padding": "RSA-OAEP-256",
+      "org.forgerock.openam.session.stateless.signing.allownone": false,
+      "org.forgerock.openam.showServletTraceInBrowser": false,
+      "org.forgerock.openam.slf4j.enableTraceInMessage": false,
+      "org.forgerock.openam.smtp.system.connect.timeout": "10000",
+      "org.forgerock.openam.smtp.system.socket.read.timeout": "10000",
+      "org.forgerock.openam.smtp.system.socket.write.timeout": "10000",
+      "org.forgerock.openam.sso.providers.list": "org.forgerock.openidconnect.ssoprovider.OpenIdConnectSSOProvider",
+      "org.forgerock.openam.timerpool.shutdown.retry.interval": "15000",
+      "org.forgerock.openam.timerpool.shutdown.retry.limit": "3",
+      "org.forgerock.openam.timerpool.shutdown.retry.multiplier": "1.5",
+      "org.forgerock.openam.trees.consumedstatedata.cache.size": "15",
+      "org.forgerock.openam.trees.ids.cache.size": "50",
+      "org.forgerock.openam.url.connectTimeout": "1000",
+      "org.forgerock.openam.xui.user.session.validation.enabled": true,
+      "org.forgerock.openidconnect.ssoprovider.maxcachesize": "5000",
+      "org.forgerock.security.entitlement.enforce.realm": true,
+      "org.forgerock.security.oauth2.enforce.sub.claim.uniqueness": true,
+      "org.forgerock.services.cts.store.reaper.enabled": true,
+      "org.forgerock.services.cts.store.ttlsupport.enabled": false,
+      "org.forgerock.services.cts.store.ttlsupport.exclusionlist": "",
+      "org.forgerock.services.default.store.max.connections": "",
+      "org.forgerock.services.default.store.min.connections": "",
+      "org.forgerock.services.openid.request.object.lifespan": "120000",
+      "securidHelper.ports": "58943",
     },
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": {
-      "inherited": true,
-      "value": "",
+    "cts": {
+      "_id": "null/properties/cts",
+      "amconfig.org.forgerock.services.cts.store.common.section": {
+        "org.forgerock.services.cts.store.location": "default",
+        "org.forgerock.services.cts.store.max.connections": "100",
+        "org.forgerock.services.cts.store.page.size": "0",
+        "org.forgerock.services.cts.store.root.suffix": "",
+        "org.forgerock.services.cts.store.vlv.page.size": "1000",
+      },
+      "amconfig.org.forgerock.services.cts.store.external.section": {
+        "org.forgerock.services.cts.store.directory.name": "",
+        "org.forgerock.services.cts.store.heartbeat": "10",
+        "org.forgerock.services.cts.store.loginid": "",
+        "org.forgerock.services.cts.store.mtls.enabled": "",
+        "org.forgerock.services.cts.store.password": null,
+        "org.forgerock.services.cts.store.ssl.enabled": "",
+        "org.forgerock.services.cts.store.starttls.enabled": "",
+      },
     },
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
+    "general": {
+      "_id": "null/properties/general",
+      "amconfig.header.debug": {
+        "com.iplanet.services.debug.directory": "%BASE_DIR%/var/debug",
+        "com.iplanet.services.debug.level": "off",
+        "com.sun.services.debug.mergeall": "on",
+      },
+      "amconfig.header.installdir": {
+        "com.iplanet.am.locale": "en_US",
+        "com.iplanet.am.util.xml.validating": "off",
+        "com.iplanet.services.configpath": "%BASE_DIR%",
+        "com.sun.identity.client.notification.url": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+      },
+      "amconfig.header.mailserver": {
+        "com.iplanet.am.smtphost": "localhost",
+        "com.iplanet.am.smtpport": "25",
+      },
     },
-    "org.forgerock.services.uma.pendingrequests.store.loginid": {
-      "inherited": true,
-      "value": "",
+    "sdk": {
+      "_id": "null/properties/sdk",
+      "amconfig.header.cachingreplica": {
+        "com.iplanet.am.sdk.cache.maxSize": "10000",
+      },
+      "amconfig.header.datastore": {
+        "com.sun.identity.sm.enableDataStoreNotification": false,
+        "com.sun.identity.sm.notification.threadpool.size": "1",
+      },
+      "amconfig.header.eventservice": {
+        "com.iplanet.am.event.connection.delay.between.retries": "3000",
+        "com.iplanet.am.event.connection.ldap.error.codes.retries": "80,81,91",
+        "com.iplanet.am.event.connection.num.retries": "3",
+        "com.sun.am.event.connection.disable.list": "aci,um,sm",
+      },
+      "amconfig.header.ldapconnection": {
+        "com.iplanet.am.ldap.connection.delay.between.retries": "1000",
+        "com.iplanet.am.ldap.connection.ldap.error.codes.retries": "80,81,91",
+        "com.iplanet.am.ldap.connection.num.retries": "3",
+      },
+      "amconfig.header.sdktimetoliveconfig": {
+        "com.iplanet.am.sdk.cache.entry.default.expire.time": "30",
+        "com.iplanet.am.sdk.cache.entry.expire.enabled": false,
+        "com.iplanet.am.sdk.cache.entry.user.expire.time": "15",
+      },
     },
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
+    "security": {
+      "_id": "null/properties/security",
+      "amconfig.header.cookie": {
+        "com.iplanet.am.cookie.encode": false,
+        "com.iplanet.am.cookie.name": "iPlanetDirectoryPro",
+        "com.iplanet.am.cookie.secure": false,
+      },
+      "amconfig.header.crlcache": {
+        "com.sun.identity.crl.cache.directory.host": "",
+        "com.sun.identity.crl.cache.directory.mtlsenabled": false,
+        "com.sun.identity.crl.cache.directory.password": null,
+        "com.sun.identity.crl.cache.directory.port": "",
+        "com.sun.identity.crl.cache.directory.searchattr": "",
+        "com.sun.identity.crl.cache.directory.searchlocs": "",
+        "com.sun.identity.crl.cache.directory.ssl": false,
+        "com.sun.identity.crl.cache.directory.user": "",
+      },
+      "amconfig.header.deserialisationwhitelist": {
+        "openam.deserialisation.classes.whitelist": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+      },
+      "amconfig.header.encryption": {
+        "am.encryption.pwd": "@AM_ENC_PWD@",
+        "am.encryption.secret.enabled": false,
+        "am.encryption.secret.keystoreType": "JCEKS",
+        "com.iplanet.security.SecureRandomFactoryImpl": "com.iplanet.am.util.SecureRandomFactoryImpl",
+        "com.iplanet.security.encryptor": "com.iplanet.services.util.JCEEncryption",
+      },
+      "amconfig.header.ocsp.check": {
+        "com.sun.identity.authentication.ocsp.responder.nickname": "",
+        "com.sun.identity.authentication.ocsp.responder.url": "",
+        "com.sun.identity.authentication.ocspCheck": false,
+      },
+      "amconfig.header.securitykey": {
+        "com.sun.identity.saml.xmlsig.certalias": "test",
+        "com.sun.identity.saml.xmlsig.keypass": "%BASE_DIR%/security/secrets/default/.keypass",
+        "com.sun.identity.saml.xmlsig.keystore": "%BASE_DIR%/security/keystores/keystore.jceks",
+        "com.sun.identity.saml.xmlsig.storepass": "%BASE_DIR%/security/secrets/default/.storepass",
+        "com.sun.identity.saml.xmlsig.storetype": "JCEKS",
+      },
+      "amconfig.header.validation": {
+        "com.iplanet.am.clientIPCheckEnabled": false,
+        "com.iplanet.services.comm.server.pllrequest.maxContentLength": "16384",
+      },
     },
-    "org.forgerock.services.uma.pendingrequests.store.password": {
-      "inherited": true,
-      "value": null,
+    "session": {
+      "_id": "null/properties/session",
+      "amconfig.header.sessionlogging": {
+        "com.iplanet.am.stats.interval": "60",
+        "com.iplanet.services.stats.directory": "%BASE_DIR%/var/stats",
+        "com.iplanet.services.stats.state": "file",
+        "com.sun.am.session.enableHostLookUp": false,
+      },
+      "amconfig.header.sessionnotification": {
+        "com.iplanet.am.notification.threadpool.size": "10",
+        "com.iplanet.am.notification.threadpool.threshold": "5000",
+      },
+      "amconfig.header.sessionthresholds": {
+        "com.iplanet.am.session.invalidsessionmaxtime": "3",
+        "org.forgerock.openam.session.service.access.persistence.caching.maxsize": "5000",
+      },
+      "amconfig.header.sessionvalidation": {
+        "com.sun.am.session.caseInsensitiveDN": true,
+      },
     },
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
+    "uma": {
+      "_id": "null/properties/uma",
+      "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+        "org.forgerock.services.resourcesets.store.location": "default",
+        "org.forgerock.services.resourcesets.store.max.connections": "10",
+        "org.forgerock.services.resourcesets.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+        "org.forgerock.services.resourcesets.store.directory.name": "",
+        "org.forgerock.services.resourcesets.store.heartbeat": "10",
+        "org.forgerock.services.resourcesets.store.loginid": "",
+        "org.forgerock.services.resourcesets.store.mtls.enabled": "",
+        "org.forgerock.services.resourcesets.store.password": null,
+        "org.forgerock.services.resourcesets.store.ssl.enabled": "",
+        "org.forgerock.services.resourcesets.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+        "org.forgerock.services.uma.labels.store.location": "default",
+        "org.forgerock.services.uma.labels.store.max.connections": "2",
+        "org.forgerock.services.uma.labels.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+        "org.forgerock.services.uma.labels.store.directory.name": "",
+        "org.forgerock.services.uma.labels.store.heartbeat": "10",
+        "org.forgerock.services.uma.labels.store.loginid": "",
+        "org.forgerock.services.uma.labels.store.mtls.enabled": "",
+        "org.forgerock.services.uma.labels.store.password": null,
+        "org.forgerock.services.uma.labels.store.ssl.enabled": "",
+        "org.forgerock.services.uma.labels.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+        "org.forgerock.services.uma.pendingrequests.store.location": "default",
+        "org.forgerock.services.uma.pendingrequests.store.max.connections": "10",
+        "org.forgerock.services.uma.pendingrequests.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+        "org.forgerock.services.uma.pendingrequests.store.directory.name": "",
+        "org.forgerock.services.uma.pendingrequests.store.heartbeat": "10",
+        "org.forgerock.services.uma.pendingrequests.store.loginid": "",
+        "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": "",
+        "org.forgerock.services.uma.pendingrequests.store.password": null,
+        "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": "",
+        "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+        "org.forgerock.services.umaaudit.store.location": "default",
+        "org.forgerock.services.umaaudit.store.max.connections": "10",
+        "org.forgerock.services.umaaudit.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+        "org.forgerock.services.umaaudit.store.directory.name": "",
+        "org.forgerock.services.umaaudit.store.heartbeat": "10",
+        "org.forgerock.services.umaaudit.store.loginid": "",
+        "org.forgerock.services.umaaudit.store.mtls.enabled": "",
+        "org.forgerock.services.umaaudit.store.password": null,
+        "org.forgerock.services.umaaudit.store.ssl.enabled": "",
+        "org.forgerock.services.umaaudit.store.starttls.enabled": "",
+      },
     },
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
+  },
+  "server": {
+    "04": {
+      "_id": "04",
+      "properties": {
+        "advanced": {
+          "_id": "04/properties/advanced",
+          "com.iplanet.am.lbcookie.value": "04",
+        },
+        "cts": {
+          "_id": "04/properties/cts",
+          "amconfig.org.forgerock.services.cts.store.common.section": {
+            "org.forgerock.services.cts.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.cts.store.max.connections": {
+              "inherited": true,
+              "value": "100",
+            },
+            "org.forgerock.services.cts.store.page.size": {
+              "inherited": true,
+              "value": "0",
+            },
+            "org.forgerock.services.cts.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.vlv.page.size": {
+              "inherited": true,
+              "value": "1000",
+            },
+          },
+          "amconfig.org.forgerock.services.cts.store.external.section": {
+            "org.forgerock.services.cts.store.affinity.enabled": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.cts.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+        "directoryConfiguration": {
+          "_id": "04/properties/directoryConfiguration",
+          "directoryConfiguration": {
+            "bindDn": "cn=Directory Manager",
+            "bindPassword": null,
+            "maxConnectionPool": 10,
+            "minConnectionPool": 1,
+            "mtlsAlias": "",
+            "mtlsEnabled": false,
+            "mtlsKeyPasswordFile": "",
+            "mtlsKeyStoreFile": "",
+            "mtlsKeyStorePasswordFile": "",
+            "mtlsKeyStoreType": null,
+          },
+          "directoryServers": [
+            {
+              "connectionType": "SSL",
+              "hostName": "localhost",
+              "portNumber": "50636",
+              "serverName": "Server1",
+            },
+          ],
+        },
+        "general": {
+          "_id": "04/properties/general",
+          "amconfig.header.debug": {
+            "com.iplanet.services.debug.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/debug",
+            },
+            "com.iplanet.services.debug.level": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.sun.services.debug.mergeall": {
+              "inherited": true,
+              "value": "on",
+            },
+          },
+          "amconfig.header.installdir": {
+            "com.iplanet.am.locale": {
+              "inherited": true,
+              "value": "en_US",
+            },
+            "com.iplanet.am.util.xml.validating": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.iplanet.services.configpath": {
+              "inherited": true,
+              "value": "%BASE_DIR%",
+            },
+            "com.sun.identity.client.notification.url": {
+              "inherited": true,
+              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+            },
+          },
+          "amconfig.header.mailserver": {
+            "com.iplanet.am.smtphost": {
+              "inherited": true,
+              "value": "localhost",
+            },
+            "com.iplanet.am.smtpport": {
+              "inherited": true,
+              "value": "25",
+            },
+          },
+          "amconfig.header.site": {
+            "singleChoiceSite": "[Empty]",
+          },
+        },
+        "sdk": {
+          "_id": "04/properties/sdk",
+          "amconfig.header.cachingreplica": {
+            "com.iplanet.am.sdk.cache.maxSize": {
+              "inherited": true,
+              "value": "10000",
+            },
+          },
+          "amconfig.header.datastore": {
+            "com.sun.identity.sm.enableDataStoreNotification": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.sm.notification.threadpool.size": {
+              "inherited": true,
+              "value": "1",
+            },
+          },
+          "amconfig.header.eventservice": {
+            "com.iplanet.am.event.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "3000",
+            },
+            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.event.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+            "com.sun.am.event.connection.disable.list": {
+              "inherited": true,
+              "value": "aci,um,sm",
+            },
+          },
+          "amconfig.header.ldapconnection": {
+            "com.iplanet.am.ldap.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "1000",
+            },
+            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.ldap.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+          },
+          "amconfig.header.sdktimetoliveconfig": {
+            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
+              "inherited": true,
+              "value": "30",
+            },
+            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
+              "inherited": true,
+              "value": "15",
+            },
+          },
+        },
+        "security": {
+          "_id": "04/properties/security",
+          "amconfig.header.cookie": {
+            "com.iplanet.am.cookie.encode": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.cookie.name": {
+              "inherited": true,
+              "value": "iPlanetDirectoryPro",
+            },
+            "com.iplanet.am.cookie.secure": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.crlcache": {
+            "com.sun.identity.crl.cache.directory.host": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.mtlsenabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "com.sun.identity.crl.cache.directory.port": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchattr": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchlocs": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.ssl": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.user": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.header.deserialisationwhitelist": {
+            "openam.deserialisation.classes.whitelist": {
+              "inherited": true,
+              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+            },
+          },
+          "amconfig.header.encryption": {
+            "am.encryption.pwd": {
+              "inherited": true,
+              "value": "@AM_ENC_PWD@",
+            },
+            "am.encryption.secret.alias": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "am.encryption.secret.keyPass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreFile": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystorePass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreType": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+            "com.iplanet.security.SecureRandomFactoryImpl": {
+              "inherited": true,
+              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
+            },
+            "com.iplanet.security.encryptor": {
+              "inherited": true,
+              "value": "com.iplanet.services.util.JCEEncryption",
+            },
+          },
+          "amconfig.header.ocsp.check": {
+            "com.sun.identity.authentication.ocsp.responder.nickname": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocsp.responder.url": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocspCheck": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.securitykey": {
+            "com.sun.identity.saml.xmlsig.certalias": {
+              "inherited": true,
+              "value": "test",
+            },
+            "com.sun.identity.saml.xmlsig.keypass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.keypass",
+            },
+            "com.sun.identity.saml.xmlsig.keystore": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
+            },
+            "com.sun.identity.saml.xmlsig.storepass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.storepass",
+            },
+            "com.sun.identity.saml.xmlsig.storetype": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+          },
+          "amconfig.header.validation": {
+            "com.iplanet.am.clientIPCheckEnabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
+              "inherited": true,
+              "value": "16384",
+            },
+          },
+        },
+        "session": {
+          "_id": "04/properties/session",
+          "amconfig.header.sessionlogging": {
+            "com.iplanet.am.stats.interval": {
+              "inherited": true,
+              "value": "60",
+            },
+            "com.iplanet.services.stats.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/stats",
+            },
+            "com.iplanet.services.stats.state": {
+              "inherited": true,
+              "value": "file",
+            },
+            "com.sun.am.session.enableHostLookUp": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.sessionnotification": {
+            "com.iplanet.am.notification.threadpool.size": {
+              "inherited": true,
+              "value": "10",
+            },
+            "com.iplanet.am.notification.threadpool.threshold": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionthresholds": {
+            "com.iplanet.am.session.invalidsessionmaxtime": {
+              "inherited": true,
+              "value": "3",
+            },
+            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionvalidation": {
+            "com.sun.am.session.caseInsensitiveDN": {
+              "inherited": true,
+              "value": true,
+            },
+          },
+        },
+        "uma": {
+          "_id": "04/properties/uma",
+          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+            "org.forgerock.services.resourcesets.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.resourcesets.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+            "org.forgerock.services.resourcesets.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.resourcesets.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+            "org.forgerock.services.uma.labels.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.labels.store.max.connections": {
+              "inherited": true,
+              "value": "2",
+            },
+            "org.forgerock.services.uma.labels.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+            "org.forgerock.services.uma.labels.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.labels.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.labels.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+            "org.forgerock.services.uma.pendingrequests.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+            "org.forgerock.services.umaaudit.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.umaaudit.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+            "org.forgerock.services.umaaudit.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.umaaudit.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+      },
+      "siteName": null,
+      "url": "http://localhost:8082/am",
     },
   },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": {
-      "inherited": true,
-      "value": "default",
+}
+`;
+
+exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with default properties. 1`] = `0`;
+
+exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with default properties. 2`] = `""`;
+
+exports[`frodo server export "frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with default properties.: serverExportTestDir3/serverExportTestFile3.json 1`] = `
+{
+  "defaultProperties": {
+    "advanced": {
+      "_id": "null/properties/advanced",
+      "com.iplanet.am.buildDate": "2024-March-28 16:00",
+      "com.iplanet.am.buildRevision": "89116d59a1ebe73ed1931dd3649adb7f217cd06b",
+      "com.iplanet.am.buildVersion": "ForgeRock Access Management 7.5.0",
+      "com.iplanet.am.cookie.c66Encode": true,
+      "com.iplanet.am.daemons": "securid",
+      "com.iplanet.am.directory.ssl.enabled": false,
+      "com.iplanet.am.installdir": "%BASE_DIR%",
+      "com.iplanet.am.jssproxy.SSLTrustHostList": "",
+      "com.iplanet.am.jssproxy.checkSubjectAltName": false,
+      "com.iplanet.am.jssproxy.resolveIPAddress": false,
+      "com.iplanet.am.jssproxy.trustAllServerCerts": false,
+      "com.iplanet.am.lbcookie.name": "amlbcookie",
+      "com.iplanet.am.lbcookie.value": "00",
+      "com.iplanet.am.logstatus": "ACTIVE",
+      "com.iplanet.am.pcookie.name": "DProPCookie",
+      "com.iplanet.am.profile.host": "%SERVER_HOST%",
+      "com.iplanet.am.profile.port": "%SERVER_PORT%",
+      "com.iplanet.am.serverMode": true,
+      "com.iplanet.am.session.agentSessionIdleTime": "1440",
+      "com.iplanet.am.session.client.polling.enable": false,
+      "com.iplanet.am.session.client.polling.period": "180",
+      "com.iplanet.am.session.httpSession.enabled": "true",
+      "com.iplanet.am.version": "ForgeRock Access Management 7.5.0 Build 89116d59a1ebe73ed1931dd3649adb7f217cd06b (2024-March-28 16:00)",
+      "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
+      "com.sun.am.event.notification.expire.time": "5",
+      "com.sun.embedded.sync.servers": "on",
+      "com.sun.identity.am.cookie.check": false,
+      "com.sun.identity.auth.cookieName": "AMAuthCookie",
+      "com.sun.identity.authentication.multiple.tabs.used": false,
+      "com.sun.identity.authentication.setCookieToAllDomains": true,
+      "com.sun.identity.authentication.special.users": "cn=dsameuser,ou=DSAME Users,%ROOT_SUFFIX%|cn=amService-UrlAccessAgent,ou=DSAME Users,%ROOT_SUFFIX%",
+      "com.sun.identity.authentication.super.user": "uid=amAdmin,ou=People,%ROOT_SUFFIX%",
+      "com.sun.identity.authentication.uniqueCookieName": "sunIdentityServerAuthNServer",
+      "com.sun.identity.cookie.httponly": true,
+      "com.sun.identity.cookie.samesite": "off",
+      "com.sun.identity.enableUniqueSSOTokenCookie": false,
+      "com.sun.identity.jss.donotInstallAtHighestPriority": true,
+      "com.sun.identity.monitoring": "off",
+      "com.sun.identity.monitoring.local.conn.server.url": "service:jmx:rmi://",
+      "com.sun.identity.password.deploymentDescriptor": "%SERVER_URI%",
+      "com.sun.identity.plugin.configuration.class": "@CONFIGURATION_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.datastore.class.default": "@DATASTORE_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.log.class": "@LOG_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.monitoring.agent.class": "@MONAGENT_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.monitoring.saml2.class": "@MONSAML2_PROVIDER_CLASS@",
+      "com.sun.identity.plugin.session.class": "@SESSION_PROVIDER_CLASS@",
+      "com.sun.identity.policy.Policy.policy_evaluation_weights": "10:10:10",
+      "com.sun.identity.policy.resultsCacheMaxSize": "10000",
+      "com.sun.identity.policy.resultsCacheResourceCap": "20",
+      "com.sun.identity.saml.xmlsig.keyprovider.class": "@XMLSIG_KEY_PROVIDER@",
+      "com.sun.identity.saml.xmlsig.passwordDecoder": "@PASSWORD_DECODER_CLASS@",
+      "com.sun.identity.saml.xmlsig.signatureprovider.class": "@XML_SIGNATURE_PROVIDER@",
+      "com.sun.identity.security.checkcaller": false,
+      "com.sun.identity.server.fqdnMap[dnsfirst]": "dnsfirst",
+      "com.sun.identity.server.fqdnMap[hello]": "hello",
+      "com.sun.identity.server.fqdnMap[localhost]": "localhost",
+      "com.sun.identity.server.fqdnMap[openam-frodo-dev.classic.com]": "openam-frodo-dev.classic.com",
+      "com.sun.identity.server.fqdnMap[openam]": "openam",
+      "com.sun.identity.server.fqdnMap[secondDNS]": "secondDNS",
+      "com.sun.identity.session.repository.enableAttributeCompression": false,
+      "com.sun.identity.session.repository.enableCompression": false,
+      "com.sun.identity.session.repository.enableEncryption": false,
+      "com.sun.identity.sm.cache.ttl": "30",
+      "com.sun.identity.sm.cache.ttl.enable": false,
+      "com.sun.identity.url.readTimeout": "30000",
+      "com.sun.identity.webcontainer": "WEB_CONTAINER",
+      "dynamic.datastore.creation.enabled": false,
+      "openam.auth.destroy_session_after_upgrade": true,
+      "openam.auth.distAuthCookieName": "AMDistAuthCookie",
+      "openam.auth.session_property_upgrader": "org.forgerock.openam.authentication.service.DefaultSessionPropertyUpgrader",
+      "openam.auth.version.header.enabled": false,
+      "openam.authentication.ignore_goto_during_logout": false,
+      "openam.cdm.default.charset": "UTF-8",
+      "openam.forbidden.to.copy.headers": "connection",
+      "openam.forbidden.to.copy.request.headers": "connection",
+      "openam.oauth2.client.jwt.encryption.algorithm.allow.list": "RSA-OAEP,RSA-OAEP-256,ECDH-ES",
+      "openam.oauth2.client.jwt.unreasonable.lifetime.limit.minutes": "30",
+      "openam.retained.http.headers": "X-DSAMEVersion",
+      "openam.retained.http.request.headers": "X-DSAMEVersion",
+      "openam.serviceattributevalidator.classes.whitelist": "org.forgerock.openam.auth.nodes.validators.GreaterThanZeroValidator,org.forgerock.openam.auth.nodes.validators.HMACKeyLengthValidator,org.forgerock.openam.auth.nodes.validators.HmacSigningKeyValidator,org.forgerock.openam.auth.nodes.validators.PercentageValidator,org.forgerock.openam.auth.nodes.validators.QueryFilterValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyNameValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyValidator,org.forgerock.openam.auth.nodes.framework.validators.NodeValueValidator,org.forgerock.openam.audit.validation.PositiveIntegerValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.AlphaNumericValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.CodeLengthValidator,org.forgerock.openam.authentication.modules.persistentcookie.validation.SigningKeyValidator,com.sun.identity.common.configuration.DuplicateKeyMapValueValidator,com.sun.identity.common.configuration.AgentClientIpModeValueValidator,com.sun.identity.common.configuration.FilterModeValueValidator,com.sun.identity.common.configuration.GlobalMapValueValidator,com.sun.identity.common.configuration.ListValueValidator,com.sun.identity.common.configuration.MapValueValidator,com.sun.identity.common.configuration.ServerPropertyValidator,com.sun.identity.policy.ResourceComparatorValidator,com.sun.identity.sm.EmailValidator,com.sun.identity.sm.IPAddressValidator,com.sun.identity.sm.RequiredValueValidator,com.sun.identity.sm.ServerIDValidator,com.sun.identity.sm.SiteIDValidator,org.forgerock.openam.sm.validation.Base64EncodedBinaryValidator,org.forgerock.openam.sm.validation.BlankValueValidator,org.forgerock.openam.sm.validation.DurationValidator,org.forgerock.openam.sm.validation.EndpointValidator,org.forgerock.openam.sm.validation.HostnameValidator,org.forgerock.openam.sm.validation.PortValidator,org.forgerock.openam.sm.validation.SecretIdValidator,org.forgerock.openam.sm.validation.StatelessSessionSigningAlgorithmValidator,org.forgerock.openam.sm.validation.StringMapValidator,org.forgerock.openam.sm.validation.URLValidator,org.forgerock.openam.selfservice.config.KeyAliasValidator,org.forgerock.openam.sm.validation.UniqueIndexedValuesValidator,org.forgerock.openam.webhook.HttpHeaderValidator,org.forgerock.oauth2.core.ClientRedirectUriValidator",
+      "openam.session.case.sensitive.uuid": false,
+      "org.forgerock.allow.http.client.debug": false,
+      "org.forgerock.am.auth.chains.authindexuser.strict": true,
+      "org.forgerock.am.auth.node.otp.inSharedState": false,
+      "org.forgerock.am.auth.trees.authenticate.identified.identity": true,
+      "org.forgerock.openam.audit.additionalSuccessStatusCodesEnabled": true,
+      "org.forgerock.openam.audit.identity.activity.events.blacklist": "AM-ACCESS-ATTEMPT,AM-IDENTITY-CHANGE,AM-GROUP-CHANGE",
+      "org.forgerock.openam.auth.transactionauth.returnErrorOnAuthFailure": false,
+      "org.forgerock.openam.authLevel.excludeRequiredOrRequisite": false,
+      "org.forgerock.openam.authentication.forceAuth.enabled": false,
+      "org.forgerock.openam.console.autocomplete.enabled": true,
+      "org.forgerock.openam.core.resource.lookup.cache.enabled": true,
+      "org.forgerock.openam.core.sms.placeholder_api_enabled": "OFF",
+      "org.forgerock.openam.devices.recovery.use_insecure_storage": false,
+      "org.forgerock.openam.encryption.key.digest": "SHA1",
+      "org.forgerock.openam.encryption.key.iterations": "10000",
+      "org.forgerock.openam.encryption.key.size": "128",
+      "org.forgerock.openam.httpclienthandler.system.clients.connection.timeout": "10 seconds",
+      "org.forgerock.openam.httpclienthandler.system.clients.max.connections": "64",
+      "org.forgerock.openam.httpclienthandler.system.clients.pool.ttl": "-1",
+      "org.forgerock.openam.httpclienthandler.system.clients.response.timeout": "10 seconds",
+      "org.forgerock.openam.httpclienthandler.system.clients.retry.failed.requests.enabled": true,
+      "org.forgerock.openam.httpclienthandler.system.clients.reuse.connections.enabled": true,
+      "org.forgerock.openam.httpclienthandler.system.nonProxyHosts": "localhost,127.*,[::1],0.0.0.0,[::0]",
+      "org.forgerock.openam.httpclienthandler.system.proxy.enabled": false,
+      "org.forgerock.openam.httpclienthandler.system.proxy.password": null,
+      "org.forgerock.openam.httpclienthandler.system.proxy.uri": "",
+      "org.forgerock.openam.httpclienthandler.system.proxy.username": "",
+      "org.forgerock.openam.idm.attribute.names.lower.case": false,
+      "org.forgerock.openam.idrepo.ldapv3.passwordpolicy.allowDiagnosticMessage": false,
+      "org.forgerock.openam.idrepo.ldapv3.proxyauth.passwordreset.adminRequest": "isAdminPasswordChangeRequest",
+      "org.forgerock.openam.introspect.token.query.param.allowed": false,
+      "org.forgerock.openam.ldap.dncache.expire.time": "0",
+      "org.forgerock.openam.ldap.heartbeat.timeout": "10",
+      "org.forgerock.openam.ldap.keepalive.search.base": "",
+      "org.forgerock.openam.ldap.keepalive.search.filter": "(objectClass=*)",
+      "org.forgerock.openam.ldap.secure.protocol.version": "TLSv1.3,TLSv1.2",
+      "org.forgerock.openam.notifications.agents.enabled": true,
+      "org.forgerock.openam.oauth2.checkIssuerForIdTokenInfo": true,
+      "org.forgerock.openam.radius.server.context.cache.size": "5000",
+      "org.forgerock.openam.redirecturlvalidator.maxUrlLength": "2000",
+      "org.forgerock.openam.request.max.bytes.entity.size": "1048576",
+      "org.forgerock.openam.saml2.authenticatorlookup.skewAllowance": "60",
+      "org.forgerock.openam.scripting.maxinterpreterstackdepth": "10000",
+      "org.forgerock.openam.secrets.special.user.passwords.format": "ENCRYPTED_PLAIN",
+      "org.forgerock.openam.secrets.special.user.secret.refresh.seconds": "900",
+      "org.forgerock.openam.session.service.persistence.deleteAsynchronously": true,
+      "org.forgerock.openam.session.stateless.encryption.method": "A128CBC-HS256",
+      "org.forgerock.openam.session.stateless.rsa.padding": "RSA-OAEP-256",
+      "org.forgerock.openam.session.stateless.signing.allownone": false,
+      "org.forgerock.openam.showServletTraceInBrowser": false,
+      "org.forgerock.openam.slf4j.enableTraceInMessage": false,
+      "org.forgerock.openam.smtp.system.connect.timeout": "10000",
+      "org.forgerock.openam.smtp.system.socket.read.timeout": "10000",
+      "org.forgerock.openam.smtp.system.socket.write.timeout": "10000",
+      "org.forgerock.openam.sso.providers.list": "org.forgerock.openidconnect.ssoprovider.OpenIdConnectSSOProvider",
+      "org.forgerock.openam.timerpool.shutdown.retry.interval": "15000",
+      "org.forgerock.openam.timerpool.shutdown.retry.limit": "3",
+      "org.forgerock.openam.timerpool.shutdown.retry.multiplier": "1.5",
+      "org.forgerock.openam.trees.consumedstatedata.cache.size": "15",
+      "org.forgerock.openam.trees.ids.cache.size": "50",
+      "org.forgerock.openam.url.connectTimeout": "1000",
+      "org.forgerock.openam.xui.user.session.validation.enabled": true,
+      "org.forgerock.openidconnect.ssoprovider.maxcachesize": "5000",
+      "org.forgerock.security.entitlement.enforce.realm": true,
+      "org.forgerock.security.oauth2.enforce.sub.claim.uniqueness": true,
+      "org.forgerock.services.cts.store.reaper.enabled": true,
+      "org.forgerock.services.cts.store.ttlsupport.enabled": false,
+      "org.forgerock.services.cts.store.ttlsupport.exclusionlist": "",
+      "org.forgerock.services.default.store.max.connections": "",
+      "org.forgerock.services.default.store.min.connections": "",
+      "org.forgerock.services.openid.request.object.lifespan": "120000",
+      "securidHelper.ports": "58943",
     },
-    "org.forgerock.services.umaaudit.store.max.connections": {
-      "inherited": true,
-      "value": "10",
+    "cts": {
+      "_id": "null/properties/cts",
+      "amconfig.org.forgerock.services.cts.store.common.section": {
+        "org.forgerock.services.cts.store.location": "default",
+        "org.forgerock.services.cts.store.max.connections": "100",
+        "org.forgerock.services.cts.store.page.size": "0",
+        "org.forgerock.services.cts.store.root.suffix": "",
+        "org.forgerock.services.cts.store.vlv.page.size": "1000",
+      },
+      "amconfig.org.forgerock.services.cts.store.external.section": {
+        "org.forgerock.services.cts.store.directory.name": "",
+        "org.forgerock.services.cts.store.heartbeat": "10",
+        "org.forgerock.services.cts.store.loginid": "",
+        "org.forgerock.services.cts.store.mtls.enabled": "",
+        "org.forgerock.services.cts.store.password": null,
+        "org.forgerock.services.cts.store.ssl.enabled": "",
+        "org.forgerock.services.cts.store.starttls.enabled": "",
+      },
     },
-    "org.forgerock.services.umaaudit.store.root.suffix": {
-      "inherited": true,
-      "value": "",
+    "general": {
+      "_id": "null/properties/general",
+      "amconfig.header.debug": {
+        "com.iplanet.services.debug.directory": "%BASE_DIR%/var/debug",
+        "com.iplanet.services.debug.level": "off",
+        "com.sun.services.debug.mergeall": "on",
+      },
+      "amconfig.header.installdir": {
+        "com.iplanet.am.locale": "en_US",
+        "com.iplanet.am.util.xml.validating": "off",
+        "com.iplanet.services.configpath": "%BASE_DIR%",
+        "com.sun.identity.client.notification.url": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+      },
+      "amconfig.header.mailserver": {
+        "com.iplanet.am.smtphost": "localhost",
+        "com.iplanet.am.smtpport": "25",
+      },
     },
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": {
-      "inherited": true,
-      "value": "",
+    "sdk": {
+      "_id": "null/properties/sdk",
+      "amconfig.header.cachingreplica": {
+        "com.iplanet.am.sdk.cache.maxSize": "10000",
+      },
+      "amconfig.header.datastore": {
+        "com.sun.identity.sm.enableDataStoreNotification": false,
+        "com.sun.identity.sm.notification.threadpool.size": "1",
+      },
+      "amconfig.header.eventservice": {
+        "com.iplanet.am.event.connection.delay.between.retries": "3000",
+        "com.iplanet.am.event.connection.ldap.error.codes.retries": "80,81,91",
+        "com.iplanet.am.event.connection.num.retries": "3",
+        "com.sun.am.event.connection.disable.list": "aci,um,sm",
+      },
+      "amconfig.header.ldapconnection": {
+        "com.iplanet.am.ldap.connection.delay.between.retries": "1000",
+        "com.iplanet.am.ldap.connection.ldap.error.codes.retries": "80,81,91",
+        "com.iplanet.am.ldap.connection.num.retries": "3",
+      },
+      "amconfig.header.sdktimetoliveconfig": {
+        "com.iplanet.am.sdk.cache.entry.default.expire.time": "30",
+        "com.iplanet.am.sdk.cache.entry.expire.enabled": false,
+        "com.iplanet.am.sdk.cache.entry.user.expire.time": "15",
+      },
     },
-    "org.forgerock.services.umaaudit.store.heartbeat": {
-      "inherited": true,
-      "value": "10",
+    "security": {
+      "_id": "null/properties/security",
+      "amconfig.header.cookie": {
+        "com.iplanet.am.cookie.encode": false,
+        "com.iplanet.am.cookie.name": "iPlanetDirectoryPro",
+        "com.iplanet.am.cookie.secure": false,
+      },
+      "amconfig.header.crlcache": {
+        "com.sun.identity.crl.cache.directory.host": "",
+        "com.sun.identity.crl.cache.directory.mtlsenabled": false,
+        "com.sun.identity.crl.cache.directory.password": null,
+        "com.sun.identity.crl.cache.directory.port": "",
+        "com.sun.identity.crl.cache.directory.searchattr": "",
+        "com.sun.identity.crl.cache.directory.searchlocs": "",
+        "com.sun.identity.crl.cache.directory.ssl": false,
+        "com.sun.identity.crl.cache.directory.user": "",
+      },
+      "amconfig.header.deserialisationwhitelist": {
+        "openam.deserialisation.classes.whitelist": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+      },
+      "amconfig.header.encryption": {
+        "am.encryption.pwd": "@AM_ENC_PWD@",
+        "am.encryption.secret.enabled": false,
+        "am.encryption.secret.keystoreType": "JCEKS",
+        "com.iplanet.security.SecureRandomFactoryImpl": "com.iplanet.am.util.SecureRandomFactoryImpl",
+        "com.iplanet.security.encryptor": "com.iplanet.services.util.JCEEncryption",
+      },
+      "amconfig.header.ocsp.check": {
+        "com.sun.identity.authentication.ocsp.responder.nickname": "",
+        "com.sun.identity.authentication.ocsp.responder.url": "",
+        "com.sun.identity.authentication.ocspCheck": false,
+      },
+      "amconfig.header.securitykey": {
+        "com.sun.identity.saml.xmlsig.certalias": "test",
+        "com.sun.identity.saml.xmlsig.keypass": "%BASE_DIR%/security/secrets/default/.keypass",
+        "com.sun.identity.saml.xmlsig.keystore": "%BASE_DIR%/security/keystores/keystore.jceks",
+        "com.sun.identity.saml.xmlsig.storepass": "%BASE_DIR%/security/secrets/default/.storepass",
+        "com.sun.identity.saml.xmlsig.storetype": "JCEKS",
+      },
+      "amconfig.header.validation": {
+        "com.iplanet.am.clientIPCheckEnabled": false,
+        "com.iplanet.services.comm.server.pllrequest.maxContentLength": "16384",
+      },
     },
-    "org.forgerock.services.umaaudit.store.loginid": {
-      "inherited": true,
-      "value": "",
+    "session": {
+      "_id": "null/properties/session",
+      "amconfig.header.sessionlogging": {
+        "com.iplanet.am.stats.interval": "60",
+        "com.iplanet.services.stats.directory": "%BASE_DIR%/var/stats",
+        "com.iplanet.services.stats.state": "file",
+        "com.sun.am.session.enableHostLookUp": false,
+      },
+      "amconfig.header.sessionnotification": {
+        "com.iplanet.am.notification.threadpool.size": "10",
+        "com.iplanet.am.notification.threadpool.threshold": "5000",
+      },
+      "amconfig.header.sessionthresholds": {
+        "com.iplanet.am.session.invalidsessionmaxtime": "3",
+        "org.forgerock.openam.session.service.access.persistence.caching.maxsize": "5000",
+      },
+      "amconfig.header.sessionvalidation": {
+        "com.sun.am.session.caseInsensitiveDN": true,
+      },
     },
-    "org.forgerock.services.umaaudit.store.mtls.enabled": {
-      "inherited": true,
-      "value": "",
+    "uma": {
+      "_id": "null/properties/uma",
+      "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+        "org.forgerock.services.resourcesets.store.location": "default",
+        "org.forgerock.services.resourcesets.store.max.connections": "10",
+        "org.forgerock.services.resourcesets.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+        "org.forgerock.services.resourcesets.store.directory.name": "",
+        "org.forgerock.services.resourcesets.store.heartbeat": "10",
+        "org.forgerock.services.resourcesets.store.loginid": "",
+        "org.forgerock.services.resourcesets.store.mtls.enabled": "",
+        "org.forgerock.services.resourcesets.store.password": null,
+        "org.forgerock.services.resourcesets.store.ssl.enabled": "",
+        "org.forgerock.services.resourcesets.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+        "org.forgerock.services.uma.labels.store.location": "default",
+        "org.forgerock.services.uma.labels.store.max.connections": "2",
+        "org.forgerock.services.uma.labels.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+        "org.forgerock.services.uma.labels.store.directory.name": "",
+        "org.forgerock.services.uma.labels.store.heartbeat": "10",
+        "org.forgerock.services.uma.labels.store.loginid": "",
+        "org.forgerock.services.uma.labels.store.mtls.enabled": "",
+        "org.forgerock.services.uma.labels.store.password": null,
+        "org.forgerock.services.uma.labels.store.ssl.enabled": "",
+        "org.forgerock.services.uma.labels.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+        "org.forgerock.services.uma.pendingrequests.store.location": "default",
+        "org.forgerock.services.uma.pendingrequests.store.max.connections": "10",
+        "org.forgerock.services.uma.pendingrequests.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+        "org.forgerock.services.uma.pendingrequests.store.directory.name": "",
+        "org.forgerock.services.uma.pendingrequests.store.heartbeat": "10",
+        "org.forgerock.services.uma.pendingrequests.store.loginid": "",
+        "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": "",
+        "org.forgerock.services.uma.pendingrequests.store.password": null,
+        "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": "",
+        "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": "",
+      },
+      "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+        "org.forgerock.services.umaaudit.store.location": "default",
+        "org.forgerock.services.umaaudit.store.max.connections": "10",
+        "org.forgerock.services.umaaudit.store.root.suffix": "",
+      },
+      "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+        "org.forgerock.services.umaaudit.store.directory.name": "",
+        "org.forgerock.services.umaaudit.store.heartbeat": "10",
+        "org.forgerock.services.umaaudit.store.loginid": "",
+        "org.forgerock.services.umaaudit.store.mtls.enabled": "",
+        "org.forgerock.services.umaaudit.store.password": null,
+        "org.forgerock.services.umaaudit.store.ssl.enabled": "",
+        "org.forgerock.services.umaaudit.store.starttls.enabled": "",
+      },
     },
-    "org.forgerock.services.umaaudit.store.password": {
-      "inherited": true,
-      "value": null,
+  },
+  "server": {
+    "01": {
+      "_id": "01",
+      "properties": {
+        "advanced": {
+          "_id": "01/properties/advanced",
+          "bootstrap.file": "/root/.openamcfg/AMConfig_usr_local_tomcat_webapps_am_",
+          "com.iplanet.am.lbcookie.value": "01",
+          "com.iplanet.am.serverMode": true,
+          "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
+          "com.sun.embedded.replicationport": "",
+          "com.sun.embedded.sync.servers": "on",
+          "com.sun.identity.common.systemtimerpool.size": "3",
+          "com.sun.identity.sm.sms_object_class_name": "com.sun.identity.sm.SmsWrapperObject",
+          "com.sun.identity.urlconnection.useCache": false,
+          "opensso.protocol.handler.pkgs": "",
+          "org.forgerock.embedded.dsadminport": "4444",
+        },
+        "cts": {
+          "_id": "01/properties/cts",
+          "amconfig.org.forgerock.services.cts.store.common.section": {
+            "org.forgerock.services.cts.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.cts.store.max.connections": {
+              "inherited": true,
+              "value": "100",
+            },
+            "org.forgerock.services.cts.store.page.size": {
+              "inherited": true,
+              "value": "0",
+            },
+            "org.forgerock.services.cts.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.vlv.page.size": {
+              "inherited": true,
+              "value": "1000",
+            },
+          },
+          "amconfig.org.forgerock.services.cts.store.external.section": {
+            "org.forgerock.services.cts.store.affinity.enabled": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.cts.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+        "directoryConfiguration": {
+          "_id": "01/properties/directoryConfiguration",
+          "directoryConfiguration": {
+            "bindDn": "cn=Directory Manager",
+            "bindPassword": null,
+            "maxConnectionPool": 10,
+            "minConnectionPool": 1,
+            "mtlsAlias": "",
+            "mtlsEnabled": false,
+            "mtlsKeyPasswordFile": "",
+            "mtlsKeyStoreFile": "",
+            "mtlsKeyStorePasswordFile": "",
+            "mtlsKeyStoreType": null,
+          },
+          "directoryServers": [
+            {
+              "connectionType": "SSL",
+              "hostName": "localhost",
+              "portNumber": "50636",
+              "serverName": "Server1",
+            },
+          ],
+        },
+        "general": {
+          "_id": "01/properties/general",
+          "amconfig.header.debug": {
+            "com.iplanet.services.debug.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/debug",
+            },
+            "com.iplanet.services.debug.level": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.sun.services.debug.mergeall": {
+              "inherited": true,
+              "value": "on",
+            },
+          },
+          "amconfig.header.installdir": {
+            "com.iplanet.am.locale": {
+              "inherited": false,
+              "value": "en_US",
+            },
+            "com.iplanet.am.util.xml.validating": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.iplanet.services.configpath": {
+              "inherited": false,
+              "value": "/root/am",
+            },
+            "com.sun.identity.client.notification.url": {
+              "inherited": true,
+              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+            },
+          },
+          "amconfig.header.mailserver": {
+            "com.iplanet.am.smtphost": {
+              "inherited": true,
+              "value": "localhost",
+            },
+            "com.iplanet.am.smtpport": {
+              "inherited": true,
+              "value": "25",
+            },
+          },
+          "amconfig.header.site": {
+            "singleChoiceSite": "[Empty]",
+          },
+        },
+        "sdk": {
+          "_id": "01/properties/sdk",
+          "amconfig.header.cachingreplica": {
+            "com.iplanet.am.sdk.cache.maxSize": {
+              "inherited": true,
+              "value": "10000",
+            },
+          },
+          "amconfig.header.datastore": {
+            "com.sun.identity.sm.enableDataStoreNotification": {
+              "inherited": false,
+              "value": true,
+            },
+            "com.sun.identity.sm.notification.threadpool.size": {
+              "inherited": true,
+              "value": "1",
+            },
+          },
+          "amconfig.header.eventservice": {
+            "com.iplanet.am.event.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "3000",
+            },
+            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.event.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+            "com.sun.am.event.connection.disable.list": {
+              "inherited": false,
+              "value": "aci,um",
+            },
+          },
+          "amconfig.header.ldapconnection": {
+            "com.iplanet.am.ldap.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "1000",
+            },
+            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
+              "inherited": false,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.ldap.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+          },
+          "amconfig.header.sdktimetoliveconfig": {
+            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
+              "inherited": true,
+              "value": "30",
+            },
+            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
+              "inherited": true,
+              "value": "15",
+            },
+          },
+        },
+        "security": {
+          "_id": "01/properties/security",
+          "amconfig.header.cookie": {
+            "com.iplanet.am.cookie.encode": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.cookie.name": {
+              "inherited": true,
+              "value": "iPlanetDirectoryPro",
+            },
+            "com.iplanet.am.cookie.secure": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.crlcache": {
+            "com.sun.identity.crl.cache.directory.host": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.mtlsenabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "com.sun.identity.crl.cache.directory.port": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchattr": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchlocs": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.ssl": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.user": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.header.deserialisationwhitelist": {
+            "openam.deserialisation.classes.whitelist": {
+              "inherited": true,
+              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+            },
+          },
+          "amconfig.header.encryption": {
+            "am.encryption.pwd": {
+              "inherited": false,
+              "value": "efSYcwIhr7uKH30rgciGTVTFzb63LhYu",
+            },
+            "am.encryption.secret.alias": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "am.encryption.secret.keyPass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreFile": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystorePass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreType": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+            "com.iplanet.security.SecureRandomFactoryImpl": {
+              "inherited": true,
+              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
+            },
+            "com.iplanet.security.encryptor": {
+              "inherited": true,
+              "value": "com.iplanet.services.util.JCEEncryption",
+            },
+          },
+          "amconfig.header.ocsp.check": {
+            "com.sun.identity.authentication.ocsp.responder.nickname": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocsp.responder.url": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocspCheck": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.securitykey": {
+            "com.sun.identity.saml.xmlsig.certalias": {
+              "inherited": true,
+              "value": "test",
+            },
+            "com.sun.identity.saml.xmlsig.keypass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.keypass",
+            },
+            "com.sun.identity.saml.xmlsig.keystore": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
+            },
+            "com.sun.identity.saml.xmlsig.storepass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.storepass",
+            },
+            "com.sun.identity.saml.xmlsig.storetype": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+          },
+          "amconfig.header.validation": {
+            "com.iplanet.am.clientIPCheckEnabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
+              "inherited": true,
+              "value": "16384",
+            },
+          },
+        },
+        "session": {
+          "_id": "01/properties/session",
+          "amconfig.header.sessionlogging": {
+            "com.iplanet.am.stats.interval": {
+              "inherited": true,
+              "value": "60",
+            },
+            "com.iplanet.services.stats.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/stats",
+            },
+            "com.iplanet.services.stats.state": {
+              "inherited": true,
+              "value": "file",
+            },
+            "com.sun.am.session.enableHostLookUp": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.sessionnotification": {
+            "com.iplanet.am.notification.threadpool.size": {
+              "inherited": true,
+              "value": "10",
+            },
+            "com.iplanet.am.notification.threadpool.threshold": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionthresholds": {
+            "com.iplanet.am.session.invalidsessionmaxtime": {
+              "inherited": true,
+              "value": "3",
+            },
+            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionvalidation": {
+            "com.sun.am.session.caseInsensitiveDN": {
+              "inherited": true,
+              "value": true,
+            },
+          },
+        },
+        "uma": {
+          "_id": "01/properties/uma",
+          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+            "org.forgerock.services.resourcesets.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.resourcesets.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+            "org.forgerock.services.resourcesets.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.resourcesets.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+            "org.forgerock.services.uma.labels.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.labels.store.max.connections": {
+              "inherited": true,
+              "value": "2",
+            },
+            "org.forgerock.services.uma.labels.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+            "org.forgerock.services.uma.labels.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.labels.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.labels.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+            "org.forgerock.services.uma.pendingrequests.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+            "org.forgerock.services.umaaudit.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.umaaudit.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+            "org.forgerock.services.umaaudit.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.umaaudit.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+      },
+      "siteName": null,
+      "url": "http://localhost:8080/am",
     },
-    "org.forgerock.services.umaaudit.store.ssl.enabled": {
-      "inherited": true,
-      "value": "",
+    "03": {
+      "_id": "03",
+      "properties": {
+        "advanced": {
+          "_id": "03/properties/advanced",
+          "com.iplanet.am.lbcookie.value": "03",
+        },
+        "cts": {
+          "_id": "03/properties/cts",
+          "amconfig.org.forgerock.services.cts.store.common.section": {
+            "org.forgerock.services.cts.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.cts.store.max.connections": {
+              "inherited": true,
+              "value": "100",
+            },
+            "org.forgerock.services.cts.store.page.size": {
+              "inherited": true,
+              "value": "0",
+            },
+            "org.forgerock.services.cts.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.vlv.page.size": {
+              "inherited": true,
+              "value": "1000",
+            },
+          },
+          "amconfig.org.forgerock.services.cts.store.external.section": {
+            "org.forgerock.services.cts.store.affinity.enabled": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.cts.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+        "directoryConfiguration": {
+          "_id": "03/properties/directoryConfiguration",
+          "directoryConfiguration": {
+            "bindDn": "cn=Directory Manager",
+            "bindPassword": null,
+            "maxConnectionPool": 10,
+            "minConnectionPool": 1,
+            "mtlsAlias": "",
+            "mtlsEnabled": false,
+            "mtlsKeyPasswordFile": "",
+            "mtlsKeyStoreFile": "",
+            "mtlsKeyStorePasswordFile": "",
+            "mtlsKeyStoreType": null,
+          },
+          "directoryServers": [
+            {
+              "connectionType": "SSL",
+              "hostName": "localhost",
+              "portNumber": "50636",
+              "serverName": "Server1",
+            },
+          ],
+        },
+        "general": {
+          "_id": "03/properties/general",
+          "amconfig.header.debug": {
+            "com.iplanet.services.debug.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/debug",
+            },
+            "com.iplanet.services.debug.level": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.sun.services.debug.mergeall": {
+              "inherited": true,
+              "value": "on",
+            },
+          },
+          "amconfig.header.installdir": {
+            "com.iplanet.am.locale": {
+              "inherited": true,
+              "value": "en_US",
+            },
+            "com.iplanet.am.util.xml.validating": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.iplanet.services.configpath": {
+              "inherited": true,
+              "value": "%BASE_DIR%",
+            },
+            "com.sun.identity.client.notification.url": {
+              "inherited": true,
+              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+            },
+          },
+          "amconfig.header.mailserver": {
+            "com.iplanet.am.smtphost": {
+              "inherited": true,
+              "value": "localhost",
+            },
+            "com.iplanet.am.smtpport": {
+              "inherited": true,
+              "value": "25",
+            },
+          },
+          "amconfig.header.site": {
+            "singleChoiceSite": "testsite",
+          },
+        },
+        "sdk": {
+          "_id": "03/properties/sdk",
+          "amconfig.header.cachingreplica": {
+            "com.iplanet.am.sdk.cache.maxSize": {
+              "inherited": true,
+              "value": "10000",
+            },
+          },
+          "amconfig.header.datastore": {
+            "com.sun.identity.sm.enableDataStoreNotification": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.sm.notification.threadpool.size": {
+              "inherited": true,
+              "value": "1",
+            },
+          },
+          "amconfig.header.eventservice": {
+            "com.iplanet.am.event.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "3000",
+            },
+            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.event.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+            "com.sun.am.event.connection.disable.list": {
+              "inherited": true,
+              "value": "aci,um,sm",
+            },
+          },
+          "amconfig.header.ldapconnection": {
+            "com.iplanet.am.ldap.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "1000",
+            },
+            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.ldap.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+          },
+          "amconfig.header.sdktimetoliveconfig": {
+            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
+              "inherited": true,
+              "value": "30",
+            },
+            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
+              "inherited": true,
+              "value": "15",
+            },
+          },
+        },
+        "security": {
+          "_id": "03/properties/security",
+          "amconfig.header.cookie": {
+            "com.iplanet.am.cookie.encode": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.cookie.name": {
+              "inherited": true,
+              "value": "iPlanetDirectoryPro",
+            },
+            "com.iplanet.am.cookie.secure": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.crlcache": {
+            "com.sun.identity.crl.cache.directory.host": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.mtlsenabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "com.sun.identity.crl.cache.directory.port": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchattr": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchlocs": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.ssl": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.user": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.header.deserialisationwhitelist": {
+            "openam.deserialisation.classes.whitelist": {
+              "inherited": true,
+              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+            },
+          },
+          "amconfig.header.encryption": {
+            "am.encryption.pwd": {
+              "inherited": true,
+              "value": "@AM_ENC_PWD@",
+            },
+            "am.encryption.secret.alias": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "am.encryption.secret.keyPass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreFile": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystorePass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreType": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+            "com.iplanet.security.SecureRandomFactoryImpl": {
+              "inherited": true,
+              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
+            },
+            "com.iplanet.security.encryptor": {
+              "inherited": true,
+              "value": "com.iplanet.services.util.JCEEncryption",
+            },
+          },
+          "amconfig.header.ocsp.check": {
+            "com.sun.identity.authentication.ocsp.responder.nickname": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocsp.responder.url": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocspCheck": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.securitykey": {
+            "com.sun.identity.saml.xmlsig.certalias": {
+              "inherited": true,
+              "value": "test",
+            },
+            "com.sun.identity.saml.xmlsig.keypass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.keypass",
+            },
+            "com.sun.identity.saml.xmlsig.keystore": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
+            },
+            "com.sun.identity.saml.xmlsig.storepass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.storepass",
+            },
+            "com.sun.identity.saml.xmlsig.storetype": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+          },
+          "amconfig.header.validation": {
+            "com.iplanet.am.clientIPCheckEnabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
+              "inherited": true,
+              "value": "16384",
+            },
+          },
+        },
+        "session": {
+          "_id": "03/properties/session",
+          "amconfig.header.sessionlogging": {
+            "com.iplanet.am.stats.interval": {
+              "inherited": true,
+              "value": "60",
+            },
+            "com.iplanet.services.stats.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/stats",
+            },
+            "com.iplanet.services.stats.state": {
+              "inherited": true,
+              "value": "file",
+            },
+            "com.sun.am.session.enableHostLookUp": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.sessionnotification": {
+            "com.iplanet.am.notification.threadpool.size": {
+              "inherited": true,
+              "value": "10",
+            },
+            "com.iplanet.am.notification.threadpool.threshold": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionthresholds": {
+            "com.iplanet.am.session.invalidsessionmaxtime": {
+              "inherited": true,
+              "value": "3",
+            },
+            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionvalidation": {
+            "com.sun.am.session.caseInsensitiveDN": {
+              "inherited": true,
+              "value": true,
+            },
+          },
+        },
+        "uma": {
+          "_id": "03/properties/uma",
+          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+            "org.forgerock.services.resourcesets.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.resourcesets.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+            "org.forgerock.services.resourcesets.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.resourcesets.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+            "org.forgerock.services.uma.labels.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.labels.store.max.connections": {
+              "inherited": true,
+              "value": "2",
+            },
+            "org.forgerock.services.uma.labels.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+            "org.forgerock.services.uma.labels.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.labels.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.labels.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+            "org.forgerock.services.uma.pendingrequests.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+            "org.forgerock.services.umaaudit.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.umaaudit.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+            "org.forgerock.services.umaaudit.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.umaaudit.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+      },
+      "siteName": "testsite",
+      "url": "http://localhost:8081/am",
     },
-    "org.forgerock.services.umaaudit.store.starttls.enabled": {
-      "inherited": true,
-      "value": "",
+    "04": {
+      "_id": "04",
+      "properties": {
+        "advanced": {
+          "_id": "04/properties/advanced",
+          "com.iplanet.am.lbcookie.value": "04",
+        },
+        "cts": {
+          "_id": "04/properties/cts",
+          "amconfig.org.forgerock.services.cts.store.common.section": {
+            "org.forgerock.services.cts.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.cts.store.max.connections": {
+              "inherited": true,
+              "value": "100",
+            },
+            "org.forgerock.services.cts.store.page.size": {
+              "inherited": true,
+              "value": "0",
+            },
+            "org.forgerock.services.cts.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.vlv.page.size": {
+              "inherited": true,
+              "value": "1000",
+            },
+          },
+          "amconfig.org.forgerock.services.cts.store.external.section": {
+            "org.forgerock.services.cts.store.affinity.enabled": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.cts.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.cts.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.cts.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+        "directoryConfiguration": {
+          "_id": "04/properties/directoryConfiguration",
+          "directoryConfiguration": {
+            "bindDn": "cn=Directory Manager",
+            "bindPassword": null,
+            "maxConnectionPool": 10,
+            "minConnectionPool": 1,
+            "mtlsAlias": "",
+            "mtlsEnabled": false,
+            "mtlsKeyPasswordFile": "",
+            "mtlsKeyStoreFile": "",
+            "mtlsKeyStorePasswordFile": "",
+            "mtlsKeyStoreType": null,
+          },
+          "directoryServers": [
+            {
+              "connectionType": "SSL",
+              "hostName": "localhost",
+              "portNumber": "50636",
+              "serverName": "Server1",
+            },
+          ],
+        },
+        "general": {
+          "_id": "04/properties/general",
+          "amconfig.header.debug": {
+            "com.iplanet.services.debug.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/debug",
+            },
+            "com.iplanet.services.debug.level": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.sun.services.debug.mergeall": {
+              "inherited": true,
+              "value": "on",
+            },
+          },
+          "amconfig.header.installdir": {
+            "com.iplanet.am.locale": {
+              "inherited": true,
+              "value": "en_US",
+            },
+            "com.iplanet.am.util.xml.validating": {
+              "inherited": true,
+              "value": "off",
+            },
+            "com.iplanet.services.configpath": {
+              "inherited": true,
+              "value": "%BASE_DIR%",
+            },
+            "com.sun.identity.client.notification.url": {
+              "inherited": true,
+              "value": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
+            },
+          },
+          "amconfig.header.mailserver": {
+            "com.iplanet.am.smtphost": {
+              "inherited": true,
+              "value": "localhost",
+            },
+            "com.iplanet.am.smtpport": {
+              "inherited": true,
+              "value": "25",
+            },
+          },
+          "amconfig.header.site": {
+            "singleChoiceSite": "[Empty]",
+          },
+        },
+        "sdk": {
+          "_id": "04/properties/sdk",
+          "amconfig.header.cachingreplica": {
+            "com.iplanet.am.sdk.cache.maxSize": {
+              "inherited": true,
+              "value": "10000",
+            },
+          },
+          "amconfig.header.datastore": {
+            "com.sun.identity.sm.enableDataStoreNotification": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.sm.notification.threadpool.size": {
+              "inherited": true,
+              "value": "1",
+            },
+          },
+          "amconfig.header.eventservice": {
+            "com.iplanet.am.event.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "3000",
+            },
+            "com.iplanet.am.event.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.event.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+            "com.sun.am.event.connection.disable.list": {
+              "inherited": true,
+              "value": "aci,um,sm",
+            },
+          },
+          "amconfig.header.ldapconnection": {
+            "com.iplanet.am.ldap.connection.delay.between.retries": {
+              "inherited": true,
+              "value": "1000",
+            },
+            "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
+              "inherited": true,
+              "value": "80,81,91",
+            },
+            "com.iplanet.am.ldap.connection.num.retries": {
+              "inherited": true,
+              "value": "3",
+            },
+          },
+          "amconfig.header.sdktimetoliveconfig": {
+            "com.iplanet.am.sdk.cache.entry.default.expire.time": {
+              "inherited": true,
+              "value": "30",
+            },
+            "com.iplanet.am.sdk.cache.entry.expire.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.sdk.cache.entry.user.expire.time": {
+              "inherited": true,
+              "value": "15",
+            },
+          },
+        },
+        "security": {
+          "_id": "04/properties/security",
+          "amconfig.header.cookie": {
+            "com.iplanet.am.cookie.encode": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.am.cookie.name": {
+              "inherited": true,
+              "value": "iPlanetDirectoryPro",
+            },
+            "com.iplanet.am.cookie.secure": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.crlcache": {
+            "com.sun.identity.crl.cache.directory.host": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.mtlsenabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "com.sun.identity.crl.cache.directory.port": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchattr": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.searchlocs": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.crl.cache.directory.ssl": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.sun.identity.crl.cache.directory.user": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.header.deserialisationwhitelist": {
+            "openam.deserialisation.classes.whitelist": {
+              "inherited": true,
+              "value": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
+            },
+          },
+          "amconfig.header.encryption": {
+            "am.encryption.pwd": {
+              "inherited": true,
+              "value": "@AM_ENC_PWD@",
+            },
+            "am.encryption.secret.alias": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.enabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "am.encryption.secret.keyPass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreFile": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystorePass": {
+              "inherited": true,
+              "value": null,
+            },
+            "am.encryption.secret.keystoreType": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+            "com.iplanet.security.SecureRandomFactoryImpl": {
+              "inherited": true,
+              "value": "com.iplanet.am.util.SecureRandomFactoryImpl",
+            },
+            "com.iplanet.security.encryptor": {
+              "inherited": true,
+              "value": "com.iplanet.services.util.JCEEncryption",
+            },
+          },
+          "amconfig.header.ocsp.check": {
+            "com.sun.identity.authentication.ocsp.responder.nickname": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocsp.responder.url": {
+              "inherited": true,
+              "value": "",
+            },
+            "com.sun.identity.authentication.ocspCheck": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.securitykey": {
+            "com.sun.identity.saml.xmlsig.certalias": {
+              "inherited": true,
+              "value": "test",
+            },
+            "com.sun.identity.saml.xmlsig.keypass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.keypass",
+            },
+            "com.sun.identity.saml.xmlsig.keystore": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/keystores/keystore.jceks",
+            },
+            "com.sun.identity.saml.xmlsig.storepass": {
+              "inherited": true,
+              "value": "%BASE_DIR%/security/secrets/default/.storepass",
+            },
+            "com.sun.identity.saml.xmlsig.storetype": {
+              "inherited": true,
+              "value": "JCEKS",
+            },
+          },
+          "amconfig.header.validation": {
+            "com.iplanet.am.clientIPCheckEnabled": {
+              "inherited": true,
+              "value": false,
+            },
+            "com.iplanet.services.comm.server.pllrequest.maxContentLength": {
+              "inherited": true,
+              "value": "16384",
+            },
+          },
+        },
+        "session": {
+          "_id": "04/properties/session",
+          "amconfig.header.sessionlogging": {
+            "com.iplanet.am.stats.interval": {
+              "inherited": true,
+              "value": "60",
+            },
+            "com.iplanet.services.stats.directory": {
+              "inherited": true,
+              "value": "%BASE_DIR%/var/stats",
+            },
+            "com.iplanet.services.stats.state": {
+              "inherited": true,
+              "value": "file",
+            },
+            "com.sun.am.session.enableHostLookUp": {
+              "inherited": true,
+              "value": false,
+            },
+          },
+          "amconfig.header.sessionnotification": {
+            "com.iplanet.am.notification.threadpool.size": {
+              "inherited": true,
+              "value": "10",
+            },
+            "com.iplanet.am.notification.threadpool.threshold": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionthresholds": {
+            "com.iplanet.am.session.invalidsessionmaxtime": {
+              "inherited": true,
+              "value": "3",
+            },
+            "org.forgerock.openam.session.service.access.persistence.caching.maxsize": {
+              "inherited": true,
+              "value": "5000",
+            },
+          },
+          "amconfig.header.sessionvalidation": {
+            "com.sun.am.session.caseInsensitiveDN": {
+              "inherited": true,
+              "value": true,
+            },
+          },
+        },
+        "uma": {
+          "_id": "04/properties/uma",
+          "amconfig.org.forgerock.services.resourcesets.store.common.section": {
+            "org.forgerock.services.resourcesets.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.resourcesets.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.resourcesets.store.external.section": {
+            "org.forgerock.services.resourcesets.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.resourcesets.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.resourcesets.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.resourcesets.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.common.section": {
+            "org.forgerock.services.uma.labels.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.labels.store.max.connections": {
+              "inherited": true,
+              "value": "2",
+            },
+            "org.forgerock.services.uma.labels.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.labels.store.external.section": {
+            "org.forgerock.services.uma.labels.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.labels.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.labels.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.labels.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
+            "org.forgerock.services.uma.pendingrequests.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
+            "org.forgerock.services.uma.pendingrequests.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.common.section": {
+            "org.forgerock.services.umaaudit.store.location": {
+              "inherited": true,
+              "value": "default",
+            },
+            "org.forgerock.services.umaaudit.store.max.connections": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.root.suffix": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+          "amconfig.org.forgerock.services.umaaudit.store.external.section": {
+            "org.forgerock.services.umaaudit.store.directory.name": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.heartbeat": {
+              "inherited": true,
+              "value": "10",
+            },
+            "org.forgerock.services.umaaudit.store.loginid": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.mtls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.password": {
+              "inherited": true,
+              "value": null,
+            },
+            "org.forgerock.services.umaaudit.store.ssl.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+            "org.forgerock.services.umaaudit.store.starttls.enabled": {
+              "inherited": true,
+              "value": "",
+            },
+          },
+        },
+      },
+      "siteName": null,
+      "url": "http://localhost:8082/am",
     },
   },
 }
 `;
 
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/default/advanced.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/advanced",
-  "com.iplanet.am.buildDate": "2024-March-28 16:00",
-  "com.iplanet.am.buildRevision": "89116d59a1ebe73ed1931dd3649adb7f217cd06b",
-  "com.iplanet.am.buildVersion": "ForgeRock Access Management 7.5.0",
-  "com.iplanet.am.cookie.c66Encode": true,
-  "com.iplanet.am.daemons": "securid",
-  "com.iplanet.am.directory.ssl.enabled": false,
-  "com.iplanet.am.installdir": "%BASE_DIR%",
-  "com.iplanet.am.jssproxy.SSLTrustHostList": "",
-  "com.iplanet.am.jssproxy.checkSubjectAltName": false,
-  "com.iplanet.am.jssproxy.resolveIPAddress": false,
-  "com.iplanet.am.jssproxy.trustAllServerCerts": false,
-  "com.iplanet.am.lbcookie.name": "amlbcookie",
-  "com.iplanet.am.lbcookie.value": "00",
-  "com.iplanet.am.logstatus": "ACTIVE",
-  "com.iplanet.am.pcookie.name": "DProPCookie",
-  "com.iplanet.am.profile.host": "%SERVER_HOST%",
-  "com.iplanet.am.profile.port": "%SERVER_PORT%",
-  "com.iplanet.am.serverMode": true,
-  "com.iplanet.am.session.agentSessionIdleTime": "1440",
-  "com.iplanet.am.session.client.polling.enable": false,
-  "com.iplanet.am.session.client.polling.period": "180",
-  "com.iplanet.am.session.httpSession.enabled": "true",
-  "com.iplanet.am.version": "ForgeRock Access Management 7.5.0 Build 89116d59a1ebe73ed1931dd3649adb7f217cd06b (2024-March-28 16:00)",
-  "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
-  "com.sun.am.event.notification.expire.time": "5",
-  "com.sun.embedded.sync.servers": "on",
-  "com.sun.identity.am.cookie.check": false,
-  "com.sun.identity.auth.cookieName": "AMAuthCookie",
-  "com.sun.identity.authentication.multiple.tabs.used": false,
-  "com.sun.identity.authentication.setCookieToAllDomains": true,
-  "com.sun.identity.authentication.special.users": "cn=dsameuser,ou=DSAME Users,%ROOT_SUFFIX%|cn=amService-UrlAccessAgent,ou=DSAME Users,%ROOT_SUFFIX%",
-  "com.sun.identity.authentication.super.user": "uid=amAdmin,ou=People,%ROOT_SUFFIX%",
-  "com.sun.identity.authentication.uniqueCookieName": "sunIdentityServerAuthNServer",
-  "com.sun.identity.cookie.httponly": true,
-  "com.sun.identity.cookie.samesite": "off",
-  "com.sun.identity.enableUniqueSSOTokenCookie": false,
-  "com.sun.identity.jss.donotInstallAtHighestPriority": true,
-  "com.sun.identity.monitoring": "off",
-  "com.sun.identity.monitoring.local.conn.server.url": "service:jmx:rmi://",
-  "com.sun.identity.password.deploymentDescriptor": "%SERVER_URI%",
-  "com.sun.identity.plugin.configuration.class": "@CONFIGURATION_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.datastore.class.default": "@DATASTORE_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.log.class": "@LOG_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.monitoring.agent.class": "@MONAGENT_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.monitoring.saml2.class": "@MONSAML2_PROVIDER_CLASS@",
-  "com.sun.identity.plugin.session.class": "@SESSION_PROVIDER_CLASS@",
-  "com.sun.identity.policy.Policy.policy_evaluation_weights": "10:10:10",
-  "com.sun.identity.policy.resultsCacheMaxSize": "10000",
-  "com.sun.identity.policy.resultsCacheResourceCap": "20",
-  "com.sun.identity.saml.xmlsig.keyprovider.class": "@XMLSIG_KEY_PROVIDER@",
-  "com.sun.identity.saml.xmlsig.passwordDecoder": "@PASSWORD_DECODER_CLASS@",
-  "com.sun.identity.saml.xmlsig.signatureprovider.class": "@XML_SIGNATURE_PROVIDER@",
-  "com.sun.identity.security.checkcaller": false,
-  "com.sun.identity.server.fqdnMap[dnsfirst]": "dnsfirst",
-  "com.sun.identity.server.fqdnMap[hello]": "hello",
-  "com.sun.identity.server.fqdnMap[localhost]": "localhost",
-  "com.sun.identity.server.fqdnMap[openam-frodo-dev.classic.com]": "openam-frodo-dev.classic.com",
-  "com.sun.identity.server.fqdnMap[openam]": "openam",
-  "com.sun.identity.server.fqdnMap[secondDNS]": "secondDNS",
-  "com.sun.identity.session.repository.enableAttributeCompression": false,
-  "com.sun.identity.session.repository.enableCompression": false,
-  "com.sun.identity.session.repository.enableEncryption": false,
-  "com.sun.identity.sm.cache.ttl": "30",
-  "com.sun.identity.sm.cache.ttl.enable": false,
-  "com.sun.identity.url.readTimeout": "30000",
-  "com.sun.identity.webcontainer": "WEB_CONTAINER",
-  "dynamic.datastore.creation.enabled": false,
-  "openam.auth.destroy_session_after_upgrade": true,
-  "openam.auth.distAuthCookieName": "AMDistAuthCookie",
-  "openam.auth.session_property_upgrader": "org.forgerock.openam.authentication.service.DefaultSessionPropertyUpgrader",
-  "openam.auth.version.header.enabled": false,
-  "openam.authentication.ignore_goto_during_logout": false,
-  "openam.cdm.default.charset": "UTF-8",
-  "openam.forbidden.to.copy.headers": "connection",
-  "openam.forbidden.to.copy.request.headers": "connection",
-  "openam.oauth2.client.jwt.encryption.algorithm.allow.list": "RSA-OAEP,RSA-OAEP-256,ECDH-ES",
-  "openam.oauth2.client.jwt.unreasonable.lifetime.limit.minutes": "30",
-  "openam.retained.http.headers": "X-DSAMEVersion",
-  "openam.retained.http.request.headers": "X-DSAMEVersion",
-  "openam.serviceattributevalidator.classes.whitelist": "org.forgerock.openam.auth.nodes.validators.GreaterThanZeroValidator,org.forgerock.openam.auth.nodes.validators.HMACKeyLengthValidator,org.forgerock.openam.auth.nodes.validators.HmacSigningKeyValidator,org.forgerock.openam.auth.nodes.validators.PercentageValidator,org.forgerock.openam.auth.nodes.validators.QueryFilterValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyNameValidator,org.forgerock.openam.auth.nodes.validators.SessionPropertyValidator,org.forgerock.openam.auth.nodes.framework.validators.NodeValueValidator,org.forgerock.openam.audit.validation.PositiveIntegerValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.AlphaNumericValidator,org.forgerock.openam.authentication.modules.fr.oath.validators.CodeLengthValidator,org.forgerock.openam.authentication.modules.persistentcookie.validation.SigningKeyValidator,com.sun.identity.common.configuration.DuplicateKeyMapValueValidator,com.sun.identity.common.configuration.AgentClientIpModeValueValidator,com.sun.identity.common.configuration.FilterModeValueValidator,com.sun.identity.common.configuration.GlobalMapValueValidator,com.sun.identity.common.configuration.ListValueValidator,com.sun.identity.common.configuration.MapValueValidator,com.sun.identity.common.configuration.ServerPropertyValidator,com.sun.identity.policy.ResourceComparatorValidator,com.sun.identity.sm.EmailValidator,com.sun.identity.sm.IPAddressValidator,com.sun.identity.sm.RequiredValueValidator,com.sun.identity.sm.ServerIDValidator,com.sun.identity.sm.SiteIDValidator,org.forgerock.openam.sm.validation.Base64EncodedBinaryValidator,org.forgerock.openam.sm.validation.BlankValueValidator,org.forgerock.openam.sm.validation.DurationValidator,org.forgerock.openam.sm.validation.EndpointValidator,org.forgerock.openam.sm.validation.HostnameValidator,org.forgerock.openam.sm.validation.PortValidator,org.forgerock.openam.sm.validation.SecretIdValidator,org.forgerock.openam.sm.validation.StatelessSessionSigningAlgorithmValidator,org.forgerock.openam.sm.validation.StringMapValidator,org.forgerock.openam.sm.validation.URLValidator,org.forgerock.openam.selfservice.config.KeyAliasValidator,org.forgerock.openam.sm.validation.UniqueIndexedValuesValidator,org.forgerock.openam.webhook.HttpHeaderValidator,org.forgerock.oauth2.core.ClientRedirectUriValidator",
-  "openam.session.case.sensitive.uuid": false,
-  "org.forgerock.allow.http.client.debug": false,
-  "org.forgerock.am.auth.chains.authindexuser.strict": true,
-  "org.forgerock.am.auth.node.otp.inSharedState": false,
-  "org.forgerock.am.auth.trees.authenticate.identified.identity": true,
-  "org.forgerock.openam.audit.additionalSuccessStatusCodesEnabled": true,
-  "org.forgerock.openam.audit.identity.activity.events.blacklist": "AM-ACCESS-ATTEMPT,AM-IDENTITY-CHANGE,AM-GROUP-CHANGE",
-  "org.forgerock.openam.auth.transactionauth.returnErrorOnAuthFailure": false,
-  "org.forgerock.openam.authLevel.excludeRequiredOrRequisite": false,
-  "org.forgerock.openam.authentication.forceAuth.enabled": false,
-  "org.forgerock.openam.console.autocomplete.enabled": true,
-  "org.forgerock.openam.core.resource.lookup.cache.enabled": true,
-  "org.forgerock.openam.core.sms.placeholder_api_enabled": "OFF",
-  "org.forgerock.openam.devices.recovery.use_insecure_storage": false,
-  "org.forgerock.openam.encryption.key.digest": "SHA1",
-  "org.forgerock.openam.encryption.key.iterations": "10000",
-  "org.forgerock.openam.encryption.key.size": "128",
-  "org.forgerock.openam.httpclienthandler.system.clients.connection.timeout": "10 seconds",
-  "org.forgerock.openam.httpclienthandler.system.clients.max.connections": "64",
-  "org.forgerock.openam.httpclienthandler.system.clients.pool.ttl": "-1",
-  "org.forgerock.openam.httpclienthandler.system.clients.response.timeout": "10 seconds",
-  "org.forgerock.openam.httpclienthandler.system.clients.retry.failed.requests.enabled": true,
-  "org.forgerock.openam.httpclienthandler.system.clients.reuse.connections.enabled": true,
-  "org.forgerock.openam.httpclienthandler.system.nonProxyHosts": "localhost,127.*,[::1],0.0.0.0,[::0]",
-  "org.forgerock.openam.httpclienthandler.system.proxy.enabled": false,
-  "org.forgerock.openam.httpclienthandler.system.proxy.password": null,
-  "org.forgerock.openam.httpclienthandler.system.proxy.uri": "",
-  "org.forgerock.openam.httpclienthandler.system.proxy.username": "",
-  "org.forgerock.openam.idm.attribute.names.lower.case": false,
-  "org.forgerock.openam.idrepo.ldapv3.passwordpolicy.allowDiagnosticMessage": false,
-  "org.forgerock.openam.idrepo.ldapv3.proxyauth.passwordreset.adminRequest": "isAdminPasswordChangeRequest",
-  "org.forgerock.openam.introspect.token.query.param.allowed": false,
-  "org.forgerock.openam.ldap.dncache.expire.time": "0",
-  "org.forgerock.openam.ldap.heartbeat.timeout": "10",
-  "org.forgerock.openam.ldap.keepalive.search.base": "",
-  "org.forgerock.openam.ldap.keepalive.search.filter": "(objectClass=*)",
-  "org.forgerock.openam.ldap.secure.protocol.version": "TLSv1.3,TLSv1.2",
-  "org.forgerock.openam.notifications.agents.enabled": true,
-  "org.forgerock.openam.oauth2.checkIssuerForIdTokenInfo": true,
-  "org.forgerock.openam.radius.server.context.cache.size": "5000",
-  "org.forgerock.openam.redirecturlvalidator.maxUrlLength": "2000",
-  "org.forgerock.openam.request.max.bytes.entity.size": "1048576",
-  "org.forgerock.openam.saml2.authenticatorlookup.skewAllowance": "60",
-  "org.forgerock.openam.scripting.maxinterpreterstackdepth": "10000",
-  "org.forgerock.openam.secrets.special.user.passwords.format": "ENCRYPTED_PLAIN",
-  "org.forgerock.openam.secrets.special.user.secret.refresh.seconds": "900",
-  "org.forgerock.openam.session.service.persistence.deleteAsynchronously": true,
-  "org.forgerock.openam.session.stateless.encryption.method": "A128CBC-HS256",
-  "org.forgerock.openam.session.stateless.rsa.padding": "RSA-OAEP-256",
-  "org.forgerock.openam.session.stateless.signing.allownone": false,
-  "org.forgerock.openam.showServletTraceInBrowser": false,
-  "org.forgerock.openam.slf4j.enableTraceInMessage": false,
-  "org.forgerock.openam.smtp.system.connect.timeout": "10000",
-  "org.forgerock.openam.smtp.system.socket.read.timeout": "10000",
-  "org.forgerock.openam.smtp.system.socket.write.timeout": "10000",
-  "org.forgerock.openam.sso.providers.list": "org.forgerock.openidconnect.ssoprovider.OpenIdConnectSSOProvider",
-  "org.forgerock.openam.timerpool.shutdown.retry.interval": "15000",
-  "org.forgerock.openam.timerpool.shutdown.retry.limit": "3",
-  "org.forgerock.openam.timerpool.shutdown.retry.multiplier": "1.5",
-  "org.forgerock.openam.trees.consumedstatedata.cache.size": "15",
-  "org.forgerock.openam.trees.ids.cache.size": "50",
-  "org.forgerock.openam.url.connectTimeout": "1000",
-  "org.forgerock.openam.xui.user.session.validation.enabled": true,
-  "org.forgerock.openidconnect.ssoprovider.maxcachesize": "5000",
-  "org.forgerock.security.entitlement.enforce.realm": true,
-  "org.forgerock.security.oauth2.enforce.sub.claim.uniqueness": true,
-  "org.forgerock.services.cts.store.reaper.enabled": true,
-  "org.forgerock.services.cts.store.ttlsupport.enabled": false,
-  "org.forgerock.services.cts.store.ttlsupport.exclusionlist": "",
-  "org.forgerock.services.default.store.max.connections": "",
-  "org.forgerock.services.default.store.min.connections": "",
-  "org.forgerock.services.openid.request.object.lifespan": "120000",
-  "securidHelper.ports": "58943",
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/default/cts.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/cts",
-  "amconfig.org.forgerock.services.cts.store.common.section": {
-    "org.forgerock.services.cts.store.location": "default",
-    "org.forgerock.services.cts.store.max.connections": "100",
-    "org.forgerock.services.cts.store.page.size": "0",
-    "org.forgerock.services.cts.store.root.suffix": "",
-    "org.forgerock.services.cts.store.vlv.page.size": "1000",
-  },
-  "amconfig.org.forgerock.services.cts.store.external.section": {
-    "org.forgerock.services.cts.store.directory.name": "",
-    "org.forgerock.services.cts.store.heartbeat": "10",
-    "org.forgerock.services.cts.store.loginid": "",
-    "org.forgerock.services.cts.store.mtls.enabled": "",
-    "org.forgerock.services.cts.store.password": null,
-    "org.forgerock.services.cts.store.ssl.enabled": "",
-    "org.forgerock.services.cts.store.starttls.enabled": "",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/default/general.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/general",
-  "amconfig.header.debug": {
-    "com.iplanet.services.debug.directory": "%BASE_DIR%/var/debug",
-    "com.iplanet.services.debug.level": "off",
-    "com.sun.services.debug.mergeall": "on",
-  },
-  "amconfig.header.installdir": {
-    "com.iplanet.am.locale": "en_US",
-    "com.iplanet.am.util.xml.validating": "off",
-    "com.iplanet.services.configpath": "%BASE_DIR%",
-    "com.sun.identity.client.notification.url": "%SERVER_PROTO%://%SERVER_HOST%:%SERVER_PORT%/%SERVER_URI%/notificationservice",
-  },
-  "amconfig.header.mailserver": {
-    "com.iplanet.am.smtphost": "localhost",
-    "com.iplanet.am.smtpport": "25",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/default/sdk.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/sdk",
-  "amconfig.header.cachingreplica": {
-    "com.iplanet.am.sdk.cache.maxSize": "10000",
-  },
-  "amconfig.header.datastore": {
-    "com.sun.identity.sm.enableDataStoreNotification": false,
-    "com.sun.identity.sm.notification.threadpool.size": "1",
-  },
-  "amconfig.header.eventservice": {
-    "com.iplanet.am.event.connection.delay.between.retries": "3000",
-    "com.iplanet.am.event.connection.ldap.error.codes.retries": "80,81,91",
-    "com.iplanet.am.event.connection.num.retries": "3",
-    "com.sun.am.event.connection.disable.list": "aci,um,sm",
-  },
-  "amconfig.header.ldapconnection": {
-    "com.iplanet.am.ldap.connection.delay.between.retries": "1000",
-    "com.iplanet.am.ldap.connection.ldap.error.codes.retries": "80,81,91",
-    "com.iplanet.am.ldap.connection.num.retries": "3",
-  },
-  "amconfig.header.sdktimetoliveconfig": {
-    "com.iplanet.am.sdk.cache.entry.default.expire.time": "30",
-    "com.iplanet.am.sdk.cache.entry.expire.enabled": false,
-    "com.iplanet.am.sdk.cache.entry.user.expire.time": "15",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/default/security.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/security",
-  "amconfig.header.cookie": {
-    "com.iplanet.am.cookie.encode": false,
-    "com.iplanet.am.cookie.name": "iPlanetDirectoryPro",
-    "com.iplanet.am.cookie.secure": false,
-  },
-  "amconfig.header.crlcache": {
-    "com.sun.identity.crl.cache.directory.host": "",
-    "com.sun.identity.crl.cache.directory.mtlsenabled": false,
-    "com.sun.identity.crl.cache.directory.password": null,
-    "com.sun.identity.crl.cache.directory.port": "",
-    "com.sun.identity.crl.cache.directory.searchattr": "",
-    "com.sun.identity.crl.cache.directory.searchlocs": "",
-    "com.sun.identity.crl.cache.directory.ssl": false,
-    "com.sun.identity.crl.cache.directory.user": "",
-  },
-  "amconfig.header.deserialisationwhitelist": {
-    "openam.deserialisation.classes.whitelist": "com.iplanet.dpro.session.DNOrIPAddressListTokenRestriction,com.sun.identity.common.CaseInsensitiveHashMap,com.sun.identity.common.CaseInsensitiveHashSet,com.sun.identity.common.CaseInsensitiveKey,com.sun.identity.console.base.model.SMSubConfig,com.sun.identity.console.session.model.SMSessionData,com.sun.identity.console.user.model.UMUserPasswordResetOptionsData,com.sun.identity.shared.datastruct.OrderedSet,com.sun.xml.bind.util.ListImpl,com.sun.xml.bind.util.ProxyListImpl,java.lang.Boolean,java.lang.Integer,java.lang.Number,java.lang.StringBuffer,java.net.InetAddress,java.security.cert.Certificate,java.security.cert.Certificate$CertificateRep,java.util.ArrayList,java.util.Collections$EmptyMap,java.util.Collections$EmptySet,java.util.Collections$SingletonList,java.util.HashMap,java.util.HashSet,java.util.LinkedHashSet,java.util.Locale,org.forgerock.openam.authentication.service.protocol.RemoteCookie,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteHttpServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteServletRequest,org.forgerock.openam.authentication.service.protocol.RemoteServletResponse,org.forgerock.openam.authentication.service.protocol.RemoteSession,org.forgerock.openam.dpro.session.NoOpTokenRestriction,org.forgerock.openam.dpro.session.ProofOfPossessionTokenRestriction",
-  },
-  "amconfig.header.encryption": {
-    "am.encryption.pwd": "@AM_ENC_PWD@",
-    "am.encryption.secret.enabled": false,
-    "am.encryption.secret.keystoreType": "JCEKS",
-    "com.iplanet.security.SecureRandomFactoryImpl": "com.iplanet.am.util.SecureRandomFactoryImpl",
-    "com.iplanet.security.encryptor": "com.iplanet.services.util.JCEEncryption",
-  },
-  "amconfig.header.ocsp.check": {
-    "com.sun.identity.authentication.ocsp.responder.nickname": "",
-    "com.sun.identity.authentication.ocsp.responder.url": "",
-    "com.sun.identity.authentication.ocspCheck": false,
-  },
-  "amconfig.header.securitykey": {
-    "com.sun.identity.saml.xmlsig.certalias": "test",
-    "com.sun.identity.saml.xmlsig.keypass": "%BASE_DIR%/security/secrets/default/.keypass",
-    "com.sun.identity.saml.xmlsig.keystore": "%BASE_DIR%/security/keystores/keystore.jceks",
-    "com.sun.identity.saml.xmlsig.storepass": "%BASE_DIR%/security/secrets/default/.storepass",
-    "com.sun.identity.saml.xmlsig.storetype": "JCEKS",
-  },
-  "amconfig.header.validation": {
-    "com.iplanet.am.clientIPCheckEnabled": false,
-    "com.iplanet.services.comm.server.pllrequest.maxContentLength": "16384",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/default/session.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/session",
-  "amconfig.header.sessionlogging": {
-    "com.iplanet.am.stats.interval": "60",
-    "com.iplanet.services.stats.directory": "%BASE_DIR%/var/stats",
-    "com.iplanet.services.stats.state": "file",
-    "com.sun.am.session.enableHostLookUp": false,
-  },
-  "amconfig.header.sessionnotification": {
-    "com.iplanet.am.notification.threadpool.size": "10",
-    "com.iplanet.am.notification.threadpool.threshold": "5000",
-  },
-  "amconfig.header.sessionthresholds": {
-    "com.iplanet.am.session.invalidsessionmaxtime": "3",
-    "org.forgerock.openam.session.service.access.persistence.caching.maxsize": "5000",
-  },
-  "amconfig.header.sessionvalidation": {
-    "com.sun.am.session.caseInsensitiveDN": true,
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.: serverExportTestDir1/default/uma.default.properties.server.json 1`] = `
-{
-  "_id": "null/properties/uma",
-  "amconfig.org.forgerock.services.resourcesets.store.common.section": {
-    "org.forgerock.services.resourcesets.store.location": "default",
-    "org.forgerock.services.resourcesets.store.max.connections": "10",
-    "org.forgerock.services.resourcesets.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.resourcesets.store.external.section": {
-    "org.forgerock.services.resourcesets.store.directory.name": "",
-    "org.forgerock.services.resourcesets.store.heartbeat": "10",
-    "org.forgerock.services.resourcesets.store.loginid": "",
-    "org.forgerock.services.resourcesets.store.mtls.enabled": "",
-    "org.forgerock.services.resourcesets.store.password": null,
-    "org.forgerock.services.resourcesets.store.ssl.enabled": "",
-    "org.forgerock.services.resourcesets.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.common.section": {
-    "org.forgerock.services.uma.labels.store.location": "default",
-    "org.forgerock.services.uma.labels.store.max.connections": "2",
-    "org.forgerock.services.uma.labels.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.uma.labels.store.external.section": {
-    "org.forgerock.services.uma.labels.store.directory.name": "",
-    "org.forgerock.services.uma.labels.store.heartbeat": "10",
-    "org.forgerock.services.uma.labels.store.loginid": "",
-    "org.forgerock.services.uma.labels.store.mtls.enabled": "",
-    "org.forgerock.services.uma.labels.store.password": null,
-    "org.forgerock.services.uma.labels.store.ssl.enabled": "",
-    "org.forgerock.services.uma.labels.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.common.section": {
-    "org.forgerock.services.uma.pendingrequests.store.location": "default",
-    "org.forgerock.services.uma.pendingrequests.store.max.connections": "10",
-    "org.forgerock.services.uma.pendingrequests.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.uma.pendingrequests.store.external.section": {
-    "org.forgerock.services.uma.pendingrequests.store.directory.name": "",
-    "org.forgerock.services.uma.pendingrequests.store.heartbeat": "10",
-    "org.forgerock.services.uma.pendingrequests.store.loginid": "",
-    "org.forgerock.services.uma.pendingrequests.store.mtls.enabled": "",
-    "org.forgerock.services.uma.pendingrequests.store.password": null,
-    "org.forgerock.services.uma.pendingrequests.store.ssl.enabled": "",
-    "org.forgerock.services.uma.pendingrequests.store.starttls.enabled": "",
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.common.section": {
-    "org.forgerock.services.umaaudit.store.location": "default",
-    "org.forgerock.services.umaaudit.store.max.connections": "10",
-    "org.forgerock.services.umaaudit.store.root.suffix": "",
-  },
-  "amconfig.org.forgerock.services.umaaudit.store.external.section": {
-    "org.forgerock.services.umaaudit.store.directory.name": "",
-    "org.forgerock.services.umaaudit.store.heartbeat": "10",
-    "org.forgerock.services.umaaudit.store.loginid": "",
-    "org.forgerock.services.umaaudit.store.mtls.enabled": "",
-    "org.forgerock.services.umaaudit.store.password": null,
-    "org.forgerock.services.umaaudit.store.ssl.enabled": "",
-    "org.forgerock.services.umaaudit.store.starttls.enabled": "",
-  },
-}
-`;
-
-exports[`frodo server export "frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata": should export the server with url containing "8081" along with default properties. 1`] = `0`;
+exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with default properties. 1`] = `0`;
 
-exports[`frodo server export "frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata": should export the server with url containing "8081" along with default properties. 2`] = `""`;
+exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with default properties. 2`] = `""`;
 
-exports[`frodo server export "frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata": should export the server with url containing "8081" along with default properties.: serverExportTestFile2.json 1`] = `
+exports[`frodo server export "frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with default properties.: serverExportTestDir1/serverExportTestFile1.json 1`] = `
 {
   "defaultProperties": {
     "advanced": {
@@ -10421,15 +9433,25 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
     },
   },
   "server": {
-    "03": {
-      "_id": "03",
+    "01": {
+      "_id": "01",
       "properties": {
         "advanced": {
-          "_id": "03/properties/advanced",
-          "com.iplanet.am.lbcookie.value": "03",
+          "_id": "01/properties/advanced",
+          "bootstrap.file": "/root/.openamcfg/AMConfig_usr_local_tomcat_webapps_am_",
+          "com.iplanet.am.lbcookie.value": "01",
+          "com.iplanet.am.serverMode": true,
+          "com.iplanet.security.SSLSocketFactoryImpl": "com.sun.identity.shared.ldap.factory.JSSESocketFactory",
+          "com.sun.embedded.replicationport": "",
+          "com.sun.embedded.sync.servers": "on",
+          "com.sun.identity.common.systemtimerpool.size": "3",
+          "com.sun.identity.sm.sms_object_class_name": "com.sun.identity.sm.SmsWrapperObject",
+          "com.sun.identity.urlconnection.useCache": false,
+          "opensso.protocol.handler.pkgs": "",
+          "org.forgerock.embedded.dsadminport": "4444",
         },
         "cts": {
-          "_id": "03/properties/cts",
+          "_id": "01/properties/cts",
           "amconfig.org.forgerock.services.cts.store.common.section": {
             "org.forgerock.services.cts.store.location": {
               "inherited": true,
@@ -10488,7 +9510,7 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           },
         },
         "directoryConfiguration": {
-          "_id": "03/properties/directoryConfiguration",
+          "_id": "01/properties/directoryConfiguration",
           "directoryConfiguration": {
             "bindDn": "cn=Directory Manager",
             "bindPassword": null,
@@ -10511,7 +9533,7 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           ],
         },
         "general": {
-          "_id": "03/properties/general",
+          "_id": "01/properties/general",
           "amconfig.header.debug": {
             "com.iplanet.services.debug.directory": {
               "inherited": true,
@@ -10528,7 +9550,7 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           },
           "amconfig.header.installdir": {
             "com.iplanet.am.locale": {
-              "inherited": true,
+              "inherited": false,
               "value": "en_US",
             },
             "com.iplanet.am.util.xml.validating": {
@@ -10536,8 +9558,8 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
               "value": "off",
             },
             "com.iplanet.services.configpath": {
-              "inherited": true,
-              "value": "%BASE_DIR%",
+              "inherited": false,
+              "value": "/root/am",
             },
             "com.sun.identity.client.notification.url": {
               "inherited": true,
@@ -10555,11 +9577,11 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
             },
           },
           "amconfig.header.site": {
-            "singleChoiceSite": "testsite",
+            "singleChoiceSite": "[Empty]",
           },
         },
         "sdk": {
-          "_id": "03/properties/sdk",
+          "_id": "01/properties/sdk",
           "amconfig.header.cachingreplica": {
             "com.iplanet.am.sdk.cache.maxSize": {
               "inherited": true,
@@ -10568,8 +9590,8 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           },
           "amconfig.header.datastore": {
             "com.sun.identity.sm.enableDataStoreNotification": {
-              "inherited": true,
-              "value": false,
+              "inherited": false,
+              "value": true,
             },
             "com.sun.identity.sm.notification.threadpool.size": {
               "inherited": true,
@@ -10590,8 +9612,8 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
               "value": "3",
             },
             "com.sun.am.event.connection.disable.list": {
-              "inherited": true,
-              "value": "aci,um,sm",
+              "inherited": false,
+              "value": "aci,um",
             },
           },
           "amconfig.header.ldapconnection": {
@@ -10600,7 +9622,7 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
               "value": "1000",
             },
             "com.iplanet.am.ldap.connection.ldap.error.codes.retries": {
-              "inherited": true,
+              "inherited": false,
               "value": "80,81,91",
             },
             "com.iplanet.am.ldap.connection.num.retries": {
@@ -10624,7 +9646,7 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           },
         },
         "security": {
-          "_id": "03/properties/security",
+          "_id": "01/properties/security",
           "amconfig.header.cookie": {
             "com.iplanet.am.cookie.encode": {
               "inherited": true,
@@ -10681,8 +9703,8 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           },
           "amconfig.header.encryption": {
             "am.encryption.pwd": {
-              "inherited": true,
-              "value": "@AM_ENC_PWD@",
+              "inherited": false,
+              "value": "efSYcwIhr7uKH30rgciGTVTFzb63LhYu",
             },
             "am.encryption.secret.alias": {
               "inherited": true,
@@ -10765,7 +9787,7 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           },
         },
         "session": {
-          "_id": "03/properties/session",
+          "_id": "01/properties/session",
           "amconfig.header.sessionlogging": {
             "com.iplanet.am.stats.interval": {
               "inherited": true,
@@ -10812,7 +9834,7 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           },
         },
         "uma": {
-          "_id": "03/properties/uma",
+          "_id": "01/properties/uma",
           "amconfig.org.forgerock.services.resourcesets.store.common.section": {
             "org.forgerock.services.resourcesets.store.location": {
               "inherited": true,
@@ -10991,6 +10013,41 @@ exports[`frodo server export "frodo server export -u 8081 --file serverExportTes
           },
         },
       },
+      "siteName": null,
+      "url": "http://localhost:8080/am",
+    },
+  },
+}
+`;
+
+exports[`frodo server export "frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata": should export the server with url containing "8081" along with default properties. 1`] = `0`;
+
+exports[`frodo server export "frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata": should export the server with url containing "8081" along with default properties. 2`] = `""`;
+
+exports[`frodo server export "frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata": should export the server with url containing "8081" along with default properties.: serverExportTestDir7/serverExportTestFile2.json 1`] = `
+{
+  "defaultProperties": {
+    "advanced": "file://default/advanced.default.properties.server.json",
+    "cts": "file://default/cts.default.properties.server.json",
+    "general": "file://default/general.default.properties.server.json",
+    "sdk": "file://default/sdk.default.properties.server.json",
+    "security": "file://default/security.default.properties.server.json",
+    "session": "file://default/session.default.properties.server.json",
+    "uma": "file://default/uma.default.properties.server.json",
+  },
+  "server": {
+    "03": {
+      "_id": "03",
+      "properties": {
+        "advanced": "file://03/advanced.properties.server.json",
+        "cts": "file://03/cts.properties.server.json",
+        "directoryConfiguration": "file://03/directoryConfiguration.properties.server.json",
+        "general": "file://03/general.properties.server.json",
+        "sdk": "file://03/sdk.properties.server.json",
+        "security": "file://03/security.properties.server.json",
+        "session": "file://03/session.properties.server.json",
+        "uma": "file://03/uma.properties.server.json",
+      },
       "siteName": "testsite",
       "url": "http://localhost:8081/am",
     },
diff --git a/test/e2e/config-export.e2e.test.js b/test/e2e/config-export.e2e.test.js
index 8990dbeee..4885944c5 100644
--- a/test/e2e/config-export.e2e.test.js
+++ b/test/e2e/config-export.e2e.test.js
@@ -52,7 +52,7 @@ FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgebloc
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo config export --all --modified-properties --file testExportAll.json --use-string-arrays --no-decode --no-coords
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo config export -AD exportAllTestDir1
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo config export -MAsxD exportAllTestDir2
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo config export --all-separate --read-only --no-metadata --default --directory exportAllTestDir3 --use-string-arrays --no-decode --no-coords --extract --separate-mappings
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo config export --all-separate --read-only --no-metadata --default --directory exportAllTestDir3 --use-string-arrays --no-decode --no-coords --no-extract --separate-mappings
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo config export -RAD exportAllTestDir5 --include-active-values
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo config export -raf testExportAllAlpha.json
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo config export -gAD exportAllTestDir9
@@ -95,15 +95,15 @@ describe.skip('frodo config export', () => {
     await testExport(CMD, env, undefined, undefined, exportDirectory, false);
   });
 
-  test('"frodo config export -MAsxD exportAllTestDir2": should export everything into separate files in the directory exportAllTestDir2 with scripts extracted and mappings separate', async () => {
+  test('"frodo config export -MAsxD exportAllTestDir2": should export everything into separate files in the directory exportAllTestDir2 with scripts and mappings separate', async () => {
     const exportDirectory = 'exportAllTestDir2';
     const CMD = `frodo config export -MAsxD ${exportDirectory}`;
     await testExport(CMD, env, undefined, undefined, exportDirectory, false);
   });
 
-  test('"frodo config export --all-separate --read-only --no-metadata --default --directory exportAllTestDir3 --use-string-arrays --no-decode --no-coords --extract --separate-mappings": should export everything, including default scripts, into separate files in the directory exportAllTestDir3 with scripts extracted, no decoding variables, no journey coordinates, separate mappings, and using string arrays', async () => {
+  test('"frodo config export --all-separate --read-only --no-metadata --default --directory exportAllTestDir3 --use-string-arrays --no-decode --no-coords --no-extract --separate-mappings": should export everything, including default scripts, into separate files in the directory exportAllTestDir3 with scripts, no decoding variables, no journey coordinates, separate mappings, and using string arrays', async () => {
     const exportDirectory = 'exportAllTestDir3';
-    const CMD = `frodo config export --all-separate --read-only --no-metadata --default --directory ${exportDirectory} --use-string-arrays --no-decode --no-coords --extract --separate-mappings`;
+    const CMD = `frodo config export --all-separate --read-only --no-metadata --default --directory ${exportDirectory} --use-string-arrays --no-decode --no-coords --no-extract --separate-mappings`;
     await testExport(CMD, env, undefined, undefined, exportDirectory, false);
   });
 
@@ -140,7 +140,7 @@ describe.skip('frodo config export', () => {
     await testExport(CMD, classicEnv, type, exportFile);
   });
 
-  test('"frodo config export -RMAsxD exportAllTestDir7 -m classic": should export everything into separate files in the directory exportAllTestDir7 with scripts extracted and mappings separate', async () => {
+  test('"frodo config export -RMAsxD exportAllTestDir7 -m classic": should export everything into separate files in the directory exportAllTestDir7 with scripts and mappings separate', async () => {
     const exportDirectory = 'exportAllTestDir7';
     const CMD = `frodo config export -RMAsxD ${exportDirectory} -m classic`;
     await testExport(
@@ -153,7 +153,7 @@ describe.skip('frodo config export', () => {
     );
   });
 
-  test('"frodo config export --all-separate --no-metadata --default --directory exportAllTestDir8 --include-active-values --use-string-arrays --no-decode --no-coords --type classic": should export everything, including default scripts, into separate files in the directory exportAllTestDir8 with scripts extracted, no decoding variables, no journey coordinates, separate mappings, and using string arrays', async () => {
+  test('"frodo config export --all-separate --no-metadata --default --directory exportAllTestDir8 --include-active-values --use-string-arrays --no-decode --no-coords --type classic": should export everything, including default scripts, into separate files in the directory exportAllTestDir8 with scripts, no decoding variables, no journey coordinates, separate mappings, and using string arrays', async () => {
     const exportDirectory = 'exportAllTestDir8';
     const CMD = `frodo config export --all-separate --no-metadata --default --directory ${exportDirectory} --include-active-values --use-string-arrays --no-decode --no-coords --type classic`;
     await testExport(
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_extract_directory_use-string-arrays_1044561342/am_1076162899/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_no-extract_directory_use-string-arrays_2175757408/am_1076162899/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_extract_directory_use-string-arrays_1044561342/am_1076162899/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_no-extract_directory_use-string-arrays_2175757408/am_1076162899/recording.har
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_extract_directory_use-string-arrays_1044561342/oauth2_393036114/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_no-extract_directory_use-string-arrays_2175757408/oauth2_393036114/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_extract_directory_use-string-arrays_1044561342/oauth2_393036114/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_no-extract_directory_use-string-arrays_2175757408/oauth2_393036114/recording.har
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_extract_directory_use-string-arrays_1044561342/openidm_3290118515/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_no-extract_directory_use-string-arrays_2175757408/openidm_3290118515/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_extract_directory_use-string-arrays_1044561342/openidm_3290118515/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_all-separate_no-extract_directory_use-string-arrays_2175757408/openidm_3290118515/recording.har
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_193359214/am_1076162899/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_D_781094437/am_1076162899/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_193359214/am_1076162899/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_D_781094437/am_1076162899/recording.har
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_193359214/oauth2_393036114/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_D_781094437/oauth2_393036114/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_193359214/oauth2_393036114/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_D_781094437/oauth2_393036114/recording.har
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_193359214/openidm_3290118515/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_D_781094437/openidm_3290118515/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_193359214/openidm_3290118515/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_node-id_D_781094437/openidm_3290118515/recording.har
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_2043637667/am_1076162899/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_no-extract_1586525519/am_1076162899/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_2043637667/am_1076162899/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_no-extract_1586525519/am_1076162899/recording.har
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_2043637667/oauth2_393036114/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_no-extract_1586525519/oauth2_393036114/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_2043637667/oauth2_393036114/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_no-extract_1586525519/oauth2_393036114/recording.har
diff --git a/test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_2043637667/openidm_3290118515/recording.har b/test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_no-extract_1586525519/openidm_3290118515/recording.har
similarity index 100%
rename from test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_2043637667/openidm_3290118515/recording.har
rename to test/e2e/mocks/node_2982235661/export_4211608755/0_node-name_use-string-arrays_no-extract_1586525519/openidm_3290118515/recording.har
diff --git a/test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095/am_1076162899/recording.har b/test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201/am_1076162899/recording.har
similarity index 100%
rename from test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095/am_1076162899/recording.har
rename to test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201/am_1076162899/recording.har
diff --git a/test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095/oauth2_393036114/recording.har b/test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201/oauth2_393036114/recording.har
similarity index 100%
rename from test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095/oauth2_393036114/recording.har
rename to test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201/oauth2_393036114/recording.har
diff --git a/test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095/openidm_3290118515/recording.har b/test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201/openidm_3290118515/recording.har
similarity index 100%
rename from test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_extract_directory_1410389095/openidm_3290118515/recording.har
rename to test/e2e/mocks/script_540962730/export_4211608755/0_modified-properties_all-separate_no-metadata_default_no-extract_directory_3440431201/openidm_3290118515/recording.har
diff --git a/test/e2e/mocks/script_540962730/export_4211608755/0_extract_script-id_directory_3126738353/am_1076162899/recording.har b/test/e2e/mocks/script_540962730/export_4211608755/0_no-extract_script-id_directory_3322257391/am_1076162899/recording.har
similarity index 100%
rename from test/e2e/mocks/script_540962730/export_4211608755/0_extract_script-id_directory_3126738353/am_1076162899/recording.har
rename to test/e2e/mocks/script_540962730/export_4211608755/0_no-extract_script-id_directory_3322257391/am_1076162899/recording.har
diff --git a/test/e2e/mocks/script_540962730/export_4211608755/0_extract_script-id_directory_3126738353/oauth2_393036114/recording.har b/test/e2e/mocks/script_540962730/export_4211608755/0_no-extract_script-id_directory_3322257391/oauth2_393036114/recording.har
similarity index 100%
rename from test/e2e/mocks/script_540962730/export_4211608755/0_extract_script-id_directory_3126738353/oauth2_393036114/recording.har
rename to test/e2e/mocks/script_540962730/export_4211608755/0_no-extract_script-id_directory_3322257391/oauth2_393036114/recording.har
diff --git a/test/e2e/mocks/script_540962730/export_4211608755/0_extract_script-id_directory_3126738353/openidm_3290118515/recording.har b/test/e2e/mocks/script_540962730/export_4211608755/0_no-extract_script-id_directory_3322257391/openidm_3290118515/recording.har
similarity index 100%
rename from test/e2e/mocks/script_540962730/export_4211608755/0_extract_script-id_directory_3126738353/openidm_3290118515/recording.har
rename to test/e2e/mocks/script_540962730/export_4211608755/0_no-extract_script-id_directory_3322257391/openidm_3290118515/recording.har
diff --git a/test/e2e/mocks/server_1085029842/export_4211608755/0_server-id_2035896751/am_1076162899/recording.har b/test/e2e/mocks/server_1085029842/export_4211608755/0_server-id_directory_1227895731/am_1076162899/recording.har
similarity index 100%
rename from test/e2e/mocks/server_1085029842/export_4211608755/0_server-id_2035896751/am_1076162899/recording.har
rename to test/e2e/mocks/server_1085029842/export_4211608755/0_server-id_directory_1227895731/am_1076162899/recording.har
diff --git a/test/e2e/mocks/server_1085029842/export_4211608755/0_server-url_extract_directory_434708301/am_1076162899/recording.har b/test/e2e/mocks/server_1085029842/export_4211608755/0_server-url_no-extract_directory_2567965531/am_1076162899/recording.har
similarity index 100%
rename from test/e2e/mocks/server_1085029842/export_4211608755/0_server-url_extract_directory_434708301/am_1076162899/recording.har
rename to test/e2e/mocks/server_1085029842/export_4211608755/0_server-url_no-extract_directory_2567965531/am_1076162899/recording.har
diff --git a/test/e2e/mocks/server_1085029842/export_4211608755/0_u_file_default_no-metadata_256171004/am_1076162899/recording.har b/test/e2e/mocks/server_1085029842/export_4211608755/0_u_file_default_no-metadata_directory_2134419444/am_1076162899/recording.har
similarity index 100%
rename from test/e2e/mocks/server_1085029842/export_4211608755/0_u_file_default_no-metadata_256171004/am_1076162899/recording.har
rename to test/e2e/mocks/server_1085029842/export_4211608755/0_u_file_default_no-metadata_directory_2134419444/am_1076162899/recording.har
diff --git a/test/e2e/node-export.e2e.test.js b/test/e2e/node-export.e2e.test.js
index 02b97c24d..365957493 100644
--- a/test/e2e/node-export.e2e.test.js
+++ b/test/e2e/node-export.e2e.test.js
@@ -48,13 +48,13 @@
 
 /*
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export -Nxi c605506774a848f7877b4d17a453bd39 -D customNodeExportDir1
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export --node-id c605506774a848f7877b4d17a453bd39-1
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export --node-id c605506774a848f7877b4d17a453bd39-1 -D customNodeExportDir6
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export -xn 'Display Callback' -D customNodeExportDir2
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export --node-name 'Display Callback' --use-string-arrays
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export --node-name 'Display Callback' --use-string-arrays --no-extract
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export -a
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export --all --no-metadata --file customNodeTest1.json --directory customNodeExportDir3 --use-string-arrays
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export -AND customNodeExportDir4
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays
 */
 import { getEnv, testExport } from './utils/TestUtils';
 import { connection as c } from './utils/TestConfig';
@@ -72,10 +72,11 @@ describe('frodo node export', () => {
     await testExport(CMD, env, type, exportFile, exportDirectory, false);
   });
 
-  test('"frodo node export --node-id c605506774a848f7877b4d17a453bd39-1": should export the custom node with id "c605506774a848f7877b4d17a453bd39-1"', async () => {
+  test('"frodo node export --node-id c605506774a848f7877b4d17a453bd39-1 -D customNodeExportDir6": should export the custom node with id "c605506774a848f7877b4d17a453bd39-1"', async () => {
     const exportFile = 'c605506774a848f7877b4d17a453bd39-1.nodeTypes.json';
-    const CMD = `frodo node export --node-id c605506774a848f7877b4d17a453bd39-1`;
-    await testExport(CMD, env, type, exportFile);
+    const exportDirectory = 'customNodeExportDir6'
+    const CMD = `frodo node export --node-id c605506774a848f7877b4d17a453bd39-1 -D ${exportDirectory}`;
+    await testExport(CMD, env, type, exportFile, exportDirectory);
   });
 
   test('"frodo node export -xn \'Display Callback\' -D customNodeExportDir2": should export the custom node with display name "Display Callback" to the directory customNodeExportDir2 with extracted script', async () => {
@@ -85,9 +86,9 @@ describe('frodo node export', () => {
     await testExport(CMD, env, type, exportFile, exportDirectory);
   });
 
-  test('"frodo node export --node-name \'Display Callback\' --use-string-arrays": should export the custom node with display name "DisplayCallback"', async () => {
+  test('"frodo node export --node-name \'Display Callback\' --use-string-arrays --no-extract": should export the custom node with display name "DisplayCallback"', async () => {
     const exportFile = 'Display-Callback.nodeTypes.json';
-    const CMD = `frodo node export --node-name 'Display Callback' --use-string-arrays`;
+    const CMD = `frodo node export --node-name 'Display Callback' --use-string-arrays --no-extract`;
     await testExport(CMD, env, type, exportFile);
   });
 
@@ -110,9 +111,9 @@ describe('frodo node export', () => {
     await testExport(CMD, env, type, undefined, exportDirectory, false);
   });
 
-  test('"frodo node export --all-separate --extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes with extracted scripts into separate files in the directory customNodeExportDir5', async () => {
+  test('"frodo node export --all-separate --no-extract --directory customNodeExportDir5 --use-string-arrays": should export all nodes into separate files in the directory customNodeExportDir5', async () => {
     const exportDirectory = 'customNodeExportDir5';
-    const CMD = `frodo node export --all-separate --extract --directory ${exportDirectory} --use-string-arrays`;
+    const CMD = `frodo node export --all-separate --no-extract --directory ${exportDirectory} --use-string-arrays`;
     await testExport(CMD, env, type, undefined, exportDirectory);
   });
 });
diff --git a/test/e2e/script-export.e2e.test.js b/test/e2e/script-export.e2e.test.js
index 5b7bb7b4f..830dd41f7 100644
--- a/test/e2e/script-export.e2e.test.js
+++ b/test/e2e/script-export.e2e.test.js
@@ -47,7 +47,7 @@
  */
 
 /*
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export --extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export --no-extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export --no-deps -i 'bb393d07-a121-47e2-9d24-1a1066f39ec0'
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export --script-name 'GitHub Profile Normalization'
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export -n 'GitHub Profile Normalization' -f my-GitHub-Profile-Normalization.script.json
@@ -57,7 +57,7 @@ FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgebloc
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export -MNaD scriptExportTestDir2
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export -A
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export -NAxD scriptExportTestDir3
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=https://openam-frodo-dev.forgeblocks.com/am frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4
 */
 import { getEnv, testExport } from './utils/TestUtils';
 import { connection as c } from './utils/TestConfig';
@@ -69,9 +69,9 @@ const type = 'script';
 
 describe('frodo script export', () => {
   // The first two tests use the 'My Example Script Using Libraries' (with id 'bb393d07-a121-47e2-9d24-1a1066f39ec0') script to test that libraries are exported correctly, including recursively.
-  test('"frodo script export --extract --script-id \'bb393d07-a121-47e2-9d24-1a1066f39ec0\' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries', async () => {
+  test('"frodo script export --no-extract --script-id \'bb393d07-a121-47e2-9d24-1a1066f39ec0\' --directory scriptExportTestDir5": should export the script with id "bb393d07-a121-47e2-9d24-1a1066f39ec0" along with libraries', async () => {
     const exportDirectory = 'scriptExportTestDir5';
-    const CMD = `frodo script export --extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5`;
+    const CMD = `frodo script export --no-extract --script-id 'bb393d07-a121-47e2-9d24-1a1066f39ec0' --directory scriptExportTestDir5`;
     await testExport(CMD, env, type, undefined, exportDirectory, false);
   });
 
@@ -122,15 +122,15 @@ describe('frodo script export', () => {
     await testExport(CMD, env, type);
   });
 
-  test('"frodo script export -NAxD scriptExportTestDir3": should export all extracted scripts to separate files in the directory scriptExportTestDir3', async () => {
+  test('"frodo script export -NAxD scriptExportTestDir3": should export all scripts to separate files in the directory scriptExportTestDir3', async () => {
     const exportDirectory = 'scriptExportTestDir3';
     const CMD = `frodo script export -NAxD ${exportDirectory}`;
     await testExport(CMD, env, type, undefined, exportDirectory, false);
   });
 
-  test('"frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory scriptExportTestDir4": should export all extracted scripts, including default ones, to separate files in the directory scriptExportTestDir4', async () => {
+  test('"frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory scriptExportTestDir4": should export all scripts, including default ones, to separate files in the directory scriptExportTestDir4', async () => {
     const exportDirectory = 'scriptExportTestDir4';
-    const CMD = `frodo script export --modified-properties --all-separate --no-metadata --default --extract --directory ${exportDirectory}`;
+    const CMD = `frodo script export --modified-properties --all-separate --no-metadata --default --no-extract --directory ${exportDirectory}`;
     await testExport(CMD, env, type, undefined, exportDirectory, false);
   });
 });
diff --git a/test/e2e/server-export.e2e.test.js b/test/e2e/server-export.e2e.test.js
index 14bd332c7..4e259895f 100644
--- a/test/e2e/server-export.e2e.test.js
+++ b/test/e2e/server-export.e2e.test.js
@@ -48,9 +48,9 @@
 
 /*
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export --server-id 01
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata
-FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export --server-id 01 --directory serverExportTestDir6
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata --directory serverExportTestDir7
+FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export --server-url http://localhost:8081/am --no-extract --directory serverExportTestDir2
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export --all
 FRODO_MOCK=record FRODO_NO_CACHE=1 FRODO_HOST=http://openam-frodo-dev.classic.com:8080/am frodo server export -AxNdD serverExportTestDir4
@@ -67,34 +67,39 @@ const classicEnv = getEnv(cc);
 const type = 'server';
 
 describe('frodo server export', () => {
-    test('"frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with extracted properties and default properties.', async () => {
+    test('"frodo server export -i 01 -f serverExportTestFile1.json -xNdD serverExportTestDir1": should export the server with server id "01" along with default properties.', async () => {
+        const exportFile = "serverExportTestFile1.json"
         const exportDirectory = "serverExportTestDir1";
-        const CMD = `frodo server export -i 01 -f serverExportTestFile1.json -xNdD ${exportDirectory}`;
-        await testExport(CMD, classicEnv, type, undefined, exportDirectory, false);
+        const CMD = `frodo server export -i 01 -f ${exportFile} -xNdD ${exportDirectory}`;
+        await testExport(CMD, classicEnv, type, exportFile, exportDirectory, false);
     });
 
-    test('"frodo server export --server-id 01": should export the server with server id "01".', async () => {
+    test('"frodo server export --server-id 01 --directory serverExportTestDir6": should export the server with server id "01".', async () => {
         const exportfile = "01.server.json";
-        const CMD = `frodo server export --server-id 01`;
-        await testExport(CMD, classicEnv, type, exportfile);
+        const exportDirectory = "serverExportTestDir6"
+        const CMD = `frodo server export --server-id 01 --directory ${exportDirectory}`;
+        await testExport(CMD, classicEnv, type, exportfile, exportDirectory);
     });
 
     test('"frodo server export -u 8081 --file serverExportTestFile2.json --default --no-metadata": should export the server with url containing "8081" along with default properties.', async () => {
         const exportfile = "serverExportTestFile2.json";
-        const CMD = `frodo server export -u 8081 --file ${exportfile} --default --no-metadata`;
-        await testExport(CMD, classicEnv, type, exportfile, undefined, false);
+        const exportDirectory = "serverExportTestDir7"
+        const CMD = `frodo server export -u 8081 --file ${exportfile} --default --no-metadata --directory ${exportDirectory}`;
+        await testExport(CMD, classicEnv, type, exportfile, exportDirectory, false);
     });
 
-    test('"frodo server export --server-url http://localhost:8081/am --extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am" along with extracted properties.', async () => {
+    test('"frodo server export --server-url http://localhost:8081/am --no-extract --directory serverExportTestDir2": should export the server with url "http://localhost:8081/am".', async () => {
+        const exportFile = "03.server.json"
         const exportDirectory = "serverExportTestDir2";
-        const CMD = `frodo server export --server-url http://localhost:8081/am --extract --directory ${exportDirectory}`;
-        await testExport(CMD, classicEnv, type, undefined, exportDirectory, false);
+        const CMD = `frodo server export --server-url http://localhost:8081/am --no-extract --directory ${exportDirectory}`;
+        await testExport(CMD, classicEnv, type, exportFile, exportDirectory, false);
     });
 
-    test('"frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with extracted and default properties.', async () => {
+    test('"frodo server export -axNdf serverExportTestFile3.json -D serverExportTestDir3": should export all servers to a single file in the directory serverExportTestDir3 along with default properties.', async () => {
+        const exportFile = "serverExportTestFile3.json"
         const exportDirectory = "serverExportTestDir3";
-        const CMD = `frodo server export -axNdf serverExportTestFile3.json -D ${exportDirectory}`;
-        await testExport(CMD, classicEnv, type, undefined, exportDirectory, false);
+        const CMD = `frodo server export -axNdf ${exportFile} -D ${exportDirectory}`;
+        await testExport(CMD, classicEnv, type, exportFile, exportDirectory, false);
     });
 
     test('"frodo server export --all": should export all servers to a single file', async () => {
@@ -103,7 +108,7 @@ describe('frodo server export', () => {
         await testExport(CMD, classicEnv, type, exportFile);
     });
 
-    test('"frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with extracted and default properties', async () => {
+    test('"frodo server export -AxNdD serverExportTestDir4": should export all servers to separate files along with default properties', async () => {
         const exportDirectory = "serverExportTestDir4";
         const CMD = `frodo server export -AxNdD ${exportDirectory}`;
         await testExport(CMD, classicEnv, type, undefined, exportDirectory, false);