security:

    hide_user_not_found: false

    encoders:
        SymfonyComponentSecurityCoreUserUser:
          algorithm: bcrypt
          cost: 12
        AppBundleEntityUser:
          algorithm: bcrypt
          cost: 12
        standard:
            algorithm: sha1
            cost: 10
        harsh:
            algorithm: bcrypt
            cost: 15

    # http://symfony.com/doc/current/security.html#b-configuring-how-users-are-loaded
    providers:
        chain_provider:
            chain:
              providers: [my_provider, ldap_provider]

        my_provider:
            entity:
              class:  AppBundle:User
              property: username

        ldap_provider:
            ldap:
              service: SymfonyComponentLdapLdap
              base_dn: 'ou=Expedient,dc=cbb,dc=local'
              search_dn: 'CN=svccolab,OU=Service Accounts,OU=Resources,DC=cbb,DC=local'
              search_password: 'password!'
              #default_roles: 'ROLE_USER'
              #uid_key: 'sAMAccountName'
              #filter: '({uid_key}={username})'


    firewalls:
        # disables authentication for assets and the profiler, adapt it according to your needs
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false

        main:
            pattern:  ^/

            # no config for anonymous
            anonymous: ~

            # guard uses the login form authenticator service
            guard:
                authenticators:
                    - app.security.login_form_authenticator
                provider: cadence_provider

            # authenticate against cbb ldap / ad server
            form_login_ldap:
                login_path: login
                check_path: login
                service: SymfonyComponentLdapLdap
                dn_string: 'CBB{username}'
                provider: ldap_provider


            logout:
              invalidate_session: true
              path:   /logout
              target: /customer

    access_control:
        - { path: ^/admin, roles: ROLE_ADMIN }