= form_for @application_setting, url: general_admin_application_settings_path(anchor: 'js-signin-settings'), html: { class: 'fieldset-form' } do |f|
  = form_errors(@application_setting)

  %fieldset
    .form-group
      .form-check
        = f.check_box :password_authentication_enabled_for_web, class: 'form-check-input'
        = f.label :password_authentication_enabled_for_web, class: 'form-check-label' do
          Password authentication enabled for web interface
          .form-text.text-muted
            When disabled, an external authentication provider must be used.
    .form-group
      .form-check
        = f.check_box :password_authentication_enabled_for_git, class: 'form-check-input'
        = f.label :password_authentication_enabled_for_git, class: 'form-check-label' do
          Password authentication enabled for Git over HTTP(S)
          .form-text.text-muted
            When disabled, a Personal Access Token
            - if Gitlab::Auth::Ldap::Config.enabled?
              or LDAP password
            must be used to authenticate.
    - if omniauth_enabled? && button_based_providers.any?
      .form-group
        = f.label :enabled_oauth_sign_in_sources, 'Enabled OAuth sign-in sources', class: 'label-bold'
        = hidden_field_tag 'application_setting[enabled_oauth_sign_in_sources][]'
        .btn-group{ data: { toggle: 'buttons' } }
          - oauth_providers_checkboxes.each do |source|
            = source
    .form-group
      = f.label :two_factor_authentication, 'Two-factor authentication', class: 'label-bold'
      .form-check
        = f.check_box :require_two_factor_authentication, class: 'form-check-input'
        = f.label :require_two_factor_authentication, class: 'form-check-label' do
          Require all users to set up Two-factor authentication
    .form-group
      = f.label :unknown_sign_in, _('Email notification for unknown sign-ins'), class: 'label-bold'
      .form-check
        = f.check_box :notify_on_unknown_sign_in, class: 'form-check-input'
        = f.label :notify_on_unknown_sign_in, class: 'form-check-label' do
          = _('Notify users by email when sign-in location is not recognized')
          = link_to icon('question-circle'),
          'https://docs.gitlab.com/ee/user/profile/unknown_sign_in_notification.html',
          target: '_blank'
    .form-group
      = f.label :two_factor_authentication, 'Two-factor grace period (hours)', class: 'label-bold'
      = f.number_field :two_factor_grace_period, min: 0, class: 'form-control', placeholder: '0'
      .form-text.text-muted Amount of time (in hours) that users are allowed to skip forced configuration of two-factor authentication
    .form-group
      = f.label :home_page_url, 'Home page URL', class: 'label-bold'
      = f.text_field :home_page_url, class: 'form-control', placeholder: 'http://company.example.com', :'aria-describedby' => 'home_help_block'
      %span.form-text.text-muted#home_help_block We will redirect non-logged in users to this page
    .form-group
      = f.label :after_sign_out_path, class: 'label-bold'
      = f.text_field :after_sign_out_path, class: 'form-control', placeholder: 'http://company.example.com', :'aria-describedby' => 'after_sign_out_path_help_block'
      %span.form-text.text-muted#after_sign_out_path_help_block We will redirect users to this page after they sign out
    .form-group
      = f.label :sign_in_text, class: 'label-bold'
      = f.text_area :sign_in_text, class: 'form-control', rows: 4
      .form-text.text-muted Markdown enabled
  .gl-display-flex.gl-justify-content-end
    = f.submit 'Save changes', class: "btn btn-success"