gistfile1.txt

security:
    encoders:
        FOS\UserBundle\Model\UserInterface: sha512

    role_hierarchy:
        ROLE_EXTRANET:    ROLE_USER
        ROLE_ADMIN:       [ROLE_EXTRANET, ROLE_USER]
        ROLE_SUPER_ADMIN: [ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

    providers:
        fos_userbundle:
            id: fos_user.user_provider.username

    firewalls:
        main:
            pattern: ^/
            anonymous:       true
            form_login:
                provider:    fos_userbundle
                csrf_provider: form.csrf_provider
                login_path:  fos_user_security_login
                check_path:  /user/login_check
                remember_me: true
            logout:
                path:        fos_user_security_logout
                target:      /
            remember_me:
                key:         %secret%

    access_control:
        - { host: backoffice.suite-privee.tld, roles: ROLE_ADMIN }
        - { host: extranet.suite-privee.tld, roles: ROLE_EXTRANET }