Description of problem:
We use the UserDirEnrollment plugin for automatic auth+enrollment in some profiles. However, the input field labels for this plugin do not reflect what our users must actually provide to be authenticated.

In our use case we have the users authenticate with 2-factor credentials, PIN+Token. However, our users see a field instructing them to provide their LDAP password (which will not work). I have received several questions about this from my users during my dev deployment.

Version-Release number of selected component (if applicable):
rpm -q redhat-pki-ca
redhat-pki-ca-10.12.4-2.module+el8pki+14018+adf6c54d.noarch
cat /etc/redhat-release
Red Hat Enterprise Linux release 8.5 (Ootpa)

Actual results:
There is no clear obvious supported way to customize the HTML Input Field Labels. Our users see a password field which instructs them to provide incorrect information.

Expected results:
There is a way to customize the text next to the input fields.

Additional info:
I am attaching screenshots illustrating the kind of customization we require to help our users be less confused.

In RHCS v9 we accomplished this by manually overriding the /usr/share/pki/ca/webapps/ca/ee/ca/ProfileSelect.template file with our own javascript to "fix" field labels. This is not an ideal solution.

The value of the field labels on the enrollment web pages seem to be populating from the CMS_AUTHENTICATION_LDAP_* variables in base/server/cmsbundle/src/UserMessages.properties.

It would be nice if, for example, in the CS.cfg I could have configurable properties like this:

> auths.instance.UserDirEnrollment.uidInputLabel=User ID
> auths.instance.UserDirEnrollment.pwInputLabel=Two-Factor PIN+Token

Which would be used to label the input fields as demonstrated in the attached screenshots.