| <?xml version="1.0" encoding="utf-8" ?> |
| <!-- |
| Copyright Notice |
| (c) 2001-2005 International Business Machines Corporation, Microsoft Corporation, RSA |
| Security Inc., and VeriSign Inc. All rights reserved. Permission to copy and display the |
| WS-SecurityPolicy Specification (the “Specification”, which includes WSDL and schema |
| documents), in any medium without fee or royalty is hereby granted, provided that you |
| include the following on ALL copies of the Specification, that you make: |
| |
| 1. A link or URL to the Specification at one of the Authors’ websites |
| 2. The copyright notice as shown in the Specification. |
| |
| IBM, Microsoft, RSA and Verisign (collectively, the "Authors") each agree to grant you a |
| license, under royalty-free and otherwise reasonable, non-discriminatory terms and |
| conditions, to their respective essential patent claims that they deem necessary to |
| implement the Specification. |
| |
| THE SPECIFICATION IS PROVIDED "AS IS," AND THE AUTHORS MAKE NO |
| REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT |
| LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR |
| PURPOSE, NON-INFRINGEMENT, OR TITLE; THAT THE CONTENTS OF THE |
| SPECIFICATION ARE SUITABLE FOR ANY PURPOSE; NOR THAT THE IMPLEMENTATION |
| OF SUCH CONTENTS WILL NOT INFRINGE ANY THIRD PARTY PATENTS, COPYRIGHTS, |
| TRADEMARKS OR OTHER RIGHTS. |
| THE AUTHORS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL |
| OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR RELATING TO ANY USE OR |
| DISTRIBUTION OF THE SPECIFICATION. |
| |
| The name and trademarks of the Authors may NOT be used in any manner, including |
| advertising or publicity pertaining to the Specification or its contents without specific, |
| written prior permission. Title to copyright in the Specification will at all times remain |
| with the Authors. |
| |
| No other rights are granted by implication, estoppel or otherwise. |
| --> |
| <xs:schema |
| targetNamespace="http://schemas.xmlsoap.org/ws/2005/02/securitypolicy" |
| xmlns:tns="http://schemas.xmlsoap.org/ws/2005/02/securitypolicy" |
| xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" |
| xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" |
| xmlns:xs="http://www.w3.org/2001/XMLSchema" |
| elementFormDefault="qualified" |
| blockDefault="#all" > |
| |
| <xs:import namespace="http://schemas.xmlsoap.org/ws/2004/08/addressing" |
| schemaLocation="http://schemas.xmlsoap.org/ws/2004/08/addressing" /> |
| |
| <xs:import namespace="http://schemas.xmlsoap.org/ws/2004/09/policy" |
| schemaLocation="http://schemas.xmlsoap.org/ws/2004/09/policy/ws-policy.xsd" /> |
| |
| <!-- |
| 5. Protection Assertions |
| --> |
| <xs:element name="SignedParts" type="tns:SePartsType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 5.1.1 SignedParts Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="EncryptedParts" type="tns:SePartsType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 5.2.1 EncryptedParts Assertion |
| </xs:documentation> |
| </xs:annotation> |
| |
| </xs:element> |
| <xs:complexType name="SePartsType"> |
| <xs:sequence> |
| <xs:element name="Body" type="tns:EmptyType" minOccurs="0" /> |
| <xs:element name="Header" type="tns:HeaderType" minOccurs="0" maxOccurs="unbounded" /> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/> |
| </xs:sequence> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| |
| <xs:complexType name="EmptyType" /> |
| <xs:complexType name="HeaderType" > |
| <xs:attribute name="Name" type="xs:QName" use="optional" /> |
| <xs:attribute name="Namespace" type="xs:anyURI" use="required" /> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| |
| <xs:element name="SignedElements" type="tns:SerElementsType" > |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en" > |
| 5.1.2 SignedElements Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="EncryptedElements" type="tns:SerElementsType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 5.2.2 EncryptedElements Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="RequiredElements" type="tns:SerElementsType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en" > |
| 5.3.1 RequiredElements Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:complexType name="SerElementsType"> |
| <xs:sequence> |
| <xs:element name="XPath" type="xs:string" minOccurs="1" maxOccurs="unbounded" /> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/> |
| </xs:sequence> |
| <xs:attribute name="XPathVersion" type="xs:anyURI" use="optional" /> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| |
| <!-- |
| 6. Token Assertions |
| --> |
| <xs:attribute name="IncludeToken" type="tns:IncludeTokenOpenType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.1 Token Inclusion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:attribute> |
| <xs:simpleType name="IncludeTokenOpenType"> |
| |
| <xs:union memberTypes="tns:IncludeTokenType xs:anyURI" /> |
| </xs:simpleType> |
| <xs:simpleType name="IncludeTokenType"> |
| <xs:restriction base="xs:anyURI" > |
| <xs:enumeration value="http://schemas.xmlsoap.org/ws/2005/02/securitypolicy/IncludeToken/Never" /> |
| <xs:enumeration value="http://schemas.xmlsoap.org/ws/2005/02/securitypolicy/IncludeToken/Once" /> |
| <xs:enumeration value="http://schemas.xmlsoap.org/ws/2005/02/securitypolicy/IncludeToken/AlwaysToRecipient" /> |
| <xs:enumeration value="http://schemas.xmlsoap.org/ws/2005/02/securitypolicy/IncludeToken/Always" /> |
| </xs:restriction> |
| |
| </xs:simpleType> |
| |
| <xs:element name="UsernameToken" type="tns:TokenAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en" > |
| 6.3.1 UsernameToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:complexType name="TokenAssertionType"> |
| |
| <xs:sequence> |
| <!-- |
| *** Accurate content model is nondeterministic *** |
| <xs:element ref="wsp:Policy" minOccurs="0" /> |
| --> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/> |
| </xs:sequence> |
| <xs:attribute ref="tns:IncludeToken" use="optional" /> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| |
| <xs:element name="WssUsernameToken10" type="tns:QNameAssertionType" > |
| |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.1 UsernameToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssUsernameToken11" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 6.3.1 UsernameToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:complexType name="QNameAssertionType"> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| |
| <xs:element name="IssuedToken" type="tns:IssuedTokenType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 6.3.2 IssuedToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:complexType name="IssuedTokenType"> |
| <xs:sequence> |
| <xs:element name="Issuer" type="wsa:EndpointReferenceType" minOccurs="0" /> |
| <xs:element name="RequestSecurityTokenTemplate" type="tns:RequestSecurityTokenTemplateType" /> |
| |
| <!-- |
| *** Accurate content model is nondeterministic *** |
| <xs:element ref="wsp:Policy" minOccurs="0" /> |
| --> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax" /> |
| </xs:sequence> |
| <xs:attribute ref="tns:IncludeToken" use="optional" /> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| <xs:complexType name="RequestSecurityTokenTemplateType"> |
| <xs:sequence> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax" /> |
| |
| </xs:sequence> |
| <xs:attribute name="TrustVersion" type="xs:anyURI" use="optional" /> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| |
| <xs:element name="RequireDerivedKeys" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.2 IssuedToken Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="RequireExternalReference" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.2 IssuedToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="RequireInternalReference" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.2 IssuedToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="X509Token" type="tns:TokenAssertionType" > |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="RequireKeyIdentifierReference" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="RequireIssuerSerialReference" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| |
| </xs:element> |
| <xs:element name="RequireEmbeddedTokenReference" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="RequireThumbprintReference" type="tns:QNameAssertionType" > |
| |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssX509V1Token10" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssX509V3Token10" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| |
| </xs:element> |
| <xs:element name="WssX509Pkcs7Token10" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssX509PkiPathV1Token10" type="tns:QNameAssertionType" > |
| |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssX509V1Token11" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssX509V3Token11" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| |
| </xs:element> |
| <xs:element name="WssX509Pkcs7Token11" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssX509PkiPathV1Token11" type="tns:QNameAssertionType" > |
| |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.3 X509Token Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="KerberosToken" type="tns:TokenAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 6.3.4 KerberosToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <!-- RequireDerivedKeys defined above. --> |
| <!-- RequireKeyIdentifierReference defined above. --> |
| |
| <xs:element name="WssKerberosV5ApReqToken11" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 6.3.4 KerberosToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssGssKerberosV5ApReqToken11" type="tns:QNameAssertionType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.4 KerberosToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| |
| </xs:element> |
| |
| <xs:element name="SpnegoContextToken" type="tns:SpnegoContextTokenType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en" > |
| 6.3.5 SpnegoContextToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:complexType name="SpnegoContextTokenType"> |
| |
| <xs:sequence> |
| <xs:element name="Issuer" type="wsa:EndpointReferenceType" minOccurs="0" /> |
| <!-- |
| *** Accurate content model is nondeterministic *** |
| <xs:element ref="wsp:Policy" minOccurs="0" /> |
| --> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax" /> |
| </xs:sequence> |
| <xs:attribute ref="tns:IncludeToken" use="optional" /> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| <!-- RequireDerivedKeys defined above. --> |
| |
| <xs:element name="SecurityContextToken" type="tns:TokenAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.6 SecurityContextToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <!-- RequireDerivedKeys defined above. --> |
| |
| <xs:element name="RequireExternalUriReference" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.6 SecurityContextToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="SC10SecurityContextToken" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 6.3.6 SecurityContextToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="SecureConversationToken" type="tns:SecureConversationTokenType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.7 SecureConversationToken Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:complexType name="SecureConversationTokenType"> |
| <xs:sequence> |
| <xs:element name="Issuer" type="wsa:EndpointReferenceType" minOccurs="0" /> |
| <!-- |
| *** Accurate content model is nondeterministic *** |
| <xs:element ref="wsp:Policy" minOccurs="0" /> |
| --> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax" /> |
| </xs:sequence> |
| <xs:attribute ref="tns:IncludeToken" use="optional" /> |
| |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| <!-- RequireDerivedKeys defined above. --> |
| <!-- RequireExternalUriReference defined above. --> |
| <!-- SC10SecurityContextToken defined above. --> |
| |
| <xs:element name="BootstrapPolicy" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 6.3.7 SecureConversationToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="SamlToken" type="tns:TokenAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en" > |
| 6.3.8 SamlToken Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <!-- RequireDerivedKeys defined above. --> |
| <!-- RequireKeyIdentifierReference defined above. --> |
| |
| <xs:element name="WssSamlV10Token10" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.8 SamlToken Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssSamlV11Token10" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.8 SamlToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="WssSamlV10Token11" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.8 SamlToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssSamlV11Token11" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 6.3.8 SamlToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssSamlV20Token11" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.8 SamlToken Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="RelToken" type="tns:TokenAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.9 RelToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <!-- RequireDerivedKeys defined above. --> |
| <!-- RequireKeyIdentifierReference defined above. --> |
| |
| <xs:element name="WssRelV10Token10" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.9 RelToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="WssRelV20Token10" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.9 RelToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssRelV10Token11" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 6.3.9 RelToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="WssRelV20Token11" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.9 RelToken Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="HttpsToken" type="tns:HttpsTokenType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 6.3.10 HttpsToken Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:complexType name="HttpsTokenType"> |
| <xs:sequence> |
| <!-- |
| *** Accurate content model is nondeterministic *** |
| <xs:element ref="wsp:Policy" minOccurs="0" /> |
| --> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/> |
| </xs:sequence> |
| <xs:attribute name="RequireClientCertificate" type="xs:boolean" use="required" /> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| |
| <!-- |
| 8. Security Binding Assertions |
| --> |
| <xs:element name="AlgorithmSuite" type="tns:NestedPolicyType" > |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:complexType name="NestedPolicyType"> |
| |
| <xs:sequence> |
| <xs:element ref="wsp:Policy" /> |
| <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/> |
| </xs:sequence> |
| <xs:anyAttribute namespace="##any" processContents="lax" /> |
| </xs:complexType> |
| |
| <xs:element name="Basic256" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic192" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic128" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="TripleDes" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic256Rsa15" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic192Rsa15" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic128Rsa15" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="TripleDesRsa15" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic256Sha256" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic192Sha256" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic128Sha256" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="TripleDesSha256" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic256Sha256Rsa15" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic192Sha256Rsa15" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Basic128Sha256Rsa15" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="TripleDesSha256Rsa15" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="InclusiveC14N" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="SOAPNormalization10" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="STRTransform10" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="XPathFilter20" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.1 AlgorithmSuite Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="Layout" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 8.2 Layout Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="Strict" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.2 Layout Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="Lax" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.2 Layout Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="LaxTsFirst" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.2 Layout Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="LaxTsLast" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 8.2 Layout Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="TransportBinding" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.3 TransportBinding Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="TransportToken" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.3 TransportBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <!-- AlgorithmSuite defined above. --> |
| <!-- Layout defined above. --> |
| |
| <xs:element name="IncludeTimestamp" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.3 TransportBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <!-- RequireDerivedKeys defined above. --> |
| |
| <xs:element name="SymmetricBinding" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.4 SymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="EncryptionToken" type="tns:NestedPolicyType"> |
| |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.4 SymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="SignatureToken" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 8.4 SymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="ProtectionToken" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.4 SymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| |
| </xs:element> |
| <!-- AlgorithmSuite defined above. --> |
| <!-- Layout defined above. --> |
| <!-- IncludeTimestamp defined above. --> |
| |
| <xs:element name="EncryptBeforeSigning" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.4 SymmetricBinding Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="EncryptSignature" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.4 SymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="ProtectTokens" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.4 SymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <!-- RequireDerivedKeys defined above. --> |
| <xs:element name="OnlySignEntireHeadersAndBody" type="tns:QNameAssertionType"> |
| |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.4 SymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="AsymmetricBinding" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| |
| 8.5 AsymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="InitiatorToken" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.5 AsymmetricBinding Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="RecipientToken" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 8.5 AsymmetricBinding Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <!-- AlgorithmSuite defined above. --> |
| <!-- Layout defined above. --> |
| <!-- IncludeTimestamp defined above. --> |
| <!-- EncryptBeforeSigning defined above. --> |
| <!-- EncryptSignature defined above. --> |
| <!-- ProtectTokens defined above. --> |
| <!-- RequireDerivedKeys defined above. --> |
| <!-- OnlySignEntireHeadersAndBody defined above. --> |
| |
| <!-- |
| 9. Supporting Tokens |
| --> |
| <xs:element name="SupportingTokens" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 9.1 SupportingTokens Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <!-- AlgorithmSuite defined above. --> |
| |
| <!-- SignedParts defined above. --> |
| <!-- SignedElements defined above. --> |
| <!-- EncryptedParts defined above. --> |
| <!-- EncryptedElements defined above. --> |
| |
| <xs:element name="SignedSupportingTokens" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 9.2 SignedSupportingTokens Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <!-- AlgorithmSuite defined above. --> |
| <!-- SignedParts defined above. --> |
| <!-- SignedElements defined above. --> |
| <!-- EncryptedParts defined above. --> |
| <!-- EncryptedElements defined above. --> |
| |
| <xs:element name="EndorsingSupportingTokens" type="tns:NestedPolicyType"> |
| |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 9.3 EndorsingSupportingTokens Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <!-- AlgorithmSuite defined above. --> |
| <!-- SignedParts defined above. --> |
| <!-- SignedElements defined above. --> |
| |
| <!-- EncryptedParts defined above. --> |
| <!-- EncryptedElements defined above. --> |
| |
| <xs:element name="SignedEndorsingSupportingTokens" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 9.4 SignedEndorsingSupportingTokens Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <!-- AlgorithmSuite defined above. --> |
| <!-- SignedParts defined above. --> |
| <!-- SignedElements defined above. --> |
| <!-- EncryptedParts defined above. --> |
| <!-- EncryptedElements defined above. --> |
| |
| <!-- |
| 10. WSS: SOAP Message Security Options |
| --> |
| <xs:element name="Wss10" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 10.1 Wss10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="MustSupportRefKeyIdentifier" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 10.1 Wss10 Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="MustSupportRefIssuerSerial" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 10.1 Wss10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="MustSupportRefExternalURI" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 10.1 Wss10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="MustSupportRefEmbeddedToken" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 10.1 Wss10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="Wss11" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 10.2 Wss11 Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <!-- MustSupportRefKeyIdentifier defined above. --> |
| <!-- MustSupportRefIssuerSerial defined above. --> |
| <!-- MustSupportRefExternalURI defined above. --> |
| <!-- MustSupportRefEmbeddedToken defined above. --> |
| |
| <xs:element name="MustSupportRefThumbprint" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 10.2 Wss11 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="MustSupportRefEncryptedKey" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 10.2 Wss11 Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="RequireSignatureConfirmation" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 10.2 Wss11 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <!-- |
| 11. WS-Trust Options |
| --> |
| <xs:element name="Trust10" type="tns:NestedPolicyType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 11.1 Trust10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="MustSupportClientChallenge" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 11.1 Trust10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="MustSupportServerChallenge" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| |
| <xs:documentation xml:lang="en"> |
| 11.1 Trust10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="RequireClientEntropy" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 11.1 Trust10 Assertion |
| </xs:documentation> |
| |
| </xs:annotation> |
| </xs:element> |
| <xs:element name="RequireServerEntropy" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 11.1 Trust10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| <xs:element name="MustSupportIssuedTokens" type="tns:QNameAssertionType"> |
| <xs:annotation> |
| <xs:documentation xml:lang="en"> |
| 11.1 Trust10 Assertion |
| </xs:documentation> |
| </xs:annotation> |
| </xs:element> |
| |
| </xs:schema> |
