1 <?xml version="1.0" encoding="UTF-8"?>
3 targetNamespace="urn:mace:shibboleth:idp:config:1.0"
4 xmlns:xs="http://www.w3.org/2001/XMLSchema"
5 xmlns:credentials="urn:mace:shibboleth:credentials:1.0"
6 xmlns:namemapper="urn:mace:shibboleth:namemapper:1.0"
7 xmlns:idp="urn:mace:shibboleth:idp:config:1.0"
8 elementFormDefault="qualified"
9 attributeFormDefault="unqualified">
11 <xs:import namespace="urn:mace:shibboleth:credentials:1.0" schemaLocation="credentials.xsd"/>
12 <xs:import namespace="urn:mace:shibboleth:namemapper:1.0" schemaLocation="namemapper.xsd"/>
14 <xs:element name="IdPConfig" type="idp:IdPConfigType"/>
15 <xs:element name="ShibbolethOriginConfig" type="idp:IdPConfigType"/>
17 <xs:simpleType name="LevelType">
18 <xs:restriction base="xs:string">
19 <xs:enumeration value="OFF"/>
20 <xs:enumeration value="FATAL"/>
21 <xs:enumeration value="ERROR"/>
22 <xs:enumeration value="WARN"/>
23 <xs:enumeration value="INFO"/>
24 <xs:enumeration value="DEBUG"/>
28 <xs:complexType name="LogWithLevels">
29 <xs:attribute name="location" type="xs:anyURI" use="required" />
30 <xs:attribute name="level" type="idp:LevelType" use="optional" default="WARN" />
33 <xs:complexType name="Log">
34 <xs:attribute name="location" type="xs:anyURI" use="required"/>
37 <xs:simpleType name="Log4JConfigType">
38 <xs:restriction base="xs:string">
39 <xs:enumeration value="properties"/>
40 <xs:enumeration value="xml"/>
44 <xs:complexType name="IdPConfigType">
47 <xs:element name="RelyingParty" maxOccurs="unbounded">
49 <xs:sequence minOccurs="0">
50 <xs:element name="HSNameFormat">
52 <xs:attribute name="nameMapping" type="xs:string" use="required"/>
56 <xs:attribute name="name" type="xs:string" use="required"/>
57 <xs:attribute name="providerId" type="xs:anyURI" use="optional"/>
58 <xs:attribute name="signingCredential" type="xs:string" use="optional"/>
59 <xs:attribute name="AAUrl" type="xs:anyURI" use="optional"/>
60 <xs:attribute name="passThruErrors" type="xs:boolean" use="optional"/>
61 <xs:attribute name="forceAttributePush" type="xs:boolean" use="optional"/>
62 <xs:attribute name="signAssertions" type="xs:boolean" use="optional"/>
63 <xs:attribute name="forceAttributeNoPush" type="xs:boolean" use="optional"/>
64 <xs:attribute name="defaultToPOSTProfile" type="xs:boolean" use="optional"/>
65 <xs:attribute name="defaultAuthMethod" type="xs:string" use="optional"/>
69 <xs:element name="ReleasePolicyEngine" minOccurs="0">
72 <xs:element name="ArpRepository">
75 <xs:any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
77 <xs:attribute name="implementation" type="xs:string" use="required"/>
78 <xs:anyAttribute namespace="##any" processContents="lax"/>
85 <xs:element name="Logging" minOccurs="0" maxOccurs="1">
89 <xs:element name="ErrorLog" type="idp:LogWithLevels" minOccurs="0" maxOccurs="1" />
90 <xs:element name="TransactionLog" type="idp:Log" minOccurs="0" maxOccurs="1" />
92 <xs:element name="Log4JConfig">
94 <xs:attribute name="type" type="idp:Log4JConfigType" use="optional" default="properties" />
95 <xs:attribute name="location" type="xs:anyURI" use="required" />
103 <xs:element ref="namemapper:NameMapping" maxOccurs="unbounded"/>
106 <xs:element name="ArtifactMapper" minOccurs="0" maxOccurs="1">
109 <xs:any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
111 <xs:attribute name="implementation" type="xs:string" use="required"/>
112 <xs:anyAttribute namespace="##any" processContents="lax"/>
116 <xs:element ref="credentials:Credentials"/>
118 <xs:element name="ProtocolHandler" minOccurs="0" maxOccurs="unbounded">
121 <xs:element name="Location" type="xs:anyURI" minOccurs="1" maxOccurs="unbounded" />
122 <xs:any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
124 <xs:attribute name="implementation" type="xs:string" use="required" />
125 <xs:anyAttribute namespace="##any" processContents="lax"/>
129 <xs:element name="FederationProvider" minOccurs="0" maxOccurs="unbounded">
132 <xs:any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
134 <xs:attribute name="type" type="xs:string" use="required" />
135 <xs:anyAttribute namespace="##any" processContents="lax"/>
141 <xs:attribute name="resolverConfig" type="xs:string" use="optional" default="/conf/resolver.xml"/>
142 <xs:attribute name="AAUrl" type="xs:anyURI" use="optional"/>
143 <xs:attribute name="providerId" type="xs:anyURI" use="required"/>
144 <xs:attribute name="defaultRelyingParty" type="xs:anyURI" use="required"/>
145 <xs:attribute name="defaultAuthMethod" type="xs:string" use="optional" default="urn:oasis:names:tc:SAML:1.0:am:unspecified"/>
146 <xs:attribute name="passThruErrors" type="xs:boolean" use="optional" default="false"/>
147 <xs:attribute name="authHeaderName" type="xs:string" use="optional"/>
148 <xs:attribute name="maxHSThreads" type="xs:integer" use="optional"/>