Added option to Simple Attribute Definition PlugIn to force values to lower case...
[java-idp.git] / src / schemas / sstc-saml-schema-protocol-2.0.xsd
1 <?xml version="1.0" encoding="UTF-8"?>
2 <schema
3     targetNamespace="urn:oasis:names:tc:SAML:2.0:protocol"
4     xmlns="http://www.w3.org/2001/XMLSchema"
5     xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
6     xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
7     xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
8     elementFormDefault="unqualified"
9     attributeFormDefault="unqualified"
10     blockDefault="substitution"
11     version="2.0">
12     <import namespace="urn:oasis:names:tc:SAML:2.0:assertion"
13         schemaLocation="sstc-saml-schema-assertion-2.0.xsd"/>
14     <import namespace="http://www.w3.org/2000/09/xmldsig#"
15         schemaLocation="http://www.w3.org/TR/xmldsig-core/xmldsig-core-schema.xsd"/>
16     <annotation>
17         <documentation>
18             Document identifier: draft-sstc-saml-schema-protocol-2.0-01
19             Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security
20             Revision history:
21             V1.0 (November, 2002):
22               Initial Standard Schema.
23             V1.1 (September, 2003):
24               Updates within the same V1.0 namespace.
25             V2.0 (August, 2004):
26               New protocol schema based in a SAML V2.0 namespace.
27      </documentation>
28     </annotation>
29     <complexType name="RequestAbstractType" abstract="true">
30         <sequence>
31             <element ref="saml:Issuer" minOccurs="0"/>
32             <element ref="ds:Signature" minOccurs="0"/>
33             <element ref="samlp:Extensions" minOccurs="0"/>
34         </sequence>
35         <attribute name="ID" type="ID" use="required"/>
36         <attribute name="Version" type="string" use="required"/>
37         <attribute name="IssueInstant" type="dateTime" use="required"/>
38         <attribute name="Consent" type="anyURI" use="optional"/>
39     </complexType>
40     <element name="Extensions" type="samlp:ExtensionsType"/>
41     <complexType name="ExtensionsType">
42         <sequence>
43             <any namespace="##other" processContents="lax" maxOccurs="unbounded"/>
44         </sequence>
45     </complexType>
46     <complexType name="StatusResponseType">
47         <sequence>
48             <element ref="saml:Issuer" minOccurs="0"/>
49             <element ref="ds:Signature" minOccurs="0"/>
50             <element ref="samlp:Extensions" minOccurs="0"/>
51             <element ref="samlp:Status"/>
52         </sequence>
53         <attribute name="ID" type="ID" use="required"/>
54         <attribute name="InResponseTo" type="NCName" use="optional"/>
55         <attribute name="Version" type="string" use="required"/>
56         <attribute name="IssueInstant" type="dateTime" use="required"/>
57         <attribute name="Recipient" type="anyURI" use="optional"/>
58     </complexType>
59     <element name="Status" type="samlp:StatusType"/>
60     <complexType name="StatusType">
61         <sequence>
62             <element ref="samlp:StatusCode"/>
63             <element ref="samlp:StatusMessage" minOccurs="0"/>
64             <element ref="samlp:StatusDetail" minOccurs="0"/>
65         </sequence>
66     </complexType>
67     <element name="StatusCode" type="samlp:StatusCodeType"/>
68     <complexType name="StatusCodeType">
69         <sequence>
70             <element ref="samlp:StatusCode" minOccurs="0"/>
71         </sequence>
72         <attribute name="Value" type="anyURI" use="required"/>
73     </complexType>
74     <element name="StatusMessage" type="string"/>
75     <element name="StatusDetail" type="samlp:StatusDetailType"/>
76     <complexType name="StatusDetailType">
77         <sequence>
78             <any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
79         </sequence>
80     </complexType>
81     <element name="AssertionIDRequest" type="samlp:AssertionIDRequestType"/>
82     <complexType name="AssertionIDRequestType">
83         <complexContent>
84             <extension base="samlp:RequestAbstractType">
85                 <sequence>
86                     <element ref="saml:AssertionIDRef" maxOccurs="unbounded"/>
87                 </sequence>
88             </extension>
89         </complexContent>
90     </complexType>
91     <element name="SubjectQuery" type="samlp:SubjectQueryAbstractType"/>
92     <complexType name="SubjectQueryAbstractType" abstract="true">
93         <complexContent>
94             <extension base="samlp:RequestAbstractType">
95                 <sequence>
96                     <element ref="saml:Subject"/>
97                 </sequence>
98             </extension>
99         </complexContent>
100     </complexType>
101     <element name="AuthnQuery" type="samlp:AuthnQueryType"/>
102     <complexType name="AuthnQueryType">
103         <complexContent>
104             <extension base="samlp:SubjectQueryAbstractType">
105                 <sequence>
106                     <element ref="samlp:RequestedAuthnContext" minOccurs="0"/>
107                 </sequence>
108                 <attribute name="SessionIndex" type="string" use="optional"/>
109             </extension>
110         </complexContent>
111     </complexType>
112     <element name="RequestedAuthnContext" type="samlp:RequestedAuthnContextType"/>
113     <complexType name="RequestedAuthnContextType">
114         <choice>
115             <element ref="saml:AuthnContextClassRef" maxOccurs="unbounded"/>
116             <element ref="saml:AuthnContextDeclRef" maxOccurs="unbounded"/>
117         </choice>
118         <attribute name="Comparison" type="samlp:AuthnContextComparisonType" use="optional"/>
119     </complexType>
120     <simpleType name="AuthnContextComparisonType">
121         <restriction base="string">
122             <enumeration value="exact"/>
123             <enumeration value="minimum"/>
124             <enumeration value="maximum"/>
125             <enumeration value="better"/>
126         </restriction>
127     </simpleType>
128     <element name="AttributeQuery" type="samlp:AttributeQueryType"/>
129     <complexType name="AttributeQueryType">
130         <complexContent>
131             <extension base="samlp:SubjectQueryAbstractType">
132                 <sequence>
133                     <element ref="saml:Attribute" minOccurs="0" maxOccurs="unbounded"/>
134                 </sequence>
135             </extension>
136         </complexContent>
137     </complexType>
138     <element name="AuthzDecisionQuery" type="samlp:AuthzDecisionQueryType"/>
139     <complexType name="AuthzDecisionQueryType">
140         <complexContent>
141             <extension base="samlp:SubjectQueryAbstractType">
142                 <sequence>
143                     <element ref="saml:Action" maxOccurs="unbounded"/>
144                     <element ref="saml:Evidence" minOccurs="0"/>
145                 </sequence>
146                 <attribute name="Resource" type="anyURI" use="required"/>
147             </extension>
148         </complexContent>
149     </complexType>
150     <element name="AuthnRequest" type="samlp:AuthnRequestType"/>
151     <complexType name="AuthnRequestType">
152         <complexContent>
153             <extension base="samlp:RequestAbstractType">
154                 <sequence>
155                     <element ref="saml:Subject" minOccurs="0"/>
156                     <element ref="samlp:NameIDPolicy" minOccurs="0"/>
157                     <element ref="saml:Conditions" minOccurs="0"/>
158                     <element ref="samlp:RequestedAuthnContext" minOccurs="0"/>
159                     <element ref="samlp:Scoping" minOccurs="0"/>
160                 </sequence>
161                 <attribute name="ForceAuthn" type="boolean" use="optional"/>
162                 <attribute name="IsPassive" type="boolean" use="optional"/>
163                 <attribute name="ProtocolBinding" type="anyURI" use="optional"/>
164                 <attribute name="AssertionConsumerServiceIndex" type="unsignedShort" use="optional"/>
165                 <attribute name="AssertionConsumerServiceURL" type="anyURI" use="optional"/>
166                 <attribute name="AttributeConsumingServiceIndex" type="unsignedShort" use="optional"/>
167                 <attribute name="ProviderName" type="string" use="optional"/>
168             </extension>
169         </complexContent>
170     </complexType>
171     <element name="NameIDPolicy" type="samlp:NameIDPolicyType"/>
172     <complexType name="NameIDPolicyType">
173         <sequence/>
174         <attribute name="Format" type="anyURI" use="required"/>
175         <attribute name="SPNameQualifier" type="string" use="optional"/>
176         <attribute name="AllowCreate" type="boolean" use="optional"/>
177     </complexType>
178     <element name="Scoping" type="samlp:ScopingType"/>
179     <complexType name="ScopingType">
180         <sequence>
181             <element ref="samlp:IDPList" minOccurs="0"/>
182             <element ref="samlp:RequesterID" minOccurs="0" maxOccurs="unbounded"/>
183         </sequence>
184         <attribute name="ProxyCount" type="nonNegativeInteger" use="optional"/>
185     </complexType>
186     <element name="RequesterID" type="anyURI"/>
187     <element name="IDPList" type="samlp:IDPListType"/>
188     <complexType name="IDPListType">
189         <sequence>
190             <element ref="samlp:IDPEntry" maxOccurs="unbounded"/>
191             <element ref="samlp:GetComplete" minOccurs="0"/>
192         </sequence>
193     </complexType>
194     <element name="IDPEntry" type="samlp:IDPEntryType"/>
195     <complexType name="IDPEntryType">
196         <sequence/>
197         <attribute name="ProviderID" type="anyURI" use="required"/>
198         <attribute name="Name" type="string" use="optional"/>
199         <attribute name="Loc" type="anyURI" use="optional"/>
200     </complexType>
201     <element name="GetComplete" type="anyURI"/>
202     <element name="Response" type="samlp:ResponseType"/>
203     <complexType name="ResponseType">
204         <complexContent>
205             <extension base="samlp:StatusResponseType">
206                 <choice minOccurs="0" maxOccurs="unbounded">
207                     <element ref="saml:Assertion"/>
208                     <element ref="saml:EncryptedAssertion"/>
209                 </choice>
210             </extension>
211         </complexContent>
212     </complexType>
213     <element name="ArtifactResolve" type="samlp:ArtifactResolveType"/>
214     <complexType name="ArtifactResolveType">
215         <complexContent>
216             <extension base="samlp:RequestAbstractType">
217                 <sequence>
218                     <element ref="samlp:Artifact"/>
219                 </sequence>
220             </extension>
221         </complexContent>
222     </complexType>
223     <element name="Artifact" type="string"/>
224     <element name="ArtifactResponse" type="samlp:ArtifactResponseType"/>
225     <complexType name="ArtifactResponseType">
226         <complexContent>
227             <extension base="samlp:StatusResponseType">
228                 <sequence>
229                     <any namespace="##any" processContents="lax" minOccurs="0"/>
230                 </sequence>
231             </extension>
232         </complexContent>
233     </complexType>
234     <element name="ManageNameIDRequest" type="samlp:ManageNameIDRequestType"/>
235     <complexType name="ManageNameIDRequestType">
236         <complexContent>
237             <extension base="samlp:RequestAbstractType">
238                 <sequence>
239                     <choice>
240                         <element ref="saml:NameID"/>
241                         <element ref="saml:EncryptedID"/>
242                     </choice>
243                     <choice>
244                         <element ref="samlp:NewID"/>
245                         <element ref="samlp:NewEncryptedID"/>
246                         <element ref="samlp:Terminate"/>
247                     </choice>
248                 </sequence>
249             </extension>
250         </complexContent>
251     </complexType>
252     <element name="NewID" type="string"/>
253     <element name="NewEncryptedID" type="saml:EncryptedIDType"/>
254     <element name="Terminate" type="samlp:TerminateType"/>
255     <complexType name="TerminateType"/>
256     <element name="ManageNameIDResponse" type="samlp:StatusResponseType"/>
257     <element name="LogoutRequest" type="samlp:LogoutRequestType"/>
258     <complexType name="LogoutRequestType">
259         <complexContent>
260             <extension base="samlp:RequestAbstractType">
261                 <sequence>
262                     <choice>
263                         <element ref="saml:BaseID"/>
264                         <element ref="saml:NameID"/>
265                         <element ref="saml:EncryptedID"/>
266                     </choice>
267                     <element ref="samlp:SessionIndex" minOccurs="0" maxOccurs="unbounded"/>
268                 </sequence>
269                 <attribute name="Reason" type="string" use="optional"/>
270                 <attribute name="NotOnOrAfter" type="dateTime" use="optional"/>
271             </extension>
272         </complexContent>
273     </complexType>
274     <element name="SessionIndex" type="string"/>
275     <element name="LogoutResponse" type="samlp:StatusResponseType"/>
276     <element name="NameIDMappingRequest" type="samlp:NameIDMappingRequestType"/>
277     <complexType name="NameIDMappingRequestType">
278         <complexContent>
279             <extension base="samlp:RequestAbstractType">
280                 <sequence>
281                     <choice>
282                         <element ref="saml:BaseID"/>
283                         <element ref="saml:NameID"/>
284                         <element ref="saml:EncryptedID"/>
285                     </choice>
286                     <element ref="samlp:NameIDPolicy"/>
287                 </sequence>
288             </extension>
289         </complexContent>
290     </complexType>
291     <element name="NameIDMappingResponse" type="samlp:NameIDMappingResponseType"/>
292     <complexType name="NameIDMappingResponseType">
293         <complexContent>
294             <extension base="samlp:StatusResponseType">
295                 <choice>
296                     <element ref="saml:NameID"/>
297                     <element ref="saml:EncryptedID"/>
298                 </choice>
299             </extension>
300         </complexContent>
301     </complexType>
302 </schema>