<attribute name="requireSessionWith" type="conf:string"/>\r
<attribute name="exportAssertion" type="boolean"/>\r
<attribute name="redirectToSSL" type="unsignedInt"/>\r
+ <attribute name="entityID" type="anyURI"/>\r
<attribute name="isPassive" type="boolean"/>\r
<attribute name="forceAuthn" type="boolean"/>\r
<attribute name="authnContextClassRef" type="anyURI"/>\r
<attribute name="authnContextComparison" type="samlp:AuthnContextComparisonType"/>\r
+ <attribute name="sessionError" type="anyURI"/>\r
+ <attribute name="metadataError" type="anyURI"/>\r
+ <attribute name="accessError" type="anyURI"/>\r
+ <attribute name="sslError" type="anyURI"/>\r
<anyAttribute namespace="##other" processContents="lax"/>\r
</attributeGroup>\r
<element name="AccessControlProvider" type="conf:PluggableType"/>\r
<element ref="conf:AccessControl"/>\r
<element ref="conf:AccessControlProvider"/>\r
</choice>\r
- <element ref="conf:Host" minOccurs="0" maxOccurs="unbounded"/>\r
+ <choice minOccurs="0" maxOccurs="unbounded">\r
+ <element ref="conf:Host"/>\r
+ <element ref="conf:HostRegex"/>\r
+ </choice>\r
</sequence>\r
<attribute name="applicationId" type="conf:string" fixed="default"/>\r
<attributeGroup ref="conf:ContentSettings"/>\r
<element ref="conf:AccessControl"/>\r
<element ref="conf:AccessControlProvider"/>\r
</choice>\r
- <element ref="conf:Path" minOccurs="0" maxOccurs="unbounded"/>\r
+ <choice minOccurs="0" maxOccurs="unbounded">\r
+ <element ref="conf:Path"/>\r
+ <element ref="conf:PathRegex"/>\r
+ <element ref="conf:Query"/>\r
+ </choice>\r
</sequence>\r
<attribute name="scheme">\r
<simpleType>\r
</attribute>\r
<attribute name="name" type="conf:string" use="required"/>\r
<attribute name="port" type="unsignedInt"/>\r
- <attribute name="applicationId" type="conf:string"/>\r
+ <attribute name="applicationId" type="conf:string"/>\r
<attributeGroup ref="conf:ContentSettings"/>\r
</complexType>\r
</element>\r
+ \r
+ <element name="HostRegex">\r
+ <complexType>\r
+ <sequence>\r
+ <choice minOccurs="0">\r
+ <element ref="conf:htaccess"/>\r
+ <element ref="conf:AccessControl"/>\r
+ <element ref="conf:AccessControlProvider"/>\r
+ </choice>\r
+ <choice minOccurs="0" maxOccurs="unbounded">\r
+ <element ref="conf:Path"/>\r
+ <element ref="conf:PathRegex"/>\r
+ <element ref="conf:Query"/>\r
+ </choice>\r
+ </sequence>\r
+ <attribute name="regex" type="conf:string" use="required"/>\r
+ <attribute name="ignoreCase" type="boolean" default="true"/>\r
+ <attribute name="applicationId" type="conf:string"/>\r
+ <attributeGroup ref="conf:ContentSettings"/>\r
+ </complexType>\r
+ </element>\r
\r
<element name="Path">\r
<complexType>\r
<element ref="conf:AccessControl"/>\r
<element ref="conf:AccessControlProvider"/>\r
</choice>\r
- <element ref="conf:Path" minOccurs="0" maxOccurs="unbounded"/>\r
+ <choice minOccurs="0" maxOccurs="unbounded">\r
+ <element ref="conf:Path"/>\r
+ <element ref="conf:PathRegex"/>\r
+ <element ref="conf:Query"/>\r
+ </choice>\r
</sequence>\r
- <attribute name="name" type="conf:string" use="required"/>\r
- <attribute name="applicationId" type="conf:string"/>\r
- <attributeGroup ref="conf:ContentSettings"/>\r
+ <attribute name="name" type="conf:string" use="required"/>\r
+ <attribute name="applicationId" type="conf:string"/>\r
+ <attributeGroup ref="conf:ContentSettings"/>\r
</complexType>\r
</element>\r
+\r
+ <element name="PathRegex">\r
+ <complexType>\r
+ <sequence>\r
+ <choice minOccurs="0">\r
+ <element ref="conf:htaccess"/>\r
+ <element ref="conf:AccessControl"/>\r
+ <element ref="conf:AccessControlProvider"/>\r
+ </choice>\r
+ <element ref="conf:Query" minOccurs="0" maxOccurs="unbounded"/>\r
+ </sequence>\r
+ <attribute name="regex" type="conf:string" use="required"/>\r
+ <attribute name="ignoreCase" type="boolean" default="true"/>\r
+ <attribute name="applicationId" type="conf:string"/>\r
+ <attributeGroup ref="conf:ContentSettings"/>\r
+ </complexType>\r
+ </element>\r
+ \r
+ <element name="Query">\r
+ <complexType>\r
+ <sequence>\r
+ <choice minOccurs="0">\r
+ <element ref="conf:htaccess"/>\r
+ <element ref="conf:AccessControl"/>\r
+ <element ref="conf:AccessControlProvider"/>\r
+ </choice>\r
+ <element ref="conf:Query" minOccurs="0" maxOccurs="unbounded"/>\r
+ </sequence>\r
+ <attribute name="name" type="conf:string" use="required"/>\r
+ <attribute name="regex" type="conf:string"/>\r
+ <attributeGroup ref="conf:ContentSettings"/>\r
+ </complexType>\r
+ </element>\r
\r
<element name="Applications">\r
<annotation>\r
<complexType>\r
<sequence>\r
<element ref="conf:Sessions"/>\r
- <element ref="conf:Errors"/>\r
+ <element ref="conf:Errors" minOccurs="0"/>\r
<element ref="conf:DefaultRelyingParty"/>\r
+ <element ref="conf:Notify" minOccurs="0" maxOccurs="unbounded"/>\r
<element ref="saml:Audience" minOccurs="0" maxOccurs="unbounded"/>\r
<element name="MetadataProvider" type="conf:PluggableType"/>\r
<element name="TrustEngine" type="conf:PluggableType"/>\r
<attribute name="id" type="conf:string" fixed="default"/>\r
<attribute name="entityID" type="anyURI" use="required"/>\r
<attribute name="policyId" type="conf:string" use="required"/>\r
- <attribute name="homeURL" type="anyURI" default="/"/>\r
- <attribute name="REMOTE_USER" type="conf:listOfStrings"/>\r
- <attribute name="unsetHeaders" type="conf:listOfStrings"/>\r
- <anyAttribute namespace="##other" processContents="lax"/>\r
+ <attributeGroup ref="conf:ApplicationGroup"/>\r
+ <anyAttribute namespace="##other" processContents="lax"/>\r
</complexType>\r
</element>\r
\r
<element ref="conf:Sessions" minOccurs="0"/>\r
<element ref="conf:Errors" minOccurs="0"/>\r
<element ref="conf:DefaultRelyingParty" minOccurs="0"/>\r
- <element ref="conf:NotifyOnLogout" minOccurs="0" maxOccurs="unbounded"/>\r
+ <element ref="conf:Notify" minOccurs="0" maxOccurs="unbounded"/>\r
<element ref="saml:Audience" minOccurs="0" maxOccurs="unbounded"/>\r
<element name="MetadataProvider" type="conf:PluggableType" minOccurs="0"/>\r
<element name="TrustEngine" type="conf:PluggableType" minOccurs="0"/>\r
<attribute name="id" type="conf:string" use="required"/>\r
<attribute name="entityID" type="anyURI"/>\r
<attribute name="policyId" type="conf:string"/>\r
- <attribute name="homeURL" type="anyURI" default="/"/>\r
- <attribute name="REMOTE_USER" type="conf:listOfStrings"/>\r
- <attribute name="unsetHeaders" type="conf:listOfStrings"/>\r
+ <attributeGroup ref="conf:ApplicationGroup"/>\r
<anyAttribute namespace="##other" processContents="lax"/>\r
</complexType>\r
</element>\r
\r
+ <attributeGroup name="ApplicationGroup">\r
+ <attribute name="homeURL" type="anyURI" default="/"/>\r
+ <attribute name="REMOTE_USER" type="conf:listOfStrings"/>\r
+ <attribute name="unsetHeaders" type="conf:listOfStrings"/>\r
+ <attribute name="metadataAttributePrefix" type="conf:string"/>\r
+ <attribute name="redirectErrors" type="anyURI"/>\r
+ <attribute name="localLogout" type="anyURI"/>\r
+ <attribute name="globalLogout" type="anyURI"/>\r
+ </attributeGroup>\r
+ \r
<element name="Sessions">\r
<annotation>\r
<documentation>Container for specifying protocol handlers and session policy</documentation>\r
<complexType>\r
<choice minOccurs="0" maxOccurs="unbounded">\r
<element ref="conf:SessionInitiator"/>\r
+ <element ref="conf:LogoutInitiator"/>\r
<element ref="md:AssertionConsumerService"/>\r
<element ref="md:ArtifactResolutionService"/>\r
<element ref="md:SingleLogoutService"/>\r
<attribute name="handlerSSL" type="boolean" default="true"/>\r
<attribute name="exportLocation" type="conf:string"/>\r
<attribute name="exportACL" type="conf:listOfStrings" default="127.0.0.1"/>\r
- <attribute name="redirectErrors" type="anyURI"/>\r
<attribute name="cookieName" type="conf:string"/>\r
<attribute name="cookieProps" type="conf:string"/>\r
<attribute name="idpHistory" type="boolean" default="true"/>\r
<anyAttribute namespace="##other" processContents="lax"/>\r
</complexType>\r
</element>\r
- \r
+\r
<attribute name="policyId" type="conf:string">\r
<annotation>\r
<documentation>Used to reference Policy elements from profile endpoints.</documentation>\r
</complexContent>\r
</complexType>\r
</element>\r
+\r
+ <element name="LogoutInitiator">\r
+ <annotation>\r
+ <documentation>Used to specify handlers that can issue LogoutRequests</documentation>\r
+ </annotation>\r
+ <complexType>\r
+ <complexContent>\r
+ <restriction base="conf:PluggableType">\r
+ <sequence>\r
+ <any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>\r
+ </sequence>\r
+ <attribute name="Location" type="anyURI"/>\r
+ <attribute name="outgoingBindings" type="conf:listOfURIs"/>\r
+ <attribute name="template" type="anyURI"/>\r
+ <attribute name="postArtifact" type="boolean"/>\r
+ <anyAttribute namespace="##any" processContents="lax"/>\r
+ </restriction>\r
+ </complexContent>\r
+ </complexType>\r
+ </element>\r
\r
<element name="Errors">\r
<annotation>\r
</sequence>\r
<attribute name="session" type="anyURI" use="required"/>\r
<attribute name="metadata" type="anyURI"/>\r
- <attribute name="rm" type="anyURI"/>\r
<attribute name="access" type="anyURI"/>\r
<attribute name="ssl" type="anyURI"/>\r
<attribute name="supportContact" type="conf:string"/>\r
<attribute name="authType" type="conf:string"/>\r
<attribute name="authUsername" type="conf:string"/>\r
<attribute name="authPassword" type="conf:string"/>\r
- <attribute name="signRequests" type="bindingBoolean"/>\r
- <attribute name="signResponses" type="bindingBoolean"/>\r
- <attribute name="signatureAlg" type="anyURI"/>\r
+ <attribute name="signing" type="conf:bindingBoolean"/>\r
+ <attribute name="signingAlg" type="anyURI"/>\r
<attribute name="digestAlg" type="anyURI"/>\r
- <attribute name="encryptRequests" type="bindingBoolean"/>\r
- <attribute name="encryptResponses" type="bindingBoolean"/>\r
+ <attribute name="encryption" type="conf:bindingBoolean"/>\r
<attribute name="encryptionAlg" type="anyURI"/>\r
<attribute name="keyName" type="conf:string"/>\r
<attribute name="artifactEndpointIndex" type="unsignedShort"/>\r
</annotation>\r
<complexType>\r
<sequence>\r
+ <element ref="conf:TransportOption" minOccurs="0" maxOccurs="unbounded"/>\r
<element name="Rule" type="conf:PluggableType" minOccurs="1" maxOccurs="unbounded"/>\r
</sequence>\r
<attribute name="id" type="conf:string" use="required"/>\r
</sequence>\r
</complexType>\r
</element>\r
+\r
+ <element name="TransportOption">\r
+ <annotation>\r
+ <documentation>Implementation-specific option to pass to SOAPTransport provider.</documentation>\r
+ </annotation>\r
+ <complexType>\r
+ <simpleContent>\r
+ <extension base="anySimpleType">\r
+ <attribute name="provider" type="conf:string" use="required"/>\r
+ <attribute name="option" type="conf:string" use="required"/>\r
+ </extension>\r
+ </simpleContent>\r
+ </complexType>\r
+ </element>\r
\r
</schema>\r