Glue SOAP client to SP config, expand policy settings.

[shibboleth/sp.git] / schemas / shibboleth-metadata-1.0.xsd

diff --git a/schemas/shibboleth-metadata-1.0.xsd b/schemas/shibboleth-metadata-1.0.xsd
index a520ca4..be1441d 100644 (file)
--- a/schemas/shibboleth-metadata-1.0.xsd
+++ b/schemas/shibboleth-metadata-1.0.xsd
@@ -1,10 +1,13 @@
 <?xml version="1.0" encoding="US-ASCII"?>
 <schema targetNamespace="urn:mace:shibboleth:metadata:1.0"
        xmlns="http://www.w3.org/2001/XMLSchema"
+       xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
        elementFormDefault="unqualified"
        attributeFormDefault="unqualified"
        version="1.0">
 
+       <import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="xmldsig-core-schema.xsd"/>
+
        <element name="Scope">
                <annotation>
                        <documentation>
@@ -19,4 +22,21 @@
                        </simpleContent>
                </complexType>
        </element>
+
+       <element name="KeyAuthority">
+               <annotation>
+                       <documentation>
+                       Binds keying authorities to the system entity/entities to which the enclosing
+                       metadata element applies.
+                       </documentation>
+               </annotation>
+               <complexType>
+                       <sequence>
+                               <element ref="ds:KeyInfo" maxOccurs="unbounded"/>
+                       </sequence>
+                       <attribute name="VerifyDepth" type="unsignedByte" use="optional" default="1"/>
+                       <anyAttribute namespace="##other" processContents="lax"/>
+               </complexType>
+       </element>
+
 </schema>