X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=schemas%2Fshibboleth-2.0-native-sp-config.xsd;h=2fed592e2b8f4486299d8d7d5287a7baec374e05;hb=a92f1a857da28cf3e0d865477a4ecd68d6b23226;hp=0bf4630d653ee8861fc07e242a70932a50136cda;hpb=7ca3247bfb360f7f0e0829ca904ba6c2bbfd0581;p=shibboleth%2Fsp.git

diff --git a/schemas/shibboleth-2.0-native-sp-config.xsd b/schemas/shibboleth-2.0-native-sp-config.xsd
index 0bf4630..2fed592 100644
--- a/schemas/shibboleth-2.0-native-sp-config.xsd
+++ b/schemas/shibboleth-2.0-native-sp-config.xsd
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="US-ASCII"?>
 <schema targetNamespace="urn:mace:shibboleth:2.0:native:sp:config"
 	xmlns="http://www.w3.org/2001/XMLSchema"
-	xmlns:conf="urn:mace:shibboleth:sp:config:2.0"
+	xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"
 	xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
 	xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
 	xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
@@ -16,15 +16,15 @@
 
 	<annotation>
 		<documentation>
-    	2.0 schema for XML-based configuration of Shibboleth Native SP instances.
-    	First appearing in Shibboleth 2.0 release.
-    	</documentation>
-    </annotation>
+		2.0 schema for XML-based configuration of Shibboleth Native SP instances.
+		First appearing in Shibboleth 2.0 release.
+    		</documentation>
+	</annotation>
 
-	<simpleType name="string">
-		<restriction base="string">
+	<simpleType name="string">
+		<restriction base="string">
 			<minLength value="1"/>
-		</restriction>
+		</restriction>
 	</simpleType>
 
 	<simpleType name="listOfStrings">
@@ -34,6 +34,15 @@
 	<simpleType name="listOfURIs">
 		<list itemType="anyURI"/>
 	</simpleType>
+
+	<simpleType name="bindingBoolean">
+		<restriction base="string">
+			<enumeration value="true"/>
+			<enumeration value="false"/>
+			<enumeration value="front"/>
+			<enumeration value="back"/>
+		</restriction>
+	</simpleType>
 	
 	<complexType name="PluggableType">
 		<sequence>
@@ -44,20 +53,40 @@
 	</complexType>
 
 	<element name="SPConfig">
-		<complexType>
-			<annotation>
-				<documentation>Root of configuration</documentation>
-			</annotation>
-			<sequence>
-				<element ref="conf:Extensions" minOccurs="0"/>
-				<element ref="conf:OutOfProcess"/>
-				<element ref="conf:InProcess"/>
-				<element ref="conf:Applications"/>
-				<element ref="conf:SecurityPolicies"/>
-			</sequence>
-			<attribute name="logger" type="anyURI"/>
-			<attribute name="clockSkew" type="unsignedInt"/>
-			<anyAttribute namespace="##other" processContents="lax"/>
+		<complexType>
+			<annotation>
+				<documentation>Root of configuration</documentation>
+			</annotation>
+			<sequence>
+				<element ref="conf:Extensions" minOccurs="0"/>
+				<element ref="conf:OutOfProcess"/>
+				<element ref="conf:InProcess"/>
+                <choice minOccurs="0">
+                    <element name="UnixListener">
+                        <complexType>
+                            <attribute name="address" type="conf:string" use="required"/>
+                        </complexType>
+                    </element>
+                    <element name="TCPListener">
+                        <complexType>
+                            <attribute name="address" type="conf:string" use="required"/>
+                            <attribute name="port" type="unsignedInt" use="required"/>
+                            <attribute name="acl" type="conf:listOfStrings" default="127.0.0.1"/>
+                        </complexType>
+                    </element>
+                    <element name="Listener" type="conf:PluggableType"/>
+                </choice>
+                <element ref="conf:StorageService" minOccurs="0" maxOccurs="unbounded"/>
+                <element ref="conf:SessionCache" minOccurs="0"/>
+                <element ref="conf:ReplayCache" minOccurs="0"/>
+                <element ref="conf:ArtifactMap" minOccurs="0"/>
+                <element name="RequestMapper" type="conf:PluggableType" minOccurs="0"/>
+				<element ref="conf:Applications"/>
+				<element ref="conf:SecurityPolicies"/>
+			</sequence>
+			<attribute name="logger" type="anyURI"/>
+			<attribute name="clockSkew" type="unsignedInt"/>
+			<anyAttribute namespace="##other" processContents="lax"/>
 		</complexType>
 	</element>
 
@@ -69,15 +98,12 @@
 			<sequence>
 				<element name="Library" minOccurs="0" maxOccurs="unbounded">
 					<complexType>
-						<complexContent>
-							<restriction base="conf:PluggableType">
-								<sequence>
-									<any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
-								</sequence>
-								<attribute name="path" type="anyURI" use="required"/>
-								<attribute name="fatal" type="boolean" default="true"/>
-							</restriction>
-						</complexContent>
+						<sequence>
+							<any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+						</sequence>
+						<attribute name="path" type="anyURI" use="required"/>
+						<attribute name="fatal" type="boolean" default="true"/>
+						<anyAttribute namespace="##any" processContents="lax"/>
 					</complexType>
 				</element>
 				<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
@@ -121,57 +147,39 @@
 		</complexType>
 	</element>
 	
-	<element name="ReplayCache">
+	<element name="ReplayCache">
 		<annotation>
 			<documentation>Ties ReplayCache to a custom StorageService</documentation>
 		</annotation>
 		<complexType>
-			<sequence/>
+			<sequence/>
 			<attribute name="StorageService" type="IDREF" use="required"/>
 		</complexType>
-	</element>
+	</element>
 	
-	<element name="ArtifactMap">
+	<element name="ArtifactMap">
 		<annotation>
 			<documentation>Customizes an ArtifactMap</documentation>
 		</annotation>
 		<complexType>
-			<sequence/>
-			<attribute name="StorageService" type="IDREF"/>
-			<attribute name="context" type="conf:string"/>
+			<sequence/>
+			<attribute name="StorageService" type="IDREF"/>
+			<attribute name="context" type="conf:string"/>
 			<attribute name="artifactTTL" type="unsignedInt" default="180"/>
-		</complexType>
+		</complexType>
 	</element>
 	
 	<element name="OutOfProcess">
 		<annotation>
-			<documentation>Container for shibd out-of-process configuration</documentation>
+			<documentation>Container for out-of-process (shibd) configuration</documentation>
 		</annotation>
 		<complexType>
-			<sequence>
-				<element ref="conf:Extensions" minOccurs="0"/>
-				<choice>
-					<element name="UnixListener">
-						<complexType>
-							<attribute name="address" type="conf:string" use="required"/>
-						</complexType>
-					</element>
-					<element name="TCPListener">
-						<complexType>
-							<attribute name="address" type="conf:string" use="required"/>
-							<attribute name="port" type="unsignedInt" use="required"/>
-							<attribute name="acl" type="conf:listOfStrings" default="127.0.0.1"/>
-						</complexType>
-					</element>
-					<element name="Listener" type="conf:PluggableType"/>
-				</choice>
-				<element ref="conf:StorageService" minOccurs="0" maxOccurs="unbounded"/>
-				<element ref="conf:SessionCache" minOccurs="0"/>
-				<element ref="conf:ReplayCache" minOccurs="0"/>
-				<element ref="conf:ArtifactMap" minOccurs="0"/>
-				<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
-			</sequence>
-			<attribute name="logger" type="anyURI"/>
+			<sequence>
+				<element ref="conf:Extensions" minOccurs="0"/>
+				<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+			</sequence>
+			<attribute name="logger" type="anyURI"/>
+		    <attribute name="catchAll" type="boolean"/>
 			<anyAttribute namespace="##other" processContents="lax"/>
 		</complexType>
 	</element>
@@ -184,22 +192,15 @@
 			</documentation>
 		</annotation>
 		<complexType>
-			<sequence>
-				<element ref="conf:Extensions" minOccurs="0"/>
-				<element ref="conf:SessionCache" minOccurs="0"/>
-				<element name="RequestMapper" type="conf:PluggableType"/>
-				<element name="Implementation" minOccurs="0">
-					<complexType>
-						<sequence>
-							<element ref="conf:ISAPI" minOccurs="0"/>
-							<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
-						</sequence>
-					</complexType>
-				</element>
-				<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
-			</sequence>
-			<attribute name="logger" type="anyURI"/>
-			<attribute name="unsetHeaderValue" type="string" use="optional"/>
+			<sequence>
+				<element ref="conf:Extensions" minOccurs="0"/>
+				<element ref="conf:ISAPI" minOccurs="0"/>
+				<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+			</sequence>
+			<attribute name="logger" type="anyURI"/>
+			<attribute name="unsetHeaderValue" type="string"/>
+			<attribute name="checkSpoofing" type="boolean"/>
+		    <attribute name="catchAll" type="boolean"/>
 			<anyAttribute namespace="##other" processContents="lax"/>
 		</complexType>
 	</element>
@@ -242,6 +243,7 @@
 			<element ref="conf:OR"/>
 			<element ref="conf:NOT"/>
 			<element ref="conf:Rule"/>
+		    <element ref="conf:RuleRegex"/>
 		</choice>
 	</complexType>
 	<complexType name="MultiOperatorType">
@@ -250,6 +252,7 @@
 			<element ref="conf:OR"/>
 			<element ref="conf:NOT"/>
 			<element ref="conf:Rule"/>
+		    <element ref="conf:RuleRegex"/>
 		</choice>
 	</complexType>
 	<element name="Rule">
@@ -257,10 +260,21 @@
 			<simpleContent>
 				<extension base="conf:listOfStrings">
 					<attribute name="require" type="conf:string" use="required"/>
+				    <attribute name="list" type="boolean"/>
 				</extension>
 			</simpleContent>
 		</complexType>
 	</element>
+    <element name="RuleRegex">
+        <complexType>
+            <simpleContent>
+                <extension base="conf:string">
+                    <attribute name="require" type="conf:string" use="required"/>
+                    <attribute name="ignoreCase" type="boolean"/>
+                </extension>
+            </simpleContent>
+        </complexType>
+    </element>
 	
 	<attributeGroup name="ContentSettings">
 		<attribute name="authType" type="conf:string"/>
@@ -268,10 +282,16 @@
 		<attribute name="requireSessionWith" type="conf:string"/>
 		<attribute name="exportAssertion" type="boolean"/>
 		<attribute name="redirectToSSL" type="unsignedInt"/>
+		<attribute name="entityID" type="anyURI"/>
 		<attribute name="isPassive" type="boolean"/>
 		<attribute name="forceAuthn" type="boolean"/>
 		<attribute name="authnContextClassRef" type="anyURI"/>
 		<attribute name="authnContextComparison" type="samlp:AuthnContextComparisonType"/>
+        <attribute name="redirectErrors" type="anyURI"/>
+		<attribute name="sessionError" type="anyURI"/>
+		<attribute name="metadataError" type="anyURI"/>
+		<attribute name="accessError" type="anyURI"/>
+		<attribute name="sslError" type="anyURI"/>
 		<anyAttribute namespace="##other" processContents="lax"/>
 	</attributeGroup>
 	<element name="AccessControlProvider" type="conf:PluggableType"/>
@@ -290,7 +310,10 @@
 					<element ref="conf:AccessControl"/>
 	            	<element ref="conf:AccessControlProvider"/>
 	            </choice>
-                <element ref="conf:Host" minOccurs="0" maxOccurs="unbounded"/>
+            	<choice minOccurs="0" maxOccurs="unbounded">
+					<element ref="conf:Host"/>
+            		<element ref="conf:HostRegex"/>
+            	</choice>
             </sequence>
             <attribute name="applicationId" type="conf:string" fixed="default"/>
          	<attributeGroup ref="conf:ContentSettings"/>
@@ -305,7 +328,11 @@
 					<element ref="conf:AccessControl"/>
 	            	<element ref="conf:AccessControlProvider"/>
 	            </choice>
-    			<element ref="conf:Path" minOccurs="0" maxOccurs="unbounded"/>
+    			<choice minOccurs="0" maxOccurs="unbounded">
+    				<element ref="conf:Path"/>
+    				<element ref="conf:PathRegex"/>
+    				<element ref="conf:Query"/>
+    			</choice>
     		</sequence>
     		<attribute name="scheme">
 			    <simpleType>
@@ -320,10 +347,31 @@
     		</attribute>
     		<attribute name="name" type="conf:string" use="required"/>
     		<attribute name="port" type="unsignedInt"/>
-    		<attribute name="applicationId" type="conf:string"/>
+			<attribute name="applicationId" type="conf:string"/>
            	<attributeGroup ref="conf:ContentSettings"/>
     	</complexType>
     </element>
+	
+	<element name="HostRegex">
+		<complexType>
+			<sequence>
+				<choice minOccurs="0">
+					<element ref="conf:htaccess"/>
+					<element ref="conf:AccessControl"/>
+					<element ref="conf:AccessControlProvider"/>
+				</choice>
+				<choice minOccurs="0" maxOccurs="unbounded">
+					<element ref="conf:Path"/>
+					<element ref="conf:PathRegex"/>
+					<element ref="conf:Query"/>
+				</choice>
+			</sequence>
+			<attribute name="regex" type="conf:string" use="required"/>
+			<attribute name="ignoreCase" type="boolean" default="true"/>
+			<attribute name="applicationId" type="conf:string"/>
+			<attributeGroup ref="conf:ContentSettings"/>
+		</complexType>
+	</element>
 
     <element name="Path">
         <complexType>
@@ -333,43 +381,80 @@
 					<element ref="conf:AccessControl"/>
 	            	<element ref="conf:AccessControlProvider"/>
 	            </choice>
-    			<element ref="conf:Path" minOccurs="0" maxOccurs="unbounded"/>
+    			<choice minOccurs="0" maxOccurs="unbounded">
+    				<element ref="conf:Path"/>
+    				<element ref="conf:PathRegex"/>
+    				<element ref="conf:Query"/>
+    			</choice>
     		</sequence>
-    		<attribute name="name" type="conf:string" use="required"/>
-    		<attribute name="applicationId" type="conf:string"/>
-           	<attributeGroup ref="conf:ContentSettings"/>
+			<attribute name="name" type="conf:string" use="required"/>
+			<attribute name="applicationId" type="conf:string"/>
+			<attributeGroup ref="conf:ContentSettings"/>
         </complexType>
     </element>
+
+	<element name="PathRegex">
+		<complexType>
+			<sequence>
+				<choice minOccurs="0">
+					<element ref="conf:htaccess"/>
+					<element ref="conf:AccessControl"/>
+					<element ref="conf:AccessControlProvider"/>
+				</choice>
+				<element ref="conf:Query" minOccurs="0" maxOccurs="unbounded"/>
+			</sequence>
+			<attribute name="regex" type="conf:string" use="required"/>
+			<attribute name="ignoreCase" type="boolean" default="true"/>
+			<attribute name="applicationId" type="conf:string"/>
+			<attributeGroup ref="conf:ContentSettings"/>
+		</complexType>
+	</element>
+	
+	<element name="Query">
+		<complexType>
+			<sequence>
+				<choice minOccurs="0">
+					<element ref="conf:htaccess"/>
+					<element ref="conf:AccessControl"/>
+					<element ref="conf:AccessControlProvider"/>
+				</choice>
+				<element ref="conf:Query" minOccurs="0" maxOccurs="unbounded"/>
+			</sequence>
+			<attribute name="name" type="conf:string" use="required"/>
+			<attribute name="regex" type="conf:string"/>
+			<attributeGroup ref="conf:ContentSettings"/>
+		</complexType>
+	</element>
 	
-	<element name="Applications">
+	<element name="ApplicationDefaults">
 		<annotation>
-			<documentation>Container for global settings and application-specific overrides</documentation>
+			<documentation>Container for default settings and application-specific overrides</documentation>
 		</annotation>
 		<complexType>
 			<sequence>
 				<element ref="conf:Sessions"/>
-				<element ref="conf:Errors"/>
-				<element ref="conf:DefaultRelyingParty"/>
-				<element ref="saml:Audience" minOccurs="0" maxOccurs="unbounded"/>
-                <element name="MetadataProvider" type="conf:PluggableType"/>
+				<element ref="conf:Errors" minOccurs="0"/>
+				<element ref="conf:RelyingParty" minOccurs="0" maxOccurs="unbounded"/>
+				<element ref="conf:Notify" minOccurs="0" maxOccurs="unbounded"/>
+				<element ref="saml:Audience" minOccurs="0" maxOccurs="unbounded"/>
+                <element name="MetadataProvider" type="conf:PluggableType"/>
 				<element name="TrustEngine" type="conf:PluggableType"/>
 				<element name="AttributeExtractor" type="conf:PluggableType" minOccurs="0"/>
 				<element name="AttributeResolver" type="conf:PluggableType" minOccurs="0"/>
 				<element name="AttributeFilter" type="conf:PluggableType" minOccurs="0"/>
 				<element name="CredentialResolver" type="conf:PluggableType" minOccurs="0"/>
-				<element ref="conf:Application" minOccurs="0" maxOccurs="unbounded"/>
+				<element ref="conf:ApplicationOverride" minOccurs="0" maxOccurs="unbounded"/>
 			</sequence>
 			<attribute name="id" type="conf:string" fixed="default"/>
 			<attribute name="entityID" type="anyURI" use="required"/>
 			<attribute name="policyId" type="conf:string" use="required"/>
-			<attribute name="homeURL" type="anyURI" default="/"/>
-			<attribute name="REMOTE_USER" type="conf:listOfStrings"/>
-			<attribute name="unsetHeaders" type="conf:listOfStrings"/>
-	        <anyAttribute namespace="##other" processContents="lax"/>
+			<attributeGroup ref="conf:ApplicationGroup"/>
+		    <attributeGroup ref="conf:RelyingPartyGroup"/>
+			<anyAttribute namespace="##other" processContents="lax"/>
 		</complexType>
 	</element>
 	
-	<element name="Application">
+	<element name="ApplicationOverride">
 		<annotation>
 			<documentation>Container for application-specific overrides</documentation>
 		</annotation>
@@ -377,7 +462,8 @@
 			<sequence>
 				<element ref="conf:Sessions" minOccurs="0"/>
 				<element ref="conf:Errors" minOccurs="0"/>
-				<element ref="conf:DefaultRelyingParty" minOccurs="0"/>
+				<element ref="conf:RelyingParty" minOccurs="0" maxOccurs="unbounded"/>
+				<element ref="conf:Notify" minOccurs="0" maxOccurs="unbounded"/>
 				<element ref="saml:Audience" minOccurs="0" maxOccurs="unbounded"/>
 				<element name="MetadataProvider" type="conf:PluggableType" minOccurs="0"/>
 				<element name="TrustEngine" type="conf:PluggableType" minOccurs="0"/>
@@ -389,24 +475,52 @@
 			<attribute name="id" type="conf:string" use="required"/>
 			<attribute name="entityID" type="anyURI"/>
 			<attribute name="policyId" type="conf:string"/>
-			<attribute name="homeURL" type="anyURI" default="/"/>
-			<attribute name="REMOTE_USER" type="conf:listOfStrings"/>
-			<attribute name="unsetHeaders" type="conf:listOfStrings"/>
+			<attributeGroup ref="conf:ApplicationGroup"/>
+		    <attributeGroup ref="conf:RelyingPartyGroup"/>
 			<anyAttribute namespace="##other" processContents="lax"/>
 		</complexType>
 	</element>
 
+	<attributeGroup name="ApplicationGroup">
+		<attribute name="homeURL" type="anyURI" default="/"/>
+		<attribute name="REMOTE_USER" type="conf:listOfStrings"/>
+		<attribute name="unsetHeaders" type="conf:listOfStrings"/>
+		<attribute name="metadataAttributePrefix" type="conf:string"/>
+	    <attribute name="attributePrefix" type="conf:string"/>
+	</attributeGroup>
+
+    <attributeGroup name="RelyingPartyGroup">
+        <attribute name="authType" type="conf:string"/>
+        <attribute name="authUsername" type="conf:string"/>
+        <attribute name="authPassword" type="conf:string"/>
+        <attribute name="signing" type="conf:bindingBoolean"/>
+        <attribute name="signingAlg" type="anyURI"/>
+        <attribute name="digestAlg" type="anyURI"/>
+        <attribute name="encryption" type="conf:bindingBoolean"/>
+        <attribute name="encryptionAlg" type="anyURI"/>
+        <attribute name="keyName" type="conf:string"/>
+        <attribute name="artifactEndpointIndex" type="unsignedShort"/>
+        <attribute name="chunkedEncoding" type="boolean"/>
+        <attribute name="connectTimeout" type="unsignedShort"/>
+        <attribute name="timeout" type="unsignedShort"/>
+        <attribute name="requireConfidentiality" type="boolean"/>
+        <attribute name="requireTransportAuth" type="boolean"/>
+        <attribute name="signedAssertions" type="boolean"/>
+    </attributeGroup>
+    
 	<element name="Sessions">
 		<annotation>
 			<documentation>Container for specifying protocol handlers and session policy</documentation>
 		</annotation>
 		<complexType>
-			<choice maxOccurs="unbounded">
+			<choice minOccurs="0" maxOccurs="unbounded">
 				<element ref="conf:SessionInitiator"/>
+				<element ref="conf:LogoutInitiator"/>
 				<element ref="md:AssertionConsumerService"/>
+				<element ref="md:ArtifactResolutionService"/>
 				<element ref="md:SingleLogoutService"/>
 				<element ref="md:ManageNameIDService"/>
-				<element name="Handler">
+				<element name="Handler">
 					<complexType>
 						<complexContent>
 							<restriction base="conf:PluggableType">
@@ -414,6 +528,8 @@
 									<any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 								</sequence>
 								<attribute name="Location" type="anyURI" use="required"/>
+							    <attribute name="acl" type="conf:listOfStrings"/>
+								<anyAttribute namespace="##any" processContents="lax"/>
 							</restriction>
 						</complexContent>
 					</complexType>
@@ -421,23 +537,25 @@
 			</choice>
 			<attribute name="handlerURL" type="anyURI"/>
 			<attribute name="handlerSSL" type="boolean" default="true"/>
-			<attribute name="redirectErrors" type="anyURI"/>
+			<attribute name="exportLocation" type="conf:string"/>
+			<attribute name="exportACL" type="conf:listOfStrings" default="127.0.0.1"/>
 			<attribute name="cookieName" type="conf:string"/>
 			<attribute name="cookieProps" type="conf:string"/>
-			<attribute name="idpHistory" type="boolean" default="true"/>
+			<attribute name="idpHistory" type="boolean" default="false"/>
 			<attribute name="idpHistoryDays" type="unsignedInt"/>
 			<attribute name="lifetime" type="unsignedInt" default="28800"/>
 			<attribute name="timeout" type="unsignedInt" default="3600"/>
+		    <attribute name="maxTimeSinceAuthn" type="unsignedInt"/>
 			<attribute name="checkAddress" type="boolean" default="true"/>
 			<attribute name="consistentAddress" type="boolean" default="true"/>
 			<anyAttribute namespace="##other" processContents="lax"/>
 		</complexType>
 	</element>
-	
-	<attribute name="policyId" type="conf:string">
-		<annotation>
-			<documentation>Used to reference Policy elements from profile endpoints.</documentation>
-		</annotation>
+
+	<attribute name="policyId" type="conf:string">
+		<annotation>
+			<documentation>Used to reference Policy elements from profile endpoints.</documentation>
+		</annotation>
 	</attribute>
 
 	<element name="SessionInitiator">
@@ -459,7 +577,34 @@
 					<attribute name="URL" type="anyURI"/>
 					<attribute name="outgoingBindings" type="conf:listOfURIs"/>
 					<attribute name="template" type="anyURI"/>
+					<attribute name="postArtifact" type="boolean"/>
 					<attribute name="acsByIndex" type="boolean"/>
+					<attribute name="defaultACSIndex" type="unsignedShort"/>
+                    <attribute name="isPassive" type="boolean"/>
+                    <attribute name="forceAuthn" type="boolean"/>
+                    <attribute name="authnContextClassRef" type="anyURI"/>
+                    <attribute name="authnContextComparison" type="samlp:AuthnContextComparisonType"/>
+					<anyAttribute namespace="##any" processContents="lax"/>
+				</restriction>
+			</complexContent>
+		</complexType>
+	</element>
+
+	<element name="LogoutInitiator">
+		<annotation>
+			<documentation>Used to specify handlers that can issue LogoutRequests</documentation>
+		</annotation>
+		<complexType>
+			<complexContent>
+				<restriction base="conf:PluggableType">
+					<sequence>
+						<any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+					</sequence>
+					<attribute name="Location" type="anyURI"/>
+				    <attribute name="relayState" type="conf:string"/>
+					<attribute name="outgoingBindings" type="conf:listOfURIs"/>
+					<attribute name="template" type="anyURI"/>
+					<attribute name="postArtifact" type="boolean"/>
 					<anyAttribute namespace="##any" processContents="lax"/>
 				</restriction>
 			</complexContent>
@@ -474,11 +619,13 @@
 			<sequence>
 				<any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 			</sequence>
-			<attribute name="session" type="anyURI" use="required"/>
+            <attribute name="redirectErrors" type="anyURI"/>
+			<attribute name="session" type="anyURI"/>
 			<attribute name="metadata" type="anyURI"/>
-			<attribute name="rm" type="anyURI"/>
 			<attribute name="access" type="anyURI"/>
 			<attribute name="ssl" type="anyURI"/>
+            <attribute name="localLogout" type="anyURI"/>
+            <attribute name="globalLogout" type="anyURI"/>
 			<attribute name="supportContact" type="conf:string"/>
 			<attribute name="logoLocation" type="anyURI"/>
 			<attribute name="styleSheet" type="anyURI"/>
@@ -486,39 +633,39 @@
 		</complexType>
 	</element>
 
-	<element name="DefaultRelyingParty">
+    <element name="RelyingParty">
+        <annotation>
+            <documentation>Container for specifying settings to use with particular peers</documentation>
+        </annotation>
+        <complexType>
+            <sequence/>
+            <attribute name="Name" type="conf:string" use="required"/>
+            <attributeGroup ref="conf:RelyingPartyGroup"/>
+            <attribute name="entityID" type="anyURI"/>
+            <anyAttribute namespace="##other" processContents="lax"/>
+        </complexType>
+    </element>
+    
+	<element name="Notify">
 		<annotation>
-			<documentation>Container for specifying security methods to use with particular peers</documentation>
+			<documentation>Used to specify locations to receive application notifications</documentation>
 		</annotation>
 		<complexType>
-			<sequence>
-				<element name="RelyingParty" minOccurs="0" maxOccurs="unbounded">
-					<complexType>
-						<sequence/>
-						<attribute name="Name" type="conf:string" use="required"/>
-						<attributeGroup ref="conf:RelyingPartyGroup"/>
-						<anyAttribute namespace="##other" processContents="lax"/>
-					</complexType>
-				</element>
-			</sequence>
-			<attributeGroup ref="conf:RelyingPartyGroup"/>
-	        <anyAttribute namespace="##other" processContents="lax"/>
+			<sequence/>
+			<attribute name="Channel" use="required">
+				<simpleType>
+					<restriction base="string">
+						<enumeration value="front"/>
+						<enumeration value="back"/>
+					</restriction>
+				</simpleType>
+			</attribute>
+			<attribute name="Location" type="anyURI" use="required"/>
+			<anyAttribute namespace="##any" processContents="lax"/>
 		</complexType>
 	</element>
 	
-	<attributeGroup name="RelyingPartyGroup">
-		<attribute name="authType" type="conf:string"/>
-		<attribute name="authUsername" type="conf:string"/>
-		<attribute name="authPassword" type="conf:string"/>
-		<attribute name="signRequests" type="boolean"/>
-		<attribute name="signatureAlg" type="anyURI"/>
-		<attribute name="digestAlg" type="anyURI"/>
-		<attribute name="encryptRequests" type="boolean"/>
-		<attribute name="encryptionAlg" type="anyURI"/>
-		<attribute name="keyName" type="conf:string"/>
-	</attributeGroup>
-	
-	<element name="SecurityPolicies">
+	<element name="SecurityPolicies">
 		<annotation>
 			<documentation>Container for specifying sets of policy rules to apply to incoming messages</documentation>
 		</annotation>
@@ -529,22 +676,31 @@
 						<documentation>Specifies a set of SecurityPolicyRule plugins</documentation>
 					</annotation>
 					<complexType>
-						<sequence>
-							<element name="Rule" type="conf:PluggableType" minOccurs="1" maxOccurs="unbounded"/>
-						</sequence>
+						<sequence>
+							<element ref="conf:TransportOption" minOccurs="0" maxOccurs="unbounded"/>
+							<element name="Rule" type="conf:PluggableType" minOccurs="1" maxOccurs="unbounded"/>
+						</sequence>
 						<attribute name="id" type="conf:string" use="required"/>
 						<attribute name="validate" type="boolean" default="false"/>
-						<attribute name="signedAssertions" type="boolean" default="false"/>
-						<attribute name="requireConfidentiality" type="boolean" default="true"/>
-						<attribute name="requireTransportAuth" type="boolean" default="true"/>
-						<attribute name="chunkedEncoding" type="boolean" default="true"/>
-						<attribute name="connectTimeout" type="unsignedShort" default="15"/>
-						<attribute name="timeout" type="unsignedShort" default="30"/>
 						<anyAttribute namespace="##any" processContents="lax"/>
 					</complexType>
 				</element>
 			</sequence>
 		</complexType>
 	</element>
+
+	<element name="TransportOption">
+		<annotation>
+			<documentation>Implementation-specific option to pass to SOAPTransport provider.</documentation>
+		</annotation>
+		<complexType>
+			<simpleContent>
+				<extension base="anySimpleType">
+					<attribute name="provider" type="conf:string" use="required"/>
+					<attribute name="option" type="conf:string" use="required"/>
+				</extension>
+			</simpleContent>
+		</complexType>
+	</element>
 	
 </schema>