schemas/saml-schema-protocol-2.0.xsd

   1 <?xml version="1.0" encoding="UTF-8"?>
   2 <schema
   3     targetNamespace="urn:oasis:names:tc:SAML:2.0:protocol"
   4     xmlns="http://www.w3.org/2001/XMLSchema"
   5     xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
   6     xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
   7     xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
   8     elementFormDefault="unqualified"
   9     attributeFormDefault="unqualified"
  10     blockDefault="substitution"
  11     version="2.0">
  12     <import namespace="urn:oasis:names:tc:SAML:2.0:assertion"
  13         schemaLocation="saml-schema-assertion-2.0.xsd"/>
  14     <import namespace="http://www.w3.org/2000/09/xmldsig#"
  15         schemaLocation="http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd"/>
  16     <annotation>
  17         <documentation>
  18             Document identifier: saml-schema-protocol-2.0
  19             Location: http://docs.oasis-open.org/security/saml/v2.0/
  20             Revision history:
  21             V1.0 (November, 2002):
  22               Initial Standard Schema.
  23             V1.1 (September, 2003):
  24               Updates within the same V1.0 namespace.
  25             V2.0 (March, 2005):
  26               New protocol schema based in a SAML V2.0 namespace.
  27      </documentation>
  28     </annotation>
  29     <complexType name="RequestAbstractType" abstract="true">
  30         <sequence>
  31             <element ref="saml:Issuer" minOccurs="0"/>
  32             <element ref="ds:Signature" minOccurs="0"/>
  33             <element ref="samlp:Extensions" minOccurs="0"/>
  34         </sequence>
  35         <attribute name="ID" type="ID" use="required"/>
  36         <attribute name="Version" type="string" use="required"/>
  37         <attribute name="IssueInstant" type="dateTime" use="required"/>
  38         <attribute name="Destination" type="anyURI" use="optional"/>
  39         <attribute name="Consent" type="anyURI" use="optional"/>
  40     </complexType>
  41     <element name="Extensions" type="samlp:ExtensionsType"/>
  42     <complexType name="ExtensionsType">
  43         <sequence>
  44             <any namespace="##other" processContents="lax" maxOccurs="unbounded"/>
  45         </sequence>
  46     </complexType>
  47     <complexType name="StatusResponseType">
  48         <sequence>
  49             <element ref="saml:Issuer" minOccurs="0"/>
  50             <element ref="ds:Signature" minOccurs="0"/>
  51             <element ref="samlp:Extensions" minOccurs="0"/>
  52             <element ref="samlp:Status"/>
  53         </sequence>
  54         <attribute name="ID" type="ID" use="required"/>
  55         <attribute name="InResponseTo" type="NCName" use="optional"/>
  56         <attribute name="Version" type="string" use="required"/>
  57         <attribute name="IssueInstant" type="dateTime" use="required"/>
  58         <attribute name="Destination" type="anyURI" use="optional"/>
  59         <attribute name="Consent" type="anyURI" use="optional"/>
  60     </complexType>
  61     <element name="Status" type="samlp:StatusType"/>
  62     <complexType name="StatusType">
  63         <sequence>
  64             <element ref="samlp:StatusCode"/>
  65             <element ref="samlp:StatusMessage" minOccurs="0"/>
  66             <element ref="samlp:StatusDetail" minOccurs="0"/>
  67         </sequence>
  68     </complexType>
  69     <element name="StatusCode" type="samlp:StatusCodeType"/>
  70     <complexType name="StatusCodeType">
  71         <sequence>
  72             <element ref="samlp:StatusCode" minOccurs="0"/>
  73         </sequence>
  74         <attribute name="Value" type="anyURI" use="required"/>
  75     </complexType>
  76     <element name="StatusMessage" type="string"/>
  77     <element name="StatusDetail" type="samlp:StatusDetailType"/>
  78     <complexType name="StatusDetailType">
  79         <sequence>
  80             <any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
  81         </sequence>
  82     </complexType>
  83     <element name="AssertionIDRequest" type="samlp:AssertionIDRequestType"/>
  84     <complexType name="AssertionIDRequestType">
  85         <complexContent>
  86             <extension base="samlp:RequestAbstractType">
  87                 <sequence>
  88                     <element ref="saml:AssertionIDRef" maxOccurs="unbounded"/>
  89                 </sequence>
  90             </extension>
  91         </complexContent>
  92     </complexType>
  93     <element name="SubjectQuery" type="samlp:SubjectQueryAbstractType"/>
  94     <complexType name="SubjectQueryAbstractType" abstract="true">
  95         <complexContent>
  96             <extension base="samlp:RequestAbstractType">
  97                 <sequence>
  98                     <element ref="saml:Subject"/>
  99                 </sequence>
 100             </extension>
 101         </complexContent>
 102     </complexType>
 103     <element name="AuthnQuery" type="samlp:AuthnQueryType"/>
 104     <complexType name="AuthnQueryType">
 105         <complexContent>
 106             <extension base="samlp:SubjectQueryAbstractType">
 107                 <sequence>
 108                     <element ref="samlp:RequestedAuthnContext" minOccurs="0"/>
 109                 </sequence>
 110                 <attribute name="SessionIndex" type="string" use="optional"/>
 111             </extension>
 112         </complexContent>
 113     </complexType>
 114     <element name="RequestedAuthnContext" type="samlp:RequestedAuthnContextType"/>
 115     <complexType name="RequestedAuthnContextType">
 116         <choice>
 117             <element ref="saml:AuthnContextClassRef" maxOccurs="unbounded"/>
 118             <element ref="saml:AuthnContextDeclRef" maxOccurs="unbounded"/>
 119         </choice>
 120         <attribute name="Comparison" type="samlp:AuthnContextComparisonType" use="optional"/>
 121     </complexType>
 122     <simpleType name="AuthnContextComparisonType">
 123         <restriction base="string">
 124             <enumeration value="exact"/>
 125             <enumeration value="minimum"/>
 126             <enumeration value="maximum"/>
 127             <enumeration value="better"/>
 128         </restriction>
 129     </simpleType>
 130     <element name="AttributeQuery" type="samlp:AttributeQueryType"/>
 131     <complexType name="AttributeQueryType">
 132         <complexContent>
 133             <extension base="samlp:SubjectQueryAbstractType">
 134                 <sequence>
 135                     <element ref="saml:Attribute" minOccurs="0" maxOccurs="unbounded"/>
 136                 </sequence>
 137             </extension>
 138         </complexContent>
 139     </complexType>
 140     <element name="AuthzDecisionQuery" type="samlp:AuthzDecisionQueryType"/>
 141     <complexType name="AuthzDecisionQueryType">
 142         <complexContent>
 143             <extension base="samlp:SubjectQueryAbstractType">
 144                 <sequence>
 145                     <element ref="saml:Action" maxOccurs="unbounded"/>
 146                     <element ref="saml:Evidence" minOccurs="0"/>
 147                 </sequence>
 148                 <attribute name="Resource" type="anyURI" use="required"/>
 149             </extension>
 150         </complexContent>
 151     </complexType>
 152     <element name="AuthnRequest" type="samlp:AuthnRequestType"/>
 153     <complexType name="AuthnRequestType">
 154         <complexContent>
 155             <extension base="samlp:RequestAbstractType">
 156                 <sequence>
 157                     <element ref="saml:Subject" minOccurs="0"/>
 158                     <element ref="samlp:NameIDPolicy" minOccurs="0"/>
 159                     <element ref="saml:Conditions" minOccurs="0"/>
 160                     <element ref="samlp:RequestedAuthnContext" minOccurs="0"/>
 161                     <element ref="samlp:Scoping" minOccurs="0"/>
 162                 </sequence>
 163                 <attribute name="ForceAuthn" type="boolean" use="optional"/>
 164                 <attribute name="IsPassive" type="boolean" use="optional"/>
 165                 <attribute name="ProtocolBinding" type="anyURI" use="optional"/>
 166                 <attribute name="AssertionConsumerServiceIndex" type="unsignedShort" use="optional"/>
 167                 <attribute name="AssertionConsumerServiceURL" type="anyURI" use="optional"/>
 168                 <attribute name="AttributeConsumingServiceIndex" type="unsignedShort" use="optional"/>
 169                 <attribute name="ProviderName" type="string" use="optional"/>
 170             </extension>
 171         </complexContent>
 172     </complexType>
 173     <element name="NameIDPolicy" type="samlp:NameIDPolicyType"/>
 174     <complexType name="NameIDPolicyType">
 175         <attribute name="Format" type="anyURI" use="optional"/>
 176         <attribute name="SPNameQualifier" type="string" use="optional"/>
 177         <attribute name="AllowCreate" type="boolean" use="optional"/>
 178     </complexType>
 179     <element name="Scoping" type="samlp:ScopingType"/>
 180     <complexType name="ScopingType">
 181         <sequence>
 182             <element ref="samlp:IDPList" minOccurs="0"/>
 183             <element ref="samlp:RequesterID" minOccurs="0" maxOccurs="unbounded"/>
 184         </sequence>
 185         <attribute name="ProxyCount" type="nonNegativeInteger" use="optional"/>
 186     </complexType>
 187     <element name="RequesterID" type="anyURI"/>
 188     <element name="IDPList" type="samlp:IDPListType"/>
 189     <complexType name="IDPListType">
 190         <sequence>
 191             <element ref="samlp:IDPEntry" maxOccurs="unbounded"/>
 192             <element ref="samlp:GetComplete" minOccurs="0"/>
 193         </sequence>
 194     </complexType>
 195     <element name="IDPEntry" type="samlp:IDPEntryType"/>
 196     <complexType name="IDPEntryType">
 197         <attribute name="ProviderID" type="anyURI" use="required"/>
 198         <attribute name="Name" type="string" use="optional"/>
 199         <attribute name="Loc" type="anyURI" use="optional"/>
 200     </complexType>
 201     <element name="GetComplete" type="anyURI"/>
 202     <element name="Response" type="samlp:ResponseType"/>
 203     <complexType name="ResponseType">
 204         <complexContent>
 205             <extension base="samlp:StatusResponseType">
 206                 <choice minOccurs="0" maxOccurs="unbounded">
 207                     <element ref="saml:Assertion"/>
 208                     <element ref="saml:EncryptedAssertion"/>
 209                 </choice>
 210             </extension>
 211         </complexContent>
 212     </complexType>
 213     <element name="ArtifactResolve" type="samlp:ArtifactResolveType"/>
 214     <complexType name="ArtifactResolveType">
 215         <complexContent>
 216             <extension base="samlp:RequestAbstractType">
 217                 <sequence>
 218                     <element ref="samlp:Artifact"/>
 219                 </sequence>
 220             </extension>
 221         </complexContent>
 222     </complexType>
 223     <element name="Artifact" type="string"/>
 224     <element name="ArtifactResponse" type="samlp:ArtifactResponseType"/>
 225     <complexType name="ArtifactResponseType">
 226         <complexContent>
 227             <extension base="samlp:StatusResponseType">
 228                 <sequence>
 229                     <any namespace="##any" processContents="lax" minOccurs="0"/>
 230                 </sequence>
 231             </extension>
 232         </complexContent>
 233     </complexType>
 234     <element name="ManageNameIDRequest" type="samlp:ManageNameIDRequestType"/>
 235     <complexType name="ManageNameIDRequestType">
 236         <complexContent>
 237             <extension base="samlp:RequestAbstractType">
 238                 <sequence>
 239                     <choice>
 240                         <element ref="saml:NameID"/>
 241                         <element ref="saml:EncryptedID"/>
 242                     </choice>
 243                     <choice>
 244                         <element ref="samlp:NewID"/>
 245                         <element ref="samlp:NewEncryptedID"/>
 246                         <element ref="samlp:Terminate"/>
 247                     </choice>
 248                 </sequence>
 249             </extension>
 250         </complexContent>
 251     </complexType>
 252     <element name="NewID" type="string"/>
 253     <element name="NewEncryptedID" type="saml:EncryptedElementType"/>
 254     <element name="Terminate" type="samlp:TerminateType"/>
 255     <complexType name="TerminateType"/>
 256     <element name="ManageNameIDResponse" type="samlp:StatusResponseType"/>
 257     <element name="LogoutRequest" type="samlp:LogoutRequestType"/>
 258     <complexType name="LogoutRequestType">
 259         <complexContent>
 260             <extension base="samlp:RequestAbstractType">
 261                 <sequence>
 262                     <choice>
 263                         <element ref="saml:BaseID"/>
 264                         <element ref="saml:NameID"/>
 265                         <element ref="saml:EncryptedID"/>
 266                     </choice>
 267                     <element ref="samlp:SessionIndex" minOccurs="0" maxOccurs="unbounded"/>
 268                 </sequence>
 269                 <attribute name="Reason" type="string" use="optional"/>
 270                 <attribute name="NotOnOrAfter" type="dateTime" use="optional"/>
 271             </extension>
 272         </complexContent>
 273     </complexType>
 274     <element name="SessionIndex" type="string"/>
 275     <element name="LogoutResponse" type="samlp:StatusResponseType"/>
 276     <element name="NameIDMappingRequest" type="samlp:NameIDMappingRequestType"/>
 277     <complexType name="NameIDMappingRequestType">
 278         <complexContent>
 279             <extension base="samlp:RequestAbstractType">
 280                 <sequence>
 281                     <choice>
 282                         <element ref="saml:BaseID"/>
 283                         <element ref="saml:NameID"/>
 284                         <element ref="saml:EncryptedID"/>
 285                     </choice>
 286                     <element ref="samlp:NameIDPolicy"/>
 287                 </sequence>
 288             </extension>
 289         </complexContent>
 290     </complexType>
 291     <element name="NameIDMappingResponse" type="samlp:NameIDMappingResponseType"/>
 292     <complexType name="NameIDMappingResponseType">
 293         <complexContent>
 294             <extension base="samlp:StatusResponseType">
 295                 <choice>
 296                     <element ref="saml:NameID"/>
 297                     <element ref="saml:EncryptedID"/>
 298                 </choice>
 299             </extension>
 300         </complexContent>
 301     </complexType>
 302 </schema>