<?xml version="1.0" encoding="US-ASCII"?>\r
<schema targetNamespace="urn:mace:shibboleth:2.0:native:sp:config"\r
xmlns="http://www.w3.org/2001/XMLSchema"\r
- xmlns:conf="urn:mace:shibboleth:sp:config:2.0"\r
+ xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"\r
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"\r
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"\r
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"\r
\r
<annotation>\r
<documentation>\r
- 2.0 schema for XML-based configuration of Shibboleth Native SP instances.\r
- First appearing in Shibboleth 2.0 release.\r
- </documentation>\r
- </annotation>\r
+ 2.0 schema for XML-based configuration of Shibboleth Native SP instances.\r
+ First appearing in Shibboleth 2.0 release.\r
+ </documentation>\r
+ </annotation>\r
\r
- <simpleType name="string">
- <restriction base="string">
+ <simpleType name="string">\r
+ <restriction base="string">\r
<minLength value="1"/>\r
- </restriction>
+ </restriction>\r
</simpleType>\r
\r
<simpleType name="listOfStrings">\r
<simpleType name="listOfURIs">\r
<list itemType="anyURI"/>\r
</simpleType>\r
+\r
+ <simpleType name="bindingBoolean">\r
+ <restriction base="string">\r
+ <enumeration value="true"/>\r
+ <enumeration value="false"/>\r
+ <enumeration value="front"/>\r
+ <enumeration value="back"/>\r
+ </restriction>\r
+ </simpleType>\r
\r
<complexType name="PluggableType">\r
<sequence>\r
</complexType>\r
\r
<element name="SPConfig">\r
- <complexType>
- <annotation>
- <documentation>Root of configuration</documentation>
- </annotation>
- <sequence>
- <element ref="conf:Extensions" minOccurs="0"/>
- <element ref="conf:OutOfProcess"/>
- <element ref="conf:InProcess"/>
- <element ref="conf:Applications"/>
- <element ref="conf:SecurityPolicies"/>
- </sequence>
- <attribute name="logger" type="anyURI"/>
- <attribute name="clockSkew" type="unsignedInt"/>
- <anyAttribute namespace="##other" processContents="lax"/>
+ <complexType>\r
+ <annotation>\r
+ <documentation>Root of configuration</documentation>\r
+ </annotation>\r
+ <sequence>\r
+ <element ref="conf:Extensions" minOccurs="0"/>\r
+ <element ref="conf:OutOfProcess"/>\r
+ <element ref="conf:InProcess"/>\r
+ <element ref="conf:Applications"/>\r
+ <element ref="conf:SecurityPolicies"/>\r
+ </sequence>\r
+ <attribute name="logger" type="anyURI"/>\r
+ <attribute name="clockSkew" type="unsignedInt"/>\r
+ <anyAttribute namespace="##other" processContents="lax"/>\r
</complexType>\r
</element>\r
\r
<sequence>\r
<element name="Library" minOccurs="0" maxOccurs="unbounded">\r
<complexType>\r
- <complexContent>\r
- <restriction base="conf:PluggableType">\r
- <sequence>\r
- <any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>\r
- </sequence>\r
- <attribute name="path" type="anyURI" use="required"/>\r
- <attribute name="fatal" type="boolean" default="true"/>\r
- </restriction>\r
- </complexContent>\r
+ <sequence>\r
+ <any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>\r
+ </sequence>\r
+ <attribute name="path" type="anyURI" use="required"/>\r
+ <attribute name="fatal" type="boolean" default="true"/>\r
+ <anyAttribute namespace="##any" processContents="lax"/>\r
</complexType>\r
</element>\r
<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>\r
</complexType>\r
</element>\r
\r
- <element name="ReplayCache">
+ <element name="ReplayCache">\r
<annotation>\r
<documentation>Ties ReplayCache to a custom StorageService</documentation>\r
</annotation>\r
<complexType>\r
- <sequence/>
+ <sequence/>\r
<attribute name="StorageService" type="IDREF" use="required"/>\r
</complexType>\r
- </element>
+ </element>\r
\r
- <element name="ArtifactMap">
+ <element name="ArtifactMap">\r
<annotation>\r
<documentation>Customizes an ArtifactMap</documentation>\r
</annotation>\r
<complexType>\r
- <sequence/>
- <attribute name="StorageService" type="IDREF"/>
- <attribute name="context" type="conf:string"/>
+ <sequence/>\r
+ <attribute name="StorageService" type="IDREF"/>\r
+ <attribute name="context" type="conf:string"/>\r
<attribute name="artifactTTL" type="unsignedInt" default="180"/>\r
- </complexType>
+ </complexType>\r
</element>\r
\r
<element name="OutOfProcess">\r
<documentation>Container for shibd out-of-process configuration</documentation>\r
</annotation>\r
<complexType>\r
- <sequence>
- <element ref="conf:Extensions" minOccurs="0"/>
- <choice>
- <element name="UnixListener">
- <complexType>
- <attribute name="address" type="conf:string" use="required"/>
- </complexType>
- </element>
- <element name="TCPListener">
- <complexType>
- <attribute name="address" type="conf:string" use="required"/>
- <attribute name="port" type="unsignedInt" use="required"/>
- <attribute name="acl" type="conf:listOfStrings" default="127.0.0.1"/>
- </complexType>
- </element>
- <element name="Listener" type="conf:PluggableType"/>
- </choice>
- <element ref="conf:StorageService" minOccurs="0" maxOccurs="unbounded"/>
- <element ref="conf:SessionCache" minOccurs="0"/>
+ <sequence>\r
+ <element ref="conf:Extensions" minOccurs="0"/>\r
+ <choice>\r
+ <element name="UnixListener">\r
+ <complexType>\r
+ <attribute name="address" type="conf:string" use="required"/>\r
+ </complexType>\r
+ </element>\r
+ <element name="TCPListener">\r
+ <complexType>\r
+ <attribute name="address" type="conf:string" use="required"/>\r
+ <attribute name="port" type="unsignedInt" use="required"/>\r
+ <attribute name="acl" type="conf:listOfStrings" default="127.0.0.1"/>\r
+ </complexType>\r
+ </element>\r
+ <element name="Listener" type="conf:PluggableType"/>\r
+ </choice>\r
+ <element ref="conf:StorageService" minOccurs="0" maxOccurs="unbounded"/>\r
+ <element ref="conf:SessionCache" minOccurs="0"/>\r
<element ref="conf:ReplayCache" minOccurs="0"/>\r
- <element ref="conf:ArtifactMap" minOccurs="0"/>
- <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
- </sequence>
- <attribute name="logger" type="anyURI"/>
+ <element ref="conf:ArtifactMap" minOccurs="0"/>\r
+ <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>\r
+ </sequence>\r
+ <attribute name="logger" type="anyURI"/>\r
<anyAttribute namespace="##other" processContents="lax"/>\r
</complexType>\r
</element>\r
</documentation>\r
</annotation>\r
<complexType>\r
- <sequence>
- <element ref="conf:Extensions" minOccurs="0"/>
+ <sequence>\r
+ <element ref="conf:Extensions" minOccurs="0"/>\r
<element ref="conf:SessionCache" minOccurs="0"/>\r
- <element name="RequestMapper" type="conf:PluggableType"/>
- <element name="Implementation" minOccurs="0">
- <complexType>
- <sequence>
- <element ref="conf:ISAPI" minOccurs="0"/>
- <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
- </sequence>
- </complexType>
- </element>
- <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
- </sequence>
- <attribute name="logger" type="anyURI"/>
- <attribute name="unsetHeaderValue" type="string" use="optional"/>\r
+ <element name="RequestMapper" type="conf:PluggableType"/>\r
+ <element name="Implementation" minOccurs="0">\r
+ <complexType>\r
+ <sequence>\r
+ <element ref="conf:ISAPI" minOccurs="0"/>\r
+ <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>\r
+ </sequence>\r
+ </complexType>\r
+ </element>\r
+ <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>\r
+ </sequence>\r
+ <attribute name="logger" type="anyURI"/>\r
+ <attribute name="unsetHeaderValue" type="string"/>\r
+ <attribute name="checkSpoofing" type="boolean"/>\r
<anyAttribute namespace="##other" processContents="lax"/>\r
</complexType>\r
</element>\r
<element ref="conf:Sessions"/>\r
<element ref="conf:Errors"/>\r
<element ref="conf:DefaultRelyingParty"/>\r
- <element ref="saml:Audience" minOccurs="0" maxOccurs="unbounded"/>
- <element name="MetadataProvider" type="conf:PluggableType"/>
+ <element ref="saml:Audience" minOccurs="0" maxOccurs="unbounded"/>\r
+ <element name="MetadataProvider" type="conf:PluggableType"/>\r
<element name="TrustEngine" type="conf:PluggableType"/>\r
<element name="AttributeExtractor" type="conf:PluggableType" minOccurs="0"/>\r
<element name="AttributeResolver" type="conf:PluggableType" minOccurs="0"/>\r
<element ref="conf:Sessions" minOccurs="0"/>\r
<element ref="conf:Errors" minOccurs="0"/>\r
<element ref="conf:DefaultRelyingParty" minOccurs="0"/>\r
+ <element ref="conf:NotifyOnLogout" minOccurs="0" maxOccurs="unbounded"/>\r
<element ref="saml:Audience" minOccurs="0" maxOccurs="unbounded"/>\r
<element name="MetadataProvider" type="conf:PluggableType" minOccurs="0"/>\r
<element name="TrustEngine" type="conf:PluggableType" minOccurs="0"/>\r
<element ref="md:ArtifactResolutionService"/>\r
<element ref="md:SingleLogoutService"/>\r
<element ref="md:ManageNameIDService"/>\r
- <element name="Handler">
+ <element name="Handler">\r
<complexType>\r
<complexContent>\r
<restriction base="conf:PluggableType">\r
</choice>\r
<attribute name="handlerURL" type="anyURI"/>\r
<attribute name="handlerSSL" type="boolean" default="true"/>\r
+ <attribute name="exportLocation" type="conf:string"/>\r
+ <attribute name="exportACL" type="conf:listOfStrings" default="127.0.0.1"/>\r
<attribute name="redirectErrors" type="anyURI"/>\r
<attribute name="cookieName" type="conf:string"/>\r
<attribute name="cookieProps" type="conf:string"/>\r
</complexType>\r
</element>\r
\r
- <attribute name="policyId" type="conf:string">
- <annotation>
- <documentation>Used to reference Policy elements from profile endpoints.</documentation>
- </annotation>
+ <attribute name="policyId" type="conf:string">\r
+ <annotation>\r
+ <documentation>Used to reference Policy elements from profile endpoints.</documentation>\r
+ </annotation>\r
</attribute>\r
\r
<element name="SessionInitiator">\r
<attribute name="template" type="anyURI"/>\r
<attribute name="postArtifact" type="boolean"/>\r
<attribute name="acsByIndex" type="boolean"/>\r
+ <attribute name="defaultACSIndex" type="unsignedShort"/>\r
<anyAttribute namespace="##any" processContents="lax"/>\r
</restriction>\r
</complexContent>\r
</complexType>\r
</element>\r
\r
+ <element name="NotifyOnLogout">\r
+ <annotation>\r
+ <documentation>Used to specify locations to receive application notifications of logout</documentation>\r
+ </annotation>\r
+ <complexType>\r
+ <sequence/>\r
+ <attribute name="Channel" use="required">\r
+ <simpleType>\r
+ <restriction base="string">\r
+ <enumeration value="front"/>\r
+ <enumeration value="back"/>\r
+ </restriction>\r
+ </simpleType>\r
+ </attribute>\r
+ <attribute name="Location" type="anyURI" use="required"/>\r
+ <anyAttribute namespace="##any" processContents="lax"/>\r
+ </complexType>\r
+ </element>\r
+ \r
<element name="DefaultRelyingParty">\r
<annotation>\r
<documentation>Container for specifying security methods to use with particular peers</documentation>\r
<attribute name="authType" type="conf:string"/>\r
<attribute name="authUsername" type="conf:string"/>\r
<attribute name="authPassword" type="conf:string"/>\r
- <attribute name="signRequests" type="boolean"/>
+ <attribute name="signRequests" type="bindingBoolean"/>\r
+ <attribute name="signResponses" type="bindingBoolean"/>\r
<attribute name="signatureAlg" type="anyURI"/>\r
<attribute name="digestAlg" type="anyURI"/>\r
- <attribute name="encryptRequests" type="boolean"/>\r
+ <attribute name="encryptRequests" type="bindingBoolean"/>\r
+ <attribute name="encryptResponses" type="bindingBoolean"/>\r
<attribute name="encryptionAlg" type="anyURI"/>\r
<attribute name="keyName" type="conf:string"/>\r
<attribute name="artifactEndpointIndex" type="unsignedShort"/>\r
</attributeGroup>\r
\r
- <element name="SecurityPolicies">
+ <element name="SecurityPolicies">\r
<annotation>\r
<documentation>Container for specifying sets of policy rules to apply to incoming messages</documentation>\r
</annotation>\r
<documentation>Specifies a set of SecurityPolicyRule plugins</documentation>\r
</annotation>\r
<complexType>\r
- <sequence>
- <element name="Rule" type="conf:PluggableType" minOccurs="1" maxOccurs="unbounded"/>
- </sequence>
+ <sequence>\r
+ <element name="Rule" type="conf:PluggableType" minOccurs="1" maxOccurs="unbounded"/>\r
+ </sequence>\r
<attribute name="id" type="conf:string" use="required"/>\r
<attribute name="validate" type="boolean" default="false"/>\r
<attribute name="signedAssertions" type="boolean" default="false"/>\r
projects / shibboleth / sp.git / blobdiff