summaryrefslogtreecommitdiff
path: root/schema/shibboleth.xsd
diff options
context:
space:
mode:
authorBjörn Mattsson <bjorn@sunet.se>2023-03-06 11:22:05 +0100
committerBjörn Mattsson <bjorn@sunet.se>2023-03-06 11:22:05 +0100
commit467dbdbf3d7212e25ee69daeaadd8adba7c7c5b8 (patch)
treed3576d5f2d4b5cc676c0a12ef8f8c3c83b474bf5 /schema/shibboleth.xsd
parentbc1d55080e5d42e6ef2bba892d640aa8f68bbc90 (diff)
Moved files to make ths repo signed
Diffstat (limited to 'schema/shibboleth.xsd')
-rw-r--r--schema/shibboleth.xsd296
1 files changed, 0 insertions, 296 deletions
diff --git a/schema/shibboleth.xsd b/schema/shibboleth.xsd
deleted file mode 100644
index 392fed45..00000000
--- a/schema/shibboleth.xsd
+++ /dev/null
@@ -1,296 +0,0 @@
-<?xml version="1.0" encoding="US-ASCII"?>
-<schema targetNamespace="urn:mace:shibboleth:1.0"
- xmlns="http://www.w3.org/2001/XMLSchema"
- xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
- xmlns:xml="http://www.w3.org/XML/1998/namespace"
- xmlns:shib="urn:mace:shibboleth:1.0"
- xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"
- elementFormDefault="qualified"
- attributeFormDefault="unqualified"
- version="1.2">
-
- <import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="xmldsig-core-schema.xsd"/>
- <import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="xml.xsd"/>
- <import namespace="urn:oasis:names:tc:SAML:1.0:assertion" schemaLocation="cs-sstc-schema-assertion-1.1.xsd"/>
-
- <!-- Status-Related Information -->
-
- <!--
- The following SAML sub-status codes are defined in this namespace:
-
- "InvalidHandle"
- Used with samlp:Requester, signals AA did not recognize handle as valid
- -->
-
- <!--
- Relaxes SAML AttributeValue type definition. Xerces-C has a bug that prevents
- anyAttribute content appearing on anyType. It works in 2.2 but not in later versions.
- -->
-
- <complexType name="AttributeValueType" mixed="true">
- <annotation>
- <documentation xml:lang="en">
- By convention, all Shibboleth 1.1 origin attribute values carry this unconstrained xsi:type.
- </documentation>
- </annotation>
- <complexContent>
- <extension base="anyType"/>
- </complexContent>
- </complexType>
-
- <!-- Attribute Acceptance Policies -->
-
- <simpleType name="AttributeRuleValueType">
- <restriction base="string">
- <enumeration value="literal"/>
- <enumeration value="regexp"/>
- <enumeration value="xpath"/>
- </restriction>
- </simpleType>
-
- <complexType name="SiteRuleType">
- <sequence>
- <element name="Scope" minOccurs="0" maxOccurs="unbounded">
- <complexType>
- <simpleContent>
- <extension base="string">
- <attribute name="Accept" type="boolean" use="optional" default="true"/>
- <attribute name="Type" type="shib:AttributeRuleValueType" use="optional" default="literal"/>
- <anyAttribute namespace="##other" processContents="lax"/>
- </extension>
- </simpleContent>
- </complexType>
- </element>
- <choice minOccurs="0">
- <element name="AnyValue">
- <complexType>
- <sequence/>
- <anyAttribute namespace="##other" processContents="lax"/>
- </complexType>
- </element>
- <element name="Value" maxOccurs="unbounded">
- <complexType>
- <simpleContent>
- <extension base="string">
- <attribute name="Type" type="shib:AttributeRuleValueType" use="optional" default="literal"/>
- <anyAttribute namespace="##other" processContents="lax"/>
- </extension>
- </simpleContent>
- </complexType>
- </element>
- </choice>
- </sequence>
- </complexType>
-
- <element name="AnySite" type="shib:SiteRuleType"/>
- <element name="SiteRule">
- <complexType>
- <complexContent>
- <extension base="shib:SiteRuleType">
- <attribute name="Name" type="string" use="required"/>
- <anyAttribute namespace="##other" processContents="lax"/>
- </extension>
- </complexContent>
- </complexType>
- </element>
-
- <complexType name="AttributeRuleType">
- <sequence>
- <element ref="shib:AnySite" minOccurs="0"/>
- <element ref="shib:SiteRule" minOccurs="0" maxOccurs="unbounded"/>
- </sequence>
- <attribute name="Name" type="string" use="required"/>
- <attribute name="Namespace" type="string" use="optional"/>
- <attribute name="Factory" type="string" use="optional"/>
- <attribute name="Alias" type="string" use="optional"/>
- <attribute name="Header" type="string" use="optional"/>
- <anyAttribute namespace="##other" processContents="lax"/>
- </complexType>
-
- <element name="AttributeRule" type="shib:AttributeRuleType">
- <key name="SiteRuleKey">
- <selector xpath="./shib:SiteRule"/>
- <field xpath="@Name"/>
- </key>
- </element>
-
- <element name="AttributeAcceptancePolicy">
- <complexType>
- <sequence>
- <element name="AnyAttribute" minOccurs="0">
- <complexType>
- <sequence/>
- </complexType>
- </element>
- <element ref="shib:AttributeRule" minOccurs="0" maxOccurs="unbounded"/>
- </sequence>
- <anyAttribute namespace="##other" processContents="lax"/>
- </complexType>
- </element>
-
-
- <!-- Shibboleth Metadata -->
-
- <complexType name="SiteType">
- <annotation>
- <documentation xml:lang="en">All sites have a Name attribute, plus optional i18n-ized aliases.</documentation>
- </annotation>
- <sequence>
- <element name="Alias" minOccurs="0" maxOccurs="unbounded">
- <complexType>
- <simpleContent>
- <extension base="string">
- <attribute ref="xml:lang"/>
- </extension>
- </simpleContent>
- </complexType>
- </element>
- <element name="Contact" type="shib:ContactType" minOccurs="0" maxOccurs="unbounded"/>
- </sequence>
- <attribute name="Name" type="string" use="required"/>
- <attribute name="ErrorURL" type="anyURI" use="optional"/>
- <anyAttribute namespace="##any" processContents="lax"/>
- </complexType>
-
- <simpleType name="ContactTypeType">
- <restriction base="string">
- <enumeration value="technical"/>
- <enumeration value="support"/>
- <enumeration value="administrative"/>
- <enumeration value="billing"/>
- <enumeration value="other"/>
- </restriction>
- </simpleType>
-
- <complexType name="ContactType">
- <annotation><documentation xml:lang="en">A human contact for a site.</documentation></annotation>
- <sequence/>
- <attribute name="Type" type="shib:ContactTypeType" use="required"/>
- <attribute name="Name" type="string" use="required"/>
- <attribute name="Email" type="string" use="optional"/>
- </complexType>
-
- <complexType name="regexp_string">
- <annotation>
- <documentation xml:lang="en">A string element with an optional attribute signaling regexp content.</documentation>
- </annotation>
- <simpleContent>
- <extension base="string">
- <attribute name="regexp" type="boolean" use="optional" default="false"/>
- </extension>
- </simpleContent>
- </complexType>
-
- <complexType name="AuthorityType">
- <annotation>
- <documentation xml:lang="en">Metadata about a SAML authority.</documentation>
- </annotation>
- <sequence/>
- <attribute name="Name" type="string" use="required"/>
- <attribute name="Location" type="anyURI" use="required"/>
- <anyAttribute namespace="##any" processContents="lax"/>
- </complexType>
-
- <complexType name="OriginSiteType">
- <annotation>
- <documentation xml:lang="en">
- Origin sites add at least one handle service (with a name), plus optional domains trusted for attribute scoping.
- </documentation>
- </annotation>
- <complexContent>
- <extension base="shib:SiteType">
- <sequence>
- <element name="HandleService" type="shib:AuthorityType" maxOccurs="unbounded"/>
- <element name="AttributeAuthority" type="shib:AuthorityType" minOccurs="0" maxOccurs="unbounded"/>
- <element name="Domain" type="shib:regexp_string" minOccurs="0" maxOccurs="unbounded"/>
- </sequence>
- </extension>
- </complexContent>
- </complexType>
-
- <complexType name="DestinationSiteType">
- <annotation>
- <documentation xml:lang="en">
- Destination sites add at least one attribute requester (with a name).
- </documentation>
- </annotation>
- <complexContent>
- <extension base="shib:SiteType">
- <sequence>
- <element name="AssertionConsumerServiceURL" maxOccurs="unbounded">
- <complexType>
- <sequence/>
- <attribute name="Location" type="string" use="required"/>
- <attribute name="Id" type="string" use="optional"/>
- <anyAttribute namespace="##any" processContents="lax"/>
- </complexType>
- </element>
- <element name="AttributeRequester" maxOccurs="unbounded">
- <complexType>
- <sequence/>
- <attribute name="Name" type="string" use="required"/>
- <anyAttribute namespace="##any" processContents="lax"/>
- </complexType>
- </element>
- </sequence>
- </extension>
- </complexContent>
- </complexType>
-
- <complexType name="SiteGroupType">
- <annotation>
- <documentation xml:lang="en">Used to logically group sites together, optionally signed.</documentation>
- </annotation>
- <sequence>
- <choice maxOccurs="unbounded">
- <element ref="shib:OriginSite"/>
- <element ref="shib:DestinationSite"/>
- <element ref="shib:SiteGroup"/>
- </choice>
- <element ref="ds:Signature" minOccurs="0"/>
- </sequence>
- <attribute name="Name" type="string" use="required"/>
- <attribute name="lastChanged" type="dateTime" use="optional"/>
- <attribute name="validUntil" type="dateTime" use="optional"/>
- <attribute name="cacheDuration" type="duration" use="optional"/>
- <anyAttribute namespace="##any" processContents="lax"/>
- </complexType>
-
- <element name="OriginSite" type="shib:OriginSiteType"/>
- <element name="DestinationSite" type="shib:DestinationSiteType"/>
- <element name="SiteGroup" type="shib:SiteGroupType"/>
-
-
- <!-- Old (pre 1.2) Trust Metadata -->
-
- <complexType name="KeyAuthorityType">
- <annotation>
- <documentation xml:lang="en">
- Binds a set of keying material to one or more named system entities.
- </documentation>
- </annotation>
- <sequence>
- <element ref="ds:KeyInfo"/>
- <element name="Subject" type="shib:regexp_string" minOccurs="0" maxOccurs="unbounded"/>
- </sequence>
- <anyAttribute namespace="##any" processContents="lax"/>
- </complexType>
- <element name="KeyAuthority" type="shib:KeyAuthorityType"/>
-
- <element name="Trust">
- <annotation>
- <documentation xml:lang="en">An optionally signed collection of KeyAuthority data.</documentation>
- </annotation>
- <complexType>
- <sequence>
- <element ref="shib:KeyAuthority" maxOccurs="unbounded"/>
- <element ref="ds:Signature" minOccurs="0"/>
- </sequence>
- <attribute name="lastChanged" type="dateTime" use="optional"/>
- <attribute name="validUntil" type="dateTime" use="optional"/>
- <attribute name="cacheDuration" type="duration" use="optional"/>
- <anyAttribute namespace="##any" processContents="lax"/>
- </complexType>
- </element>
-
-</schema>