diff --git a/schemas/credentials.xsd b/schemas/credentials.xsd new file mode 100644 index 0000000..d2d4688 --- /dev/null +++ b/schemas/credentials.xsd @@ -0,0 +1,121 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Pulls credentials from a Java + keystore. + + + + + + + + + + + + + + + + + Pulls credentials from files. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Allows for specification of a Java class that + loads credentials from a custom storage mechanism. + + + + + + + + + + + + + diff --git a/schemas/incommon-metadata.xsd b/schemas/incommon-metadata.xsd new file mode 100644 index 0000000..d60f193 --- /dev/null +++ b/schemas/incommon-metadata.xsd @@ -0,0 +1,26 @@ + + + + + + Document title: Schema for InCommon Federation metadata extensions + Document identifier: Metadata Extension Schema + Location: https://spaces.internet2.edu/x/iIuVAQ + Revision history: + V1.2 (3 May 2013): + Make schema itself schema-valid. + V1.1 (2 May 2013): + Added documentation and explicit namespace prefix. + V1.0 (2 December 2011): + Initial version. Added contactType attribute. + + + + + \ No newline at end of file diff --git a/schemas/saml-metadata-rpi-v1.0.xsd b/schemas/saml-metadata-rpi-v1.0.xsd new file mode 100644 index 0000000..135efa3 --- /dev/null +++ b/schemas/saml-metadata-rpi-v1.0.xsd @@ -0,0 +1,79 @@ + + + + + + + + + Document title: SAML V2.0 Metadata Extensions for Registration and Publication Information Version 1.0 + Document identifier: sstc-saml-metadata-rpi-v1.0.xsd + Location: http://docs.oasis-open.org/security/saml/Post2.0/ + Revision history: + 21 March 2011 + Correct minOccurs on elements that were meant to be optional + 17 December 2010 + Change of document title and namespace + 24 November 2010 + Initial Submission + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/schemas/saml-schema-assertion-2.0.xsd b/schemas/saml-schema-assertion-2.0.xsd new file mode 100644 index 0000000..09fd045 --- /dev/null +++ b/schemas/saml-schema-assertion-2.0.xsd @@ -0,0 +1,281 @@ + + + + + + + Document identifier: saml-schema-assertion-2.0 + Location: http://docs.oasis-open.org/security/saml/v2.0/ + Revision history: + V1.0 (November, 2002): + Initial Standard Schema. + V1.1 (September, 2003): + Updates within the same V1.0 namespace. + V2.0 (March, 2005): + New assertion schema for SAML V2.0 namespace. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/schemas/saml-schema-metadata-2.0.xsd b/schemas/saml-schema-metadata-2.0.xsd new file mode 100644 index 0000000..fc8b206 --- /dev/null +++ b/schemas/saml-schema-metadata-2.0.xsd @@ -0,0 +1,333 @@ + + + + + + + + + Document identifier: saml-schema-metadata-2.0 + Location: http://docs.oasis-open.org/security/saml/v2.0/ + Revision history: + V2.0 (March, 2005): + Schema for SAML metadata, first published in SAML 2.0. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/schemas/saml-schema-metadata-ext.xsd b/schemas/saml-schema-metadata-ext.xsd new file mode 100644 index 0000000..ad7ac70 --- /dev/null +++ b/schemas/saml-schema-metadata-ext.xsd @@ -0,0 +1,36 @@ + + + + + + Document title: SAML Metadata Extension Schema for Standalone Attribute Requester + Document identifier: saml-schema-metadata-ext.xsd + Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security + Revision history: CD + + + + + + + + + + + + + + + + + + diff --git a/schemas/shibboleth-arp-1.0.xsd b/schemas/shibboleth-arp-1.0.xsd new file mode 100644 index 0000000..d3eaa8b --- /dev/null +++ b/schemas/shibboleth-arp-1.0.xsd @@ -0,0 +1,111 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/schemas/shibboleth-metadata-1.0.xsd b/schemas/shibboleth-metadata-1.0.xsd new file mode 100644 index 0000000..e5e921c --- /dev/null +++ b/schemas/shibboleth-metadata-1.0.xsd @@ -0,0 +1,42 @@ + + + + + + + + + SAML metadata extension used to regulate allowable attribute scopes. + + + + + + + + + + + + + + + + Binds keying authorities to the system entity/entities to which the enclosing + metadata element applies. + + + + + + + + + + + diff --git a/schemas/shibboleth-resolver-1.0.xsd b/schemas/shibboleth-resolver-1.0.xsd new file mode 100644 index 0000000..aa153c8 --- /dev/null +++ b/schemas/shibboleth-resolver-1.0.xsd @@ -0,0 +1,377 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/schemas/shibboleth-trust-1.0.xsd b/schemas/shibboleth-trust-1.0.xsd new file mode 100644 index 0000000..0e603a5 --- /dev/null +++ b/schemas/shibboleth-trust-1.0.xsd @@ -0,0 +1,60 @@ + + + + + + + Trust metadata binds keys or authority lists to system entities. + The metadata consumer is responsible for associating the names of system entities + to the application context in an appropriate way. + + + + + + + An optionally signed collection of trust binding elements. + ds:KeyInfo is by definition a binding of a key to a specific entity, + which may be specified in various ways such as KeyName or X509SubjectName. + + + + + + + + + + + + + + + + + + + + + + Binds keying authorities to one or more named system entities. + Omitting ds:KeyName will apply the authorities to all transactions, unless + another specific match applies. This is risky, so use wisely, in conjunction + with constraints on acceptable messages using other forms of metadata or policy. + + + + + + + + + + + diff --git a/schemas/shibboleth.xsd b/schemas/shibboleth.xsd new file mode 100644 index 0000000..307e3b6 --- /dev/null +++ b/schemas/shibboleth.xsd @@ -0,0 +1,300 @@ + + + + + + + + + + + + + + + + By convention, all Shibboleth 1.1 origin attribute values carry this unconstrained xsi:type. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + All sites have a Name attribute, plus optional i18n-ized aliases. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + A human contact for a site. + + + + + + + + + A string element with an optional attribute signaling regexp content. + + + + + + + + + + + Metadata about a SAML authority. + + + + + + + + + + + Origin sites add at least one handle service (with a name), plus optional domains trusted for attribute scoping. + + + + + + + + + + + + + + + + A metadata extension used to regulate allowable attribute scopes. + + + + + + + Destination sites add at least one attribute requester (with a name). + + + + + + + + + + + + + + + + + + + + + + + + + + Used to logically group sites together, optionally signed. + + + + + + + + + + + + + + + + + + + + + + + + + + + Binds a set of keying material to one or more named system entities. + + + + + + + + + + + + + An optionally signed collection of KeyAuthority data. + + + + + + + + + + + + + + diff --git a/schemas/sstc-metadata-attr.xsd b/schemas/sstc-metadata-attr.xsd new file mode 100644 index 0000000..a655d96 --- /dev/null +++ b/schemas/sstc-metadata-attr.xsd @@ -0,0 +1,35 @@ + + + + + + Document title: SAML V2.0 Metadata Extention for Entity Attributes Schema + Document identifier: sstc-metadata-attr.xsd + Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security + Revision history: + V1.0 (November 2008): + Initial version. + + + + + + + + + + + + + + + diff --git a/schemas/sstc-request-initiation.xsd b/schemas/sstc-request-initiation.xsd new file mode 100644 index 0000000..edcf164 --- /dev/null +++ b/schemas/sstc-request-initiation.xsd @@ -0,0 +1,22 @@ + + + + Document identifier: sstc-request-initiation + Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security + Revision history: + V1.0 (March 2010): + Initial version. + + + + + diff --git a/schemas/sstc-saml-idp-discovery.xsd b/schemas/sstc-saml-idp-discovery.xsd new file mode 100644 index 0000000..5af13be --- /dev/null +++ b/schemas/sstc-saml-idp-discovery.xsd @@ -0,0 +1,22 @@ + + + + Document identifier: sstc-saml-idp-discovery + Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security + Revision history: + V1.0 (January 2007): + Initial version. + + + + + diff --git a/schemas/sstc-saml-metadata-algsupport-v1.0.xsd b/schemas/sstc-saml-metadata-algsupport-v1.0.xsd new file mode 100644 index 0000000..e99a24a --- /dev/null +++ b/schemas/sstc-saml-metadata-algsupport-v1.0.xsd @@ -0,0 +1,41 @@ + + + + + + Document title: Metadata Extension Schema for SAML V2.0 Metadata Profile for Algorithm Support Version 1.0 + Document identifier: sstc-saml-metadata-algsupport.xsd + Location: http://docs.oasis-open.org/security/saml/Post2.0/ + Revision history: + V1.0 (June 2010): + Initial version. + + + + + + + + + + + + + + + + + + + + + + + diff --git a/schemas/sstc-saml-metadata-ui-v1.0.xsd b/schemas/sstc-saml-metadata-ui-v1.0.xsd new file mode 100644 index 0000000..619381f --- /dev/null +++ b/schemas/sstc-saml-metadata-ui-v1.0.xsd @@ -0,0 +1,86 @@ + + + + + + Document title: Metadata Extension Schema for SAML V2.0 Metadata Extensions for Login and Discovery User Interface Version 1.0 + Document identifier: sstc-saml-metadata-ui-v1.0.xsd + Location: http://docs.oasis-open.org/security/saml/Post2.0/ + Revision history: + 01 November 2010 + Changed filename. + September 2010: + Initial version. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/schemas/xenc-schema.xsd b/schemas/xenc-schema.xsd new file mode 100644 index 0000000..64de6f2 --- /dev/null +++ b/schemas/xenc-schema.xsd @@ -0,0 +1,136 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/schemas/xml.xsd b/schemas/xml.xsd new file mode 100644 index 0000000..38bba34 --- /dev/null +++ b/schemas/xml.xsd @@ -0,0 +1,80 @@ + + + + + + See http://www.w3.org/XML/1998/namespace.html and + http://www.w3.org/TR/REC-xml for information about this namespace. + + + + + This schema defines attributes and an attribute group + suitable for use by + schemas wishing to allow xml:base, xml:lang or xml:space attributes + on elements they define. + + To enable this, such a schema must import this schema + for the XML namespace, e.g. as follows: + <schema . . .> + . . . + <import namespace="http://www.w3.org/XML/1998/namespace" + schemaLocation="http://www.w3.org/2001/03/xml.xsd"/> + + Subsequently, qualified reference to any of the attributes + or the group defined below will have the desired effect, e.g. + + <type . . .> + . . . + <attributeGroup ref="xml:specialAttrs"/> + + will define a type which will schema-validate an instance + element with any of those attributes + + + + In keeping with the XML Schema WG's standard versioning + policy, this schema document will persist at + http://www.w3.org/2001/03/xml.xsd. + At the date of issue it can also be found at + http://www.w3.org/2001/xml.xsd. + The schema document at that URI may however change in the future, + in order to remain compatible with the latest version of XML Schema + itself. In other words, if the XML Schema namespace changes, the version + of this document at + http://www.w3.org/2001/xml.xsd will change + accordingly; the version at + http://www.w3.org/2001/03/xml.xsd will not change. + + + + + + In due course, we should install the relevant ISO 2- and 3-letter + codes as the enumerated possible values . . . + + + + + + + + + + + + + + + See http://www.w3.org/TR/xmlbase/ for + information about this attribute. + + + + + + + + + + diff --git a/schemas/xmldsig-core-schema.xsd b/schemas/xmldsig-core-schema.xsd new file mode 100644 index 0000000..c6e14ab --- /dev/null +++ b/schemas/xmldsig-core-schema.xsd @@ -0,0 +1,309 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +