diff --git a/mdx/common-beans.xml b/mdx/common-beans.xml
index bfbbf897..169ea99c 100644
--- a/mdx/common-beans.xml
+++ b/mdx/common-beans.xml
@@ -785,104 +785,104 @@
so that the parser is not required to explicitly resolve any imports.
-->
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
-
+
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
diff --git a/mdx/conventions.md b/mdx/conventions.md
index b5483772..4eb41a15 100644
--- a/mdx/conventions.md
+++ b/mdx/conventions.md
@@ -8,6 +8,8 @@ Because these conventions have been developed over time, and are still being dev
An underscore ('`_`') at the start of a directory name indicates that the directory is functional rather than containing a channel.
+Note that the `schema` directory is functional but does not follow this convention, instead following the convention established for classpath schema resources used by the Shibboleth project.
+
### OpenSSL Blacklists Directory
The `_openssl_blacklists` directory holds a copy of the Debian weak key blacklists, extracted from Debian 7.2 "Wheezy". These blacklists are in OpenSSL format.
@@ -16,10 +18,14 @@ The `_openssl_blacklists` directory holds a copy of the Debian weak key blacklis
The `_rules` subdirectory of `/mdx/` holds checking rulesets.
+### Schema Directory
+
+The `schema` subdirectory of `/mdx/` contains the XML schema files used to validate metadata. This directory name does not use the `'_'` convention but instead matches up with the conventional location for schemas used by the Shibboleth project.
+
## Channels
Each directory under `/mdx/` whose name does not start with an underscore
-represents a source of metadata, referred to as a
+(and is not `schema`) represents a source of metadata, referred to as a
channel. In most cases, a channel corresponds to a access management federation.
Most channels are named in the form "*country*`_`*source*". For example,
diff --git a/mdx/schema/MetadataExchange.xsd b/mdx/schema/MetadataExchange.xsd
new file mode 100644
index 00000000..53094fb7
--- /dev/null
+++ b/mdx/schema/MetadataExchange.xsd
@@ -0,0 +1,112 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/incommon-metadata.xsd b/mdx/schema/incommon-metadata.xsd
new file mode 100644
index 00000000..f33a8398
--- /dev/null
+++ b/mdx/schema/incommon-metadata.xsd
@@ -0,0 +1,28 @@
+
+
+
+
+
+
+ Document title: Schema for InCommon Federation metadata extensions
+ Document identifier: Metadata Extension Schema
+ Location: https://spaces.internet2.edu/x/iIuVAQ
+ Revision history:
+ V1.2 (3 May 2013):
+ Make schema itself schema-valid.
+ V1.1 (2 May 2013):
+ Initial version. Added documentation.
+ V1.0 (2 December 2011):
+ Initial version. Added contactType attribute.
+
+
+
+
+
+
diff --git a/mdx/schema/oasis-200401-wss-wssecurity-secext-1.0.xsd b/mdx/schema/oasis-200401-wss-wssecurity-secext-1.0.xsd
new file mode 100644
index 00000000..6829a00f
--- /dev/null
+++ b/mdx/schema/oasis-200401-wss-wssecurity-secext-1.0.xsd
@@ -0,0 +1,195 @@
+
+
+
+
+
+
+
+
+ This type represents an element with arbitrary attributes.
+
+
+
+
+
+
+
+
+
+
+ This type is used for password elements per Section 4.1.
+
+
+
+
+
+
+
+
+
+ This type is used for elements containing stringified binary data.
+
+
+
+
+
+
+
+
+
+ This type represents a username token per Section 4.1
+
+
+
+
+
+
+
+
+
+
+ A security token that is encoded in binary
+
+
+
+
+
+
+
+
+
+ A security token key identifier
+
+
+
+
+
+
+
+
+
+ Typedef to allow a list of usages (as URIs).
+
+
+
+
+
+ This global attribute is used to indicate the usage of a referenced or indicated token within the containing context
+
+
+
+
+ This type represents a reference to an external security token.
+
+
+
+
+
+
+
+ This type represents a reference to an embedded security token.
+
+
+
+
+
+
+
+
+
+ This type is used reference a security token.
+
+
+
+
+
+
+
+
+
+
+ This complexType defines header block to use for security-relevant data directed at a specific SOAP actor.
+
+
+
+
+ The use of "any" is to allow extensibility and different forms of security data.
+
+
+
+
+
+
+
+ This complexType defines a container for elements to be specified from any namespace as properties/parameters of a DSIG transformation.
+
+
+
+
+ The use of "any" is to allow extensibility from any namespace.
+
+
+
+
+
+
+
+ This element defines the wsse:UsernameToken element per Section 4.1.
+
+
+
+
+ This element defines the wsse:BinarySecurityToken element per Section 4.2.
+
+
+
+
+ This element defines a security token reference
+
+
+
+
+ This element defines a security token embedded reference
+
+
+
+
+ This element defines a key identifier reference
+
+
+
+
+ This element defines the wsse:SecurityTokenReference per Section 4.3.
+
+
+
+
+ This element defines the wsse:Security SOAP header element per Section 4.
+
+
+
+
+ This element contains properties for transformations from any namespace, including DSIG.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/oasis-200401-wss-wssecurity-utility-1.0.xsd b/mdx/schema/oasis-200401-wss-wssecurity-utility-1.0.xsd
new file mode 100644
index 00000000..f8d74e9c
--- /dev/null
+++ b/mdx/schema/oasis-200401-wss-wssecurity-utility-1.0.xsd
@@ -0,0 +1,108 @@
+
+
+
+
+
+
+
+This type defines the fault code value for Timestamp message expiration.
+
+
+
+
+
+
+
+
+
+
+This global attribute supports annotating arbitrary elements with an ID.
+
+
+
+
+
+
+Convenience attribute group used to simplify this schema.
+
+
+
+
+
+
+
+
+
+This type is for elements whose [children] is a psuedo-dateTime and can have arbitrary attributes.
+
+
+
+
+
+
+
+
+
+
+
+This type is for elements whose [children] is an anyURI and can have arbitrary attributes.
+
+
+
+
+
+
+
+
+
+
+
+
+This complex type ties together the timestamp related elements into a composite type.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+This element allows Timestamps to be applied anywhere element wildcards are present,
+including as a SOAP header.
+
+
+
+
+
+
+
+This element allows an expiration time to be applied anywhere element wildcards are present.
+
+
+
+
+
+
+This element allows a creation time to be applied anywhere element wildcards are present.
+
+
+
+
diff --git a/mdx/schema/saml-metadata-rpi-v1.0.xsd b/mdx/schema/saml-metadata-rpi-v1.0.xsd
new file mode 100644
index 00000000..135efa33
--- /dev/null
+++ b/mdx/schema/saml-metadata-rpi-v1.0.xsd
@@ -0,0 +1,79 @@
+
+
+
+
+
+
+
+
+ Document title: SAML V2.0 Metadata Extensions for Registration and Publication Information Version 1.0
+ Document identifier: sstc-saml-metadata-rpi-v1.0.xsd
+ Location: http://docs.oasis-open.org/security/saml/Post2.0/
+ Revision history:
+ 21 March 2011
+ Correct minOccurs on elements that were meant to be optional
+ 17 December 2010
+ Change of document title and namespace
+ 24 November 2010
+ Initial Submission
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/mdx/schema/saml-schema-assertion-2.0.xsd b/mdx/schema/saml-schema-assertion-2.0.xsd
new file mode 100644
index 00000000..2b2f7b80
--- /dev/null
+++ b/mdx/schema/saml-schema-assertion-2.0.xsd
@@ -0,0 +1,283 @@
+
+
+
+
+
+
+ Document identifier: saml-schema-assertion-2.0
+ Location: http://docs.oasis-open.org/security/saml/v2.0/
+ Revision history:
+ V1.0 (November, 2002):
+ Initial Standard Schema.
+ V1.1 (September, 2003):
+ Updates within the same V1.0 namespace.
+ V2.0 (March, 2005):
+ New assertion schema for SAML V2.0 namespace.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/saml-schema-metadata-2.0.xsd b/mdx/schema/saml-schema-metadata-2.0.xsd
new file mode 100644
index 00000000..b656d4f4
--- /dev/null
+++ b/mdx/schema/saml-schema-metadata-2.0.xsd
@@ -0,0 +1,337 @@
+
+
+
+
+
+
+
+
+ Document identifier: saml-schema-metadata-2.0
+ Location: http://docs.oasis-open.org/security/saml/v2.0/
+ Revision history:
+ V2.0 (March, 2005):
+ Schema for SAML metadata, first published in SAML 2.0.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/shibboleth-metadata-1.0.xsd b/mdx/schema/shibboleth-metadata-1.0.xsd
new file mode 100644
index 00000000..be1441dd
--- /dev/null
+++ b/mdx/schema/shibboleth-metadata-1.0.xsd
@@ -0,0 +1,42 @@
+
+
+
+
+
+
+
+
+ SAML metadata extension used to regulate allowable attribute scopes.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Binds keying authorities to the system entity/entities to which the enclosing
+ metadata element applies.
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/sstc-metadata-attr.xsd b/mdx/schema/sstc-metadata-attr.xsd
new file mode 100644
index 00000000..5a445e21
--- /dev/null
+++ b/mdx/schema/sstc-metadata-attr.xsd
@@ -0,0 +1,25 @@
+
+
+
+
+
+ Document title: SAML V2.0 Metadata Extention for Entity Attributes Schema
+ Document identifier: sstc-metadata-attr.xsd
+ Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security
+ Revision history:
+ V1.0 (November 2008):
+ Initial version.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/mdx/schema/sstc-request-initiation.xsd b/mdx/schema/sstc-request-initiation.xsd
new file mode 100644
index 00000000..10318f15
--- /dev/null
+++ b/mdx/schema/sstc-request-initiation.xsd
@@ -0,0 +1,23 @@
+
+
+
+ Document identifier: sstc-request-initiation
+ Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security
+ Revision history:
+ V1.0 (March 2010):
+ Initial version.
+
+
+
+
+
+
diff --git a/mdx/schema/sstc-saml-holder-of-key-browser-sso.xsd b/mdx/schema/sstc-saml-holder-of-key-browser-sso.xsd
new file mode 100644
index 00000000..7860d029
--- /dev/null
+++ b/mdx/schema/sstc-saml-holder-of-key-browser-sso.xsd
@@ -0,0 +1,28 @@
+
+
+
+
+
+
+ Document title: Schema for SAML V2.0 Holder-of-Key Web Browser SSO Profile
+ Document identifier: sstc-saml-holder-of-key-browser-sso.xsd
+ Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security
+ Revision history:
+ V1.2 (2 November 2008):
+ Renamed attribute from protocol to ProtocolBinding; targetNamespace changed in accordance with new conventions
+ V1.1 (6 August 2008):
+ string type changed to anyURI to match original SAML2Meta schema
+ V1.0 (4 August 2008):
+ Initial version.
+
+
+
+
+
+
diff --git a/mdx/schema/sstc-saml-idp-discovery.xsd b/mdx/schema/sstc-saml-idp-discovery.xsd
new file mode 100644
index 00000000..a2c03820
--- /dev/null
+++ b/mdx/schema/sstc-saml-idp-discovery.xsd
@@ -0,0 +1,22 @@
+
+
+
+ Document identifier: sstc-saml-idp-discovery
+ Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security
+ Revision history:
+ V1.0 (January 2007):
+ Initial version.
+
+
+
+
+
diff --git a/mdx/schema/sstc-saml-metadata-algsupport-v1.0.xsd b/mdx/schema/sstc-saml-metadata-algsupport-v1.0.xsd
new file mode 100644
index 00000000..c4e0f58b
--- /dev/null
+++ b/mdx/schema/sstc-saml-metadata-algsupport-v1.0.xsd
@@ -0,0 +1,54 @@
+
+
+
+
+
+
+
+
+ Document title: Metadata Extension Schema for SAML V2.0 Metadata Profile for Algorithm Support Version 1.0
+ Document identifier: sstc-saml-metadata-algsupport.xsd
+ Location: http://docs.oasis-open.org/security/saml/Post2.0/
+ Revision history:
+ V1.0 (June 2010):
+ Initial version.
+ (October 2010):
+ Add processContents="lax" to wildcards.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/sstc-saml-metadata-ui-v1.0.xsd b/mdx/schema/sstc-saml-metadata-ui-v1.0.xsd
new file mode 100644
index 00000000..66a4a8ba
--- /dev/null
+++ b/mdx/schema/sstc-saml-metadata-ui-v1.0.xsd
@@ -0,0 +1,96 @@
+
+
+
+
+
+
+
+
+ Document title: Metadata Extension Schema for SAML V2.0 Metadata Extensions for Login and Discovery User Interface Version 1.0
+ Document identifier: sstc-saml-metadata-ui-v1.0.xsd
+ Location: http://docs.oasis-open.org/security/saml/Post2.0/
+ Revision history:
+ 01 November 2010
+ Changed filename.
+ September 2010:
+ Initial version.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/uk-fed-label.xsd b/mdx/schema/uk-fed-label.xsd
new file mode 100644
index 00000000..e35fd06d
--- /dev/null
+++ b/mdx/schema/uk-fed-label.xsd
@@ -0,0 +1,127 @@
+
+
+
+
+
+ This schema describes the UK federation label namespace.
+
+ For additional information, see the Federation Technical Specification.
+
+ This version of the schema follows FTS edition 1.1 of 1-June-2007.
+
+
+
+
+
+
+ Most elements defined in the UK federation label namespace
+ are basic labels: empty elements whose presence or absence
+ is all that is important.
+
+
+
+
+
+
+
+
+ A datedLabel is like a basicLabel, but with a single
+ additional mandatory date attribute.
+
+
+
+
+
+
+
+
+
+
+
+
+ Indicates an entity whose owner is a member in good standing
+ of the UK federation.
+
+
+
+
+
+
+
+ Indicates an identity provider entity whose owner has
+ asserted to the UK federation that the entity provides
+ user accountability in terms of the definition given
+ in section 6 of the federation's Rules of Membership.
+
+
+
+
+
+
+
+ Indicates the software used to implement the entity, and
+ optionally both general and specific indications of the
+ version of software used. This information is added to
+ an entity only if it has been received from the deployer
+ of the entity on the indicated date.
+
+ This information is used in entity fragment files only,
+ and is not included in the metadata published by the
+ UK federation. Its principal use is in classifying
+ entities for statistical purposes.
+
+
+
+
+
+
+
+
+ The name of the software used to implement the entity.
+ Although not described as such in this schema, the name
+ should be picked from the controlled vocabulary understood
+ by the federation statistics scripts.
+
+
+
+
+
+
+
+ The general version of the software in use. This should
+ only be specific enough to identify the broad functionality
+ of the entity, for example "1.3" vs. "2.0" would be sufficient
+ for Shibboleth entities.
+
+
+
+
+
+
+
+ The specific version of the software in use, if known.
+
+
+
+
+
+
+
+
+
+
+
+ Indicates that the entity has been opted-in to inclusion in
+ the UK federation export aggregate.
+
+
+
+
+
\ No newline at end of file
diff --git a/mdx/schema/ws-addr.xsd b/mdx/schema/ws-addr.xsd
new file mode 100644
index 00000000..47362edb
--- /dev/null
+++ b/mdx/schema/ws-addr.xsd
@@ -0,0 +1,137 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/ws-authorization.xsd b/mdx/schema/ws-authorization.xsd
new file mode 100644
index 00000000..5b8ae986
--- /dev/null
+++ b/mdx/schema/ws-authorization.xsd
@@ -0,0 +1,145 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/mdx/schema/ws-federation.xsd b/mdx/schema/ws-federation.xsd
new file mode 100644
index 00000000..f87059db
--- /dev/null
+++ b/mdx/schema/ws-federation.xsd
@@ -0,0 +1,471 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/ws-securitypolicy-1.2.xsd b/mdx/schema/ws-securitypolicy-1.2.xsd
new file mode 100644
index 00000000..0e562726
--- /dev/null
+++ b/mdx/schema/ws-securitypolicy-1.2.xsd
@@ -0,0 +1,1205 @@
+
+
+
+
+
+
+
+
+
+
+ 4.1.1 SignedParts Assertion
+
+
+
+
+
+
+ 4.2.1 EncryptedParts Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 4.1.2 SignedElements Assertion
+
+
+
+
+
+
+ 4.2.2 EncryptedElements Assertion
+
+
+
+
+
+
+ 4.3.1 RequiredElements Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 5.1 Token Inclusion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.1 UsernameToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.1 UsernameToken Assertion
+
+
+
+
+
+
+ 5.4.1 UsernameToken Assertion
+
+
+
+
+
+
+ 5.4.1 UsernameToken Assertion
+
+
+
+
+
+
+ 5.4.1 UsernameToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.2 IssuedToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.2 IssuedToken Assertion
+
+
+
+
+
+
+ 5.4.2 IssuedToken Assertion
+
+
+
+
+
+
+ 5.4.2 IssuedToken Assertion
+
+
+
+
+
+
+ 5.4.2 IssuedToken Assertion
+
+
+
+
+
+
+ 5.4.2 IssuedToken Assertion
+
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+ 5.4.3 X509Token Assertion
+
+
+
+
+
+
+
+ 5.4.4 KerberosToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.4 KerberosToken Assertion
+
+
+
+
+
+
+ 5.4.4 KerberosToken Assertion
+
+
+
+
+
+
+
+ 5.4.5 SpnegoContextToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.5 SpnegoContextToken Assertion
+
+
+
+
+
+
+ 5.4.5 SpnegoContextToken Assertion
+
+
+
+
+
+
+ 5.4.5 SpnegoContextToken Assertion
+
+
+
+
+
+
+
+ 5.4.6 SecurityContextToken Assertion
+
+
+
+
+
+
+
+
+
+
+ 5.4.6 SecurityContextToken Assertion
+
+
+
+
+
+
+ 5.4.6 SecurityContextToken Assertion
+
+
+
+
+
+
+
+ 5.4.7 SecureConversationToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.7 SecureConversationToken Assertion
+
+
+
+
+
+
+
+ 5.4.8 SamlToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.8 SamlToken Assertion
+
+
+
+
+
+
+ 5.4.8 SamlToken Assertion
+
+
+
+
+
+
+ 5.4.8 SamlToken Assertion
+
+
+
+
+
+
+
+ 5.4.9 RelToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.9 RelToken Assertion
+
+
+
+
+
+
+ 5.4.9 RelToken Assertion
+
+
+
+
+
+
+ 5.4.9 RelToken Assertion
+
+
+
+
+
+
+ 5.4.9 RelToken Assertion
+
+
+
+
+
+
+
+ 5.4.10 HttpsToken Assertion
+
+
+
+
+
+
+ 5.4.10 HttpsToken Assertion
+
+
+
+
+
+
+ 5.4.10 HttpsToken Assertion
+
+
+
+
+
+
+ 5.4.10 HttpsToken Assertion
+
+
+
+
+
+
+
+ 5.4.11 KeyValueToken Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 5.4.11 KeyValueToken Assertion
+
+
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+ 7.1 AlgorithmSuite Assertion
+
+
+
+
+
+
+
+ 7.2 Layout Assertion
+
+
+
+
+
+
+
+ 7.2 Layout Assertion
+
+
+
+
+
+
+ 7.2 Layout Assertion
+
+
+
+
+
+
+ 7.2 Layout Assertion
+
+
+
+
+
+
+ 7.2 Layout Assertion
+
+
+
+
+
+
+
+ 7.3 TransportBinding Assertion
+
+
+
+
+
+
+
+ 7.3 TransportBinding Assertion
+
+
+
+
+
+
+
+
+
+ 7.3 TransportBinding Assertion
+
+
+
+
+
+
+
+ 7.4 SymmetricBinding Assertion
+
+
+
+
+
+
+ 7.4 SymmetricBinding Assertion
+
+
+
+
+
+
+ 8=7.4 SymmetricBinding Assertion
+
+
+
+
+
+
+ 7.4 SymmetricBinding Assertion
+
+
+
+
+
+
+
+
+
+
+ 7.4 SymmetricBinding Assertion
+
+
+
+
+
+
+ 7.4 SymmetricBinding Assertion
+
+
+
+
+
+
+ 7.4 SymmetricBinding Assertion
+
+
+
+
+
+
+ 7.4 SymmetricBinding Assertion
+
+
+
+
+
+
+
+ 7.5 AsymmetricBinding Assertion
+
+
+
+
+
+
+
+ 7.5 AsymmetricBinding Assertion
+
+
+
+
+
+
+
+ 7.5 AsymmetricBinding Assertion
+
+
+
+
+
+
+
+ 7.5 AsymmetricBinding Assertion
+
+
+
+
+
+
+
+ 7.5 AsymmetricBinding Assertion
+
+
+
+
+
+
+
+ 7.5 AsymmetricBinding Assertion
+
+
+
+
+
+
+
+ 7.5 AsymmetricBinding Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 8.1 SupportingTokens Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+ 8.2 SignedSupportingTokens Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+ 8.3 EndorsingSupportingTokens Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+ 8.4 SignedEndorsingSupportingTokens Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+ 8.5 SignedEncryptedSupportingTokens Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+ 8.6 EncryptedSupportingTokens Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+ 8.7 EndorsingEncryptedSupportingTokens Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+ 8.8 SignedEndorsingEncryptedSupportingTokens Assertion
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 9.1 Wss10 Assertion
+
+
+
+
+
+
+
+ 9.1 Wss10 Assertion
+
+
+
+
+
+
+ 9.1 Wss10 Assertion
+
+
+
+
+
+
+ 9.1 Wss10 Assertion
+
+
+
+
+
+
+ 9.1 Wss10 Assertion
+
+
+
+
+
+
+
+ 9.2 Wss11 Assertion
+
+
+
+
+
+
+
+
+
+
+
+ 9.2 Wss11 Assertion
+
+
+
+
+
+
+ 9.2 Wss11 Assertion
+
+
+
+
+
+
+ 9.2 Wss11 Assertion
+
+
+
+
+
+
+
+
+ 10.1 Trust13 Assertion
+
+
+
+
+
+
+
+ 10.1 Trust13 Assertion
+
+
+
+
+
+
+ 10.1 Trust13 Assertion
+
+
+
+
+
+
+ 10.1 Trust13 Assertion
+
+
+
+
+
+
+ 10.1 Trust13 Assertion
+
+
+
+
+
+
+ 10.1 Trust13 Assertion
+
+
+
+
+
+
+ 10.1 Trust13 Assertion
+
+
+
+
+
+
+ 10.1 Trust13 Assertion
+
+
+
+
+
\ No newline at end of file
diff --git a/mdx/schema/xenc-schema-11.xsd b/mdx/schema/xenc-schema-11.xsd
new file mode 100644
index 00000000..1abb6437
--- /dev/null
+++ b/mdx/schema/xenc-schema-11.xsd
@@ -0,0 +1,107 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/xenc-schema.xsd b/mdx/schema/xenc-schema.xsd
new file mode 100644
index 00000000..cdfc8333
--- /dev/null
+++ b/mdx/schema/xenc-schema.xsd
@@ -0,0 +1,171 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/xml.xsd b/mdx/schema/xml.xsd
new file mode 100644
index 00000000..38bba34d
--- /dev/null
+++ b/mdx/schema/xml.xsd
@@ -0,0 +1,80 @@
+
+
+
+
+
+ See http://www.w3.org/XML/1998/namespace.html and
+ http://www.w3.org/TR/REC-xml for information about this namespace.
+
+
+
+
+ This schema defines attributes and an attribute group
+ suitable for use by
+ schemas wishing to allow xml:base, xml:lang or xml:space attributes
+ on elements they define.
+
+ To enable this, such a schema must import this schema
+ for the XML namespace, e.g. as follows:
+ <schema . . .>
+ . . .
+ <import namespace="http://www.w3.org/XML/1998/namespace"
+ schemaLocation="http://www.w3.org/2001/03/xml.xsd"/>
+
+ Subsequently, qualified reference to any of the attributes
+ or the group defined below will have the desired effect, e.g.
+
+ <type . . .>
+ . . .
+ <attributeGroup ref="xml:specialAttrs"/>
+
+ will define a type which will schema-validate an instance
+ element with any of those attributes
+
+
+
+ In keeping with the XML Schema WG's standard versioning
+ policy, this schema document will persist at
+ http://www.w3.org/2001/03/xml.xsd.
+ At the date of issue it can also be found at
+ http://www.w3.org/2001/xml.xsd.
+ The schema document at that URI may however change in the future,
+ in order to remain compatible with the latest version of XML Schema
+ itself. In other words, if the XML Schema namespace changes, the version
+ of this document at
+ http://www.w3.org/2001/xml.xsd will change
+ accordingly; the version at
+ http://www.w3.org/2001/03/xml.xsd will not change.
+
+
+
+
+
+ In due course, we should install the relevant ISO 2- and 3-letter
+ codes as the enumerated possible values . . .
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ See http://www.w3.org/TR/xmlbase/ for
+ information about this attribute.
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/xmldsig-core-schema.xsd b/mdx/schema/xmldsig-core-schema.xsd
new file mode 100644
index 00000000..07aad278
--- /dev/null
+++ b/mdx/schema/xmldsig-core-schema.xsd
@@ -0,0 +1,308 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/mdx/schema/xmldsig11-schema.xsd b/mdx/schema/xmldsig11-schema.xsd
new file mode 100644
index 00000000..f03643a3
--- /dev/null
+++ b/mdx/schema/xmldsig11-schema.xsd
@@ -0,0 +1,144 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+