main/resources/amAuthSAML2.xml

	amAuthSAML2.xml revision 449854c2a07b50ea64d9d6a8b03d18d4afeeee43
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden<?xml version='1.0' encoding="ISO-8859-1"?>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden<!--
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  The contents of this file are subject to the terms of the Common Development and
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  Distribution License (the License). You may not use this file except in compliance with the
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  License.
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  specific language governing permission and limitations under the License.
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  When distributing Covered Software, include this CDDL Header Notice in each file and include
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  Header, with the fields enclosed by brackets [] replaced by your own identifying
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  information: "Portions copyright [year] [name of copyright owner]".
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden  Copyright 2015 ForgeRock AS.
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden-->
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden<!DOCTYPE ServicesConfiguration
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden        PUBLIC "=//forgerock//Service Management Services (SMS) 1.0 DTD//EN"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden        "jar://com/sun/identity/sm/sms.dtd">
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden<ServicesConfiguration>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden    <Service name="iPlanetAMAuthSAML2Service" version="1.0">
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden        <Schema
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                serviceHierarchy="/DSAMEConfig/authentication/iPlanetAMAuthSAML2Service"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                i18nFileName="amAuthSAML2"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                revisionNumber="1"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                i18nKey="iPlanetAMAuthSAML2ServiceDescription"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                resourceName="authSaml">
ae6eb91d10bf796c4affdfdb6f838386cc70aaf3David Luna
ae6eb91d10bf796c4affdfdb6f838386cc70aaf3David Luna            <Organization>
ae6eb91d10bf796c4affdfdb6f838386cc70aaf3David Luna                <AttributeSchema name="iplanet-am-auth-saml2-auth-level"
ae6eb91d10bf796c4affdfdb6f838386cc70aaf3David Luna                                 type="single"
ae6eb91d10bf796c4affdfdb6f838386cc70aaf3David Luna                                 syntax="number_range" rangeStart="0" rangeEnd="2147483647"
ae6eb91d10bf796c4affdfdb6f838386cc70aaf3David Luna                                 validator="RequiredValueValidator"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                                 i18nKey="a500"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                                 resourceName="authenticationLevel">
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                    <DefaultValues>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                        <Value>0</Value>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                    </DefaultValues>
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                </AttributeSchema>
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                <AttributeSchema name="forgerock-am-auth-saml2-entity-name"
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                                 type="single"
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                                 syntax="string"
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                                 validator="RequiredValueValidator"
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                                 i18nKey="a501"
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                                 resourceName="entityName">
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                    <DefaultValues>
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                        <Value>http://</Value>
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                    </DefaultValues>
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                </AttributeSchema>
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                <AttributeSchema name="forgerock-am-auth-saml2-meta-alias"
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                                 type="single"
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                                 syntax="string"
f56a278c148b90f6c2a675e0c1fa8686ca5abed4Robert Wapshott                                 validator="RequiredValueValidator"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                                 i18nKey="a502"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                                 resourceName="metaAlias">
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                    <DefaultValues>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                        <Value>/sp</Value>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                    </DefaultValues>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                </AttributeSchema>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                <AttributeSchema name="forgerock-am-auth-saml2-allow-create"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                                 type="single_choice"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                                 syntax="string"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                                 i18nKey="a503"
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                                 resourceName="allowCreate">
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                    <ChoiceValues>
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                        <ChoiceValue i18nKey="true">true</ChoiceValue>
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                        <ChoiceValue i18nKey="false">false</ChoiceValue>
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                    </ChoiceValues>
d45a839aef1439938b43cec508f1bbbd3c5c235eNeil Madden                    <DefaultValues>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                        <Value>true</Value>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                    </DefaultValues>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                </AttributeSchema>
1d03ac3e808c2c653316d01713105e209914fc81Neil Madden                <AttributeSchema name="forgerock-am-auth-saml2-login-chain"
                                 type="single"
                                 syntax="string"
                                 i18nKey="a504"
                                 resourceName="loginChain">
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-auth-comparison"
                                 type="single_choice"
                                 syntax="string"
                                 i18nKey="a505"
                                 resourceName="authComparison">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="none">none</ChoiceValue>
                        <ChoiceValue i18nKey="better">better</ChoiceValue>
                        <ChoiceValue i18nKey="exact">exact</ChoiceValue>
                        <ChoiceValue i18nKey="maximum">maximum</ChoiceValue>
                        <ChoiceValue i18nKey="minimum">minimum</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>none</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-authn-context-class-ref"
                                 type="single"
                                 syntax="string"
                                 i18nKey="a506"
                                 resourceName="authnContextClassRef">
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-authn-context-decl-ref"
                                 type="single"
                                 syntax="string"
                                 i18nKey="a507"
                                 resourceName="authnContextDeclRef">
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-binding"
                                 type="single_choice"
                                 syntax="string"
                                 i18nKey="a508"
                                 resourceName="binding">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="HTTP-POST">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</ChoiceValue>
                        <ChoiceValue i18nKey="HTTP-Artifact">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-force-authn"
                                 type="single_choice"
                                 syntax="string"
                                 i18nKey="a510"
                                 resourceName="forceAuthn">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="none">none</ChoiceValue>
                        <ChoiceValue i18nKey="true">true</ChoiceValue>
                        <ChoiceValue i18nKey="false">false</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>none</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-is-passive"
                                 type="single_choice"
                                 syntax="string"
                                 i18nKey="a511"
                                 resourceName="isPassive">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="none">none</ChoiceValue>
                        <ChoiceValue i18nKey="true">true</ChoiceValue>
                        <ChoiceValue i18nKey="false">false</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>none</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-name-id-format"
                                 type="single_choice"
                                 syntax="string"
                                 i18nKey="a512"
                                 resourceName="nameIdFormat">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="Persistent">urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</ChoiceValue>
                        <ChoiceValue i18nKey="Transient">urn:oasis:names:tc:SAML:2.0:nameid-format:transient</ChoiceValue>
                        <ChoiceValue i18nKey="Unspecified">urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-req-binding"
                                 type="single_choice"
                                 syntax="string"
                                 i18nKey="a514"
                                 resourceName="reqBinding">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="HTTP-Redirect">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</ChoiceValue>
                        <ChoiceValue i18nKey="HTTP-POST">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-slo-enabled"
                                 type="single_choice"
                                 syntax="string"
                                 i18nKey="a515"
                                 resourceName="sloEnabled">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="true">true</ChoiceValue>
                        <ChoiceValue i18nKey="false">false</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>false</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="forgerock-am-auth-saml2-slo-relay"
                                 type="single"
                                 syntax="string"
                                 i18nKey="a516"
                                 resourceName="sloRelay">
                    <DefaultValues>
                        <Value>http://</Value>
                    </DefaultValues>
                </AttributeSchema>
                <SubSchema name="serverconfig" inheritance="multiple" resourceName="USE-PARENT">
                    <AttributeSchema name="forgerock-am-auth-saml2-auth-level"
                                     type="single"
                                     syntax="number_range" rangeStart="0" rangeEnd="2147483647"
                                     validator="RequiredValueValidator"
                                     i18nKey="a500"
                                     resourceName="authenticationLevel">
                        <DefaultValues>
                            <Value>0</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-entity-name"
                                     type="single"
                                     syntax="string"
                                     validator="RequiredValueValidator"
                                     i18nKey="a501"
                                     resourceName="entityName">
                        <DefaultValues>
                            <Value>http://</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-meta-alias"
                                     type="single"
                                     syntax="string"
                                     validator="RequiredValueValidator"
                                     i18nKey="a502"
                                     resourceName="metaAlias">
                        <DefaultValues>
                            <Value>/sp</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-allow-create"
                                     type="single_choice"
                                     syntax="string"
                                     i18nKey="a503"
                                     resourceName="allowCreate">
                        <ChoiceValues>
                            <ChoiceValue i18nKey="true">true</ChoiceValue>
                            <ChoiceValue i18nKey="false">false</ChoiceValue>
                        </ChoiceValues>
                        <DefaultValues>
                            <Value>false</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-login-chain"
                                     type="single"
                                     syntax="string"
                                     i18nKey="a504"
                                     resourceName="loginChain">
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-auth-comparison"
                                     type="single_choice"
                                     syntax="string"
                                     i18nKey="a505"
                                     resourceName="authComparison">
                        <ChoiceValues>
                            <ChoiceValue i18nKey="none">none</ChoiceValue>
                            <ChoiceValue i18nKey="better">better</ChoiceValue>
                            <ChoiceValue i18nKey="exact">exact</ChoiceValue>
                            <ChoiceValue i18nKey="maximum">maximum</ChoiceValue>
                            <ChoiceValue i18nKey="minimum">minimum</ChoiceValue>
                        </ChoiceValues>
                        <DefaultValues>
                            <Value>none</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-authn-context-class-ref"
                                     type="single"
                                     syntax="string"
                                     i18nKey="a506"
                                     resourceName="authnContextClassRef">
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-authn-context-decl-ref"
                                     type="single"
                                     syntax="string"
                                     i18nKey="a507"
                                     resourceName="authnContextDeclRef">
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-binding"
                                     type="single_choice"
                                     syntax="string"
                                     i18nKey="a508"
                                     resourceName="binding">
                        <ChoiceValues>
                            <ChoiceValue i18nKey="HTTP-POST">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</ChoiceValue>
                            <ChoiceValue i18nKey="HTTP-Artifact">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact</ChoiceValue>
                        </ChoiceValues>
                        <DefaultValues>
                            <Value>urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-force-authn"
                                     type="single_choice"
                                     syntax="string"
                                     i18nKey="a510"
                                     resourceName="forceAuthn">
                        <ChoiceValues>
                            <ChoiceValue i18nKey="none">none</ChoiceValue>
                            <ChoiceValue i18nKey="true">true</ChoiceValue>
                            <ChoiceValue i18nKey="false">false</ChoiceValue>
                        </ChoiceValues>
                        <DefaultValues>
                            <Value>none</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-is-passive"
                                     type="single_choice"
                                     syntax="string"
                                     i18nKey="a511"
                                     resourceName="isPassive">
                        <ChoiceValues>
                            <ChoiceValue i18nKey="none">none</ChoiceValue>
                            <ChoiceValue i18nKey="true">true</ChoiceValue>
                            <ChoiceValue i18nKey="false">false</ChoiceValue>
                        </ChoiceValues>
                        <DefaultValues>
                            <Value>none</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-name-id-format"
                                     type="single_choice"
                                     syntax="string"
                                     i18nKey="a512"
                                     resourceName="nameIdFormat">
                        <ChoiceValues>
                            <ChoiceValue i18nKey="Persistent">urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</ChoiceValue>
                            <ChoiceValue i18nKey="Transient">urn:oasis:names:tc:SAML:2.0:nameid-format:transient</ChoiceValue>
                            <ChoiceValue i18nKey="Unspecified">urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified</ChoiceValue>
                        </ChoiceValues>
                        <DefaultValues>
                            <Value>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-req-binding"
                                     type="single_choice"
                                     syntax="string"
                                     i18nKey="a514"
                                     resourceName="reqBinding">
                        <ChoiceValues>
                            <ChoiceValue i18nKey="HTTP-Redirect">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</ChoiceValue>
                            <ChoiceValue i18nKey="HTTP-POST">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</ChoiceValue>
                        </ChoiceValues>
                        <DefaultValues>
                            <Value>urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-slo-enabled"
                                     type="single_choice"
                                     syntax="string"
                                     i18nKey="a515"
                                     resourceName="sloEnabled">
                        <ChoiceValues>
                            <ChoiceValue i18nKey="true">true</ChoiceValue>
                            <ChoiceValue i18nKey="false">false</ChoiceValue>
                        </ChoiceValues>
                        <DefaultValues>
                            <Value>false</Value>
                        </DefaultValues>
                    </AttributeSchema>
                    <AttributeSchema name="forgerock-am-auth-saml2-slo-relay"
                                     type="single"
                                     syntax="string"
                                     i18nKey="a516"
                                     resourceName="sloRelay">
                        <DefaultValues>
                            <Value>http://</Value>
                        </DefaultValues>
                    </AttributeSchema>
                </SubSchema>
            </Organization>
        </Schema>
    </Service>
</ServicesConfiguration>