|
1 <?xml version="1.0" encoding="UTF-8"?> |
|
2 <wsdl:definitions xmlns:schema="http://sts.idm.telekom.com/schema/" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy" xmlns:tns="http://sts.idm.telekom.com/wsdl/" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="sts" targetNamespace="http://sts.idm.telekom.com/wsdl/"> |
|
3 <wsdl:types> |
|
4 <xsd:schema attributeFormDefault="qualified" elementFormDefault="qualified" targetNamespace="http://sts.idm.telekom.com/schema/" version="0.1" xmlns:tns="http://sts.idm.telekom.com/schema/" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> |
|
5 <xsd:complexType name="FaultResponse"> |
|
6 <xsd:sequence> |
|
7 <xsd:element maxOccurs="1" minOccurs="1" name="code" nillable="false" type="xsd:string"/> |
|
8 <xsd:element maxOccurs="1" minOccurs="1" name="msg" nillable="false" type="xsd:string"/> |
|
9 <xsd:element maxOccurs="1" minOccurs="0" name="lockedUntil" nillable="true" type="xsd:dateTime"/> |
|
10 </xsd:sequence> |
|
11 </xsd:complexType> |
|
12 <xsd:simpleType name="SecurityTokenFormatId"> |
|
13 <xsd:annotation> |
|
14 <xsd:documentation> |
|
15 |
|
16 Telekom specific format id, e.g. there will be multiple |
|
17 different token formats derived from SAML 2.0 Assertions |
|
18 </xsd:documentation> |
|
19 </xsd:annotation> |
|
20 <xsd:restriction base="xsd:string"> |
|
21 <xsd:enumeration value="saml20"/> |
|
22 </xsd:restriction> |
|
23 </xsd:simpleType> |
|
24 <xsd:simpleType name="SecurityTokenEncodingId"> |
|
25 <xsd:annotation> |
|
26 <xsd:documentation> |
|
27 |
|
28 Telekom specific encoding id - there can be different |
|
29 encoding formats for the same token format, e.g. SAML |
|
30 Assertions can be encoded as plain XML or in |
|
31 base64-encoding |
|
32 </xsd:documentation> |
|
33 </xsd:annotation> |
|
34 <xsd:restriction base="xsd:string"> |
|
35 <xsd:enumeration value="text/xml"/> |
|
36 <xsd:enumeration value="text/base64"/> |
|
37 </xsd:restriction> |
|
38 </xsd:simpleType> |
|
39 <xsd:complexType name="SecurityTokenResponse"> |
|
40 <xsd:sequence> |
|
41 <xsd:element maxOccurs="1" minOccurs="1" name="tokenFormat" type="tns:SecurityTokenFormatId"> |
|
42 <xsd:annotation> |
|
43 <xsd:documentation> |
|
44 |
|
45 format of the token carried by the response, |
|
46 determines syntax and processing rules for token |
|
47 </xsd:documentation> |
|
48 </xsd:annotation> |
|
49 </xsd:element> |
|
50 <xsd:element maxOccurs="1" minOccurs="0" name="tokenEncoding" type="tns:SecurityTokenEncodingId"> |
|
51 <xsd:annotation> |
|
52 <xsd:documentation> |
|
53 |
|
54 encoding of the token carried by the response, |
|
55 determines syntax and processing rules for token |
|
56 </xsd:documentation> |
|
57 </xsd:annotation> |
|
58 </xsd:element> |
|
59 <xsd:element maxOccurs="1" minOccurs="1" name="tokenData" type="xsd:string"> |
|
60 <xsd:annotation> |
|
61 <xsd:documentation> |
|
62 |
|
63 contains the string representation of the |
|
64 security token - no further token format identifier |
|
65 </xsd:documentation> |
|
66 </xsd:annotation> |
|
67 </xsd:element> |
|
68 </xsd:sequence> |
|
69 </xsd:complexType> |
|
70 <xsd:complexType name="login"> |
|
71 <xsd:sequence/> |
|
72 </xsd:complexType> |
|
73 <xsd:complexType name="getTokens"> |
|
74 <xsd:sequence> |
|
75 <xsd:element maxOccurs="unbounded" minOccurs="1" name="serviceId" type="xsd:string"> |
|
76 |
|
77 </xsd:element> |
|
78 </xsd:sequence> |
|
79 </xsd:complexType> |
|
80 <xsd:complexType name="getTokensResponse"> |
|
81 <xsd:sequence> |
|
82 <xsd:element maxOccurs="unbounded" minOccurs="1" name="securityToken" type="tns:SecurityTokenResponse"> |
|
83 |
|
84 </xsd:element> |
|
85 </xsd:sequence> |
|
86 </xsd:complexType> |
|
87 <xsd:complexType name="getTokensForSession"> |
|
88 <xsd:sequence> |
|
89 <xsd:element maxOccurs="unbounded" minOccurs="1" name="serviceId" type="xsd:string"> |
|
90 |
|
91 </xsd:element> |
|
92 <xsd:element maxOccurs="1" minOccurs="1" name="ssid" type="xsd:string"> |
|
93 <xsd:annotation> |
|
94 <xsd:documentation> |
|
95 |
|
96 valid SAM Session Id |
|
97 </xsd:documentation> |
|
98 </xsd:annotation> |
|
99 </xsd:element> |
|
100 </xsd:sequence> |
|
101 </xsd:complexType> |
|
102 <xsd:simpleType name="IDType"> |
|
103 <xsd:restriction base="xsd:string"> |
|
104 <xsd:enumeration value="guid"/> |
|
105 <xsd:enumeration value="anid"/> |
|
106 <xsd:enumeration value="alia"/> |
|
107 </xsd:restriction> |
|
108 </xsd:simpleType> |
|
109 <xsd:complexType name="getTokensForUserId"> |
|
110 <xsd:sequence> |
|
111 <xsd:element maxOccurs="unbounded" minOccurs="1" name="serviceId" type="xsd:string"> |
|
112 |
|
113 </xsd:element> |
|
114 <xsd:element name="uid" type="xsd:string"/> |
|
115 <xsd:element name="idx" type="tns:IDType"/> |
|
116 <xsd:element maxOccurs="unbounded" minOccurs="0" name="authn" type="xsd:string"/> |
|
117 </xsd:sequence> |
|
118 </xsd:complexType> |
|
119 <xsd:complexType name="getTokensForUserIdAndProfile"> |
|
120 <xsd:sequence> |
|
121 <xsd:element maxOccurs="unbounded" minOccurs="1" name="serviceId" type="xsd:string"> |
|
122 |
|
123 </xsd:element> |
|
124 <xsd:element name="uid" type="xsd:string"/> |
|
125 <xsd:element name="idx" type="tns:IDType"/> |
|
126 <xsd:element maxOccurs="unbounded" minOccurs="0" name="authn" type="xsd:string"/> |
|
127 <xsd:element maxOccurs="1" minOccurs="1" name="profileId" type="xsd:string"> |
|
128 |
|
129 </xsd:element> |
|
130 </xsd:sequence> |
|
131 </xsd:complexType> |
|
132 <xsd:element name="FaultResponse" type="tns:FaultResponse"/> |
|
133 <xsd:element name="login" type="tns:login"/> |
|
134 <xsd:element name="loginResponse" type="tns:SecurityTokenResponse"/> |
|
135 <xsd:element name="getTokens" type="tns:getTokens"/> |
|
136 <xsd:element name="getTokensResponse" type="tns:getTokensResponse"/> |
|
137 <xsd:element name="getTokensForSessionResponse" type="tns:getTokensResponse"/> |
|
138 <xsd:element name="getTokensForUserIdResponse" type="tns:getTokensResponse"/> |
|
139 <xsd:element name="getTokensForUserIdAndProfileResponse" type="tns:getTokensResponse"/> |
|
140 <xsd:element name="getTokensForSession" type="tns:getTokensForSession"/> |
|
141 <xsd:element name="getTokensForUserId" type="tns:getTokensForUserId"/> |
|
142 <xsd:element name="getTokensForUserIdAndProfile" type="tns:getTokensForUserIdAndProfile"/> |
|
143 </xsd:schema> |
|
144 </wsdl:types> |
|
145 <wsdl:message name="FaultResponse"> |
|
146 <wsdl:part name="fault" element="schema:FaultResponse"/> |
|
147 </wsdl:message> |
|
148 <wsdl:message name="loginRequest"> |
|
149 <wsdl:part name="parameters" element="schema:login"/> |
|
150 </wsdl:message> |
|
151 <wsdl:message name="loginResponse"> |
|
152 <wsdl:part name="parameters" element="schema:loginResponse"/> |
|
153 </wsdl:message> |
|
154 <wsdl:message name="getTokensRequest"> |
|
155 <wsdl:part name="parameters" element="schema:getTokens"/> |
|
156 </wsdl:message> |
|
157 <wsdl:message name="getTokensResponse"> |
|
158 <wsdl:part name="getTokensResponse" element="schema:getTokensResponse"> |
|
159 |
|
160 </wsdl:part> |
|
161 </wsdl:message> |
|
162 <wsdl:message name="getTokensForSessionRequest"> |
|
163 <wsdl:part name="parameters" element="schema:getTokensForSession"> |
|
164 |
|
165 </wsdl:part> |
|
166 </wsdl:message> |
|
167 <wsdl:message name="getTokensForSessionResponse"> |
|
168 <wsdl:part name="getTokensForSessionResponse" element="schema:getTokensForSessionResponse"> |
|
169 |
|
170 </wsdl:part> |
|
171 </wsdl:message> |
|
172 <wsdl:message name="getTokensForUserIdRequest"> |
|
173 <wsdl:part name="parameters" element="schema:getTokensForUserId"> |
|
174 |
|
175 </wsdl:part> |
|
176 </wsdl:message> |
|
177 <wsdl:message name="getTokensForUserIdResponse"> |
|
178 <wsdl:part name="getTokensForUserIdResponse" element="schema:getTokensForUserIdResponse"> |
|
179 |
|
180 </wsdl:part> |
|
181 </wsdl:message> |
|
182 <wsdl:message name="getTokensForUserIdAndProfileRequest"> |
|
183 <wsdl:part name="parameters" element="schema:getTokensForUserIdAndProfile"> |
|
184 |
|
185 </wsdl:part> |
|
186 </wsdl:message> |
|
187 <wsdl:message name="getTokensForUserIdAndProfileResponse"> |
|
188 <wsdl:part name="getTokensForUserIdAndProfileResponse" element="schema:getTokensForUserIdAndProfileResponse"> |
|
189 |
|
190 </wsdl:part> |
|
191 </wsdl:message> |
|
192 <wsdl:portType name="SecurityTokenServiceWS"> |
|
193 <wsdl:operation name="login"> |
|
194 <wsdl:input message="tns:loginRequest"/> |
|
195 <wsdl:output message="tns:loginResponse"/> |
|
196 <wsdl:fault name="fault" message="tns:FaultResponse"/> |
|
197 </wsdl:operation> |
|
198 <wsdl:operation name="getTokens"> |
|
199 <wsdl:input message="tns:getTokensRequest"/> |
|
200 <wsdl:output message="tns:getTokensResponse"/> |
|
201 <wsdl:fault name="fault" message="tns:FaultResponse"/> |
|
202 </wsdl:operation> |
|
203 <wsdl:operation name="getTokensForSession"> |
|
204 <wsdl:input message="tns:getTokensForSessionRequest"/> |
|
205 <wsdl:output message="tns:getTokensForSessionResponse"/> |
|
206 <wsdl:fault name="fault" message="tns:FaultResponse"/> |
|
207 </wsdl:operation> |
|
208 <wsdl:operation name="getTokensForUserId"> |
|
209 <wsdl:input message="tns:getTokensForUserIdRequest"/> |
|
210 <wsdl:output message="tns:getTokensForUserIdResponse"/> |
|
211 <wsdl:fault name="fault" message="tns:FaultResponse"/> |
|
212 </wsdl:operation> |
|
213 <wsdl:operation name="getTokensForUserIdAndProfile"> |
|
214 <wsdl:input message="tns:getTokensForUserIdAndProfileRequest"> |
|
215 |
|
216 </wsdl:input> |
|
217 <wsdl:output message="tns:getTokensForUserIdAndProfileResponse"/> |
|
218 <wsdl:fault name="fault" message="tns:FaultResponse"/> |
|
219 </wsdl:operation> |
|
220 </wsdl:portType> |
|
221 <wsdl:binding name="SecurityTokenServiceSOAPBinding" type="tns:SecurityTokenServiceWS"> |
|
222 <soap:binding transport="http://schemas.xmlsoap.org/soap/http"/> |
|
223 <wsp:PolicyReference URI="#TransportBindingPolicy"/> |
|
224 <wsdl:operation name="login"> |
|
225 <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/login"/> |
|
226 <wsdl:input> |
|
227 <wsp:PolicyReference URI="#UsernameTokenPolicy"/> |
|
228 <soap:body use="literal"/> |
|
229 </wsdl:input> |
|
230 <wsdl:output> |
|
231 <soap:body use="literal"/> |
|
232 </wsdl:output> |
|
233 <wsdl:fault name="fault"> |
|
234 <soap:fault name="fault" use="literal"/> |
|
235 </wsdl:fault> |
|
236 </wsdl:operation> |
|
237 <wsdl:operation name="getTokens"> |
|
238 <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/getTokens"/> |
|
239 <wsdl:input> |
|
240 <wsp:PolicyReference URI="#SAMLTokenPolicy"/> |
|
241 <soap:body use="literal"/> |
|
242 </wsdl:input> |
|
243 <wsdl:output> |
|
244 <soap:body use="literal"/> |
|
245 </wsdl:output> |
|
246 <wsdl:fault name="fault"> |
|
247 <soap:fault name="fault" use="literal"/> |
|
248 </wsdl:fault> |
|
249 </wsdl:operation> |
|
250 <wsdl:operation name="getTokensForSession"> |
|
251 <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/getTokensForSession"/> |
|
252 <wsdl:input> |
|
253 <wsp:PolicyReference URI="#SAMLTokenPolicy"/> |
|
254 <soap:body use="literal"/> |
|
255 </wsdl:input> |
|
256 <wsdl:output> |
|
257 <soap:body use="literal"/> |
|
258 </wsdl:output> |
|
259 <wsdl:fault name="fault"> |
|
260 <soap:fault name="fault" use="literal"/> |
|
261 </wsdl:fault> |
|
262 </wsdl:operation> |
|
263 <wsdl:operation name="getTokensForUserId"> |
|
264 <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/getTokensForUserId"/> |
|
265 <wsdl:input> |
|
266 <wsp:PolicyReference URI="#SAMLTokenPolicy"/> |
|
267 <soap:body use="literal"/> |
|
268 </wsdl:input> |
|
269 <wsdl:output> |
|
270 <soap:body use="literal"/> |
|
271 </wsdl:output> |
|
272 <wsdl:fault name="fault"> |
|
273 <soap:fault name="fault" use="literal"/> |
|
274 </wsdl:fault> |
|
275 </wsdl:operation> |
|
276 <wsdl:operation name="getTokensForUserIdAndProfile"> |
|
277 <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/getTokensForUserIdAndProfile"/> |
|
278 <wsdl:input> |
|
279 <wsp:PolicyReference URI="#SAMLTokenPolicy"/> |
|
280 <soap:body use="literal"/> |
|
281 </wsdl:input> |
|
282 <wsdl:output> |
|
283 <soap:body use="literal"/> |
|
284 </wsdl:output> |
|
285 <wsdl:fault name="fault"> |
|
286 <soap:fault name="fault" use="literal"/> |
|
287 </wsdl:fault> |
|
288 </wsdl:operation> |
|
289 </wsdl:binding> |
|
290 <wsdl:service name="SecurityTokenService"> |
|
291 <wsdl:port name="TokenService" binding="tns:SecurityTokenServiceSOAPBinding"> |
|
292 <soap:address location="https://sts.idm.telekom.com/TokenService"/> |
|
293 </wsdl:port> |
|
294 </wsdl:service> |
|
295 <wsp:Policy wsu:Id="TransportBindingPolicy"> |
|
296 <wsp:ExactlyOne> |
|
297 <wsp:All> |
|
298 <wsaws:UsingAddressing xmlns:wsaws="http://www.w3.org/2006/05/addressing/wsdl"/> |
|
299 <sp:TransportBinding> |
|
300 <wsp:Policy> |
|
301 <sp:TransportToken> |
|
302 <wsp:Policy> |
|
303 <sp:HttpsToken RequireClientCertificate="false"/> |
|
304 </wsp:Policy> |
|
305 </sp:TransportToken> |
|
306 <sp:Layout> |
|
307 <wsp:Policy> |
|
308 <sp:Strict/> |
|
309 </wsp:Policy> |
|
310 </sp:Layout> |
|
311 <sp:IncludeTimestamp/> |
|
312 <sp:AlgorithmSuite> |
|
313 <wsp:Policy> |
|
314 <sp:Basic256/> |
|
315 </wsp:Policy> |
|
316 </sp:AlgorithmSuite> |
|
317 </wsp:Policy> |
|
318 </sp:TransportBinding> |
|
319 <sp:Wss11/> |
|
320 </wsp:All> |
|
321 </wsp:ExactlyOne> |
|
322 </wsp:Policy> |
|
323 <wsp:Policy wsu:Id="UsernameTokenPolicy"> |
|
324 <wsp:ExactlyOne> |
|
325 <wsp:All> |
|
326 <sp:SupportingTokens> |
|
327 <wsp:Policy> |
|
328 <sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"> |
|
329 <wsp:Policy> |
|
330 <sp:WssUsernameToken11/> |
|
331 </wsp:Policy> |
|
332 </sp:UsernameToken> |
|
333 </wsp:Policy> |
|
334 </sp:SupportingTokens> |
|
335 </wsp:All> |
|
336 </wsp:ExactlyOne> |
|
337 </wsp:Policy> |
|
338 <wsp:Policy wsu:Id="SAMLTokenPolicy"> |
|
339 <wsp:ExactlyOne> |
|
340 <wsp:All> |
|
341 <sp:SupportingTokens> |
|
342 <wsp:Policy> |
|
343 <sp:SamlToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"> |
|
344 <wsp:Policy> |
|
345 <sp:WssSamlV20Token11/> |
|
346 </wsp:Policy> |
|
347 </sp:SamlToken> |
|
348 </wsp:Policy> |
|
349 </sp:SupportingTokens> |
|
350 </wsp:All> |
|
351 </wsp:ExactlyOne> |
|
352 </wsp:Policy> |
|
353 </wsdl:definitions> |