[Summary view] [Print] [Text view]

   1  <?xml version="1.0" encoding="UTF-8"?>
   2  <wsdl:definitions xmlns:schema="http://sts.idm.telekom.com/schema/" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy" xmlns:tns="http://sts.idm.telekom.com/wsdl/" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="sts" targetNamespace="http://sts.idm.telekom.com/wsdl/">
   3      <wsdl:types>
   4          <xsd:schema attributeFormDefault="qualified" elementFormDefault="qualified" targetNamespace="http://sts.idm.telekom.com/schema/" version="0.1" xmlns:tns="http://sts.idm.telekom.com/schema/" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
   5              <xsd:complexType name="FaultResponse">
   6                  <xsd:sequence>
   7                      <xsd:element maxOccurs="1" minOccurs="1" name="code" nillable="false" type="xsd:string"/>
   8                      <xsd:element maxOccurs="1" minOccurs="1" name="msg" nillable="false" type="xsd:string"/>
   9                      <xsd:element maxOccurs="1" minOccurs="0" name="lockedUntil" nillable="true" type="xsd:dateTime"/>
  10                  </xsd:sequence>
  11              </xsd:complexType>
  12              <xsd:simpleType name="SecurityTokenFormatId">
  13                  <xsd:annotation>
  14                      <xsd:documentation>
  15  
  16                      Telekom specific format id, e.g. there will be multiple
  17                      different token formats derived from SAML 2.0 Assertions
  18                       </xsd:documentation>
  19                  </xsd:annotation>
  20                  <xsd:restriction base="xsd:string">
  21                      <xsd:enumeration value="saml20"/>
  22                  </xsd:restriction>
  23              </xsd:simpleType>
  24              <xsd:simpleType name="SecurityTokenEncodingId">
  25                  <xsd:annotation>
  26                      <xsd:documentation>
  27  
  28                      Telekom specific encoding id - there can be different
  29                      encoding formats for the same token format, e.g. SAML
  30                      Assertions can be encoded as plain XML or in
  31                      base64-encoding
  32                       </xsd:documentation>
  33                  </xsd:annotation>
  34                  <xsd:restriction base="xsd:string">
  35                      <xsd:enumeration value="text/xml"/>
  36                      <xsd:enumeration value="text/base64"/>
  37                  </xsd:restriction>
  38              </xsd:simpleType>
  39              <xsd:complexType name="SecurityTokenResponse">
  40                  <xsd:sequence>
  41                      <xsd:element maxOccurs="1" minOccurs="1" name="tokenFormat" type="tns:SecurityTokenFormatId">
  42                          <xsd:annotation>
  43                              <xsd:documentation>
  44  
  45                              format of the token carried by the response,
  46                              determines syntax and processing rules for token
  47                                 </xsd:documentation>
  48                          </xsd:annotation>
  49                      </xsd:element>
  50                      <xsd:element maxOccurs="1" minOccurs="0" name="tokenEncoding" type="tns:SecurityTokenEncodingId">
  51                          <xsd:annotation>
  52                              <xsd:documentation>
  53  
  54                              encoding of the token carried by the response,
  55                              determines syntax and processing rules for token
  56                                 </xsd:documentation>
  57                          </xsd:annotation>
  58                      </xsd:element>
  59                      <xsd:element maxOccurs="1" minOccurs="1" name="tokenData" type="xsd:string">
  60                          <xsd:annotation>
  61                              <xsd:documentation>
  62  
  63                              contains the string representation of the
  64                              security token - no further token format identifier
  65                                 </xsd:documentation>
  66                          </xsd:annotation>
  67                      </xsd:element>
  68                  </xsd:sequence>
  69              </xsd:complexType>
  70              <xsd:complexType name="login">
  71                  <xsd:sequence/>
  72              </xsd:complexType>
  73              <xsd:complexType name="getTokens">
  74                  <xsd:sequence>
  75                      <xsd:element maxOccurs="unbounded" minOccurs="1" name="serviceId" type="xsd:string">
  76  
  77                       </xsd:element>
  78                  </xsd:sequence>
  79              </xsd:complexType>
  80              <xsd:complexType name="getTokensResponse">
  81                  <xsd:sequence>
  82                      <xsd:element maxOccurs="unbounded" minOccurs="1" name="securityToken" type="tns:SecurityTokenResponse">
  83  
  84                       </xsd:element>
  85                  </xsd:sequence>
  86              </xsd:complexType>
  87              <xsd:complexType name="getTokensForSession">
  88                  <xsd:sequence>
  89                      <xsd:element maxOccurs="unbounded" minOccurs="1" name="serviceId" type="xsd:string">
  90  
  91                       </xsd:element>
  92                      <xsd:element maxOccurs="1" minOccurs="1" name="ssid" type="xsd:string">
  93                          <xsd:annotation>
  94                              <xsd:documentation>
  95  
  96                              valid SAM Session Id
  97                                 </xsd:documentation>
  98                          </xsd:annotation>
  99                      </xsd:element>
 100                  </xsd:sequence>
 101              </xsd:complexType>
 102              <xsd:simpleType name="IDType">
 103                  <xsd:restriction base="xsd:string">
 104                      <xsd:enumeration value="guid"/>
 105                      <xsd:enumeration value="anid"/>
 106                      <xsd:enumeration value="alia"/>
 107                  </xsd:restriction>
 108              </xsd:simpleType>
 109              <xsd:complexType name="getTokensForUserId">
 110                  <xsd:sequence>
 111                      <xsd:element maxOccurs="unbounded" minOccurs="1" name="serviceId" type="xsd:string">
 112  
 113                       </xsd:element>
 114                      <xsd:element name="uid" type="xsd:string"/>
 115                      <xsd:element name="idx" type="tns:IDType"/>
 116                      <xsd:element maxOccurs="unbounded" minOccurs="0" name="authn" type="xsd:string"/>
 117                  </xsd:sequence>
 118              </xsd:complexType>
 119              <xsd:complexType name="getTokensForUserIdAndProfile">
 120                  <xsd:sequence>
 121                      <xsd:element maxOccurs="unbounded" minOccurs="1" name="serviceId" type="xsd:string">
 122  
 123                       </xsd:element>
 124                      <xsd:element name="uid" type="xsd:string"/>
 125                      <xsd:element name="idx" type="tns:IDType"/>
 126                      <xsd:element maxOccurs="unbounded" minOccurs="0" name="authn" type="xsd:string"/>
 127                      <xsd:element maxOccurs="1" minOccurs="1" name="profileId" type="xsd:string">
 128  
 129                       </xsd:element>
 130                  </xsd:sequence>
 131              </xsd:complexType>
 132              <xsd:element name="FaultResponse" type="tns:FaultResponse"/>
 133              <xsd:element name="login" type="tns:login"/>
 134              <xsd:element name="loginResponse" type="tns:SecurityTokenResponse"/>
 135              <xsd:element name="getTokens" type="tns:getTokens"/>
 136              <xsd:element name="getTokensResponse" type="tns:getTokensResponse"/>
 137              <xsd:element name="getTokensForSessionResponse" type="tns:getTokensResponse"/>
 138              <xsd:element name="getTokensForUserIdResponse" type="tns:getTokensResponse"/>
 139              <xsd:element name="getTokensForUserIdAndProfileResponse" type="tns:getTokensResponse"/>
 140              <xsd:element name="getTokensForSession" type="tns:getTokensForSession"/>
 141              <xsd:element name="getTokensForUserId" type="tns:getTokensForUserId"/>
 142              <xsd:element name="getTokensForUserIdAndProfile" type="tns:getTokensForUserIdAndProfile"/>
 143          </xsd:schema>
 144      </wsdl:types>
 145      <wsdl:message name="FaultResponse">
 146          <wsdl:part name="fault" element="schema:FaultResponse"/>
 147      </wsdl:message>
 148      <wsdl:message name="loginRequest">
 149          <wsdl:part name="parameters" element="schema:login"/>
 150      </wsdl:message>
 151      <wsdl:message name="loginResponse">
 152          <wsdl:part name="parameters" element="schema:loginResponse"/>
 153      </wsdl:message>
 154      <wsdl:message name="getTokensRequest">
 155          <wsdl:part name="parameters" element="schema:getTokens"/>
 156      </wsdl:message>
 157      <wsdl:message name="getTokensResponse">
 158          <wsdl:part name="getTokensResponse" element="schema:getTokensResponse">
 159  
 160        </wsdl:part>
 161      </wsdl:message>
 162      <wsdl:message name="getTokensForSessionRequest">
 163          <wsdl:part name="parameters" element="schema:getTokensForSession">
 164  
 165        </wsdl:part>
 166      </wsdl:message>
 167      <wsdl:message name="getTokensForSessionResponse">
 168          <wsdl:part name="getTokensForSessionResponse" element="schema:getTokensForSessionResponse">
 169  
 170        </wsdl:part>
 171      </wsdl:message>
 172      <wsdl:message name="getTokensForUserIdRequest">
 173          <wsdl:part name="parameters" element="schema:getTokensForUserId">
 174  
 175        </wsdl:part>
 176      </wsdl:message>
 177      <wsdl:message name="getTokensForUserIdResponse">
 178          <wsdl:part name="getTokensForUserIdResponse" element="schema:getTokensForUserIdResponse">
 179  
 180        </wsdl:part>
 181      </wsdl:message>
 182      <wsdl:message name="getTokensForUserIdAndProfileRequest">
 183          <wsdl:part name="parameters" element="schema:getTokensForUserIdAndProfile">
 184  
 185        </wsdl:part>
 186      </wsdl:message>
 187      <wsdl:message name="getTokensForUserIdAndProfileResponse">
 188          <wsdl:part name="getTokensForUserIdAndProfileResponse" element="schema:getTokensForUserIdAndProfileResponse">
 189  
 190        </wsdl:part>
 191      </wsdl:message>
 192      <wsdl:portType name="SecurityTokenServiceWS">
 193          <wsdl:operation name="login">
 194              <wsdl:input message="tns:loginRequest"/>
 195              <wsdl:output message="tns:loginResponse"/>
 196              <wsdl:fault name="fault" message="tns:FaultResponse"/>
 197          </wsdl:operation>
 198          <wsdl:operation name="getTokens">
 199              <wsdl:input message="tns:getTokensRequest"/>
 200              <wsdl:output message="tns:getTokensResponse"/>
 201              <wsdl:fault name="fault" message="tns:FaultResponse"/>
 202          </wsdl:operation>
 203          <wsdl:operation name="getTokensForSession">
 204              <wsdl:input message="tns:getTokensForSessionRequest"/>
 205              <wsdl:output message="tns:getTokensForSessionResponse"/>
 206              <wsdl:fault name="fault" message="tns:FaultResponse"/>
 207          </wsdl:operation>
 208          <wsdl:operation name="getTokensForUserId">
 209              <wsdl:input message="tns:getTokensForUserIdRequest"/>
 210              <wsdl:output message="tns:getTokensForUserIdResponse"/>
 211              <wsdl:fault name="fault" message="tns:FaultResponse"/>
 212          </wsdl:operation>
 213          <wsdl:operation name="getTokensForUserIdAndProfile">
 214              <wsdl:input message="tns:getTokensForUserIdAndProfileRequest">
 215  
 216           </wsdl:input>
 217              <wsdl:output message="tns:getTokensForUserIdAndProfileResponse"/>
 218              <wsdl:fault name="fault" message="tns:FaultResponse"/>
 219          </wsdl:operation>
 220      </wsdl:portType>
 221      <wsdl:binding name="SecurityTokenServiceSOAPBinding" type="tns:SecurityTokenServiceWS">
 222          <soap:binding transport="http://schemas.xmlsoap.org/soap/http"/>
 223          <wsp:PolicyReference URI="#TransportBindingPolicy"/>
 224          <wsdl:operation name="login">
 225              <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/login"/>
 226              <wsdl:input>
 227                  <wsp:PolicyReference URI="#UsernameTokenPolicy"/>
 228                  <soap:body use="literal"/>
 229              </wsdl:input>
 230              <wsdl:output>
 231                  <soap:body use="literal"/>
 232              </wsdl:output>
 233              <wsdl:fault name="fault">
 234                  <soap:fault name="fault" use="literal"/>
 235              </wsdl:fault>
 236          </wsdl:operation>
 237          <wsdl:operation name="getTokens">
 238              <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/getTokens"/>
 239              <wsdl:input>
 240                  <wsp:PolicyReference URI="#SAMLTokenPolicy"/>
 241                  <soap:body use="literal"/>
 242              </wsdl:input>
 243              <wsdl:output>
 244                  <soap:body use="literal"/>
 245              </wsdl:output>
 246              <wsdl:fault name="fault">
 247                  <soap:fault name="fault" use="literal"/>
 248              </wsdl:fault>
 249          </wsdl:operation>
 250          <wsdl:operation name="getTokensForSession">
 251              <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/getTokensForSession"/>
 252              <wsdl:input>
 253                  <wsp:PolicyReference URI="#SAMLTokenPolicy"/>
 254                  <soap:body use="literal"/>
 255              </wsdl:input>
 256              <wsdl:output>
 257                  <soap:body use="literal"/>
 258              </wsdl:output>
 259              <wsdl:fault name="fault">
 260                  <soap:fault name="fault" use="literal"/>
 261              </wsdl:fault>
 262          </wsdl:operation>
 263          <wsdl:operation name="getTokensForUserId">
 264              <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/getTokensForUserId"/>
 265              <wsdl:input>
 266                  <wsp:PolicyReference URI="#SAMLTokenPolicy"/>
 267                  <soap:body use="literal"/>
 268              </wsdl:input>
 269              <wsdl:output>
 270                  <soap:body use="literal"/>
 271              </wsdl:output>
 272              <wsdl:fault name="fault">
 273                  <soap:fault name="fault" use="literal"/>
 274              </wsdl:fault>
 275          </wsdl:operation>
 276          <wsdl:operation name="getTokensForUserIdAndProfile">
 277              <soap:operation soapAction="http://sts.idm.telekom.com/wsdl/getTokensForUserIdAndProfile"/>
 278              <wsdl:input>
 279                  <wsp:PolicyReference URI="#SAMLTokenPolicy"/>
 280                  <soap:body use="literal"/>
 281              </wsdl:input>
 282              <wsdl:output>
 283                  <soap:body use="literal"/>
 284              </wsdl:output>
 285              <wsdl:fault name="fault">
 286                  <soap:fault name="fault" use="literal"/>
 287              </wsdl:fault>
 288          </wsdl:operation>
 289      </wsdl:binding>
 290      <wsdl:service name="SecurityTokenService">
 291          <wsdl:port name="TokenService" binding="tns:SecurityTokenServiceSOAPBinding">
 292              <soap:address location="https://sts.idm.telekom.com/TokenService"/>
 293          </wsdl:port>
 294      </wsdl:service>
 295      <wsp:Policy wsu:Id="TransportBindingPolicy">
 296          <wsp:ExactlyOne>
 297              <wsp:All>
 298                  <wsaws:UsingAddressing xmlns:wsaws="http://www.w3.org/2006/05/addressing/wsdl"/>
 299                  <sp:TransportBinding>
 300                      <wsp:Policy>
 301                          <sp:TransportToken>
 302                              <wsp:Policy>
 303                                  <sp:HttpsToken RequireClientCertificate="false"/>
 304                              </wsp:Policy>
 305                          </sp:TransportToken>
 306                          <sp:Layout>
 307                              <wsp:Policy>
 308                                  <sp:Strict/>
 309                              </wsp:Policy>
 310                          </sp:Layout>
 311                          <sp:IncludeTimestamp/>
 312                          <sp:AlgorithmSuite>
 313                              <wsp:Policy>
 314                                  <sp:Basic256/>
 315                              </wsp:Policy>
 316                          </sp:AlgorithmSuite>
 317                      </wsp:Policy>
 318                  </sp:TransportBinding>
 319                  <sp:Wss11/>
 320              </wsp:All>
 321          </wsp:ExactlyOne>
 322      </wsp:Policy>
 323      <wsp:Policy wsu:Id="UsernameTokenPolicy">
 324          <wsp:ExactlyOne>
 325              <wsp:All>
 326                  <sp:SupportingTokens>
 327                      <wsp:Policy>
 328                          <sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
 329                              <wsp:Policy>
 330                                  <sp:WssUsernameToken11/>
 331                              </wsp:Policy>
 332                          </sp:UsernameToken>
 333                      </wsp:Policy>
 334                  </sp:SupportingTokens>
 335              </wsp:All>
 336          </wsp:ExactlyOne>
 337      </wsp:Policy>
 338      <wsp:Policy wsu:Id="SAMLTokenPolicy">
 339          <wsp:ExactlyOne>
 340              <wsp:All>
 341                  <sp:SupportingTokens>
 342                      <wsp:Policy>
 343                          <sp:SamlToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
 344                              <wsp:Policy>
 345                                  <sp:WssSamlV20Token11/>
 346                              </wsp:Policy>
 347                          </sp:SamlToken>
 348                      </wsp:Policy>
 349                  </sp:SupportingTokens>
 350              </wsp:All>
 351          </wsp:ExactlyOne>
 352      </wsp:Policy>
 353  </wsdl:definitions>