h$qPk       !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFG H I JKLMNOPQRSTUVWXYZ[\]^_`abcd e f g h i j k l m n o p q r s t u v w x y z { | } ~                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Safe-Inferredhsaml2The name of the parameter used by many protocols for the message itself for requests (False) or responses (True). Often combined with .None:None?bNone None None&>hsaml23.3.20hsaml23.3.23hsaml23.3.20hsaml23.3.8hsaml23.3.5hsaml23.3.4hsaml23.3.3hsaml23.3.2hsaml23.3.1hsaml23.2.17hsaml23.2.16hsaml23.2.7 theoretically allows timezones, but SAML2 does not use themhsaml23.2.6 specifies a complete ISO8601 6-component duration; for SAML2 purposes we don't overly care hsaml23.2.1!hsaml23.2.1.hsaml23.3.13  !"#$%&'()*+,-./01 !" #$%&'()*+,-./01Nones2hsaml21.3.43hsaml21.3.44hsaml21.3.35hsaml21.3.26hsaml21.3.12345665432None78;9:<=>?@ABCDE?>=@<78;9:ABCDENone! !"#$%&'()*+,-./01FF None GHIGHINone 9>? G+2345678;:9<=>?@ABCDEJKLMNOPQRSTUVWXYZ[\]^_STURVOPQKLMNWXYJZ\^[_] None>!ghsaml26.5hhsaml26.5.1 http://www.w3.org/TR/xml-c14n/xml-c14nihsaml26.5.2 http://www.w3.org/TR/xml-c14n11/ xml-c14n11jhsaml2 "http://www.w3.org/TR/xml-exc-c14n/ xml-exc-c14nlhsaml2*Canonicalize and serialize an XML document defgjihkl gjihkdefl None>%-shsaml26.6thsaml26.6.1uhsaml26.6.2vhsaml26.6.3whsaml26.6.4xhsaml26.6.5yhsaml26.4hsaml26.3hsaml26.3.1hsaml26.2hsaml26.2.1hsaml26.2.2hsaml26.2.3hsaml26.2.4hsaml26.2.5hsaml2 xmlenc 5.7.4hsaml26.1hsaml25.2hsaml25.1hsaml24.5hsaml24.4.6hsaml24.5.4.1hsaml2 4.5.2.3.1hsaml24.5.2hsaml24.5.2.1hsaml24.5.2.2hsaml24.5.2.3hsaml24.5.1hsaml24.5.2hsaml24.5.3hsaml24.5.4hsaml24.5.5hsaml24.5.6hsaml24.5.7hsaml24.5hsaml24.4.3.5hsaml24.4.3.4hsaml24.4.3hsaml24.3.3.6hsaml24.4.2hsaml24.4.1hsaml24.4hsaml24.3hsaml24.2hsaml24.1sxwvuty~}|{zy~}|{zsxwvut None>?*shsaml25.5hsaml25.1hsaml25.2.2hsaml25.2.3hsaml25.2.3hsaml25.2.3hsaml25.2.4hsaml25.2.4hsaml25.2.4hsaml25.5.1hsaml25.5.2hsaml25.5.2hsaml23.7hsaml23.6hsaml23.5.1hsaml2empty for missinghsaml23.4hsaml23.3hsaml23.2hsaml23.1 None&+sxwvtuy~}|z{ None>-hsaml23None-None>1hsaml28.4hsaml28.4.1hsaml28.4.2hsaml28.4.3hsaml28.4.4hsaml28.4.5hsaml28.4.6hsaml28.4.7hsaml28.3hsaml2 8.3.1: Texthsaml28.3.2: rfc2822hsaml28.3.3: XML signaturehsaml28.3.4: Maybe Domain, Userhsaml28.3.5: rfc1510hsaml2?8.3.6: SAML endpoint (BaseId and SPProvidedID must be Nothing)hsaml2;8.3.7: String <= 256 char (NameQualifier same as idp ident)Nothing, SPNameQualifier same as sp ident(Nothing, SPProvidedID alt ident from sp)hsaml28.3.8: String <= 256 charhsaml23.4.1.1: only for NameIDPolicyhsaml28.2hsaml2 8.2.1: Texthsaml2 8.2.2: URIhsaml2 8.2.3: Namehsaml28.1hsaml2)8.1.1: Read Write Execute Delete Controlhsaml28.1.2: RWEDC ~RWEDChsaml28.1.3: GET HEAD PUT POSThsaml2 8.1.4: octalNone >?5 hsaml22.7.4.3hsaml22.7.4.2hsaml22.7.4.1hsaml22.7.4hsaml22.7.3.2hsaml22.7.3.1hsaml2 2.7.3.1.1hsaml22.7.3hsaml22.7.2.2hsaml22.7.2.1hsaml22.7.2hsaml22.7.1hsaml22.6.1hsaml22.5.1.4hsaml22.5.1.3hsaml22.5.1.4hsaml22.5.1.5hsaml22.5.1.6hsaml22.5.1hsaml22.4.1.2hsaml2anythinghsaml22.4.1.1hsaml22.4.1hsaml22.3.4hsaml22.3.3hsaml2use  to omithsaml22.3.1hsaml22.2.5hsaml22.3.2hsaml22.2.4hsaml22.2.3hsaml22.2.1None>7hsaml23.2hsaml23.3hsaml23.4hsaml23.5hsaml23.6hsaml23.7None >:qhsaml2 2.4.4.1.1hsaml22.4.4.1hsaml22.4.2hsaml22.4.1.1hsaml22.4.1hsaml22.3.2.3hsaml22.3.2.2hsaml22.3.2.1hsaml22.4.1hsaml22.4.3hsaml22.4.4hsaml22.4.5hsaml22.4.7hsaml22.4.6hsaml22.5hsaml22.3.1 empty list means missinghsaml22.3.2hsaml22.3.1hsaml22.2.5hsaml22.2.4hsaml22.2.3hsaml22.2.2hsaml22.2.1hsaml27Does the second KeyTypes include the first type of use?None>?bhsaml23.8.2hsaml23.8.1hsaml23.7.3hsaml23.7.2hsaml23.7.1hsaml23.6.2hsaml23.6.1hsaml23.5.2hsaml23.5.1hsaml2 3.4.1.3.1hsaml23.4.1.3hsaml23.4.1.2hsaml23.4.1.1hsaml23.4.1hsaml23.3.3hsaml23.3.2.4hsaml23.3.2.3 hsaml2 3.3.2.2.1 hsaml23.3.2.2 hsaml23.3.2.1 hsaml23.3.1 hsaml23.2.2.2 hsaml23.2.2.1 hsaml23.2.2.3 hsaml23.2.2.4 hsaml23.2.2 hsaml23.2.1 hsaml2!out-of-band data, not part of XML   NoneCw hsaml2 A variant of   that is more symmetric to  . The reason it takes an   and not an a+ is that signature verification needs both.TODO: Should this replace  ?  NoneC NoneCNone  >C  NoneD*  NoneDW  NoneF23456 65432  NoneL_23456:OPQ\_ OPQ:\_ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS78@>TUUVWXYZ[\]^_`abc d e fghijkllmnopqrstuvwxyz{|}~                                                                                                                                                                                                                 c                                                                                                                                                                         c                                                   ccc                                                               }                                                                                                                                 #hsaml2-0.1.2-7UtMfPAOGD3K63cULonudw SAML2.XMLSAML2.Bindings.GeneralSAML2.Core.VersioningSAML2.Core.NamespacesSAML2.XML.Schema.DatatypesSAML2.Core.DatatypesSAML2.XML.TypesSAML2.XML.SchemaSAML2.XML.ASN1SAML2.XML.CanonicalSAML2.XML.Signature.TypesSAML2.XML.EncryptionSAML2.XML.Signature!SAML2.Profiles.ConfirmationMethodSAML2.Core.IdentifiersSAML2.Core.AssertionsSAML2.Bindings.IdentifiersSAML2.Metadata.MetadataSAML2.Core.ProtocolsSAML2.Core.SignatureSAML2.Bindings.HTTPRedirectSAML2.Bindings.HTTPPOSTSAML2.Metadata SAML2.CoreisSAMLResponse SAML2.LensSAML2.XML.LibXML2SAML2.ProfilesSAML2.Bindings.InternalSAML2.BindingsSAML2*network-uri-2.6.4.1-EI9fbHPgPg3FkBWeXXqPMn Network.URIURI RelayStateprotocolParameterrelayStateParameter SAMLVersionSAML10SAML11SAML20 samlVersion$fXmlPicklerSAMLVersion$fReadSAMLVersion$fShowSAMLVersion$fEqSAMLVersion$fOrdSAMLVersion$fEnumSAMLVersion$fBoundedSAMLVersionsamlURNsamlURNIdentifierPositiveInteger UnsignedShortNonNegativeIntegerNCNameIDNMTOKENSNMTOKENLanguageTokenNormalizedStringAnyURI Base64BinaryDateTimeDurationBooleanStringxpString xpBoolean xpDuration xpDateTimexpBase64BinaryxpAnyURI xpLanguage isNMTOKEN xpNMTOKEN xpNMTOKENSxpNCNamexpID xpIntegerxpNonNegativeIntegerxpUnsignedShortxpPositiveIntegerXString NamespacenamespacePrefix namespaceURInamespaceURIStringQNameList1NodesNodexpList1 mkNamespacemkNNamehttpURIxmlNSxmlnsNSnsxpASN1 xpASN1Object xpX509Signed IdentifiedURI Identifiable identifieridentifiedValues reidentify Identified UnidentifiedIP xpTrimAnyElem xpTrimElemNS xpXmlLangxpIP unidentify xpIdentified xpIdentifier samlToDocdocToXML samlToXMLxmlToDoc docToSAML xmlToSAML$fDefaultIdentified$fXmlPicklerIdentified$fEqIdentified$fShowIdentifiedInclusiveNamespacesinclusiveNamespacesPrefixListCanonicalizationAlgorithmCanonicalXML10CanonicalXML11CanonicalXMLExcl10canonicalWithComments canonicalize*$fIdentifiableURICanonicalizationAlgorithm$fXmlPicklerInclusiveNamespaces$fEqInclusiveNamespaces$fShowInclusiveNamespaces$fEqCanonicalizationAlgorithm$fShowCanonicalizationAlgorithmTransformAlgorithmTransformCanonicalizationTransformBase64TransformXPathTransformEnvelopedSignature TransformXSLTSignatureAlgorithmSignatureDSA_SHA1SignatureDSA_SHA256SignatureRSA_SHA1SignatureRSA_SHA224SignatureRSA_SHA256SignatureRSA_SHA384SignatureRSA_SHA512SignatureECDSA_SHA1SignatureECDSA_SHA224SignatureECDSA_SHA256SignatureECDSA_SHA384SignatureECDSA_SHA512 MACAlgorithm MACHMAC_SHA1DigestAlgorithm DigestSHA1 DigestSHA224 DigestSHA256 DigestSHA384 DigestSHA512DigestRIPEMD160EncodingAlgorithmEncodingBase64SignaturePropertysignaturePropertyIdsignaturePropertyTargetsignaturePropertySignaturePropertiessignaturePropertiesIdsignaturePropertiesManifest manifestIdmanifestReferences ObjectElementObjectSignatureObjectSignaturePropertiesObjectManifestObjectobjectIdobjectMimeTypeobjectEncoding objectXML SPKIElementSPKISexp X509ElementX509IssuerSerialX509SKIX509SubjectNameX509CertificateX509CRL X509Digestx509IssuerNamex509SerialNumberx509DigestAlgorithm x509DigestX509DistinguishedNameECValidationDataecValidationDataHashAlgorithmecValidationDataSeedECCurveecCurveAecCurveB ECFieldIDECPrimeECTnBECPnBECGnBecPecMecKecK1ecK2ecK3ECPoint ECKeyValue ECParameters ECNamedCurveecParametersFieldIDecParametersCurveecParametersBaseecParametersOrderecParametersCoFactorecParametersValidationDataecNamedCurveURIKeyValue DSAKeyValue RSAKeyValue dsaKeyValuePQ dsaKeyValueG dsaKeyValueY dsaKeyValueJdsaKeyValueSeedPgenCounterrsaKeyValueModulusrsaKeyValueExponent ecKeyValueId ecKeyValueecKeyValuePublicKeyKeyInfoElementKeyNameKeyInfoKeyValueRetrievalMethodX509DataPGPDataSPKIDataMgmtDataretrievalMethodURIretrievalMethodTyperetrievalMethodTransformsx509DatapgpKeyID pgpKeyPacketpgpDataspkiDataKeyInfo keyInfoIdkeyInfoElements DigestMethoddigestAlgorithmdigestTransformElementTransformElementXPath TransformtransformAlgorithmtransformInclusiveNamespaces transform Transforms transforms Reference referenceId referenceURI referenceTypereferenceTransformsreferenceDigestMethodreferenceDigestValueSignatureMethodsignatureMethodAlgorithmsignatureMethodHMACOutputLengthsignatureMethodCanonicalizationMethodcanonicalizationMethodAlgorithm)canonicalizationMethodInclusiveNamespacescanonicalizationMethod SignedInfo signedInfoId signedInfoCanonicalizationMethodsignedInfoSignatureMethodsignedInfoReferenceSignatureValuesignatureValueIdsignatureValueSignable signature'signedID Signature signatureIdsignatureSignedInfosignatureSignatureValuesignatureKeyInfosignatureObject CryptoBinarynsFragnsFrag11ns11xpElemxpElem11xpCryptoBinarysimpleCanonicalizationsimpleTransform simpleDigest xpKeyInfoTypexpX509DistinguishedName$fXmlPicklerSignatureValue"$fXmlPicklerCanonicalizationMethod$fXmlPicklerTransformElement$fXmlPicklerECFieldID$fXmlPicklerECCurve$fXmlPicklerECValidationData$fXmlPicklerECKeyValue$fXmlPicklerKeyValue$fXmlPicklerSPKIElement$fXmlPicklerSignatureProperty$fXmlPicklerSignatureProperties"$fIdentifiableURIEncodingAlgorithm $fIdentifiableURIDigestAlgorithm$fXmlPicklerX509Element$fXmlPicklerDigestMethod$fIdentifiableURIMACAlgorithm#$fIdentifiableURISignatureAlgorithm$fXmlPicklerSignatureMethod#$fIdentifiableURITransformAlgorithm$fXmlPicklerTransform$fXmlPicklerTransforms$fXmlPicklerKeyInfoElement$fXmlPicklerKeyInfo$fXmlPicklerReference$fXmlPicklerManifest$fXmlPicklerSignedInfo$fXmlPicklerObjectElement$fXmlPicklerObject$fXmlPicklerSignature $fEqSignature$fShowSignature $fEqObject $fShowObject$fEqObjectElement$fShowObjectElement$fEqSignedInfo$fShowSignedInfo $fEqManifest$fShowManifest $fEqReference$fShowReference $fEqKeyInfo $fShowKeyInfo$fEqKeyInfoElement$fShowKeyInfoElement$fEqTransforms$fShowTransforms $fEqTransform$fShowTransform$fEqTransformAlgorithm$fShowTransformAlgorithm$fEqSignatureMethod$fShowSignatureMethod$fEqSignatureAlgorithm$fBoundedSignatureAlgorithm$fEnumSignatureAlgorithm$fShowSignatureAlgorithm$fEqMACAlgorithm$fBoundedMACAlgorithm$fEnumMACAlgorithm$fShowMACAlgorithm$fEqDigestMethod$fShowDigestMethod$fEqX509Element$fShowX509Element$fEqDigestAlgorithm$fBoundedDigestAlgorithm$fEnumDigestAlgorithm$fShowDigestAlgorithm$fEqEncodingAlgorithm$fBoundedEncodingAlgorithm$fEnumEncodingAlgorithm$fShowEncodingAlgorithm$fEqSignatureProperties$fShowSignatureProperties$fEqSignatureProperty$fShowSignatureProperty$fEqSPKIElement$fShowSPKIElement $fEqKeyValue$fShowKeyValue$fEqECKeyValue$fShowECKeyValue$fEqECValidationData$fShowECValidationData $fEqECCurve $fShowECCurve $fEqECFieldID$fShowECFieldID$fEqTransformElement$fShowTransformElement$fEqCanonicalizationMethod$fShowCanonicalizationMethod$fEqSignatureValue$fShowSignatureValueAgreementMethodagreementMethodAlgorithmagreementMethodKA_NonceagreementMethodDigestMethod agreementMethodOriginatorKeyInfoagreementMethodRecipientKeyInfoEncryptionAlgorithmBlockEncryptionTripleDESBlockEncryptionAES128BlockEncryptionAES192BlockEncryptionAES256BlockEncryptionAES128GCMBlockEncryptionAES192GCMBlockEncryptionAES256GCMKeyTransportRSA1_5KeyTransportRSAOAEPMGF1PKeyTransportRSAOAEPEncryptionPropertyencryptionPropertyIdencryptionPropertyTargetencryptionPropertyEncryptionPropertiesencryptionPropertiesIdencryptionProperties DataReference KeyReference reference EncryptedKey encryptedKeyencryptedKeyRecipientencryptedKeyReferenceListencryptedKeyCarriedKeyName EncryptedData encryptedData CipherData CipherValueCipherReference cipherURIcipherTransformsEncryptionMethodencryptionAlgorithmencryptionKeySizeencryptionOAEPparamsencryptionDigestMethod encryption EncryptedType encryptedID encryptedTypeencryptedMimeTypeencryptedEncodingencryptedEncryptionMethodencryptedKeyInfoencryptedCipherDataencryptedEncryptionPropertiesxpEncryptionMethodType$fXmlPicklerCipherData$fXmlPicklerEncryptionProperty $fXmlPicklerEncryptionProperties$$fIdentifiableURIEncryptionAlgorithm$fXmlPicklerEncryptionMethod$fXmlPicklerEncryptedType$fXmlPicklerEncryptedKey$fXmlPicklerEncryptedData$fXmlPicklerAgreementMethod$fEqEncryptedData$fShowEncryptedData$fEqEncryptedKey$fShowEncryptedKey$fEqEncryptedType$fShowEncryptedType$fEqEncryptionMethod$fShowEncryptionMethod$fEqEncryptionAlgorithm$fBoundedEncryptionAlgorithm$fEnumEncryptionAlgorithm$fShowEncryptionAlgorithm$fEqEncryptionProperties$fShowEncryptionProperties$fEqEncryptionProperty$fShowEncryptionProperty$fEqCipherData$fShowCipherData PublicKeys publicKeyDSA publicKeyRSA SigningKey SigningKeyDSA SigningKeyRSAgenerateReferencesigningKeySignatureAlgorithm signBase64 verifyBase64generateSignatureverifySignature$fMonoidPublicKeys$fSemigroupPublicKeys$fEqPublicKeys$fShowPublicKeys$fEqSigningKey$fShowSigningKeyConfirmationMethodConfirmationMethodHolderOfKeyConfirmationMethodSenderVouchesConfirmationMethodBearer#$fIdentifiableURIConfirmationMethod$fEqConfirmationMethod$fEnumConfirmationMethod$fBoundedConfirmationMethod$fShowConfirmationMethodConsentConsentUnspecifiedConsentObtained ConsentPriorConsentImplicitConsentExplicitConsentUnavailableConsentInapplicable NameIDFormatNameIDFormatUnspecifiedNameIDFormatEmailNameIDFormatX509NameIDFormatWindowsNameIDFormatKerberosNameIDFormatEntityNameIDFormatPersistentNameIDFormatTransientNameIDFormatEncryptedAttributeNameFormatAttributeNameFormatUnspecifiedAttributeNameFormatURIAttributeNameFormatBasicActionNamespaceActionNamespaceRWEDCActionNamespaceRWEDCNegationActionNamespaceGHPPActionNamespaceUNIX $fIdentifiableURIActionNamespace$$fIdentifiableURIAttributeNameFormat$fIdentifiableURINameIDFormat$fDefaultNameIDFormat$fIdentifiableURIConsent$fDefaultConsent $fEqConsent $fEnumConsent$fBoundedConsent $fShowConsent$fEqNameIDFormat$fEnumNameIDFormat$fBoundedNameIDFormat$fShowNameIDFormat$fEqAttributeNameFormat$fEnumAttributeNameFormat$fBoundedAttributeNameFormat$fShowAttributeNameFormat$fEqActionNamespace$fEnumActionNamespace$fBoundedActionNamespace$fShowActionNamespaceEvidenceevidenceActionactionNamespaceaction DecisionTypeDecisionTypePermitDecisionTypeDenyDecisionTypeIndeterminateAuthzDecisionStatementauthzDecisionStatementResourceauthzDecisionStatementDecisionauthzDecisionStatementActionauthzDecisionStatementEvidenceEncryptedAttribute Attribute attributeNameattributeNameFormatattributeFriendlyNameattributeAttrsattributeValuesAttributeStatementattributeStatementAuthnContextDeclAuthnContextDeclRef AuthnContextauthnContextClassRefauthnContextDecl#authnContextAuthenticatingAuthoritySubjectLocalitysubjectLocalityAddresssubjectLocalityDNSNameAuthnStatementauthnStatementInstantauthnStatementSessionIndex!authnStatementSessionNotOnOrAfterauthnStatementSubjectLocalityauthnStatementContext StatementStatementAuthnStatementAttributeStatementAuthzDecision AdviceElementAdviceAssertionAdviceAudienceaudience ConditionAudienceRestriction OneTimeUseProxyRestrictionproxyRestrictionCountproxyRestrictionAudience ConditionsconditionsNotBeforeconditionsNotOnOrAfter conditionsSubjectConfirmationDatasubjectConfirmationNotBeforesubjectConfirmationNotOnOrAftersubjectConfirmationRecipientsubjectConfirmationInResponseTosubjectConfirmationAddresssubjectConfirmationKeyInfosubjectConfirmationXMLSubjectConfirmationsubjectConfirmationMethodsubjectConfirmationIdentifiersubjectConfirmationDataSubjectsubjectIdentifiersubjectConfirmationEncryptedAssertion AssertionassertionVersion assertionIDassertionIssueInstantassertionIssuerassertionSignatureassertionSubjectassertionConditionsassertionAdviceassertionStatementAssertionIDRefassertionIDRefIssuerissuer AssertionRefAssertionRefIDAssertionURIRefPossiblyEncrypted NotEncrypted SoEncryptedEncryptedElement EncryptedID IdentifierIdentifierNameIdentifierBaseEncryptedNameIDNameID nameBaseID nameIDFormatnameSPProvidedIDBaseIDbaseNameQualifierbaseSPNameQualifierbaseIDxpBaseID simpleNameIDxpNameIDDefaultingxpNameIDxpEncryptedElementxpPossiblyEncrypted noSubjectxpAttributeType$fXmlPicklerNameID$fXmlPicklerIdentifier$fXmlPicklerEncryptedElement$fXmlPicklerEncryptedElement0$fXmlPicklerIssuer$fXmlPicklerAssertionIDRef#$fXmlPicklerSubjectConfirmationData$fXmlPicklerSubjectConfirmation$fXmlPicklerSubject$fXmlPicklerAudience$fXmlPicklerCondition$fXmlPicklerConditions$fXmlPicklerSubjectLocality$fXmlPicklerAuthnContextDecl$fXmlPicklerAuthnContext$fXmlPicklerAuthnStatement$fXmlPicklerAttribute$fXmlPicklerAttributeStatement$fXmlPicklerEncryptedElement1$fXmlPicklerDecisionType$fIdentifiable[]DecisionType$fXmlPicklerAction$fXmlPicklerEvidence"$fXmlPicklerAuthzDecisionStatement$fXmlPicklerStatement$fXmlPicklerAdviceElement$fSignableAssertion$fXmlPicklerAssertion$fXmlPicklerAssertionRef$fXmlPicklerEncryptedElement2 $fEqEvidence$fShowEvidence$fSemigroupEvidence$fMonoidEvidence$fEqAssertionRef$fShowAssertionRef $fEqAssertion$fShowAssertion $fEqStatement$fShowStatement$fEqAuthzDecisionStatement$fShowAuthzDecisionStatement$fEqAdviceElement$fShowAdviceElement $fEqAction $fShowAction$fEqDecisionType$fEnumDecisionType$fBoundedDecisionType$fShowDecisionType$fEqAttributeStatement$fShowAttributeStatement $fEqAttribute$fShowAttribute$fEqAuthnStatement$fShowAuthnStatement$fEqAuthnContext$fShowAuthnContext$fEqAuthnContextDecl$fShowAuthnContextDecl$fEqSubjectLocality$fShowSubjectLocality$fEqConditions$fShowConditions $fEqCondition$fShowCondition $fEqAudience$fShowAudience $fEqSubject $fShowSubject$fEqSubjectConfirmation$fShowSubjectConfirmation$fEqSubjectConfirmationData$fShowSubjectConfirmationData$fEqAssertionIDRef$fShowAssertionIDRef $fEqIssuer $fShowIssuer$fEqPossiblyEncrypted$fShowPossiblyEncrypted$fEqEncryptedElement$fShowEncryptedElement$fEqIdentifier$fShowIdentifier $fEqNameID $fShowNameID $fEqBaseID $fShowBaseIDBinding BindingSOAP BindingPAOSBindingHTTPRedirectBindingHTTPPOSTBindingHTTPArtifact BindingURI$fIdentifiableURIBinding $fEqBinding$fBoundedBinding $fEnumBinding $fShowBindingRequestedAttributerequestedAttributerequestedAttributeIsRequiredAttributeConsumingServiceattributeConsumingServiceIndex"attributeConsumingServiceIsDefault$attributeConsumingServiceServiceName+attributeConsumingServiceServiceDescription+attributeConsumingServiceRequestedAttribute SSODescriptor&ssoDescriptorArtifactResolutionService ssoDescriptorSingleLogoutService ssoDescriptorManageNameIDServicessoDescriptorNameIDFormatKeyTypesKeyTypeSigningKeyTypeEncryption KeyTypeBoth KeyDescriptorkeyDescriptorUsekeyDescriptorKeyInfokeyDescriptorEncryptionMethodRoleDescriptorroleDescriptorIDroleDescriptorValidUntilroleDescriptorCacheDuration(roleDescriptorProtocolSupportEnumerationroleDescriptorErrorURLroleDescriptorAttrsroleDescriptorSignatureroleDescriptorExtensionsroleDescriptorKeyDescriptorroleDescriptorOrganizationroleDescriptorContactPersonAdditionalMetadataLocation#additionalMetadataLocationNamespaceadditionalMetadataLocation ContactTypeContactTypeTechnicalContactTypeSupportContactTypeAdministrativeContactTypeBillingContactTypeOtherContact ContactPerson contactType contactAttrscontactExtensionscontactCompanycontactGivenNamecontactSurNamecontactEmailAddresscontactTelephoneNumber OrganizationorganizationAttrsorganizationExtensionsorganizationNameorganizationDisplayNameorganizationURL DescriptorIDPSSODescriptorSPSSODescriptorAuthnAuthorityDescriptorAttributeAuthorityDescriptor PDPDescriptordescriptorRole descriptorSSO!descriptorWantAuthnRequestsSigneddescriptorSingleSignOnServicedescriptorNameIDMappingService#descriptorAssertionIDRequestServicedescriptorAttributeProfiledescriptorAttributedescriptorAuthnRequestsSigneddescriptorWantAssertionsSigned"descriptorAssertionConsumerService#descriptorAttributeConsumingServicedescriptorAuthnQueryServicedescriptorNameIDFormatdescriptorAttributeServicedescriptorAuthzService DescriptorsAffiliationDescriptor descriptors'affiliationDescriptorAffiliationOwnerIDaffiliationDescriptorIDaffiliationDescriptorValidUntil"affiliationDescriptorCacheDurationaffiliationDescriptorAttrsaffiliationDescriptorSignatureaffiliationDescriptorExtensions$affiliationDescriptorAffiliateMember"affiliationDescriptorKeyDescriptor Extensions extensionsMetadataEntityDescriptorEntitiesDescriptorentityID metadataIDmetadataValidUntilmetadataCacheDuration entityAttrsmetadataSignaturemetadataExtensionsentityDescriptorsentityOrganizationentityContactPersonentityAditionalMetadataLocation entitiesNameentities LocalizedURI LocalizedName Localized localizedLang localizedIndexedEndpointindexedEndpointindexedEndpointIndexindexedEndpointIsDefaultEndpointendpointBindingendpointLocationendpointResponseLocation endpointAttrs endpointXMLEntityID xpEntityID xpLocalizedkeyType$fXmlPicklerEndpoint$fXmlPicklerIndexedEndpoint$fXmlPicklerLocalized$fXmlPicklerLocalized0$fXmlPicklerExtensions$fXmlPicklerOrganization$fXmlPicklerContactType$fIdentifiable[]ContactType$fXmlPicklerContact&$fXmlPicklerAdditionalMetadataLocation$fXmlPicklerKeyTypes$fIdentifiable[]KeyTypes$fXmlPicklerKeyDescriptor$fSignableRoleDescriptor$fXmlPicklerRoleDescriptor$fXmlPicklerSSODescriptor$fXmlPicklerRequestedAttribute%$fXmlPicklerAttributeConsumingService$fXmlPicklerDescriptor$fXmlPicklerDescriptors$fSignableMetadata$fXmlPicklerMetadata $fEqMetadata$fShowMetadata$fEqDescriptors$fShowDescriptors$fEqDescriptor$fShowDescriptor$fEqAttributeConsumingService$fShowAttributeConsumingService$fEqRequestedAttribute$fShowRequestedAttribute$fEqSSODescriptor$fShowSSODescriptor$fEqRoleDescriptor$fShowRoleDescriptor$fEqKeyDescriptor$fShowKeyDescriptor $fEqKeyTypes$fEnumKeyTypes$fBoundedKeyTypes$fShowKeyTypes$fEqAdditionalMetadataLocation $fShowAdditionalMetadataLocation $fEqContact $fShowContact$fEqContactType$fEnumContactType$fBoundedContactType$fShowContactType$fEqOrganization$fShowOrganization$fEqExtensions$fShowExtensions$fSemigroupExtensions$fMonoidExtensions $fEqLocalized$fShowLocalized$fEqIndexedEndpoint$fShowIndexedEndpoint $fEqEndpoint$fShowEndpoint AnyProtocolProtocolRequestProtocolResponse AnyResponseResponseResponseResponseArtifactResponse AnyRequestRequestAssertionIDRequestRequestAuthnQueryRequestAttributeQueryRequestAuthzDecisionQueryRequestAuthnRequestRequestArtifactResolveRequestManageNameIDRequestRequestLogoutRequestRequestNameIDMappingRequestNameIDMappingResponsenameIDMappingResponsenameIDMappingResponseNameIDNameIDMappingRequestnameIDMappingRequestnameIDMappingRequestIdentifiernameIDMappingRequestPolicy LogoutReasonLogoutReasonUserLogoutReasonAdminLogoutResponselogoutResponse LogoutRequest logoutRequestlogoutRequestReasonlogoutRequestNotOnOrAfterlogoutRequestIdentifierlogoutRequestSessionIndexManageNameIDResponsemanageNameIDResponseNewEncryptedIDNewIDnewIDManageNameIDRequestmanageNameIDRequestmanageNameIDRequestNameIDmanageNameIDRequestNewIDArtifactResponseartifactResponseartifactResponseMessageArtifactResolveartifactResolveartifactResolveArtifactIDPEntryidpEntryProviderID idpEntryName idpEntryLocIDPListidpListidpGetCompleteScopingscopingProxyCountscopingIDPListscopingRequesterID NameIDPolicynameIDPolicyFormatnameIDPolicySPNameQualifiernameIDPolicyAllowCreateAssertionConsumerServiceAssertionConsumerServiceIndexAssertionConsumerServiceURL'authnRequestAssertionConsumerServiceURLauthnRequestProtocolBinding AuthnRequest authnRequestauthnRequestForceAuthnauthnRequestIsPassive$authnRequestAssertionConsumerService*authnRequestAssertionConsumingServiceIndexauthnRequestProviderNameauthnRequestSubjectauthnRequestNameIDPolicyauthnRequestConditions!authnRequestRequestedAuthnContextauthnRequestScopingResponseresponseresponseAssertionsAuthzDecisionQueryauthzDecisionQueryauthzDecisionQueryResourceauthzDecisionQueryActionsauthzDecisionQueryEvidenceAttributeQueryattributeQueryattributeQueryAttributesAuthnContextComparisonTypeComparisonExactComparisonMinimumComparisonMaximumComparisonBetterAuthnContextRefsAuthnContextClassRefsAuthnContextDeclRefsRequestedAuthnContextrequestedAuthnContextComparisonrequestedAuthnContextRefs AuthnQuery authnQueryauthnQuerySessionIndexauthnQueryRequestedAuthnContextSubjectQueryAbstractType subjectQuerysubjectQuerySubjectAssertionIDRequestassertionIDRequestassertionIDRequestRef StatusCode2StatusAuthnFailedStatusInvalidAttrNameOrValueStatusInvalidNameIDPolicyStatusNoAuthnContextStatusNoAvailableIDPStatusNoPassiveStatusNoSupportedIDPStatusPartialLogoutStatusProxyCountExceededStatusRequestDeniedStatusRequestUnsupportedStatusRequestVersionDeprecatedStatusRequestVersionTooHighStatusRequestVersionTooLowStatusResourceNotRecognizedStatusTooManyResponsesStatusUnknownAttrProfileStatusUnknownPrincipalStatusUnsupportedBinding StatusCode1 StatusSuccessStatusRequesterStatusResponderStatusVersionMismatch StatusCode statusCode1 statusCodesStatus statusCode statusMessage statusDetail SAMLResponse samlResponse'StatusResponseTypestatusProtocolstatusInResponseTostatus SAMLRequest samlRequest'RequestAbstractTyperequestProtocol SAMLProtocol samlProtocol'isSAMLResponse_ ProtocolType protocolIDprotocolVersionprotocolIssueInstantprotocolDestinationprotocolConsentprotocolIssuerprotocolSignatureprotocolExtensions relayStaterequestProtocol'statusProtocol' successStatus subjectQuery'$fSignableProtocolType$fXmlPicklerProtocolType$fXmlPicklerRequestAbstractType$fXmlPicklerStatusCode1$fIdentifiableURIStatusCode1$fIdentifiableURIStatusCode2$fXmlPicklerStatusCode$fXmlPicklerStatus$fXmlPicklerStatusResponseType$fSAMLRequestAssertionIDRequest $fSAMLProtocolAssertionIDRequest$fSignableAssertionIDRequest$fXmlPicklerAssertionIDRequest$$fXmlPicklerSubjectQueryAbstractType$fXmlPicklerAuthnContextRefs&$fXmlPicklerAuthnContextComparisonType*$fIdentifiable[]AuthnContextComparisonType!$fXmlPicklerRequestedAuthnContext$fSAMLRequestAuthnQuery$fSAMLProtocolAuthnQuery$fSignableAuthnQuery$fXmlPicklerAuthnQuery$fSAMLRequestAttributeQuery$fSAMLProtocolAttributeQuery$fSignableAttributeQuery$fXmlPicklerAttributeQuery$fSAMLRequestAuthzDecisionQuery $fSAMLProtocolAuthzDecisionQuery$fSignableAuthzDecisionQuery$fXmlPicklerAuthzDecisionQuery$fSAMLResponseResponse$fSAMLProtocolResponse$fSignableResponse$fXmlPicklerResponse$fXmlPicklerNameIDPolicy$fXmlPicklerIDPEntry$fXmlPicklerIDPList$fXmlPicklerScoping$fSAMLRequestAuthnRequest$fSAMLProtocolAuthnRequest$fSignableAuthnRequest$fXmlPicklerAuthnRequest$fSAMLRequestArtifactResolve$fSAMLProtocolArtifactResolve$fSignableArtifactResolve$fXmlPicklerArtifactResolve$fSAMLResponseArtifactResponse$fSAMLProtocolArtifactResponse$fSignableArtifactResponse$fXmlPicklerArtifactResponse$fXmlPicklerNewID $fSAMLRequestManageNameIDRequest!$fSAMLProtocolManageNameIDRequest$fSignableManageNameIDRequest$fXmlPicklerManageNameIDRequest"$fSAMLResponseManageNameIDResponse"$fSAMLProtocolManageNameIDResponse$fSignableManageNameIDResponse $fXmlPicklerManageNameIDResponse$fSAMLResponseLogoutResponse$fSAMLProtocolLogoutResponse$fSignableLogoutResponse$fXmlPicklerLogoutResponse$fIdentifiable[]LogoutReason$fSAMLRequestLogoutRequest$fSAMLProtocolLogoutRequest$fSignableLogoutRequest$fXmlPicklerLogoutRequest!$fSAMLRequestNameIDMappingRequest"$fSAMLProtocolNameIDMappingRequest$fSignableNameIDMappingRequest $fXmlPicklerNameIDMappingRequest#$fSAMLResponseNameIDMappingResponse#$fSAMLProtocolNameIDMappingResponse$fSignableNameIDMappingResponse!$fXmlPicklerNameIDMappingResponse$fSAMLRequestAnyRequest$fSAMLProtocolAnyRequest$fSignableAnyRequest$fXmlPicklerAnyRequest$fSAMLResponseAnyResponse$fSAMLProtocolAnyResponse$fSignableAnyResponse$fXmlPicklerAnyResponse$fSAMLProtocolAnyProtocol$fSignableAnyProtocol$fXmlPicklerAnyProtocol$fEqAnyProtocol$fShowAnyProtocol$fEqAnyResponse$fShowAnyResponse$fEqAnyRequest$fShowAnyRequest$fEqNameIDMappingResponse$fShowNameIDMappingResponse$fEqNameIDMappingRequest$fShowNameIDMappingRequest$fEqLogoutRequest$fShowLogoutRequest$fEqLogoutReason$fEnumLogoutReason$fBoundedLogoutReason$fShowLogoutReason$fEqLogoutResponse$fShowLogoutResponse$fEqManageNameIDResponse$fShowManageNameIDResponse$fEqManageNameIDRequest$fShowManageNameIDRequest $fEqNewID $fShowNewID$fEqArtifactResponse$fShowArtifactResponse$fEqArtifactResolve$fShowArtifactResolve$fEqAuthnRequest$fShowAuthnRequest $fEqScoping $fShowScoping $fEqIDPList $fShowIDPList $fEqIDPEntry$fShowIDPEntry$fEqNameIDPolicy$fShowNameIDPolicy$fEqAssertionConsumerService$fShowAssertionConsumerService $fEqResponse$fShowResponse$fEqAuthzDecisionQuery$fShowAuthzDecisionQuery$fEqAttributeQuery$fShowAttributeQuery$fEqAuthnQuery$fShowAuthnQuery$fEqRequestedAuthnContext$fShowRequestedAuthnContext$fEqAuthnContextComparisonType $fEnumAuthnContextComparisonType#$fBoundedAuthnContextComparisonType $fShowAuthnContextComparisonType$fEqAuthnContextRefs$fShowAuthnContextRefs$fEqSubjectQueryAbstractType$fShowSubjectQueryAbstractType$fEqAssertionIDRequest$fShowAssertionIDRequest$fEqStatusResponseType$fShowStatusResponseType $fEqStatus $fShowStatus$fEqStatusCode$fShowStatusCode$fEqStatusCode2$fBoundedStatusCode2$fEnumStatusCode2$fShowStatusCode2$fEqStatusCode1$fBoundedStatusCode1$fEnumStatusCode1$fShowStatusCode1$fEqRequestAbstractType$fShowRequestAbstractType$fEqProtocolType$fShowProtocolTypesignSAMLProtocolverifySAMLProtocolverifySAMLProtocol' encodeQuery encodeHeaders decodeURI$fIdentifiableURIEncoding $fEqEncoding$fBoundedEncoding$fEnumEncoding$fShowEncoding encodeValue encodeForm decodeValue decodeFormnsMDnsP fieldLensC14NModeC14N_1_0C14N_EXCLUSIVE_1_0C14N_1_1Doc fromXmlTreesc14n#hxt-9.3.1.22-HnGcrS1CHlq9n4eke7kAkMText.XML.HXT.DOM.TypeDefsXmlTreelookupProtocolParameter