4      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFG H I JKLMNOPQRSTUVWXYZ[\]^_`abcd e f g h i j k l m n o p q r s t u v w x y z { | } ~                                   ! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~                                                                                                                                                   !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~SafeJ~The name of the parameter used by many protocols for the message itself for requests (False) or responses (True). Often combined with .NoneJNone<KGNoneKNoneKNone%;P3.3.203.3.233.3.203.3.83.3.53.3.43.3.33.3.23.3.13.2.173.2.16B3.2.7 theoretically allows timezones, but SAML2 does not use thema3.2.6 specifies a complete ISO8601 6-component duration; for SAML2 purposes we don't overly care 3.2.1!3.2.1.3.3.13  !"#$%&'()*+,-./01 !" #$%&'()*+,-./01NoneR21.3.431.3.441.3.351.3.261.3.12345665432NoneS78;9:<=>?@ABCDE?>=@<789:;ABCDE789:;NoneS! !"#$%&'()*+,-./01FF NoneTGHIGHINone 7;<=>?ASTU0+2345678:9;<=>?@ABCDEJKLMNOPQRSTUVWXYZ[\]^_STURVOPQKLMMNWXYJZ\^[_]KLMMNOPQ None;=>?Yg6.5h6.5.1 http://www.w3.org/TR/xml-c14n/xml-c14ni6.5.2 http://www.w3.org/TR/xml-c14n11/ xml-c14n11j "http://www.w3.org/TR/xml-exc-c14n/ xml-exc-c14nl*Canonicalize and serialize an XML document defgjihkl ghijkkkmdefnldefghijkkk None;=>?`X-s6.6t6.6.1u6.6.2v6.6.3w6.6.4x6.6.5y6.46.36.3.16.26.2.16.2.26.2.36.2.46.2.5 xmlenc 5.7.46.15.25.14.54.4.64.5.4.1 4.5.2.3.14.5.24.5.2.14.5.2.24.5.2.34.5.14.5.24.5.34.5.44.5.54.5.64.5.74.54.4.3.54.4.3.4 4.4.34.3.3.64.4.24.4.14.4#4.3*4.214.1sxwvuty~}|{z     "! #$&%')(*+0/.-,123456789:;<=23456718*+,-./0Z'()#$%&> !"W?9O   U  RQ:@L;<TSEDABC=KFYXVHGIJMyz{|}~NstuvwxPstuvwxy z{|}~        !"#$%&'()*+,-./0 None;<=>?m5.55.15.2.25.2.35.2.35.2.35.2.45.2.45.2.45.5.15.5.25.5.23.73.63.5.1empty for missing3.43.33.23.1CO    None%pstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=    None;=>?t3Noneu3None;=>?~8.48.4.18.4.28.4.38.4.48.4.58.4.6 8.4.7!8.3" 8.3.1: Text#8.3.2: rfc2822$8.3.3: XML signature%8.3.4: Maybe Domain, User&8.3.5: rfc1510'?8.3.6: SAML endpoint (BaseId and SPProvidedID must be Nothing)(;8.3.7: String <= 256 char (NameQualifier same as idp ident)Nothing, SPNameQualifier same as sp ident(Nothing, SPProvidedID alt ident from sp))8.3.8: String <= 256 char*3.4.1.1: only for NameIDPolicy+8.2, 8.2.1: Text- 8.2.2: URI. 8.2.3: Name/8.10)8.1.1: Read Write Execute Delete Control18.1.2: RWEDC ~RWEDC28.1.3: GET HEAD PUT POST3 8.1.4: octal !*)('&%$#"+.-,/3210!/01234+,-.5!"#$%&'()*76 98 ! "#$%&'()*+,-./0123None ;<=>?Kw J2.7.4.3M2.7.4.2Q2.7.4.1U2.7.4[2.7.3.2\2.7.3.1b 2.7.3.1.1c2.7.3i2.7.2.2n2.7.2.1r2.7.2y2.7.12.6.12.5.1.42.5.1.32.5.1.42.5.1.52.5.1.62.5.12.4.1.2anything2.4.1.12.4.12.3.42.3.3use  to omit2.3.12.2.52.3.22.2.42.2.32.2.1JKLMNOPQTSRUVZYXW[\]ba`_^cdefhgijmlknoqprsxwvuty|{z}~ح~yz{|}rstuvwxnopqijklmfghcde\]^_`ab[UVWXYZQRSTMNOPJKLJKLMNOPQRSTUVWXYZ\]^_`abcdefghijklmnopqrstuvwxyz{|}~ None;=>?j13.223.333.443.553.663.70654321012345670123456None;=>?K< 2.4.4.1.1@2.4.4.1G2.4.2Q2.4.1.1V2.4.1c2.3.2.3m2.3.2.2w2.3.2.12.4.12.4.32.4.42.4.52.4.72.4.62.52.3.1 empty list means missing2.3.22.3.12.2.52.2.42.2.32.2.22.2.17Does the second KeyTypes include the first type of use?<=?>@AFEDCBGHLKJIMONPQRUTSVWba`_^]\[ZYXcdfeglkjihmnvutsrqpowx}|{zy~̹~wxyz{|}mnopqrstuvghijklcdefVWXYZ[\]^_`abQRSTUMNOPGHIJKL@ABCDEF<=>?<=>?@ABCDEFGHIJKLMNOPQRSTUV WXYZ[\]^_`abcdefghijklm nopqrstuvwxyz{|}~# None;=>? 3.8.23.8.1#3.7.3&3.7.2)3.7.103.6.273.6.1<3.5.2@3.5.1D 3.4.1.3.1I3.4.1.3M3.4.1.2R3.4.1.1\3.4.1i3.3.3m3.3.2.4s3.3.2.3 3.3.2.2.13.3.2.23.3.2.13.3.13.2.2.23.2.2.13.2.2.33.2.2.43.2.23.2.1!out-of-band data, not part of XML    "! #%$&'()*/.-,+012345678;:9<=?>@ACBDEHGFIJLKMNQPORSVUTWYX[Z\]hgfedcba`_^ijlkmnrqpostvuw{zyx|~}"|}~wxyz{stuvmnopqrijkl\]^_`abcdefghWXYZ[RSTUVMNOPQIJKLDEFGH@ABC<=>?789:; 4563 012   )*+,-./&'(#$% !" $#"! ('&%   +*)&      !"#$%&'()*+,-./012456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\ ]^_`abcdefghijklmnopqrstuvwxyz{|}~ None"z{z{NonejNone0123456None ;=>?NVK|}~|}~NoneNVNone$<=>?@ABCDEFGHIJKLMPNOQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~~wxyz{|}mnopqrstuvghijklcdefVWXYZ[\]^_`abQRSTUMNOPGHIJKL@ABCDEF<=>?None k23456 !"#$%&'()*+,-./0123JKLMNPOQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxy}z{|~     !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~k65432~yz{|}rstuvwxnopqijklmfghcde\]^_`ab[UVWXYZQRSTMNOPJKL|}~wxyz{stuvmnopqrijkl\]^_`abcdefghWXYZ[RSTUVMNOPQIJKLDEFGH@ABC<=>?789:;4563012)*+,-./&'(#$% !"    /0123+,-.!"#$%&'()* None 23456:OPQ\_ !"#$%&'()*+,-./0123JKLMNPOQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxy}z{|~0123456<=>?@ABCDEFGHIJKLMPNOQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~     !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~OPQ:\_ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS78@>TUUVWXYZ[\]^_`abc d e fghijkllmnopqrstuvwxyz{|}~                                                                                                                                   ! " # # $ % & ' ( ( ) * + , - . . / 0 1 2 3 4 5 6 c 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~                                                                                                5 c 8   W                                                    !"#$%&'()*+,-./0123456789:;<<=>>?@ABCDEEFGHIJKKLMNOPQQRSSTUUVWXYYZ[\\]^_`abcdebfghhiijkklmnopqqrstuuvwxyz{|}}~c8      !"#$$%&'(()*+,-./01234456789:;<=>?@ABCDEFGGHIJKLMMNOPQRSTUVWXYZ[\]^_`abccdefghijklmnoopqrstuvwxyz{|}~c8        !""#$%%&'()**+,-./012345567889:;<<=>??@ABCDEFGHIJKLMNOPQRSTUVWXYZ[[\]^^_`abcddefghijjklmnoopqrstuvwxc8yz{|}~}      !"#$%&'()*+,-./01234567897:;<=>!hsaml2-0.1-AWLF8dbPXRg19F0DINIgTr SAML2.XMLSAML2.Bindings.GeneralSAML2.Core.VersioningSAML2.Core.NamespacesSAML2.XML.Schema.DatatypesSAML2.Core.DatatypesSAML2.XML.TypesSAML2.XML.SchemaSAML2.XML.ASN1SAML2.XML.CanonicalSAML2.XML.Signature.TypesSAML2.XML.EncryptionSAML2.XML.Signature!SAML2.Profiles.ConfirmationMethodSAML2.Core.IdentifiersSAML2.Core.AssertionsSAML2.Bindings.IdentifiersSAML2.Metadata.MetadataSAML2.Core.ProtocolsSAML2.Core.SignatureSAML2.Bindings.HTTPRedirectSAML2.Bindings.HTTPPOSTSAML2.Metadata SAML2.CoreisSAMLResponse SAML2.LensSAML2.XML.LibXML2SAML2.ProfilesSAML2.Bindings.InternalSAML2.BindingsSAML2)network-uri-2.6.1.0-RmiO7Es4EVIxdXQfHHaUt Network.URIURI RelayStateprotocolParameterrelayStateParameter SAMLVersionSAML10SAML11SAML20 samlVersion$fXmlPicklerSAMLVersion$fReadSAMLVersion$fShowSAMLVersion$fEqSAMLVersion$fOrdSAMLVersion$fEnumSAMLVersion$fBoundedSAMLVersionsamlURNsamlURNIdentifierPositiveInteger UnsignedShortNonNegativeIntegerNCNameIDNMTOKENSNMTOKENLanguageTokenNormalizedStringAnyURI Base64BinaryDateTimeDurationBooleanStringxpString xpBoolean xpDuration xpDateTimexpBase64BinaryxpAnyURI xpLanguage isNMTOKEN xpNMTOKEN xpNMTOKENSxpNCNamexpID xpIntegerxpNonNegativeIntegerxpUnsignedShortxpPositiveIntegerXString NamespacenamespacePrefix namespaceURInamespaceURIStringQNameList1NodesNodexpList1 mkNamespacemkNNamehttpURIxmlNSxmlnsNSnsxpASN1 xpASN1Object xpX509Signed IdentifiedURI Identifiable identifieridentifiedValues reidentify Identified UnidentifiedIP xpTrimAnyElem xpTrimElemNS xpXmlLangxpIP unidentify xpIdentified xpIdentifier samlToDocdocToXML samlToXMLxmlToDoc docToSAML xmlToSAML$fDefaultIdentified$fXmlPicklerIdentified$fEqIdentified$fShowIdentifiedInclusiveNamespacesinclusiveNamespacesPrefixListCanonicalizationAlgorithmCanonicalXML10CanonicalXML11CanonicalXMLExcl10canonicalWithComments canonicalize*$fIdentifiableURICanonicalizationAlgorithm$fXmlPicklerInclusiveNamespaces$fEqCanonicalizationAlgorithm$fShowCanonicalizationAlgorithm$fEqInclusiveNamespaces$fShowInclusiveNamespacesTransformAlgorithmTransformCanonicalizationTransformBase64TransformXPathTransformEnvelopedSignature TransformXSLTSignatureAlgorithmSignatureDSA_SHA1SignatureDSA_SHA256SignatureRSA_SHA1SignatureRSA_SHA224SignatureRSA_SHA256SignatureRSA_SHA384SignatureRSA_SHA512SignatureECDSA_SHA1SignatureECDSA_SHA224SignatureECDSA_SHA256SignatureECDSA_SHA384SignatureECDSA_SHA512 MACAlgorithm MACHMAC_SHA1DigestAlgorithm DigestSHA1 DigestSHA224 DigestSHA256 DigestSHA384 DigestSHA512DigestRIPEMD160EncodingAlgorithmEncodingBase64SignaturePropertysignaturePropertyIdsignaturePropertyTargetsignaturePropertySignaturePropertiessignaturePropertiesIdsignaturePropertiesManifest manifestIdmanifestReferences ObjectElementObjectSignatureObjectSignaturePropertiesObjectManifestObjectobjectIdobjectMimeTypeobjectEncoding objectXML SPKIElementSPKISexp X509ElementX509IssuerSerialX509SKIX509SubjectNameX509CertificateX509CRL X509Digestx509IssuerNamex509SerialNumberx509DigestAlgorithm x509DigestX509DistinguishedNameECValidationDataecValidationDataHashAlgorithmecValidationDataSeedECCurveecCurveAecCurveB ECFieldIDECPrimeECTnBECPnBECGnBecPecMecKecK1ecK2ecK3ECPoint ECKeyValue ECParameters ECNamedCurveecParametersFieldIDecParametersCurveecParametersBaseecParametersOrderecParametersCoFactorecParametersValidationDataecNamedCurveURIKeyValue DSAKeyValue RSAKeyValue dsaKeyValuePQ dsaKeyValueG dsaKeyValueY dsaKeyValueJdsaKeyValueSeedPgenCounterrsaKeyValueModulusrsaKeyValueExponent ecKeyValueId ecKeyValueecKeyValuePublicKeyKeyInfoElementKeyNameKeyInfoKeyValueRetrievalMethodX509DataPGPDataSPKIDataMgmtDataretrievalMethodURIretrievalMethodTyperetrievalMethodTransformsx509DatapgpKeyID pgpKeyPacketpgpDataspkiDataKeyInfo keyInfoIdkeyInfoElements DigestMethoddigestAlgorithmdigestTransformElementTransformElementXPath TransformtransformAlgorithmtransformInclusiveNamespaces transform Transforms transforms Reference referenceId referenceURI referenceTypereferenceTransformsreferenceDigestMethodreferenceDigestValueSignatureMethodsignatureMethodAlgorithmsignatureMethodHMACOutputLengthsignatureMethodCanonicalizationMethodcanonicalizationMethodAlgorithm)canonicalizationMethodInclusiveNamespacescanonicalizationMethod SignedInfo signedInfoId signedInfoCanonicalizationMethodsignedInfoSignatureMethodsignedInfoReferenceSignatureValuesignatureValueIdsignatureValueSignable signature'signedID Signature signatureIdsignatureSignedInfosignatureSignatureValuesignatureKeyInfosignatureObject CryptoBinarynsFragnsFrag11ns11xpElemxpElem11xpCryptoBinarysimpleCanonicalizationsimpleTransform simpleDigest xpKeyInfoTypexpX509DistinguishedName$fXmlPicklerSignatureValue"$fXmlPicklerCanonicalizationMethod$fXmlPicklerTransformElement$fXmlPicklerECFieldID$fXmlPicklerECCurve$fXmlPicklerECValidationData$fXmlPicklerECKeyValue$fXmlPicklerKeyValue$fXmlPicklerSPKIElement$fXmlPicklerSignatureProperty$fXmlPicklerSignatureProperties"$fIdentifiableURIEncodingAlgorithm $fIdentifiableURIDigestAlgorithm$fXmlPicklerX509Element$fXmlPicklerDigestMethod$fIdentifiableURIMACAlgorithm#$fIdentifiableURISignatureAlgorithm$fXmlPicklerSignatureMethod#$fIdentifiableURITransformAlgorithm$fXmlPicklerTransform$fXmlPicklerTransforms$fXmlPicklerKeyInfoElement$fXmlPicklerKeyInfo$fXmlPicklerReference$fXmlPicklerManifest$fXmlPicklerSignedInfo$fXmlPicklerObjectElement$fXmlPicklerObject$fXmlPicklerSignature$fEqSignatureValue$fShowSignatureValue$fEqCanonicalizationMethod$fShowCanonicalizationMethod$fEqTransformElement$fShowTransformElement $fEqECFieldID$fShowECFieldID $fEqECCurve $fShowECCurve$fEqECValidationData$fShowECValidationData$fEqECKeyValue$fShowECKeyValue $fEqKeyValue$fShowKeyValue$fEqSPKIElement$fShowSPKIElement$fEqSignatureProperty$fShowSignatureProperty$fEqSignatureProperties$fShowSignatureProperties$fEqEncodingAlgorithm$fBoundedEncodingAlgorithm$fEnumEncodingAlgorithm$fShowEncodingAlgorithm$fEqDigestAlgorithm$fBoundedDigestAlgorithm$fEnumDigestAlgorithm$fShowDigestAlgorithm$fEqX509Element$fShowX509Element$fEqDigestMethod$fShowDigestMethod$fEqMACAlgorithm$fBoundedMACAlgorithm$fEnumMACAlgorithm$fShowMACAlgorithm$fEqSignatureAlgorithm$fBoundedSignatureAlgorithm$fEnumSignatureAlgorithm$fShowSignatureAlgorithm$fEqSignatureMethod$fShowSignatureMethod$fEqTransformAlgorithm$fShowTransformAlgorithm $fEqTransform$fShowTransform$fEqTransforms$fShowTransforms$fEqKeyInfoElement$fShowKeyInfoElement $fEqKeyInfo $fShowKeyInfo $fEqReference$fShowReference $fEqManifest$fShowManifest$fEqSignedInfo$fShowSignedInfo $fEqSignature$fShowSignature $fEqObject $fShowObject$fEqObjectElement$fShowObjectElementAgreementMethodagreementMethodAlgorithmagreementMethodKA_NonceagreementMethodDigestMethod agreementMethodOriginatorKeyInfoagreementMethodRecipientKeyInfoEncryptionAlgorithmBlockEncryptionTripleDESBlockEncryptionAES128BlockEncryptionAES192BlockEncryptionAES256BlockEncryptionAES128GCMBlockEncryptionAES192GCMBlockEncryptionAES256GCMKeyTransportRSA1_5KeyTransportRSAOAEPMGF1PKeyTransportRSAOAEPEncryptionPropertyencryptionPropertyIdencryptionPropertyTargetencryptionPropertyEncryptionPropertiesencryptionPropertiesIdencryptionProperties DataReference KeyReference reference EncryptedKey encryptedKeyencryptedKeyRecipientencryptedKeyReferenceListencryptedKeyCarriedKeyName EncryptedData encryptedData CipherData CipherValueCipherReference cipherURIcipherTransformsEncryptionMethodencryptionAlgorithmencryptionKeySizeencryptionOAEPparamsencryptionDigestMethod encryption EncryptedType encryptedID encryptedTypeencryptedMimeTypeencryptedEncodingencryptedEncryptionMethodencryptedKeyInfoencryptedCipherDataencryptedEncryptionPropertiesxpEncryptionMethodType$fXmlPicklerCipherData$fXmlPicklerEncryptionProperty $fXmlPicklerEncryptionProperties$$fIdentifiableURIEncryptionAlgorithm$fXmlPicklerEncryptionMethod$fXmlPicklerEncryptedType$fXmlPicklerEncryptedKey$fXmlPicklerEncryptedData$fXmlPicklerAgreementMethod$fEqCipherData$fShowCipherData$fEqEncryptionProperty$fShowEncryptionProperty$fEqEncryptionProperties$fShowEncryptionProperties$fEqEncryptionAlgorithm$fBoundedEncryptionAlgorithm$fEnumEncryptionAlgorithm$fShowEncryptionAlgorithm$fEqEncryptionMethod$fShowEncryptionMethod$fEqEncryptedType$fShowEncryptedType$fEqEncryptedKey$fShowEncryptedKey$fEqEncryptedData$fShowEncryptedData PublicKeys publicKeyDSA publicKeyRSA SigningKey SigningKeyDSA SigningKeyRSAgenerateReferencesigningKeySignatureAlgorithm signBase64 verifyBase64generateSignatureverifySignature$fMonoidPublicKeys$fEqSigningKey$fShowSigningKey$fEqPublicKeys$fShowPublicKeysConfirmationMethodConfirmationMethodHolderOfKeyConfirmationMethodSenderVouchesConfirmationMethodBearer#$fIdentifiableURIConfirmationMethod$fEqConfirmationMethod$fEnumConfirmationMethod$fBoundedConfirmationMethod$fShowConfirmationMethodConsentConsentUnspecifiedConsentObtained ConsentPriorConsentImplicitConsentExplicitConsentUnavailableConsentInapplicable NameIDFormatNameIDFormatUnspecifiedNameIDFormatEmailNameIDFormatX509NameIDFormatWindowsNameIDFormatKerberosNameIDFormatEntityNameIDFormatPersistentNameIDFormatTransientNameIDFormatEncryptedAttributeNameFormatAttributeNameFormatUnspecifiedAttributeNameFormatURIAttributeNameFormatBasicActionNamespaceActionNamespaceRWEDCActionNamespaceRWEDCNegationActionNamespaceGHPPActionNamespaceUNIX $fIdentifiableURIActionNamespace$$fIdentifiableURIAttributeNameFormat$fIdentifiableURINameIDFormat$fDefaultNameIDFormat$fIdentifiableURIConsent$fDefaultConsent$fEqActionNamespace$fEnumActionNamespace$fBoundedActionNamespace$fShowActionNamespace$fEqAttributeNameFormat$fEnumAttributeNameFormat$fBoundedAttributeNameFormat$fShowAttributeNameFormat$fEqNameIDFormat$fEnumNameIDFormat$fBoundedNameIDFormat$fShowNameIDFormat $fEqConsent $fEnumConsent$fBoundedConsent $fShowConsentEvidenceevidenceActionactionNamespaceaction DecisionTypeDecisionTypePermitDecisionTypeDenyDecisionTypeIndeterminateAuthzDecisionStatementauthzDecisionStatementResourceauthzDecisionStatementDecisionauthzDecisionStatementActionauthzDecisionStatementEvidenceEncryptedAttribute Attribute attributeNameattributeNameFormatattributeFriendlyNameattributeAttrsattributeValuesAttributeStatementattributeStatementAuthnContextDeclAuthnContextDeclRef AuthnContextauthnContextClassRefauthnContextDecl#authnContextAuthenticatingAuthoritySubjectLocalitysubjectLocalityAddresssubjectLocalityDNSNameAuthnStatementauthnStatementInstantauthnStatementSessionIndex!authnStatementSessionNotOnOrAfterauthnStatementSubjectLocalityauthnStatementContext StatementStatementAuthnStatementAttributeStatementAuthzDecision AdviceElementAdviceAssertionAdviceAudienceaudience ConditionAudienceRestriction OneTimeUseProxyRestrictionproxyRestrictionCountproxyRestrictionAudience ConditionsconditionsNotBeforeconditionsNotOnOrAfter conditionsSubjectConfirmationDatasubjectConfirmationNotBeforesubjectConfirmationNotOnOrAftersubjectConfirmationRecipientsubjectConfirmationInResponseTosubjectConfirmationAddresssubjectConfirmationKeyInfosubjectConfirmationXMLSubjectConfirmationsubjectConfirmationMethodsubjectConfirmationIdentifiersubjectConfirmationDataSubjectsubjectIdentifiersubjectConfirmationEncryptedAssertion AssertionassertionVersion assertionIDassertionIssueInstantassertionIssuerassertionSignatureassertionSubjectassertionConditionsassertionAdviceassertionStatementAssertionIDRefassertionIDRefIssuerissuer AssertionRefAssertionRefIDAssertionURIRefPossiblyEncrypted NotEncrypted SoEncryptedEncryptedElement EncryptedID IdentifierIdentifierNameIdentifierBaseEncryptedNameIDNameID nameBaseID nameIDFormatnameSPProvidedIDBaseIDbaseNameQualifierbaseSPNameQualifierbaseIDxpBaseID simpleNameIDxpNameIDDefaultingxpNameIDxpEncryptedElementxpPossiblyEncrypted noSubjectxpAttributeType$fXmlPicklerNameID$fXmlPicklerIdentifier$fXmlPicklerEncryptedElement$fXmlPicklerEncryptedElement0$fXmlPicklerIssuer$fXmlPicklerAssertionIDRef#$fXmlPicklerSubjectConfirmationData$fXmlPicklerSubjectConfirmation$fXmlPicklerSubject$fXmlPicklerAudience$fXmlPicklerCondition$fXmlPicklerConditions$fXmlPicklerSubjectLocality$fXmlPicklerAuthnContextDecl$fXmlPicklerAuthnContext$fXmlPicklerAuthnStatement$fXmlPicklerAttribute$fXmlPicklerAttributeStatement$fXmlPicklerEncryptedElement1$fXmlPicklerDecisionType$fIdentifiable[]DecisionType$fXmlPicklerAction$fXmlPicklerEvidence"$fXmlPicklerAuthzDecisionStatement$fXmlPicklerStatement$fXmlPicklerAdviceElement$fSignableAssertion$fXmlPicklerAssertion$fXmlPicklerAssertionRef$fXmlPicklerEncryptedElement2 $fEqBaseID $fShowBaseID $fEqNameID $fShowNameID$fEqIdentifier$fShowIdentifier$fEqEncryptedElement$fShowEncryptedElement$fEqPossiblyEncrypted$fShowPossiblyEncrypted $fEqIssuer $fShowIssuer$fEqAssertionIDRef$fShowAssertionIDRef$fEqSubjectConfirmationData$fShowSubjectConfirmationData$fEqSubjectConfirmation$fShowSubjectConfirmation $fEqSubject $fShowSubject $fEqAudience$fShowAudience $fEqCondition$fShowCondition$fEqConditions$fShowConditions$fEqSubjectLocality$fShowSubjectLocality$fEqAuthnContextDecl$fShowAuthnContextDecl$fEqAuthnContext$fShowAuthnContext$fEqAuthnStatement$fShowAuthnStatement $fEqAttribute$fShowAttribute$fEqAttributeStatement$fShowAttributeStatement$fEqDecisionType$fEnumDecisionType$fBoundedDecisionType$fShowDecisionType $fEqAction $fShowAction $fEqEvidence$fShowEvidence$fMonoidEvidence$fEqAssertionRef$fShowAssertionRef $fEqAssertion$fShowAssertion $fEqStatement$fShowStatement$fEqAuthzDecisionStatement$fShowAuthzDecisionStatement$fEqAdviceElement$fShowAdviceElementBinding BindingSOAP BindingPAOSBindingHTTPRedirectBindingHTTPPOSTBindingHTTPArtifact BindingURI$fIdentifiableURIBinding $fEqBinding$fBoundedBinding $fEnumBinding $fShowBindingRequestedAttributerequestedAttributerequestedAttributeIsRequiredAttributeConsumingServiceattributeConsumingServiceIndex"attributeConsumingServiceIsDefault$attributeConsumingServiceServiceName+attributeConsumingServiceServiceDescription+attributeConsumingServiceRequestedAttribute SSODescriptor&ssoDescriptorArtifactResolutionService ssoDescriptorSingleLogoutService ssoDescriptorManageNameIDServicessoDescriptorNameIDFormatKeyTypesKeyTypeSigningKeyTypeEncryption KeyTypeBoth KeyDescriptorkeyDescriptorUsekeyDescriptorKeyInfokeyDescriptorEncryptionMethodRoleDescriptorroleDescriptorIDroleDescriptorValidUntilroleDescriptorCacheDuration(roleDescriptorProtocolSupportEnumerationroleDescriptorErrorURLroleDescriptorAttrsroleDescriptorSignatureroleDescriptorExtensionsroleDescriptorKeyDescriptorroleDescriptorOrganizationroleDescriptorContactPersonAdditionalMetadataLocation#additionalMetadataLocationNamespaceadditionalMetadataLocation ContactTypeContactTypeTechnicalContactTypeSupportContactTypeAdministrativeContactTypeBillingContactTypeOtherContact ContactPerson contactType contactAttrscontactExtensionscontactCompanycontactGivenNamecontactSurNamecontactEmailAddresscontactTelephoneNumber OrganizationorganizationAttrsorganizationExtensionsorganizationNameorganizationDisplayNameorganizationURL DescriptorIDPSSODescriptorSPSSODescriptorAuthnAuthorityDescriptorAttributeAuthorityDescriptor PDPDescriptordescriptorRole descriptorSSO!descriptorWantAuthnRequestsSigneddescriptorSingleSignOnServicedescriptorNameIDMappingService#descriptorAssertionIDRequestServicedescriptorAttributeProfiledescriptorAttributedescriptorAuthnRequestsSigneddescriptorWantAssertionsSigned"descriptorAssertionConsumerService#descriptorAttributeConsumingServicedescriptorAuthnQueryServicedescriptorNameIDFormatdescriptorAttributeServicedescriptorAuthzService DescriptorsAffiliationDescriptor descriptors'affiliationDescriptorAffiliationOwnerIDaffiliationDescriptorIDaffiliationDescriptorValidUntil"affiliationDescriptorCacheDurationaffiliationDescriptorAttrsaffiliationDescriptorSignatureaffiliationDescriptorExtensions$affiliationDescriptorAffiliateMember"affiliationDescriptorKeyDescriptor Extensions extensionsMetadataEntityDescriptorEntitiesDescriptorentityID metadataIDmetadataValidUntilmetadataCacheDuration entityAttrsmetadataSignaturemetadataExtensionsentityDescriptorsentityOrganizationentityContactPersonentityAditionalMetadataLocation entitiesNameentities LocalizedURI LocalizedName Localized localizedLang localizedIndexedEndpointindexedEndpointindexedEndpointIndexindexedEndpointIsDefaultEndpointendpointBindingendpointLocationendpointResponseLocation endpointAttrs endpointXMLEntityID xpEntityID xpLocalizedkeyType$fXmlPicklerEndpoint$fXmlPicklerIndexedEndpoint$fXmlPicklerLocalized$fXmlPicklerLocalized0$fXmlPicklerExtensions$fXmlPicklerOrganization$fXmlPicklerContactType$fIdentifiable[]ContactType$fXmlPicklerContact&$fXmlPicklerAdditionalMetadataLocation$fXmlPicklerKeyTypes$fIdentifiable[]KeyTypes$fXmlPicklerKeyDescriptor$fSignableRoleDescriptor$fXmlPicklerRoleDescriptor$fXmlPicklerSSODescriptor$fXmlPicklerRequestedAttribute%$fXmlPicklerAttributeConsumingService$fXmlPicklerDescriptor$fXmlPicklerDescriptors$fSignableMetadata$fXmlPicklerMetadata $fEqEndpoint$fShowEndpoint$fEqIndexedEndpoint$fShowIndexedEndpoint $fEqLocalized$fShowLocalized$fEqExtensions$fShowExtensions$fMonoidExtensions$fEqOrganization$fShowOrganization$fEqContactType$fEnumContactType$fBoundedContactType$fShowContactType $fEqContact $fShowContact$fEqAdditionalMetadataLocation $fShowAdditionalMetadataLocation $fEqKeyTypes$fEnumKeyTypes$fBoundedKeyTypes$fShowKeyTypes$fEqKeyDescriptor$fShowKeyDescriptor$fEqRoleDescriptor$fShowRoleDescriptor$fEqSSODescriptor$fShowSSODescriptor$fEqRequestedAttribute$fShowRequestedAttribute$fEqAttributeConsumingService$fShowAttributeConsumingService$fEqDescriptor$fShowDescriptor$fEqDescriptors$fShowDescriptors $fEqMetadata$fShowMetadata AnyProtocolProtocolRequestProtocolResponse AnyResponseResponseResponseResponseArtifactResponse AnyRequestRequestAssertionIDRequestRequestAuthnQueryRequestAttributeQueryRequestAuthzDecisionQueryRequestAuthnRequestRequestArtifactResolveRequestManageNameIDRequestRequestLogoutRequestRequestNameIDMappingRequestNameIDMappingResponsenameIDMappingResponsenameIDMappingResponseNameIDNameIDMappingRequestnameIDMappingRequestnameIDMappingRequestIdentifiernameIDMappingRequestPolicy LogoutReasonLogoutReasonUserLogoutReasonAdminLogoutResponselogoutResponse LogoutRequest logoutRequestlogoutRequestReasonlogoutRequestNotOnOrAfterlogoutRequestIdentifierlogoutRequestSessionIndexManageNameIDResponsemanageNameIDResponseNewEncryptedIDNewIDnewIDManageNameIDRequestmanageNameIDRequestmanageNameIDRequestNameIDmanageNameIDRequestNewIDArtifactResponseartifactResponseartifactResponseMessageArtifactResolveartifactResolveartifactResolveArtifactIDPEntryidpEntryProviderID idpEntryName idpEntryLocIDPListidpListidpGetCompleteScopingscopingProxyCountscopingIDPListscopingRequesterID NameIDPolicynameIDPolicyFormatnameIDPolicySPNameQualifiernameIDPolicyAllowCreateAssertionConsumerServiceAssertionConsumerServiceIndexAssertionConsumerServiceURL'authnRequestAssertionConsumerServiceURLauthnRequestProtocolBinding AuthnRequest authnRequestauthnRequestForceAuthnauthnRequestIsPassive$authnRequestAssertionConsumerService*authnRequestAssertionConsumingServiceIndexauthnRequestProviderNameauthnRequestSubjectauthnRequestNameIDPolicyauthnRequestConditions!authnRequestRequestedAuthnContextauthnRequestScopingResponseresponseresponseAssertionsAuthzDecisionQueryauthzDecisionQueryauthzDecisionQueryResourceauthzDecisionQueryActionsauthzDecisionQueryEvidenceAttributeQueryattributeQueryattributeQueryAttributesAuthnContextComparisonTypeComparisonExactComparisonMinimumComparisonMaximumComparisonBetterAuthnContextRefsAuthnContextClassRefsAuthnContextDeclRefsRequestedAuthnContextrequestedAuthnContextComparisonrequestedAuthnContextRefs AuthnQuery authnQueryauthnQuerySessionIndexauthnQueryRequestedAuthnContextSubjectQueryAbstractType subjectQuerysubjectQuerySubjectAssertionIDRequestassertionIDRequestassertionIDRequestRef StatusCode2StatusAuthnFailedStatusInvalidAttrNameOrValueStatusInvalidNameIDPolicyStatusNoAuthnContextStatusNoAvailableIDPStatusNoPassiveStatusNoSupportedIDPStatusPartialLogoutStatusProxyCountExceededStatusRequestDeniedStatusRequestUnsupportedStatusRequestVersionDeprecatedStatusRequestVersionTooHighStatusRequestVersionTooLowStatusResourceNotRecognizedStatusTooManyResponsesStatusUnknownAttrProfileStatusUnknownPrincipalStatusUnsupportedBinding StatusCode1 StatusSuccessStatusRequesterStatusResponderStatusVersionMismatch StatusCode statusCode1 statusCodesStatus statusCode statusMessage statusDetail SAMLResponse samlResponse'StatusResponseTypestatusProtocolstatusInResponseTostatus SAMLRequest samlRequest'RequestAbstractTyperequestProtocol SAMLProtocol samlProtocol'isSAMLResponse_ ProtocolType protocolIDprotocolVersionprotocolIssueInstantprotocolDestinationprotocolConsentprotocolIssuerprotocolSignatureprotocolExtensions relayStaterequestProtocol'statusProtocol' successStatus subjectQuery'$fSignableProtocolType$fXmlPicklerProtocolType$fXmlPicklerRequestAbstractType$fXmlPicklerStatusCode1$fIdentifiableURIStatusCode1$fIdentifiableURIStatusCode2$fXmlPicklerStatusCode$fXmlPicklerStatus$fXmlPicklerStatusResponseType$fSAMLRequestAssertionIDRequest $fSAMLProtocolAssertionIDRequest$fSignableAssertionIDRequest$fXmlPicklerAssertionIDRequest$$fXmlPicklerSubjectQueryAbstractType$fXmlPicklerAuthnContextRefs&$fXmlPicklerAuthnContextComparisonType*$fIdentifiable[]AuthnContextComparisonType!$fXmlPicklerRequestedAuthnContext$fSAMLRequestAuthnQuery$fSAMLProtocolAuthnQuery$fSignableAuthnQuery$fXmlPicklerAuthnQuery$fSAMLRequestAttributeQuery$fSAMLProtocolAttributeQuery$fSignableAttributeQuery$fXmlPicklerAttributeQuery$fSAMLRequestAuthzDecisionQuery $fSAMLProtocolAuthzDecisionQuery$fSignableAuthzDecisionQuery$fXmlPicklerAuthzDecisionQuery$fSAMLResponseResponse$fSAMLProtocolResponse$fSignableResponse$fXmlPicklerResponse$fXmlPicklerNameIDPolicy$fXmlPicklerIDPEntry$fXmlPicklerIDPList$fXmlPicklerScoping$fSAMLRequestAuthnRequest$fSAMLProtocolAuthnRequest$fSignableAuthnRequest$fXmlPicklerAuthnRequest$fSAMLRequestArtifactResolve$fSAMLProtocolArtifactResolve$fSignableArtifactResolve$fXmlPicklerArtifactResolve$fSAMLResponseArtifactResponse$fSAMLProtocolArtifactResponse$fSignableArtifactResponse$fXmlPicklerArtifactResponse$fXmlPicklerNewID $fSAMLRequestManageNameIDRequest!$fSAMLProtocolManageNameIDRequest$fSignableManageNameIDRequest$fXmlPicklerManageNameIDRequest"$fSAMLResponseManageNameIDResponse"$fSAMLProtocolManageNameIDResponse$fSignableManageNameIDResponse $fXmlPicklerManageNameIDResponse$fSAMLResponseLogoutResponse$fSAMLProtocolLogoutResponse$fSignableLogoutResponse$fXmlPicklerLogoutResponse$fIdentifiable[]LogoutReason$fSAMLRequestLogoutRequest$fSAMLProtocolLogoutRequest$fSignableLogoutRequest$fXmlPicklerLogoutRequest!$fSAMLRequestNameIDMappingRequest"$fSAMLProtocolNameIDMappingRequest$fSignableNameIDMappingRequest $fXmlPicklerNameIDMappingRequest#$fSAMLResponseNameIDMappingResponse#$fSAMLProtocolNameIDMappingResponse$fSignableNameIDMappingResponse!$fXmlPicklerNameIDMappingResponse$fSAMLRequestAnyRequest$fSAMLProtocolAnyRequest$fSignableAnyRequest$fXmlPicklerAnyRequest$fSAMLResponseAnyResponse$fSAMLProtocolAnyResponse$fSignableAnyResponse$fXmlPicklerAnyResponse$fSAMLProtocolAnyProtocol$fSignableAnyProtocol$fXmlPicklerAnyProtocol$fEqProtocolType$fShowProtocolType$fEqRequestAbstractType$fShowRequestAbstractType$fEqStatusCode1$fBoundedStatusCode1$fEnumStatusCode1$fShowStatusCode1$fEqStatusCode2$fBoundedStatusCode2$fEnumStatusCode2$fShowStatusCode2$fEqStatusCode$fShowStatusCode $fEqStatus $fShowStatus$fEqStatusResponseType$fShowStatusResponseType$fEqAssertionIDRequest$fShowAssertionIDRequest$fEqSubjectQueryAbstractType$fShowSubjectQueryAbstractType$fEqAuthnContextRefs$fShowAuthnContextRefs$fEqAuthnContextComparisonType $fEnumAuthnContextComparisonType#$fBoundedAuthnContextComparisonType $fShowAuthnContextComparisonType$fEqRequestedAuthnContext$fShowRequestedAuthnContext$fEqAuthnQuery$fShowAuthnQuery$fEqAttributeQuery$fShowAttributeQuery$fEqAuthzDecisionQuery$fShowAuthzDecisionQuery $fEqResponse$fShowResponse$fEqAssertionConsumerService$fShowAssertionConsumerService$fEqNameIDPolicy$fShowNameIDPolicy $fEqIDPEntry$fShowIDPEntry $fEqIDPList $fShowIDPList $fEqScoping $fShowScoping$fEqAuthnRequest$fShowAuthnRequest$fEqArtifactResolve$fShowArtifactResolve$fEqArtifactResponse$fShowArtifactResponse $fEqNewID $fShowNewID$fEqManageNameIDRequest$fShowManageNameIDRequest$fEqManageNameIDResponse$fShowManageNameIDResponse$fEqLogoutResponse$fShowLogoutResponse$fEqLogoutReason$fEnumLogoutReason$fBoundedLogoutReason$fShowLogoutReason$fEqLogoutRequest$fShowLogoutRequest$fEqNameIDMappingRequest$fShowNameIDMappingRequest$fEqNameIDMappingResponse$fShowNameIDMappingResponse$fEqAnyRequest$fShowAnyRequest$fEqAnyResponse$fShowAnyResponse$fEqAnyProtocol$fShowAnyProtocolsignSAMLProtocolverifySAMLProtocol encodeQuery encodeHeaders decodeURI$fIdentifiableURIEncoding $fEqEncoding$fBoundedEncoding$fEnumEncoding$fShowEncoding encodeValue encodeForm decodeValue decodeFormnsMDnsP fieldLensC14NModeC14N_1_0C14N_EXCLUSIVE_1_0C14N_1_1Doc fromXmlTreesc14nunDoclookupProtocolParameterEncodingEncodingDEFLATE