<?xml version="1.0" encoding="UTF-8"?>
<schema 
  targetNamespace="urn:oasis:names:tc:SAML:protocol:ext:rac"
  xmlns="http://www.w3.org/2001/XMLSchema"
  xmlns:rac="urn:oasis:names:tc:SAML:protocol:ext:rac"
  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
  elementFormDefault="unqualified"
  attributeFormDefault="unqualified"
  blockDefault="substitution"
  version="2.0">

  <annotation>
    <documentation>
      Document title: SAML Protocol Extension Schema for Specifying Authentication Context Combinations
      Document identifier: sstc-saml-protocol-ext-rac.xsd
      Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security
      Revision history:
      V3.0 (September 2006)
    </documentation>
  </annotation>

  <import namespace="urn:oasis:names:tc:SAML:2.0:assertion"
    schemaLocation="saml-schema-assertion-2.0.xsd"/>

  <element name="RequestedACCombination" type="rac:RequestedACCombinationType"/>

<annotation>
	<documentation>The RequestedACCombination Extension MUST NOT occur any other place than in the Extension element of an AuthnRequest message.
	</documentation>
</annotation>

  <complexType name="RequestedACCombinationType">
    <choice>
         <element ref="rac:RequestedACCombination" maxOccurs="unbounded"/>
         <element ref="saml:AuthnContextClassRef" maxOccurs="unbounded"/>
    </choice>
    <attribute name="RACComparison" type="anyURI" use="optional"/>
    
  </complexType>  

  <attribute name="supportsRequestedACComb" type="boolean"/>

</schema>

