Google Search Appliance Authentication/Authorization for Enterprise SPI Guide User Manual

Page 23

Advertising
background image

Google Search Appliance: Authentication/Authorization for Enterprise SPI Guide

23

<element name="Assertion" type="saml:AssertionType"/>
<complexType name="AssertionType">

<sequence>

<element ref="saml:Issuer"/>
<element ref="ds:Signature" minOccurs="0"/>
<element ref="saml:Subject" minOccurs="0"/>
<element ref="saml:Conditions" minOccurs="0"/>
<element ref="saml:Advice" minOccurs="0"/>
<choice minOccurs="0" maxOccurs="unbounded">

<element ref="saml:Statement"/>
<element ref="saml:AuthnStatement"/>
<element ref="saml:AuthzDecisionStatement"/>
<element ref="saml:AttributeStatement"/>

</choice>

</sequence>
<attribute name="Version" type="string" use="required"/>
<attribute name="ID" type="ID" use="required"/>
<attribute name="IssueInstant" type="dateTime" use="required"/>

</complexType>

<complexType name="StatementAbstractType" abstract="true"/>

<element name="Issuer" type="saml:NameIDType"/>

<element name="AuthzDecisionStatement" type="saml:AuthzDecisionStatementType"/>
<complexType name="AuthzDecisionStatementType">

<complexContent>

<extension base="saml:StatementAbstractType">

<sequence>

<element ref="saml:Action" maxOccurs="unbounded"/>
<element ref="saml:Evidence" minOccurs="0"/>

</sequence>
<attribute name="Resource" type="anyURI" use="required"/>
<attribute name="Decision" type="saml:DecisionType" use="required"/>

</extension>

</complexContent>

</complexType>

<simpleType name="DecisionType">

<restriction base="string">

<enumeration value="Permit"/>
<enumeration value="Deny"/>
<enumeration value="Indeterminate"/>

</restriction>

</simpleType>

<element name="Action" type="saml:ActionType"/>
<complexType name="ActionType">

<simpleContent>

<extension base="string">

<attribute name="Namespace" type="anyURI" use="required"/>

</extension>

</simpleContent>

</complexType>

The namespace set in the Action element attribute is urn:oasis:names:tc:SAML:1.0:action:ghpp.
If the string in an Action element is “GET”, the search appliance displays the URL in the search results,
along with snippets and the cache link.

Advertising