<!--
  ~ Copyright 2005-2007 WSO2, Inc. (http://wso2.com)
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~ http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing, software
  ~ distributed under the License is distributed on an "AS IS" BASIS,
  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->

<RampartSecurityScenarios xmlns="http://www.wso2.org/products/carbon/security">

    <!-- Basic scenarios -->
    <Scenario id="scenario1">
        <Summary>UsernameToken</Summary>
        <Description>Provides Authentication. Clients have Username Tokens</Description>
        <Category>ut</Category>
        <Modules>
            <Module>rampart</Module>
        </Modules>
        <WsuId>UTOverTransport</WsuId>
        <Type>basic</Type>
    </Scenario>
    <Scenario id="scenario2">
        <Summary>Non-repudiation</Summary>
        <Description>Provides Authentication and Integrity. Clients have X509 certificates</Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
        </Modules>
        <WsuId>SigOnly</WsuId>
        <Type>basic</Type>
    </Scenario>
    <Scenario id="scenario3">
        <Summary>Integrity</Summary>
        <Description>Provides Integrity. Clients do not have X509 certificates</Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
        </Modules>
        <WsuId>SgnOnlyAnonymous</WsuId>
        <Type>basic</Type>
    </Scenario>
    <Scenario id="scenario4">
        <Summary>Confidentiality</Summary>
        <Description>Provides Confidentiality. Clients do not have X509 certificates</Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
        </Modules>
        <WsuId>EncrOnlyAnonymous</WsuId>
        <Type>basic</Type>
    </Scenario>

    <!-- Advanced scenarios -->
    <Scenario id="scenario5">
        <Summary>Sign and encrypt - X509 Authentication</Summary>
        <Description>Provides Authentication, Integrity and Confidentiality. Clients have X509 certificates
        </Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
        </Modules>
        <WsuId>SigEncr</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario6">
        <Summary>Sign and Encrypt - Anonymous clients</Summary>
        <Description>Provides Integrity and Confidentiality.</Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
        </Modules>
        <WsuId>SgnEncrAnonymous</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario7">
        <Summary>Encrypt only - Username Token Authentication</Summary>
        <Description>Provides Authentication and Confidentiality. Clients have Username Tokens</Description>
        <Category>ut-keystore</Category>
        <Modules>
            <Module>rampart</Module>
        </Modules>
        <WsuId>EncrOnlyUsername</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario8">
        <Summary>Sign and Encrypt - Username Token Authentication</Summary>
        <Description>Provides Authentication, Integrity and Confidentiality. Clients have Username Tokens</Description>
        <Category>ut-keystore</Category>
        <Modules>
            <Module>rampart</Module>
        </Modules>
        <WsuId>SgnEncrUsername</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario9">
        <Summary>SecureConversation - Sign only - Service as STS - Bootstrap policy - Sign and Encrypt , X509
            Authentication
        </Summary>
        <Description>Provides Authentication and Integrity. Multiple message exchange.Clients have X509 certificates.
        </Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
            <Module>rahas</Module>
        </Modules>
        <WsuId>SecConSignOnly</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario10">
        <Summary>SecureConversation - Encrypt only - Service as STS - Bootstrap policy -
            Sign and Encrypt , X509 Authentication
        </Summary>
        <Description>Provides Confidentiality. Multiple message exchange.Clients have X509 certificates.</Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
            <Module>rahas</Module>
        </Modules>
        <WsuId>SecConEncrOnly</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario11">
        <Summary>SecureConversation - Sign and Encrypt - Service as STS - Bootstrap policy - Sign and Encrypt , X509
            Authentication
        </Summary>
        <Description>Provides Authentication, Integrity and Confidentiality. Multiple message exchange.Clients have X509
            certificates.
        </Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
            <Module>rahas</Module>
        </Modules>
        <WsuId>SecConSgnEncr</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario12">
        <Summary>SecureConversation - Sign Only - Service as STS - Bootstrap policy - Sign and Encrypt , Anonymous
            clients
        </Summary>
        <Description>Provides Integrity. Multiple message exchange.</Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
            <Module>rahas</Module>
        </Modules>
        <WsuId>SecConSignOnlyAnonymous</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario13">
        <Summary>SecureConversation - Encrypt Only - Service as STS - Bootstrap policy - Sign and Encrypt , Anonymous
            clients
        </Summary>
        <Description>Provides Confidentiality. Multiple message exchange.</Description>
        <Category>keystore</Category>
        <Modules>
            <Module>rampart</Module>
            <Module>rahas</Module>
        </Modules>
        <WsuId>SecConEncrOnlyAnonymous</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario14">
        <Summary>SecureConversation - Encrypt Only - Service as STS - Bootstrap policy - Sign and Encrypt , Username
            Token Authentication
        </Summary>
        <Description>Provides Authentication and Confidentiality. Multiple message exchange. Clients have Username
            Tokens.
        </Description>
        <Category>ut-keystore</Category>
        <Modules>
            <Module>rampart</Module>
            <Module>rahas</Module>
        </Modules>
        <WsuId>SecConEncrUsername</WsuId>
        <Type>advanced</Type>
    </Scenario>
    <Scenario id="scenario15">
        <Summary>SecureConversation - Sign and Encrypt - Service as STS - Bootstrap policy - Sign and Encrypt , Username
            Token Authentication
        </Summary>
        <Description>Provides Authentication Integrity and Confidentiality. Multiple message exchange. Clients have
            Username Tokens.
        </Description>
        <Category>ut-keystore</Category>
        <Modules>
            <Module>rampart</Module>
            <Module>rahas</Module>
        </Modules>
        <WsuId>SecConSgnEncrUsername</WsuId>
        <Type>advanced</Type>
    </Scenario>
</RampartSecurityScenarios>
