C SPML Examples

This appendix provides the following SPML XSD examples:

SPML Example - Add User
SPML Example - Delete User
SPML Example - Modify User
SPML Example - Resume User
SPML Example - Suggest User Name
SPML Example - Suspend User
SPML Example - Validate User Name
SPML Example - Check If User is Active
SPML Example - Lookup Username Policy
SPML Example - Assign Role Membership
SPML Example – Add User with Role Assignment
SPML Example – Revoke Role Membership
SPML Example - Modify Role
SPML Example - Modify Role with Parent
SPML Example - Role Grant
SPML Example - Role with Parent
SPML Example - Delete Role
SPML Example - Status Request
SPML Example - List Target

C.1 SPML Example - Add User

The Request is as follows:

<addRequest xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" executionMode="asynchronous"
locale="en" policyURI="http://www.sample.com/string/string" requestID="string"
returnData="identifier" targetID="string">
<!--Zero or more repetitions:-->
<data>
<!--You have a CHOICE of the next 3 items at this level-->
<pso:identity>
<!--Optional:-->
<pso:attributes>
<!--Here, My Attribute is a UDF, with 'My Attribute' also added in CreateUserDataset.xml -->
<pso:attr name="My Attribute">
<pso:value>New Value</pso:value>
</pso:attr>
</pso:attributes>
Status
<!--Optional:-->
<pso:activeEndDate>2009-06-12T16:00:00</pso:activeEndDate>
<!--Optional:-->
<pso:activeStartDate>2009-06-11T18:00:00</pso:activeStartDate>
<pso:commonName>
<!--1 or more repetitions:-->
<!--1 or more repetitions:-->
<pso:value>All Optional Values</pso:value>
</pso:values>
<!--1 or more repetitions:-->
<pso:value>All Optional Values</pso:value>
</pso:values>
</pso:commonName>
<!--Optional:-->
<pso:countryName>India</pso:countryName>
<!--Optional:-->
<pso:departmentNumber>
<!--1 or more repetitions:-->
<pso:value>123456</pso:value>
</pso:departmentNumber>
<!--Optional:-->
<pso:description>
<!--1 or more repetitions:-->
<pso:values>
<!--1 or more repetitions:-->
<pso:value>All Optional Fields Profile</pso:value>
</pso:values>
</pso:description>
<!--Optional:-->
<pso:displayName>
<!--1 or more repetitions:-->
<pso:value locale="en">All Optional Values</pso:value>
</pso:displayName>
<!--Optional:-->
<pso:employeeNumber>24073</pso:employeeNumber>
<!--Optional:-->
<pso:employeeType>
<!--1 or more repetitions:-->
<pso:values>
<!--1 or more repetitions:-->
<pso:value>Part-Time</pso:value>
</pso:values>
</pso:employeeType>
<!--Optional:-->
<pso:facsimileTelephoneNumber>
<!--1 or more repetitions:-->
<pso:number>08041085304</pso:number>
</pso:facsimileTelephoneNumber>
<!--Optional:-->
<pso:generationQualifier>
<!--1 or more repetitions:-->
<pso:value>II</pso:value>
</pso:generationQualifier>
<!--Optional:-->
<pso:givenName>
<!--1 or more repetitions:-->
<pso:value>OptionalGivenName</pso:value>
</pso:givenName>
<!--Optional:-->
<pso:hireDate>2009-06-11T16:00:00</pso:hireDate>
<!--Optional:-->
<pso:homePhone>
<!--1 or more repetitions:-->
<pso:number>9999999999</pso:number>
</pso:homePhone>
<!--Optional:-->
<pso:homePostalAddress>
<!--1 or more repetitions:-->
<pso:value>marathahalli</pso:value>
</pso:homePostalAddress>
<!--Optional:-->
<pso:initials>
<!--1 or more repetitions:-->
<pso:value>SJ</pso:value>
</pso:initials>
<!--Optional:-->
<pso:localityName>
<!--1 or more repetitions:-->
<pso:value>Munekolala</pso:value>
</pso:localityName>
<!--Optional:-->
<!--pso:mail>
<pso:value>[email protected]</pso:value>
</pso:mail-->
<!--Optional:-->
<pso:middleName>MiddleName</pso:middleName>
<!--Optional:-->
<pso:mobile>
<!--1 or more repetitions:-->
<pso:number>9886078373</pso:number>
</pso:mobile>
<!--Optional:-->
<pso:organization>
<!--1 or more repetitions:-->
<!--1 or more repetitions:-->
<pso:value>2</pso:value>
</pso:values>
</pso:organization>
<!--Optional:-->
<pso:organizationUnit>
<!--1 or more repetitions:-->
<!--1 or more repetitions:-->
<pso:value>Marketing</pso:value>
</pso:values>
</pso:organizationUnit>
<!--Optional:-->
<pso:pager>
<!--1 or more repetitions:-->
<pso:number>7777</pso:number>
</pso:pager>
<!--Optional:-->
<pso:password>
<!--1 or more repetitions:-->
<pso:value>saijha</pso:value>
</pso:password>
<!--Optional:-->
<pso:postalAddress>
<!--1 or more repetitions:-->
<pso:value>Marathahalli</pso:value>
</pso:postalAddress>
<!--Optional:-->
<pso:postalCode>
<!--1 or more repetitions:-->
<pso:value>560037</pso:value>
</pso:postalCode>
<!--Optional:-->
<pso:postOfficeBox>
<!--1 or more repetitions:-->
<pso:value>999</pso:value>
</pso:postOfficeBox>
<!--Optional:-->
<pso:preferredLanguage>English</pso:preferredLanguage>
<!--Optional:-->
<pso:state>
<!--1 or more repetitions:-->
<pso:value>Karnataka</pso:value>
</pso:state>
<!--Optional:-->
<pso:street>
<!--1 or more repetitions:-->
<pso:value>Satyam Street</pso:value>
</pso:street>
<!--Optional:-->
<pso:surname>
<!--1 or more repetitions:-->
<!--1 or more repetitions:-->
<pso:value>Jha</pso:value>
</pso:values>
</pso:surname>
<!--Optional:-->
<pso:telephoneNumber>
<!--1 or more repetitions:-->
<pso:number>08041085304</pso:number>
</pso:telephoneNumber>
<!--Optional:-->
<pso:title>
<!--1 or more repetitions:-->
<!--1 or more repetitions:-->
<pso:value>Mr</pso:value>
</pso:values>
<!--1 or more repetitions:-->
<pso:value>Mr</pso:value>
</pso:values>
</pso:title>
<!--Optional:-->
<pso:username>
<!--1 or more repetitions:-->
<pso:value>All Optional Values</pso:value>
</pso:username>
</pso:identity>
</data>
</addRequest>

The Response is as follows:

<ns9:AddResponseType xmlns="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns2="urn:oasis:names:tc:SPML:2:0"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns7="urn:names:spml:ws:header" xmlns:ns8="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="16" status="pending"/>

Note:

The displayName attribute has Multiple Language Support (MLS), and language values can be specified as "en", "fr", and so on.

C.2 SPML Example - Delete User

The Request is as follows:

<deleteRequest xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" executionMode="asynchronous"
locale="en" policyURI="http://www.sample.com/string/string"
requestID="string" returnData="identifier" targetID="string">
<psoID ID="identity:6C9B96E99FC8DC32E040E50A3D5252F5" />
</deleteRequest>

The Response is as follows:

<ns9:ResponseType xmlns="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns2="urn:oasis:names:tc:SPML:2:0"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns7="urn:names:spml:ws:header" xmlns:ns8="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="19" status="pending"/>

C.3 SPML Example - Modify User

The Request is as follows:

<modifyRequest xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" executionMode="asynchronous"
locale="string" policyURI="http://www.sample.com/string/string"
requestID="string" returnData="identifier">
<capabilityData capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
mustUnderstand="true" />
<psoID ID="identity:6C9B96E99FC8DC32E040E50A3D5252F5" />
<modification modificationMode="add">
<component path="/identity" namespaceURI="http://www.w3.org/TR/xpath20" />
<data>
<pso:identity>
<pso:initials>
<!--1 or more repetitions:-->
<pso:value>J S</pso:value>
</pso:initials>
                                        </pso:identity>
                                </data>
                        </modification>
                        <modification modificationMode="replace">
                                <component path="/identity" namespaceURI="http://www.w3.org/TR/xpath20" />
                                <data>
                                        <pso:identity>
                                                <pso:localityName>
                                                        <!--1 or more repetitions:-->
                                                        <pso:value>new_locality</pso:value>
                                                </pso:localityName>
                                                <pso:homePhone>
                                                        <!--1 or more repetitions:-->
                                                        <pso:number>0123456789</pso:number>
                                                </pso:homePhone>
                                                <pso:commonName>
                                                        <!--1 or more repetitions:-->
                                                        <pso:values>
                                                                <!--1 or more repetitions:-->
                                                                <pso:value>FR Alice Krug1</pso:value>
                                                        </pso:values>
                                                </pso:commonName>
                                        </pso:identity>
                                </data>
                        </modification>
                        <modification modificationMode="delete">
                                <component path="/identity" namespaceURI="http://www.w3.org/TR/xpath20" />
                                <data>
                                        <pso:identity>
                                                <pso:pager>
                                                        <!--1 or more repetitions:-->
                                                        <pso:number>333</pso:number>
                                                </pso:pager>
                                        </pso:identity>
                                </data>
                        </modification>
                </modifyRequest>

The Response is as follows:

<ns9:ModifyResponseType xmlns="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns2="urn:oasis:names:tc:SPML:2:0"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns7="urn:names:spml:ws:header" xmlns:ns8="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="15" status="pending"/>

C.4 SPML Example - Resume User

The Request is as follows:

<resumeRequest xmlns="urn:oasis:names:tc:SPML:2:0:suspend"
requestID="120">
<psoID ID="6C9B96E99FC8DC32E040E50A3D5252F5" />
</resumeRequest>

The Response is as follows:

<ns9:ResponseType xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns5="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns6="urn:names:spml:ws:header" xmlns:ns7="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns8="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="120" status="pending"/>

C.5 SPML Example - Suggest User Name

The Request is as follows:

<ns4:suggestUsernameRequest
                        xmlns:ns4="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
                        xmlns="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
                        xmlns:ns2="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
                        xmlns:ns3="http://xmlns.oracle.com/idm/identity/PSO">
                        <ns2:identity>
                                <ns3:givenName>
                                        <ns3:value>testfn</ns3:value>
                                </ns3:givenName>
                                <ns3:surname>
                                        <ns3:values>
                                                <ns3:value>testln</ns3:value>
                                        </ns3:values>
                                </ns3:surname>
                        </ns2:identity>
                </ns4:suggestUsernameRequest>

The Response is as follows:

<ns9:SuggestUsernameResponseType xmlns="urn:oasis:names:tc:SPML:2:0"
        xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO"
        xmlns:ns3="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
        xmlns:ns4="urn:oasis:names:tc:SPML:2:0:reference"
        xmlns:ns5="urn:oasis:names:tc:SPML:2:0:async"
        xmlns:ns6="urn:oasis:names:tc:SPML:2:0:password"
        xmlns:ns7="urn:names:spml:ws:header"
        xmlns:ns8="urn:oasis:names:tc:SPML:2:0:suspend"
        xmlns:ns9="oasis:names:tc:SPML:2:0" status="success">
        <ns3:username>[email protected]</ns3:username>
</ns9:SuggestUsernameResponseType>

C.6 SPML Example - Suspend User

The Request is as follows:

<suspendRequest xmlns="urn:oasis:names:tc:SPML:2:0:suspend"
requestID="139">
<psoID ID="6C9B96E99FC8DC32E040E50A3D5252F5"/>
</suspendRequest>

The Response is as follows:

<ns9:ResponseType xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns5="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns6="urn:names:spml:ws:header" xmlns:ns7="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns8="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="28"
status="pending"/><ns9:ResponseType xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns5="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns6="urn:names:spml:ws:header" xmlns:ns7="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns8="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="139" status="pending"/>

C.7 SPML Example - Validate User Name

The Request is as follows:

<validateUsernameRequest
xmlns="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username">
<username>testfn.testln</username>
</validateUsernameRequest>

The Response is as follows:

<ns9:ValidateUsernameResponseType xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns3="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns6="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns7="urn:names:spml:ws:header"
xmlns:ns8="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns9="oasis:names:tc:SPML:2:0" valid="true" status="success"/>

C.8 SPML Example - Check If User is Active

The request is as follows:

<activeRequest xmlns="urn:oasis:names:tc:SPML:2:0:suspend" requestID="143">
<psoID ID="5" targetID="string"/>
</activeRequest>

The Response is as follows:

C.9 SPML Example - Lookup Username Policy

The Request is as follows:

<lookupUsernamePolicyRequest
xmlns="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username">
</lookupUsernamePolicyRequest>

The Response is as follows:

<ns9:LookupUsernamePolicyResponseType
xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns3="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns6="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns7="urn:names:spml:ws:header"
xmlns:ns8="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns9="oasis:names:tc:SPML:2:0" status="success"
<ns3:description>Generates user name based on email id if it is available, else generate based on first name and last name appended with domain name.</ns3:description>
>

C.10 SPML Example – Add User with Role Assignment

The Request to create user (identity) is as follows:

Note:

There can only be one toPsoID element under a reference element. For multiple roles, individual reference element must be used.

The GUID must be of 32 characters for all requests.

<addRequest 
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="urn:oasis:names:tc:SPML:2:0"
    xmlns:spml="urn:oasis:names:tc:SPML:2:0" 
    executionMode="asynchronous" 
    policyURI="create_identity_policy_prc02.xml">
        <spml:data xsi:type="spml:PSOType">
           <identity
             xmlns="http://xmlns.oracle.com/idm/identity/PSO"
             xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO">
            <pso:commonName>
              <pso:values>
                <pso:value>John Doe</pso:value>
              </pso:values>
            </pso:commonName>
            <pso:displayName>
              <pso:value>John Doe</pso:value>
            </pso:displayName>
            <pso:givenName>
              <pso:value>John</pso:value>
            </pso:givenName>
            <pso:mail>
               <pso:value>[email protected]</pso:value>
            </pso:mail>
            <pso:middleName/>
            <pso:organization>
              <pso:values>
                <pso:value>ACME, Inc.</pso:value>
              </pso:values>
            </pso:organization>
             <pso:password>
              <pso:value>qwert</pso:value>
             </pso:password>
            <pso:surname>
              <pso:values>
                <pso:value>Doe</pso:value>
              </pso:values>
            </pso:surname>
            <pso:username>
               <pso:value>jdoe</pso:value>
            </pso:username>
          </identity>
        </spml:data>
        <spml:capabilityData
           capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
           mustUnderstand="true" >
           <reference xmlns="urn:oasis:names:tc:SPML:2:0:reference"
              typeOfReference="memberOf">
              <toPsoID ID="15"/>
 <!--To make the user a member of a default role-->
            </reference>       
           
 
           <reference xmlns="urn:oasis:names:tc:SPML:2:0:reference"
              typeOfReference="memberOf">
              <toPsoID ID="6C9B96E99FC8DC32E040E50A3D5252F5"/>
            </reference>       
      </spml:capabilityData>        
</addRequest>

The Response is as follows:

<spml:addResponse
    xmlns:spml="urn:oasis:names:tc:SPML:2:0"
    status="pending"
    requestID="10821"/>

C.11 SPML Example - Assign Role Membership

The Request example is as follows:

<modifyRequest
xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO"
executionMode="asynchronous"
locale="en"
policyURI="gant_role_01">
<psoID ID="identity:6C9B96E99FC8DC32E040E50A3D5252F5" />
<modification modificationMode="add">
<capabilityData
                  capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
mustUnderstand="true">
<reference
                        xmlns="urn:oasis:names:tc:SPML:2:0:reference"
typeOfReference="memberOf">
<toPsoID ID="6C9B96E99FC8DC32E040E50A3D5252F5" />
</reference>
</capabilityData>
</modification>
</modifyRequest>

The Response example is as follows:

<spml:modifyResponse
    xmlns:spml="urn:oasis:names:tc:SPML:2:0"
    status="pending"
    requestID="10822"/>

C.12 SPML Example – Revoke Role Membership

The Request is as follows:

<modifyRequest
xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO"
executionMode="asynchronous"
locale="en"
policyURI="revoke_role_01">
<psoID ID="identity:6C9B96E99FC8DC32E040E50A3D5252F5" />
<modification modificationMode="delete">
<capabilityData
                  capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
mustUnderstand="true">
<reference
                        xmlns="urn:oasis:names:tc:SPML:2:0:reference"
typeOfReference="memberOf">
<toPsoID ID="6C9B96E99FC8DC32E040E50A3D5252F5" />
</reference>
</capabilityData>
</modification>
</modifyRequest>

The Response is as follows:

<spml:modifyResponse
    xmlns:spml="urn:oasis:names:tc:SPML:2:0"
    status="pending"
    requestID="10826"/>

C.13 SPML Example - Modify Role

The Request is as follows:

<modifyRequest xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" executionMode="asynchronous"
locale="string" policyURI="http://www.sample.com/string/string"
requestID="string" returnData="identifier">
<capabilityData capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
mustUnderstand="true" />
<psoID ID="role:6C9B96E99FC8DC32E040E50A3D5252F5" />
<modification modificationMode="replace">
<component path="/role" namespaceURI="http://www.w3.org/TR/xpath20" />
<data>
<pso:role>
<pso:description>
<!--1 or more repetitions:-->
<pso:values>
<pso:value>UK Updated Administrator</pso:value>
</pso:values>
</pso:description>
</pso:role>
</data>
</modification>
</modifyRequest>

The Response is as follows:

<ns9:ModifyResponseType xmlns="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns2="urn:oasis:names:tc:SPML:2:0"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns7="urn:names:spml:ws:header" xmlns:ns8="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="24" status="pending"/>

C.14 SPML Example - Modify Role with Parent

The Request is as follows:

<modifyRequest xmlns="urn:oasis:names:tc:SPML:2:0"
                        xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" executionMode="asynchronous"
                        locale="string" policyURI="http://www.sample.com/string/string"
                        requestID="string" returnData="identifier">
                        <capabilityData capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
                                mustUnderstand="true">
                                <reference typeOfReference="inheritsFrom"
                                        xmlns="urn:oasis:names:tc:SPML:2:0:reference">
                                        <toPsoID ID="6C9B96E99F78DC32E040E50A3D5252F5" />
                                </reference>
                        </capabilityData>
                        <psoID ID="role:6C9B96E99F79DC32E040E50A3D5252F5" targetID="target" />
                        <modification modificationMode="modify">
                                <component path="/role" namespaceURI="http://www.w3.org/TR/xpath20" />
                                <data>
                                        <pso:role>
                                                <pso:description>
                                                        <!--1 or more repetitions:-->
                                                        <pso:values>
                                                                <!--1 or more repetitions:-->
                                                                <pso:value>UK Updated Administrator</pso:value>
                                                        </pso:values>
                                                </pso:description>
                                        </pso:role>
                                </data>
                        </modification>
                </modifyRequest>

The Response is as follows:

<ns9:ModifyResponseType xmlns="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns2="urn:oasis:names:tc:SPML:2:0"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns7="urn:names:spml:ws:header" xmlns:ns8="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="25" status="pending"/>

C.15 SPML Example - Role Grant

The Request is as follows:

<modifyRequest xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" executionMode="asynchronous"
locale="string" policyURI="http://www.sample.com/string/string"
requestID="string" returnData="identifier">
<!--Zero or more repetitions:-->
<capabilityData capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
mustUnderstand="true" />
<psoID ID="identity:6C9B96E99FC8DC32E040E50A3D5252F5" />
<psoID ID="identity:6C9B96E99FC8DC32E040E50A3D5252F5" />
<!--1 or more repetitions:-->
<modification modificationMode="add">
<capabilityData capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
mustUnderstand="true">
<reference xmlns="urn:oasis:names:tc:SPML:2:0:reference"
typeOfReference="memberOf">
<toPsoID ID="6C9B96E99FC8DC32E040E50A3D5252F5" />
</reference>
</capabilityData>
</modification>
</modifyRequest>

The Response is as follows:

<ns9:ResponseType xmlns="urn:oasis:names:tc:SPML:2:0"
xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns5="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns6="urn:names:spml:ws:header" 
xmlns:ns7="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns8="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns9="oasis:names:tc:SPML:2:0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="ns4:ActiveResponseType" requestID="143" status="failure"/>

C.16 SPML Example - Role with Parent

The Request is as follows:

<addRequest xmlns="urn:oasis:names:tc:SPML:2:0"
                        xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" executionMode="asynchronous"
                        locale="en" policyURI="http://www.sample.com/string/string"
                        requestID="string" returnData="identifier" targetID="string">
                        <!--Optional:-->
                        <psoID ID="role:6C9B96E99FC8DC32E040E50A3D5252F5" />
                                <!--Optional:-->
                                <containerID />
                        <!--Optional:-->
                        <containerID ID="string" targetID="string">
                                <!--Optional:-->
                                <containerID />
                        </containerID>
                        <data>
                                <!--You have a CHOICE of the next 3 items at this level-->
                                <pso:role>
                                        <pso:commonName>
                                                <!--1 or more repetitions:-->
                                                <pso:values>
                                                        <!--1 or more repetitions:-->
                                                        <pso:value>TempAdmin</pso:value>
                                                </pso:values>
                                        </pso:commonName>
                                        <pso:description>
                                                <!--1 or more repetitions:-->
                                                <pso:values>
                                                        <!--1 or more repetitions:-->
                                                        <pso:value>Temporary Administrator</pso:value>
                                                </pso:values>
                                        </pso:description>
                                </pso:role>
                        </data>
                        <capabilityData capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"
                                mustUnderstand="true">
                                <reference typeOfReference="inheritsFrom"
                                        xmlns="urn:oasis:names:tc:SPML:2:0:reference">
                                        <toPsoID ID="6C9B96E99F77DC32E040E50A3D5252F5" />
                                </reference>
                        </capabilityData>
                </addRequest>

The Response is as follows:

<ns9:AddResponseType xmlns="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns2="urn:oasis:names:tc:SPML:2:0"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns7="urn:names:spml:ws:header" xmlns:ns8="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="22" status="pending"/>

C.17 SPML Example - Delete Role

The Request is as follows:

<deleteRequest xmlns="urn:oasis:names:tc:SPML:2:0"
                        xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" executionMode="asynchronous"
                        locale="en" policyURI="http://www.sample.com/string/string"
                        requestID="string" returnData="identifier" targetID="string">
                        <psoID ID="role:6C9B96E99FC8DC32E040E50A3D5252F5" />
                </deleteRequest>

The Response is as follows:

<ns9:ResponseType xmlns="http://xmlns.oracle.com/idm/identity/PSO"
xmlns:ns2="urn:oasis:names:tc:SPML:2:0"
xmlns:ns3="urn:oasis:names:tc:SPML:2:0:reference"
xmlns:ns4="urn:oasis:names:tc:SPML:2:0:password"
xmlns:ns5="urn:oasis:names:tc:SPML:2:0:suspend"
xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username"
xmlns:ns7="urn:names:spml:ws:header" xmlns:ns8="urn:oasis:names:tc:SPML:2:0:async"
xmlns:ns9="oasis:names:tc:SPML:2:0" requestID="18" status="pending"/>

C.18 SPML Example - Status Request

The Request is as follows:

<statusRequest xmlns="urn:oasis:names:tc:SPML:2:0:async" 
    requestID="3456563" 
    asyncRequestID="75779"/>

The Response is as follows:

<statusResponse xmlns="urn:oasis:names:tc:SPML:2:0:async"
    requestID="3456563" status="success">
    <addResponse requestID="75779" status="pending"/>
</statusResponse>

Another Request is as follows:

<statusRequest xmlns="urn:oasis:names:tc:SPML:2:0:async"    requestID="12" asyncRequestID="1" returnResults="true" />

Here. returnResults=true. Therefore, the response will have all the attributes of the request.

The Response is as follows:

<ns9:StatusResponseType xmlns="urn:oasis:names:tc:SPML:2:0" xmlns:ns2="urn:oasis:names:tc:SPML:2:0:async" xmlns:ns3="http://xmlns.oracle.com/idm/identity/PSO" xmlns:ns4="urn:oasis:names:tc:SPML:2:0:reference" xmlns:ns5="urn:oasis:names:tc:SPML:2:0:password" xmlns:ns6="urn:oasis:names:tc:SPML:2:0:suspend" xmlns:ns7="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username" xmlns:ns8="urn:names:spml:ws:header" xmlns:ns9="oasis:names:tc:SPML:2:0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="ns2:StatusResponseType" requestID="12" status="success">
    <ns2:addResponse requestID="14" status="success">
        <pso>
            <psoID targetID="Identity"/>
            <data>
                <ns4:Identity xmlns:ns4="oasis:names:tc:SPML:2:0" xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO" xmlns:ns3="urn:oasis:names:tc:SPML:2:0:async" xmlns:ns5="urn:oasis:names:tc:SPML:2:0:async" xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username" xmlns:ns7="urn:oasis:names:tc:SPML:2:0:suspend">
                    <ns2:attributes>
                        <ns2:attr xmlns="" xmlns:ns11="urn:oasis:names:tc:SPML:2:0" name="Organization">
                            <ns2:value>1</ns2:value>
                        </ns2:attr>
                    </ns2:attributes>
                    <ns2:activeEndDate>2009-12-25T16:00:00.000Z</ns2:activeEndDate>
                    <ns2:activeStartDate>2009-12-24T18:00:00.000Z</ns2:activeStartDate>
                    <ns2:commonName>
                        <ns2:values>
                            <ns2:value>Alice Krug</ns2:value>
                        </ns2:values>
                    </ns2:commonName>
                    <ns2:countryName>Canada</ns2:countryName>
                    <ns2:departmentNumber>
                        <ns2:value>123</ns2:value>
                    </ns2:departmentNumber>
                    <ns2:description>
                        <ns2:values>
                            <ns2:value>Alice Krugs profile</ns2:value>
                        </ns2:values>
                    </ns2:description>
                    <ns2:displayName>
                        <ns2:value>Alice Krug</ns2:value>
                    </ns2:displayName>
                    <ns2:employeeNumber>333</ns2:employeeNumber>
                    <ns2:employeeType>
                        <ns2:values>
                            <ns2:value>Full-Time</ns2:value>
                        </ns2:values>
                    </ns2:employeeType>
                    <ns2:facsimileTelephoneNumber>
                        <ns2:number>6506072253</ns2:number>
                    </ns2:facsimileTelephoneNumber>
                    <ns2:generationQualifier>
                        <ns2:value>II</ns2:value>
                    </ns2:generationQualifier>
                    <ns2:givenName>
                        <ns2:value>Alice</ns2:value>
                    </ns2:givenName>
                    <ns2:hireDate>1999-12-24T16:00:00.000Z</ns2:hireDate>
                    <ns2:homePhone>
                        <ns2:number>8888888888</ns2:number>
                    </ns2:homePhone>
                    <ns2:homePostalAddress>
                        <ns2:value>Baker street</ns2:value>
                    </ns2:homePostalAddress>
                    <ns2:initials>
                        <ns2:value>J S</ns2:value>
                    </ns2:initials>
                    <ns2:localityName>
                        <ns2:value>SFO</ns2:value>
                    </ns2:localityName>
                    <ns2:middleName>A</ns2:middleName>
                    <ns2:mobile>
                        <ns2:number>4083485309</ns2:number>
                    </ns2:mobile>
                    <ns2:organization>
                        <ns2:values>
                            <ns2:value>1</ns2:value>
                        </ns2:values>
                    </ns2:organization>
                    <ns2:organizationUnit>
                        <ns2:values>
                            <ns2:value>Sales</ns2:value>
                        </ns2:values>
                    </ns2:organizationUnit>
                    <ns2:pager>
                        <ns2:number>333</ns2:number>
                    </ns2:pager>
                    <ns2:postalAddress>
                        <ns2:value>Baker street 222</ns2:value>
                    </ns2:postalAddress>
                    <ns2:postalCode>
                        <ns2:value>4081</ns2:value>
                    </ns2:postalCode>
                    <ns2:postOfficeBox>
                        <ns2:value>333n</ns2:value>
                    </ns2:postOfficeBox>
                    <ns2:preferredLanguage>English</ns2:preferredLanguage>
                    <ns2:state>
                        <ns2:value>CA</ns2:value>
                    </ns2:state>
                    <ns2:street>
                        <ns2:value>Baker</ns2:value>
                    </ns2:street>
                    <ns2:surname>
                        <ns2:values>
                            <ns2:value>Krug</ns2:value>
                        </ns2:values>
                    </ns2:surname>
                    <ns2:telephoneNumber>
                        <ns2:number>6506072253</ns2:number>
                    </ns2:telephoneNumber>
                    <ns2:title>
                        <ns2:values>
                            <ns2:value>Mr</ns2:value>
                        </ns2:values>
                    </ns2:title>
                    <ns2:username>
                        <ns2:value>akrug3478</ns2:value>
                    </ns2:username>
                    <ns2:userType>End-User</ns2:userType>
                </ns4:Identity>
            </data>
        </pso>
    </ns2:addResponse>
</ns9:StatusResponseType>

C.19 SPML Example - List Target

The Request is as follows:

<listTargetsRequest xmlns="urn:oasis:names:tc:SPML:2:0" />

The Response is as follows:

<ns9:ListTargetsResponseType xmlns="urn:oasis:names:tc:SPML:2:0" xmlns:ns2="http://xmlns.oracle.com/idm/identity/PSO" xmlns:ns3="urn:oasis:names:tc:SPML:2:0:reference" xmlns:ns4="urn:oasis:names:tc:SPML:2:0:async" xmlns:ns5="urn:oasis:names:tc:SPML:2:0:password" xmlns:ns6="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username" xmlns:ns7="urn:oasis:names:tc:SPML:2:0:suspend" xmlns:ns8="urn:names:spml:ws:header" xmlns:ns9="oasis:names:tc:SPML:2:0" status="success">
    <target profile="urn:oasis:names:tc:SPML:2.0:profiles:XSD" targetID="idx">
        <xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:jaxb="http://java.sun.com/xml/ns/jaxb" xmlns:ns13="urn:oasis:names:tc:SPML:2:0" xmlns:ns2="urn:oasis:names:tc:SPML:2:0:reference" xmlns:ns3="http://xmlns.oracle.com/idm/identity/PSO" xmlns:ns4="urn:oasis:names:tc:SPML:2:0:password" xmlns:ns5="urn:oasis:names:tc:SPML:2:0:async" xmlns:pso="http://xmlns.oracle.com/idm/identity/PSO" xmlns:spml="urn:oasis:names:tc:SPML:2:0" xmlns:xjc="http://java.sun.com/xml/ns/jaxb/xjc" xmlns:ns20="urn:oasis:names:tc:SPML:2:0" xmlns="" elementFormDefault="qualified" jaxb:extensionBindingPrefixes="xjc" jaxb:version="1.0" targetNamespace="http://xmlns.oracle.com/idm/identity/PSO">
            <ns20:schema>
                <xs:complexType name="localizedString">
                    <xs:annotation>
                        <xs:documentation>
                            A type that contains a string that has been expressed       in the language indicated by its language attribute (an empty language attribute indicates that the language is either unknown or is the system default).
 
                        </xs:documentation>
                    </xs:annotation>
                    <xs:simpleContent>
                        <xs:extension base="xs:string">
                            <xs:attribute name="locale" type="xs:language" use="optional"/>
                        </xs:extension>
                    </xs:simpleContent>
                </xs:complexType>
                <xs:complexType name="localizedStrings">
                    <xs:annotation>
                        <xs:documentation>
                            A type that contains one or more strings that have all been expressed in the language indicated by its language
 attribute (an empty language attribute indicates that the language is either unknown or is the system default).

                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element maxOccurs="unbounded" name="value" type="xs:string"/>
                    </xs:sequence>
                    <xs:attribute name="locale" type="xs:language" use="optional"/>
                </xs:complexType>
                <xs:complexType name="localizedSingleValuedString">
                    <xs:annotation>
                        <xs:documentation>
                            A type that contains a single string value which may have one or more localized representations.
 
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element maxOccurs="unbounded" name="value" type="pso:localizedString"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="localizedMultiValuedString">
                    <xs:annotation>
                        <xs:documentation>
                            A type that contains one or more string values, each of which may have one or more localized representations.
 
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element maxOccurs="unbounded" name="values" type="pso:localizedStrings"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="multiValuedString">
                    <xs:annotation>
                        <xs:documentation>
                            A type that contains one or more string values.
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element maxOccurs="unbounded" name="value" type="xs:string"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="multiValuedBinary">
                    <xs:annotation>
                        <xs:documentation>
                            A type that contains one or more binary values.
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element maxOccurs="unbounded" name="value" type="xs:base64Binary"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="telephoneNumbers">
                    <xs:annotation>
                        <xs:documentation source="http://www.itu.int/rec/T-REC-E.123/en">
                            A type that contains one or more telephone numbers.  Each telephone number value SHOULD conform to the Notation for National and International Telephone Numbers specification E.123.
 
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element maxOccurs="unbounded" name="number" type="xs:string"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:simpleType name="DsmlValue">
                    <xs:annotation>
                        <xs:documentation source="http://www.oasis-open.org/specs/index.php#dsmlv2">
                            A type that models a single value of an LDAP attribute.
                        </xs:documentation>
                    </xs:annotation>
                    <xs:union memberTypes="xs:string xs:base64Binary xs:anyURI"/>
                </xs:simpleType>
                <xs:simpleType name="AttributeDescriptionValue">
                    <xs:annotation>
                        <xs:documentation source="http://www.oasis-open.org/specs/index.php#dsmlv2">
                            A type that models the name of an LDAP attribute.
                        </xs:documentation>
                    </xs:annotation>
                    <xs:restriction base="xs:string">
                        <xs:pattern value="((([0-2](\.[0-9]+)+)|([a-zA-Z]+([a-zA-Z0-9]|[\-])*))(;([a-zA-Z0-9]|[\-])+)*)"/>
                    </xs:restriction>
                </xs:simpleType>
                <xs:complexType name="DsmlAttr">
                    <xs:annotation>
                        <xs:documentation source="http://www.oasis-open.org/specs/index.php#dsmlv2">
                            A type that models an LDAP attribute with multiple values.
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element maxOccurs="unbounded" minOccurs="0" name="value" type="pso:DsmlValue"/>
                    </xs:sequence>
                    <xs:attribute name="name" type="pso:AttributeDescriptionValue" use="required"/>
                </xs:complexType>
                <xs:complexType name="unboundedAttributes">
                    <xs:annotation>
                        <xs:documentation>
                            A type that contains one or more unbounded attributes, each with one or more values.
 
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element maxOccurs="unbounded" name="attr" type="pso:DsmlAttr"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="identity">
                    <xs:annotation>
                        <xs:documentation>
                            A type that represents an Identity entity (typically backed by an LDAP object that includes the inetOrgPerson
 objectclass).
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element minOccurs="0" name="attributes" type="pso:unboundedAttributes"/>
                        <xs:element minOccurs="0" name="activeEndDate" type="xs:dateTime"/>
                        <xs:element minOccurs="0" name="activeStartDate" type="xs:dateTime"/>
                        <xs:element name="commonName" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="countryName" type="xs:string">
                            <xs:annotation>
<xs:documentation source="http://www.iso.org/iso/country_codes/iso_3166_code_lists/english_country_names_and_code_elements.htm">
                                    A type that contains a two-letter ISO-3166 country code.
                                </xs:documentation>
                            </xs:annotation>
                        </xs:element>
                        <xs:element minOccurs="0" name="departmentNumber" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="description" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="displayName" type="pso:localizedSingleValuedString"/>
                        <xs:element minOccurs="0" name="employeeNumber" type="xs:string"/>
                        <xs:element minOccurs="0" name="employeeType" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="facsimileTelephoneNumber" type="pso:telephoneNumbers"/>
                        <xs:element minOccurs="0" name="generationQualifier" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="givenName" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="hireDate" type="xs:dateTime"/>
                        <xs:element minOccurs="0" name="homePhone" type="pso:telephoneNumbers"/>
                        <xs:element minOccurs="0" name="homePostalAddress" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="initials" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="jpegPhoto" type="pso:multiValuedBinary"/>
                        <xs:element minOccurs="0" name="localityName" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="mail" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="middleName" type="xs:string"/>
                        <xs:element minOccurs="0" name="mobile" type="pso:telephoneNumbers"/>
                        <xs:element minOccurs="0" name="organization" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="organizationUnit" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="pager" type="pso:telephoneNumbers"/>
                        <xs:element minOccurs="0" name="password" type="pso:multiValuedBinary"/>
                        <xs:element minOccurs="0" name="postalAddress" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="postalCode" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="postOfficeBox" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="preferredLanguage" type="xs:string"/>
                        <xs:element minOccurs="0" name="state" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="street" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="surname" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="telephoneNumber" type="pso:telephoneNumbers"/>
                        <xs:element minOccurs="0" name="title" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="userId" type="pso:multiValuedString"/>
                        <xs:element minOccurs="0" name="username" type="pso:multiValuedString"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="role">
                    <xs:annotation>
                        <xs:documentation>
                            A type that represents a Role entity (typically backed by an LDAP object that includes the groupOfUniqueNames or groupOfNames
 
                            objectclass).
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element minOccurs="0" name="attributes" type="pso:unboundedAttributes"/>
                        <xs:element name="commonName" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="description" type="pso:localizedMultiValuedString"/>
                        <xs:element minOccurs="0" name="displayName" type="pso:localizedSingleValuedString"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="member">
                    <xs:annotation>
                        <xs:documentation>
                            A type that represents a Role to which an Identity belongs. Physically, this is mapped to the role's
 (unique)member attribute.
 
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element name="identityPSOID" type="xs:string"/>
                        <xs:element name="rolePSOID" type="xs:string"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="identityWithRelations">
                    <xs:annotation>
                        <xs:documentation>
                            A type that represents an identity entity and its relationships to other identities and roles.  This representation is used internally by IDx, but is not exposed in SPMLv2.
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element name="identity" type="pso:identity"/>
                        <xs:element maxOccurs="unbounded" minOccurs="0" name="managerGUID" type="xs:string"/>
                        <xs:element maxOccurs="unbounded" minOccurs="0" name="roleGUID" type="xs:string"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="roleWithRelations">
                    <xs:annotation>
                        <xs:documentation>
                            A type that represents a role entity and its relationships to other identities and roles.  This representation is used internally by IDx, but is not exposed in SPMLv2.
                        </xs:documentation>
                    </xs:annotation>
                    <xs:sequence>
                        <xs:element name="role" type="pso:role"/>
                        <xs:element maxOccurs="unbounded" minOccurs="0" name="ownerIdentityGUID" type="xs:string"/>
                        <xs:element maxOccurs="unbounded" minOccurs="0" name="ownerRoleGUID" type="xs:string"/>
                        <xs:element maxOccurs="unbounded" minOccurs="0" name="inheritFromRoleGUID" type="xs:string"/>
                        <xs:element maxOccurs="unbounded" minOccurs="0" name="inheritByRoleGUID" type="xs:string"/>
                    </xs:sequence>
                </xs:complexType>
                <xs:complexType name="ProvisioningObjectType">
                    <xs:complexContent>
                        <xs:extension base="spml:ExtensibleType">
                            <xs:choice>
<xs:element name="identity" type="pso:identity"/>
<xs:element name="role" type="pso:role"/>
<xs:element name="member" type="pso:member"/>                 
                            </xs:choice>    
                        </xs:extension>
                    </xs:complexContent>
                </xs:complexType>
                <xs:element name="identity" type="pso:identity"/>
                <xs:element name="role" type="pso:role"/>
                <xs:element name="identityWithRelations" type="pso:identityWithRelations"/>
                <xs:element name="roleWithRelations" type="pso:roleWithRelations"/>
                <xs:element name="member" type="pso:member"/>
        </ns20:schema>
            <ns20:capabilities>
                <ns20:capability namespaceURI="urn:oasis:names:tc:SPML:2.0:async"/>
                <ns20:capability namespaceURI="urn:oasis:names:tc:SPML:2.0:core"/>
                <ns20:capability namespaceURI="urn:oasis:names:tc:SPML:2:0:password">
                    <ns20:appliesTo entityName="identity"/>
            </ns20:capability>
                <ns20:capability namespaceURI="urn:oasis:names:tc:SPML:2.0:reference"/>
                <ns20:capability namespaceURI="urn:oasis:names:tc:SPML:2:0:suspend">
                    <ns20:appliesTo entityName="identity"/>
            </ns20:capability>
                <ns20:capability namespaceURI="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username">
                    <ns20:appliesTo entityName="identity"/>
            </ns20:capability>
        </ns20:capabilities>
     </xs:schema>
    </target>
</ns9:ListTargetsResponseType>