iManager does not provide "Risk Score" and "OAuth Scopes" as policy rule condition after upgrading from NAM 4.0.2 to NAM 4.1.1

  • 7017051
  • 07-Dec-2015
  • 03-Feb-2016

Environment

  • NetIQ Access Manager 4.1
  • NetIQ Access Manager 4.1.1

Situation

  • Environment has been upgraded from NAM 4.0.1 to NAM 4.1.1 two dedicated Access Manager Console Server on Windows 2008R2 have been configured
  • upgrade / installation log process returns an error:
    DatastoreManager upgrade called.
    Updated devman trust store
    ..devman application apis version 2.0 05-09-02..
    vcdnConf file path is C:\Program Files (x86)\Novell\Tomcat\webapps\roma\WEB-INF\conf\vcdn.conf Constructor Called Error: 1, !OK
    "=>End of Call to DatastoreManager Upgrade "

  • a working NAM 4.0.2 upgrade / installation log process returns:

    DatastoreManager upgrade called.
    Updated devman trust store
    ..devman application apis version 2.0 05-09-02..
    vcdnConf file path is C:\Program Files (x86)\Novell\Tomcat\webapps\roma\WEB-INF\conf\vcdn.conf Constructor Called
    Starting TransientScheduler ..Done Starting PersistantScheduler ..Done
    Starting PersistantScheduler ..Done

Resolution

  • The information about available policy configuration options is stored as an XML structure in an attribute called romaContentPublisherXMLDoc on a ramoContentPublisher object class in the configuration store (eDirectory on Access Manager Console).

  • The location is unique for any Access Manager setup but should be:

      Root
      => novell
         => accessManagerContainer
            => VCDN_Root
               => PartitionsContainer
                  => Partition
                     => ContentPublisherContainer


  • There is are a few other romaContentPublisher Container objects  where only one stores the "Access Gateway" ramoContentCollection object. (usually the first object in the list

    Example:

      Root
      => novell
         => accessManagerContainer
            => VCDN_Root
               => PartitionsContainer
                  => Partition
                     => ContentPublisherContainer
                        => l2chy1bkgss8u3
                           => AccessGateway



  • On this object the romaContentCollectionXMLDoc stores the XML document storing the policy type information. In case you are having access to a working NAM 4.1.1 system you can try to copy the XML document.  Note: avoid any manual operation on the Access Manager Console Server configstore without having a working backup / snapshot

Cause

The root cause could not be discovered so far. Reproducing it in the LAB was as well not possible. With Windows installation are quite often failing due to Virus Scanner Software.

Additional Information

Copy of XML file from a working 4.1.1 system:

<?xml version="1.0" encoding="UTF-8"?>
<NxpeService xmlns:xpeml="urn:novell:schema:xpeml:2.0:policy" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="./nxpeService-2.0.xsd" Revision="0.1">
  <xpeml:PolicyTypeSpecification schemaVersion="2.0">
    <xpeml:PolicyEnforcementPointMapping>
      <xpeml:PolicyEnforcementPoint Visible="true" Name="AGAuthorization" PolicyEnforcementPointID="xpemlPEP_AGAuthorization" I18NResourceID="policy.AGAuthorization">
        <xpeml:ConditionRefList>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_date"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_day-of-week"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_day-of-month"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_integer"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_ip"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_ldap-ou"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_ldap-attr"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_regular-expression"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_string"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_time"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-scheme"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-host"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-path"/>
          <!--
                        Disabled for backward compatiablity to allow LAGs/MAGs to co-exist
                    <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-querystring"/>
                    -->
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-file"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-file-extension"/>
        </xpeml:ConditionRefList>
        <xpeml:ActionRefList>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_Permit"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_Deny"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_Redirect"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_DoContract"/>
        </xpeml:ActionRefList>
        <xpeml:AllowedExtensionList>
          <xpeml:AllowedExtension ExtensionType="Action"/>
          <xpeml:AllowedExtension ExtensionType="Condition"/>
          <xpeml:AllowedExtension ExtensionType="ContextDataElement"/>
        </xpeml:AllowedExtensionList>
      </xpeml:PolicyEnforcementPoint>
      <xpeml:PolicyEnforcementPoint Visible="true" Name="AGIdentityInjection" PolicyEnforcementPointID="xpemlPEP_AGIdentityInjection" I18NResourceID="policy.AGIdentityInjection">
        <xpeml:ActionRefList>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectAuthHeader"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectCustomHeader"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectCustomHeaderWithTags"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectInCookieHeader"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectQueryString"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectKerberosTicket"/>
        </xpeml:ActionRefList>
        <xpeml:AllowedExtensionList>
          <xpeml:AllowedExtension ExtensionType="ContextDataElement"/>
        </xpeml:AllowedExtensionList>
      </xpeml:PolicyEnforcementPoint>
      <xpeml:PolicyEnforcementPoint Visible="true" Name="AGFormFill" PolicyEnforcementPointID="xpemlPEP_AGFormFill" AllowMultipleRules="false" I18NResourceID="policy.AGFormFill">
        <xpeml:ActionRefList>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_FormFill"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_FormLoginFailure"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectJavaScript"/>
        </xpeml:ActionRefList>
      </xpeml:PolicyEnforcementPoint>
    </xpeml:PolicyEnforcementPointMapping>
    <xpeml:InformationContextMapping>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6620" Name="AuthenticationContract" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_AuthenticationContract" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedAuthenticationContract" SupportsForcedDataRead="false" I18NResourceID="policy.AuthenticationContract">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6621" Name="SelectedAuthenticationContract" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedAuthenticationContract" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedAuthenticationContract">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2504" Name="ClientIP" DataType="ip" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_ClientIP" SupportsForcedDataRead="false" I18NResourceID="policy.ClientIP">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="7010" Name="CredentialProfile" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_CredentialProfile" SupportsForcedDataRead="false" I18NResourceID="policy.CredentialProfile">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1004" Name="Date" DataType="date" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_Date" SupportsForcedDataRead="false" I18NResourceID="policy.Date">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1002" Name="DayOfWeek" DataType="day-of-week" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_DayOfWeek" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedDayOfWeek" SupportsForcedDataRead="false" I18NResourceID="policy.DayOfWeek">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="10021" Name="SelectedDayOfWeek" DataType="day-of-week" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedDayOfWeek" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedDayOfWeek">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nxpe.jar" ClassFactoryName="com.novell.nxpe.condition.dayofweek.DayOfWeekPolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1003" Name="DayOfMonth" DataType="day-of-month" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_DayOfMonth" SupportsForcedDataRead="false" I18NResourceID="policy.DayOfMonth">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1005" Name="TimeOfDay" DataType="time" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_TimeOfDay" SupportsForcedDataRead="false" I18NResourceID="policy.TimeOfDay">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="true" EnumerativeValue="2501" Name="DestinationIP" DataType="ip" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_DestinationIP" SupportsForcedDataRead="false" I18NResourceID="policy.DestinationIP">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="true" EnumerativeValue="2502" Name="DNSMissMatch" DataType="boolean" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_DNSMissMatch" SupportsForcedDataRead="false" I18NResourceID="policy.DNS Mismatch">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1006" Name="HTTPRequestMethod" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_HTTPRequestMethod" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedHTTPRequestMethod" SupportsForcedDataRead="false" I18NResourceID="policy.HTTPRequestMethod">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="10061" Name="SelectedHTTPRequestMethod" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedHTTPRequestMethod" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedHTTPRequestMethod">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory"/>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6647" Name="LdapAttribute" DataType="all" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_LdapAttribute" SupportsForcedDataRead="true" I18NResourceID="policy.LdapAttribute">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
            <xpeml:MethodDefinition MethodType="create">
              <xpeml:Parameter EnumerativeValue="1" Name="LdapAttributeName" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.LdapAttribute.Name">
                <xpeml:DataEntryField DataType="string" Min="1" Max="64" MultiValue="false"/>
              </xpeml:Parameter>
              <xpeml:Parameter EnumerativeValue="2" Name="ForceBase64Encoding" Required="true" I18NResourceID="policy.LdapAttribute.ForceBase64Encoding" MultipleValuesAllowed="false">
                <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
              </xpeml:Parameter>
            </xpeml:MethodDefinition>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="false" EnumerativeValue="6645" Name="LdapGroup" DataType="ldap-group" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_LdapGroup" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedLdapGroup" SupportsForcedDataRead="false" I18NResourceID="policy.LdapGroup">
        <xpeml:EntryParameter MultiValue="false" DataType="string" Min="1" Max="255"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="false" EnumerativeValue="66455" Name="SelectedLdapGroup" DataType="ldap-group" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedLdapGroup" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedLdapGroup">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query">
              <xpeml:Parameter EnumerativeValue="1" Name="LdapFilter" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.SelectedLdapGroup.LdapFilter">
                <xpeml:DataEntryField DataType="string" Min="1" Max="64" MultiValue="false"/>
              </xpeml:Parameter>
            </xpeml:MethodDefinition>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6646" Name="LdapOU" DataType="ldap-ou" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_LdapOU" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedLdapOU" SupportsForcedDataRead="false" I18NResourceID="policy.LdapOU">
        <xpeml:EntryParameter MultiValue="false" DataType="string" Min="1" Max="255"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="66465" Name="SelectedLdapOU" DataType="ldap-ou" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedLdapOU" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedLdapOU">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query">
              <xpeml:Parameter EnumerativeValue="1" Name="LdapFilter" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.SelectedLdapOU.LdapFilter">
                <xpeml:DataEntryField DataType="string" Min="1" Max="64" MultiValue="false"/>
              </xpeml:Parameter>
            </xpeml:MethodDefinition>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="7000" Name="LibertyUserProfile" DataType="all" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_LibertyUserProfile" SupportsForcedDataRead="false" I18NResourceID="policy.LibertyUserProfile">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2505" Name="ProxySessionCookie" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_ProxySessionCookie" SupportsForcedDataRead="false" I18NResourceID="policy.ProxySessionCookie">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6660" Name="CurrentRoles" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_CurrentRoles" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedRole" SupportsForcedDataRead="false" I18NResourceID="policy.CurrentRoles">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6662" Name="currentRiskLevel" DataType="number" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_currentRiskLevel" SupportsForcedDataRead="true" I18NResourceID="policy.currentRiskLevel">
            <xpeml:PEPViewList>
                <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
                <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
            </xpeml:PEPViewList>
        </xpeml:ContextDataElement>
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6663" Name="OAuthScopes" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_OAuthScope" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedOAuthScope" SupportsForcedDataRead="false" I18NResourceID="policy.OAuthScope">
            <xpeml:PEPViewList>
                <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
            </xpeml:PEPViewList>
        </xpeml:ContextDataElement>
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6664" Name="SelectedOAuthScope" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedOAuthScope" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedOAuthScope">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nam-oauth-config-nidp.jar" ClassFactoryName="com.novell.nam.nidp.oauth.config.policy.OAuthPolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6665" Name="OAuthClaims" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_OAuthClaims" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedOAuthClaims" SupportsForcedDataRead="false" I18NResourceID="policy.OAuthClaims">
          <xpeml:PEPViewList>
              <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
                <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
                <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
          </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6666" Name="SelectedOAuthClaims" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedOAuthClaims" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedOAuthClaims">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nam-oauth-config-nidp.jar" ClassFactoryName="com.novell.nam.nidp.oauth.config.policy.OAuthPolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
     
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6661" Name="SelectedRole" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedRole" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedRole">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="vcdn_sc.jar" ClassFactoryName="com.volera.vcdn.application.sc.policy.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2506" Name="Url" DataType="url" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_Url" SupportsForcedDataRead="false" I18NResourceID="policy.Url">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2561" Name="UrlScheme" DataType="url-scheme" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlScheme" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedUrlScheme" SupportsForcedDataRead="false" I18NResourceID="policy.UrlScheme">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="25611" Name="SelectedUrlScheme" DataType="url-scheme" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedUrlScheme" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedUrlScheme">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nxpe.jar" ClassFactoryName="com.novell.nxpe.condition.url.UrlPolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="7020" Name="SharedSecret" DataType="all" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SharedSecret" SupportsForcedDataRead="true" I18NResourceID="policy.SharedSecret">
        <xpeml:ContextQuery I18NResourceIDEmptyList="Policy.NotDefinedUseNew">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
            <xpeml:MethodDefinition MethodType="create">
              <xpeml:Parameter EnumerativeValue="1" Name="SharedSecretName" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.SharedSecret.Name">
                <xpeml:DataEntryField DataType="string" Min="1" Max="64" MultiValue="false"/>
              </xpeml:Parameter>
            </xpeml:MethodDefinition>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2562" Name="UrlHost" DataType="url-host" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlHost" SupportsForcedDataRead="false" I18NResourceID="policy.UrlHost">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="false" EnumerativeValue="2567" Name="TargetHost" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_TargetHost" SupportsForcedDataRead="false" I18NResourceID="policy.TargetHost">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2563" Name="UrlPath" DataType="url-path" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlPath" SupportsForcedDataRead="false" I18NResourceID="policy.UrlPath">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <!--
            <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2566" Name="UrlQueryString" DataType="url-querystring" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlQueryString" SupportsForcedDataRead="false" I18NResourceID="policy.UrlQueryString">
                <xpeml:PEPViewList>
                    <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
                </xpeml:PEPViewList>
            </xpeml:ContextDataElement>
-->
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2564" Name="UrlFileName" DataType="url-file" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlFileName" SupportsForcedDataRead="false" I18NResourceID="policy.UrlFileName">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2565" Name="UrlFileExtension" DataType="url-file-extension" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlFileExtension" SupportsForcedDataRead="false" I18NResourceID="policy.FileExtension">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="true" EnumerativeValue="2551" Name="UserToken" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UserToken" SupportsForcedDataRead="false" I18NResourceID="policy.UserToken">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6648" Name="virtualAttribute" DataType="all" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_virtualAttribute" SupportsForcedDataRead="true" I18NResourceID="policy.virtualAttribute">
        <xpeml:ContextQuery I18NResourceIDEmptyList="Policy.NotDefinedUseNew">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
        </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
            <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2503" Name="XForwardedForIP" DataType="ip" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_XForwardedForIP" SupportsForcedDataRead="false" I18NResourceID="policy.XForwardedForIP">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="true" EnumerativeValue="9000" Name="StringConstant" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_StringConstant" SupportsForcedDataRead="false" I18NResourceID="policy.ConstantString">
        <xpeml:EntryParameter DataType="string" MultiValue="false" Min="1" Max="255"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="3000" Name="JavaDataInjectionModule" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_JavaDataInjectionModule" SupportsForcedDataRead="false" I18NResourceID="policy.JavaDataInjectionModule">
        <xpeml:EntryParameter DataType="string" MultiValue="false" Min="1" Max="1024"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="0100" Name="PolicyReference" DataType="policy-reference" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_PolicyReference" SupportsForcedDataRead="false">
        <xpeml:EntryParameter DataType="string" MultiValue="false" Min="1" Max="1024"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:SelectionValuesList Name="FormFieldTypes" SelectionValuesListID="xpemlSelectionValuesList_FormFieldTypes">
        <xpeml:SelectionValue Name="text" Value="text" I18NResourceID="policy.text"/>
        <xpeml:SelectionValue Name="password" Value="password" I18NResourceID="policy.Password"/>
        <xpeml:SelectionValue Name="checkbox" Value="checkbox" I18NResourceID="policy.checkbox"/>
        <xpeml:SelectionValue Name="radio" Value="radio" I18NResourceID="policy.radio"/>
        <xpeml:SelectionValue Name="select" Value="select" I18NResourceID="policy.select"/>
        <xpeml:SelectionValue Name="hidden" Value="hidden" I18NResourceID="policy.hidden"/>
        <xpeml:SelectionValue Name="unspecified" Value="unspecified" I18NResourceID="policy.unspecified"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="FormDataConversions" SelectionValuesListID="xpemlSelectionValuesList_FormDataConversions">
        <xpeml:SelectionValue Name="none" Value="none" I18NResourceID="policy.none"/>
        <xpeml:SelectionValue Name="toUpperCase" Value="toUpper" I18NResourceID="policy.toUpperCase"/>
        <xpeml:SelectionValue Name="toLowerCase" Value="toLower" I18NResourceID="policy.toLowerCase"/>
        <xpeml:SelectionValue Name="NDAP-PDN" Value="NDAP-PDN" I18NResourceID="policy.toNDAP-PDN-format"/>
        <xpeml:SelectionValue Name="NDAP-LPDN" Value="NDAP-LPDN" I18NResourceID="policy.toNDAP-LPDN-format"/>
        <xpeml:SelectionValue Name="NDAP-FQPDN" Value="NDAP-FQPDN" I18NResourceID="policy.toNDAP-FQPDN-format"/>
        <xpeml:SelectionValue Name="NDAP-FQLDN" Value="NDAP-FQLDN" I18NResourceID="policy.toNDAP-FQLDN-format"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="FillType" SelectionValuesListID="xpemlSelectionValuesList_InputFillType">
        <xpeml:SelectionValue Name="none" Value="none" I18NResourceID="policy.none" />
        <xpeml:SelectionValue Name="Remember" Value="Remember" I18NResourceID="policy.Remember" />
        <xpeml:SelectionValue Name="Fill" Value="Fill" I18NResourceID="policy.Fill" />
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="string-flags" SelectionValuesListID="xpemlSelectionValuesList_string-flags">
        <xpeml:SelectionValue Name="case-sensitive" Value="case-sensitive" I18NResourceID="policy.case-sensitive"/>
        <xpeml:SelectionValue Name="case-insensitive" Value="case-insensitive" I18NResourceID="policy.case-insensitive"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="regular-expression-flags" SelectionValuesListID="xpemlSelectionValuesList_regular-expression-flags">
        <xpeml:SelectionValue Name="canonical-equivalence" Value="canonical-equivalence" I18NResourceID="policy.canonical-equivalence"/>
        <xpeml:SelectionValue Name="case-insensitive" Value="case-insensitive" I18NResourceID="policy.case-insensitive"/>
        <xpeml:SelectionValue Name="comments" Value="comments" I18NResourceID="policy.comments"/>
        <xpeml:SelectionValue Name="dotall" Value="dotall" I18NResourceID="policy.dotall"/>
        <xpeml:SelectionValue Name="multiline" Value="multiline" I18NResourceID="policy.multiline"/>
        <xpeml:SelectionValue Name="unicode-case" Value="unicode-case" I18NResourceID="policy.unicode-case"/>
        <xpeml:SelectionValue Name="unix-lines" Value="unix-lines" I18NResourceID="policy.unix-lines"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="url-flags" SelectionValuesListID="xpemlSelectionValuesList_url-flags">
        <xpeml:SelectionValue Name="case-sensitive" Value="case-sensitive" I18NResourceID="policy.case-sensitive"/>
        <xpeml:SelectionValue Name="case-insensitive" Value="case-insensitive" I18NResourceID="policy.case-insensitive"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="date-format" SelectionValuesListID="xpemlSelectionValuesList_date-format">
        <xpeml:SelectionValue Name="slash-dmy" Value="d/M/y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.slash-dmy"/>
        <xpeml:SelectionValue Name="dash-dmy" Value="d-M-y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dash-dmy"/>
        <xpeml:SelectionValue Name="dot-dmy" Value="d.M.y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dot-dmy"/>
        <xpeml:SelectionValue Name="slash-mdy" Value="M/d/y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.slash-mdy"/>
        <xpeml:SelectionValue Name="dash-mdy" Value="M-d-y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dash-mdy"/>
        <xpeml:SelectionValue Name="dot-mdy" Value="M.d.y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dot-mdy"/>
        <xpeml:SelectionValue Name="dash-yyyymmdd" Value="yyyy-M-d" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dash-yyyymmdd"/>
        <xpeml:SelectionValue Name="dot-yyyymmdd" Value="yyyy.M.d" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dot-yyyymmdd"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="time-zone" SelectionValuesListID="xpemlSelectionValuesList_time-zone">
        <xpeml:SelectionValue Name="local" Value="local" I18NResourceID="policy.typespec.xpemlSelectionValue.time-zone.local"/>
        <xpeml:SelectionValue Name="GMT" Value="GMT" I18NResourceID="policy.typespec.xpemlSelectionValue.time-zone.GMT"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="HTTPRequestMethods" SelectionValuesListID="xpemlSelectionValuesList_HTTPRequestMethods">
        <xpeml:SelectionValue Name="DELETE" Value="DELETE" I18NResourceID="policy.DELETE"/>
        <xpeml:SelectionValue Name="GET" Value="GET" I18NResourceID="policy.GET"/>
        <xpeml:SelectionValue Name="HEAD" Value="HEAD" I18NResourceID="policy.HEAD"/>
        <xpeml:SelectionValue Name="OPTIONS" Value="OPTIONS" I18NResourceID="policy.OPTIONS"/>
        <xpeml:SelectionValue Name="POST" Value="POST" I18NResourceID="policy.POST"/>
        <xpeml:SelectionValue Name="PUT" Value="PUT" I18NResourceID="policy.PUT"/>
        <xpeml:SelectionValue Name="TRACE" Value="TRACE" I18NResourceID="policy.TRACE"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="DNFormatOptions" SelectionValuesListID="xpemlSelectionValuesList_DNFormatOptions">
        <xpeml:SelectionValue Name="LDAP" Value="LDAP" I18NResourceID="policy.LDAP-format"/>
        <xpeml:SelectionValue Name="NDAP-PDN" Value="NDAP-PDN" I18NResourceID="policy.NDAP-PDN-format"/>
        <xpeml:SelectionValue Name="NDAP-LPDN" Value="NDAP-LPDN" I18NResourceID="policy.NDAP-LPDN-format"/>
        <xpeml:SelectionValue Name="NDAP-FQPDN" Value="NDAP-FQPDN" I18NResourceID="policy.NDAP-FQPDN-format"/>
        <xpeml:SelectionValue Name="NDAP-FQLDN" Value="NDAP-FQLDN" I18NResourceID="policy.NDAP-FQLDN-format"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="MultiValueSeparatorCharacters" SelectionValuesListID="xpemlSelectionValuesList_MultiValueSeparatorCharacters">
        <xpeml:SelectionValue Name="comma" Value="," I18NResourceID="policy.comma"/>
        <xpeml:SelectionValue Name="dollar-sign" Value="$" I18NResourceID="policy.dollar-sign"/>
        <xpeml:SelectionValue Name="number-sign" Value="#" I18NResourceID="policy.number-sign"/>
        <xpeml:SelectionValue Name="semicolon" Value=";" I18NResourceID="policy.semicolon"/>
        <xpeml:SelectionValue Name="tilde" Value="~" I18NResourceID="policy.tilde"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="ldap-ou-flags" SelectionValuesListID="xpemlSelectionValuesList_ldap-ou-flags">
        <xpeml:SelectionValue Name="one-level" Value="one-level" I18NResourceID="policy.one-level"/>
        <xpeml:SelectionValue Name="subtree" Value="subtree" I18NResourceID="policy.subtree"/>
      </xpeml:SelectionValuesList>
    </xpeml:InformationContextMapping>
    <xpeml:ConditionTypeOperatorMapping>
      <xpeml:Condition Visible="true" ConditionName="string" ConditionID="xpemlCondition_string" NeedsDefaultForError="true" I18NResourceID="policy.string">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_string-equals" OperatorName="string-equals" NotIsAllowed="true" I18NResourceID="policy.string-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_string-starts-with" OperatorName="string-starts-with" NotIsAllowed="true" I18NResourceID="policy.string-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_string-ends-with" OperatorName="string-ends-with" NotIsAllowed="true" I18NResourceID="policy.string-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_string-substring" OperatorName="string-substring" NotIsAllowed="true" I18NResourceID="policy.string-contains-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="string" MultiValue="false" Min="1" Max="4096"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.string.StringConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.mode">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_string-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="regular-expression" ConditionID="xpemlCondition_regular-expression" NeedsDefaultForError="true" I18NResourceID="policy.regular-expression">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_regular-expression-matches" OperatorName="regular-expression-matches" NotIsAllowed="true" I18NResourceID="policy.regular-expression-matches" MultiValueOperandsAllowed="none"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="all" MultiValue="false" Min="1" Max="4096"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.regularexpression.RegularExpressionConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="flags" MultipleValuesAllowed="true" EnumerativeValue="1" Required="false" I18NResourceID="policy.mode">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_regular-expression-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="integer" ConditionID="xpemlCondition_integer" NeedsDefaultForError="true" I18NResourceID="policy.integer">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_integer-equals" OperatorName="integer-equals" NotIsAllowed="true" I18NResourceID="policy.integer-equals" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_integer-greater-than" OperatorName="integer-greater-than" NotIsAllowed="true" I18NResourceID="policy.integer-greater-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_integer-greater-than-or-equals" OperatorName="integer-greater-than-or-equals" NotIsAllowed="true" I18NResourceID="policy.integer-greater-than-or-equals" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_integer-less-than" OperatorName="integer-less-than" NotIsAllowed="true" I18NResourceID="policy.integer-less-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_integer-less-than-or-equals" OperatorName="integer-less-than-or-equals" NotIsAllowed="true" I18NResourceID="policy.integer-less-than-or-equals" MultiValueOperandsAllowed="none"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="number" MultiValue="false" Min="-2147483648" Max="2147483647"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.integer.IntegerConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="ip" ConditionID="xpemlCondition_ip" NeedsDefaultForError="true" I18NResourceID="policy.ip">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_ip-equal" OperatorName="ip-equal" NotIsAllowed="true" I18NResourceID="policy.ip-equal" MultiValueOperandsAllowed="right"/>
          <xpeml:Operator OperatorID="nxpeOperator_ip-in-range" OperatorName="ip-in-range" NotIsAllowed="true" I18NResourceID="policy.ip-in-range" MultiValueOperandsAllowed="right"/>
          <xpeml:Operator OperatorID="nxpeOperator_ip-in-subnet" OperatorName="ip-in-subnet" NotIsAllowed="true" I18NResourceID="policy.ip-in-subnet" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="ip" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.ip.IPConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="date" ConditionID="xpemlCondition_date" NeedsDefaultForError="true" I18NResourceID="policy.date">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_date-equal" OperatorName="date-equal" NotIsAllowed="true" I18NResourceID="policy.date-equal" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_date-greater-than" OperatorName="date-greater-than" NotIsAllowed="true" I18NResourceID="policy.date-greater-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_date-greater-than-or-equal" OperatorName="date-greater-than-or-equal" NotIsAllowed="true" I18NResourceID="policy.date-greater-than-or-equal" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_date-less-than" OperatorName="date-less-than" NotIsAllowed="true" I18NResourceID="policy.date-less-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_date-less-than-or-equal" OperatorName="date-less-than-or-equal" NotIsAllowed="true" I18NResourceID="policy.date-less-than-or-equal" MultiValueOperandsAllowed="none"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="date" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.date.DateConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="date-format" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.instance_parm.date-format">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_date-format"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="day-of-week" ConditionID="xpemlCondition_day-of-week" NeedsDefaultForError="true" I18NResourceID="policy.day-of-week">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_day-of-week-equal" OperatorName="day-of-week-equal" NotIsAllowed="true" I18NResourceID="policy.day-of-week-equal" MultiValueOperandsAllowed="right"/>
          <xpeml:Operator OperatorID="nxpeOperator_day-of-week-in-range" OperatorName="day-of-week-in-range" NotIsAllowed="true" I18NResourceID="policy.day-of-week-in-range" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="day-of-week" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.dayofweek.DayOfWeekConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="day-of-month" ConditionID="xpemlCondition_day-of-month" NeedsDefaultForError="true" I18NResourceID="policy.day-of-month">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_day-of-month-equal" OperatorName="day-of-month-equal" NotIsAllowed="true" I18NResourceID="policy.day-of-month-equal" MultiValueOperandsAllowed="right"/>
          <xpeml:Operator OperatorID="nxpeOperator_day-of-month-in-range" OperatorName="day-of-month-in-range" NotIsAllowed="true" I18NResourceID="policy.day-of-month-in-range" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="day-of-month" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.dayofmonth.DayOfMonthConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="time" ConditionID="xpemlCondition_time" NeedsDefaultForError="true" I18NResourceID="policy.time">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_time-greater-than" OperatorName="time-greater-than" NotIsAllowed="true" I18NResourceID="policy.time-greater-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_time-greater-than-or-equal" OperatorName="time-greater-than-or-equal" NotIsAllowed="true" I18NResourceID="policy.time-greater-than-or-equal" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_time-less-than" OperatorName="time-less-than" NotIsAllowed="true" I18NResourceID="policy.time-less-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_time-less-than-or-equal" OperatorName="time-less-than-or-equal" NotIsAllowed="true" I18NResourceID="policy.time-less-than-or-equal" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_time-in-range" OperatorName="time-in-range" NotIsAllowed="true" I18NResourceID="policy.time-in-range" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="time" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.time.TimeConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="time-zone" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.instance_parm.time-zone">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_time-zone"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url" ConditionID="xpemlCondition_url" NeedsDefaultForError="true" I18NResourceID="policy.url">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-equals" OperatorName="url-equals" NotIsAllowed="true" I18NResourceID="policy.url-equals" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url-scheme" ConditionID="xpemlCondition_url-scheme" NeedsDefaultForError="true" I18NResourceID="policy.url-scheme">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-scheme-equals" OperatorName="url-scheme-equals" NotIsAllowed="true" I18NResourceID="policy.url-scheme-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-scheme-starts-with" OperatorName="url-scheme-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-scheme-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-scheme-ends-with" OperatorName="url-scheme-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-scheme-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-scheme-substring" OperatorName="url-scheme-substring" NotIsAllowed="true" I18NResourceID="policy.url-scheme-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-scheme" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url-host" ConditionID="xpemlCondition_url-host" NeedsDefaultForError="true" I18NResourceID="policy.url-host">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-host-equals" OperatorName="url-host-equals" NotIsAllowed="true" I18NResourceID="policy.url-host-equals" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-host" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url-path" ConditionID="xpemlCondition_url-path" NeedsDefaultForError="true" I18NResourceID="policy.url-path">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-path-equals" OperatorName="url-path-equals" NotIsAllowed="true" I18NResourceID="policy.url-path-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-path-starts-with" OperatorName="url-path-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-path-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-path-ends-with" OperatorName="url-path-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-path-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-path-substring" OperatorName="url-path-substring" NotIsAllowed="true" I18NResourceID="policy.url-path-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-path" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <!--
            <xpeml:Condition Visible="true" ConditionName="url-querystring" ConditionID="xpemlCondition_url-querystring" NeedsDefaultForError="true" I18NResourceID="policy.url-querystring">
                <xpeml:OperatorList>
                    <xpeml:Operator OperatorID="nxpeOperator_url-querystring-equals" OperatorName="url-querystring-equals" NotIsAllowed="true" I18NResourceID="policy.url-querystring-equals" MultiValueOperandsAllowed="both"/>
                    <xpeml:Operator OperatorID="nxpeOperator_url-querystring-starts-with" OperatorName="url-querystring-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-querystring-starts-with" MultiValueOperandsAllowed="both"/>
                    <xpeml:Operator OperatorID="nxpeOperator_url-querystring-ends-with" OperatorName="url-querystring-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-querystring-ends-with" MultiValueOperandsAllowed="both"/>
                    <xpeml:Operator OperatorID="nxpeOperator_url-querystring-substring" OperatorName="url-querystring-substring" NotIsAllowed="true" I18NResourceID="policy.url-querystring-substring" MultiValueOperandsAllowed="both"/>
                </xpeml:OperatorList>
                <xpeml:DataEntryField DataType="url-querystring" Min="1" Max="4096" MultiValue="true"/>
                <xpeml:ModuleBindingList>
                    <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
                </xpeml:ModuleBindingList>
                <xpeml:InstanceParameterList>
                    <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
                        <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
                    </xpeml:Parameter>
                </xpeml:InstanceParameterList>
            </xpeml:Condition>
-->
      <xpeml:Condition Visible="true" ConditionName="url-file" ConditionID="xpemlCondition_url-file" NeedsDefaultForError="true" I18NResourceID="policy.url-file">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-equals" OperatorName="url-file-equals" NotIsAllowed="true" I18NResourceID="policy.url-file-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-starts-with" OperatorName="url-file-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-file-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-ends-with" OperatorName="url-file-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-file-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-substring" OperatorName="url-file-substring" NotIsAllowed="true" I18NResourceID="policy.url-file-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-file" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url-file-extension" ConditionID="xpemlCondition_url-file-extension" NeedsDefaultForError="true" I18NResourceID="policy.url-file-extension">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-extension-equals" OperatorName="url-file-extension-equals" NotIsAllowed="true" I18NResourceID="policy.url-file-extension-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-extension-starts-with" OperatorName="url-file-extension-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-file-extension-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-extension-ends-with" OperatorName="url-file-extension-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-file-extension-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-extension-substring" OperatorName="url-file-extension-substring" NotIsAllowed="true" I18NResourceID="policy.url-file-extension-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-file-extension" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="false" ConditionName="ldap-group" ConditionID="xpemlCondition_ldap-group" NeedsDefaultForError="true" I18NResourceID="policy.ldap-group">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_ldap-group-is-member-of" OperatorName="ldap-group-is-member-of" NotIsAllowed="true" NotI18NResourceID="policy.ldap-group-is-not-member-of" I18NResourceID="policy.ldap-group-is-member-of" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="ldap-group" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nidp.policy.condition.ldap.LdapConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="ldap-attr" ConditionID="xpemlCondition_ldap-attr" NeedsDefaultForError="true" I18NResourceID="policy.ldap-attr">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_ldap-attr-exists" OperatorName="ldap-attr-exists" NotIsAllowed="true" NotI18NResourceID="policy.ldap-attr-does-not-exist" I18NResourceID="policy.ldap-attr-exists" MultiValueOperandsAllowed="none"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nidp.policy.condition.ldap.LdapConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="ldap-ou" ConditionID="xpemlCondition_ldap-ou" NeedsDefaultForError="true" I18NResourceID="policy.ldap-ou">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_ldap-ou-contains" OperatorName="ldap-ou-contains" NotIsAllowed="true" NotI18NResourceID="policy.ldap-ou-does-not-contain" I18NResourceID="policy.ldap-ou-contains" MultiValueOperandsAllowed="left"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="ldap-ou" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nidp.policy.condition.ldap.LdapConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.mode">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_ldap-ou-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
    </xpeml:ConditionTypeOperatorMapping>
    <xpeml:ActionTypeMapping>
      <xpeml:PEPActionList>
        <xpeml:Action Visible="true" EnumerativeValue="2610" ActionName="Permit" ActionID="xpemlAction_Permit" Effect="Permit" MultipleAllowed="false" I18NResourceID="policy.Permit"/>
        <xpeml:Action Visible="true" EnumerativeValue="2620" ActionName="Deny" ActionID="xpemlAction_Deny" Effect="Deny" MultipleAllowed="false" I18NResourceID="policy.Deny">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2621" GroupName="DenyParameters" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DefaultBlockPage" I18NResourceID="policy.DefaultBlockPage" UseParametersForSelection="false"/>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="SendBlockMessage" I18NResourceID="policy.SendBlockMessage" UseParametersForSelection="false">
                <xpeml:Parameter MultipleValuesAllowed="false" EnumerativeValue="1" Name="Message" Required="false" I18NResourceID="policy.SendBlockMessage.Message_Text">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="30" ChoiceName="RedirectToLocation" I18NResourceID="policy.RedirectToLocation" UseParametersForSelection="false">
                <xpeml:Parameter MultipleValuesAllowed="false" EnumerativeValue="1" Name="Redirect" Required="false" I18NResourceID="">
                  <xpeml:DataEntryField DataType="url" Min="1" Max="4096" FormatString="starts-with%3A//http%3A//,starts-with%3A//https%3A//" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2630" ActionName="Redirect" ActionID="xpemlAction_Redirect" Effect="Deny" MultipleAllowed="false" I18NResourceID="policy.Redirect">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2621" GroupName="RedirectParameters" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="30" ChoiceName="RedirectToLocation" I18NResourceID="" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter MultipleValuesAllowed="false" EnumerativeValue="1" Name="Redirect" Required="false" I18NResourceID="policy.RedirectToLocation">
                  <xpeml:DataEntryField DataType="url" Min="1" Max="4096" FormatString="starts-with%3A//http%3A//,starts-with%3A//https%3A//" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
          <xpeml:Action Visible="true" EnumerativeValue="2640" ActionName="DoContract" ActionID="xpemlAction_DoContract" Effect="Deny" MultipleAllowed="false" I18NResourceID="policy.DoContract">
              <xpeml:InstanceParameterList>
                  <xpeml:ParameterGroup EnumerativeValue="2621" GroupName="DoContractParameters" GroupType="Display" I18NResourceID="">
                      <xpeml:Choice EnumerativeValue="40" ChoiceName="DoContractParamChoice" I18NResourceID="" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                          <xpeml:Parameter MultipleValuesAllowed="false" EnumerativeValue="1" Name="DoContractParam" Required="true" I18NResourceID="policy.DoContractParam">
                              <xpeml:ContextDataElementSelection>
                                  <xpeml:SelectedContextDataElements>
                                    <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_AuthenticationContract"/>
                                  </xpeml:SelectedContextDataElements>
                              </xpeml:ContextDataElementSelection>
                          </xpeml:Parameter>
                      </xpeml:Choice>
                  </xpeml:ParameterGroup>
              </xpeml:InstanceParameterList>
          </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2710" ActionName="InjectAuthHeader" ActionID="xpemlAction_InjectAuthHeader" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectAuthenticationHeaderData">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2711" GroupName="AuthHeader" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="uid" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="uid" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.UserId">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="pwd" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="pwd" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.Password">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2740" ActionName="InjectKerberosTicket" ActionID="xpemlAction_InjectKerberosTicket" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectAuthenticationHeaderData">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2741" GroupName="KerberosTicketHeader" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="uid" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="uid" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.UserId">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="domain" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="domain" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.Domain">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_LdapAttribute"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_StringConstant"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_virtualAttribute"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="30" ChoiceName="target-host" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter Name="target-host" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.target-host">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_TargetHost"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2715" ActionName="InjectInCookieHeader" ActionID="xpemlAction_InjectInCookieHeader" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectInCookieHeader">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="27151" GroupName="Data" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Data" I18NResourceID="">
                <xpeml:Parameter EnumerativeValue="1" Name="Value" Required="true" MultipleValuesAllowed="false" I18NResourceID="">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_ProxySessionCookie"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2720" ActionName="InjectCustomHeader" ActionID="xpemlAction_InjectCustomHeader" Effect="Obligation" MultipleAllowed="true" I18NResourceID="policy.InjectCustomHeader">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2721" GroupName="Name" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Name" I18NResourceID="">
                <xpeml:Parameter EnumerativeValue="1" Name="Name" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CustomHeaderName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="48" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2722" GroupName="Data" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Data" I18NResourceID="">
                <xpeml:Parameter EnumerativeValue="2" Name="Value" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CustomHeaderValue">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2725" ActionName="InjectCustomHeaderWithTags" ActionID="xpemlAction_InjectCustomHeaderWithTags" Effect="Obligation" MultipleAllowed="true" I18NResourceID="policy.InjectCustomHeaderWithTagValuePairs">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2721" GroupName="Name" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Name" I18NResourceID="">
                <xpeml:Parameter EnumerativeValue="1" Name="Name" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CustomHeaderName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="48" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2722" GroupName="Data" GroupType="Insert" I18NResourceID="policy.Tags" RequiredOnInsert="true">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Data" I18NResourceID="policy.NewTag">
                <xpeml:Parameter EnumerativeValue="1" Name="TagName" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.TagName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="48" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="Value" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.TagValue">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2730" ActionName="InjectQueryString" ActionID="xpemlAction_InjectQueryString" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectQueryString">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2731" GroupName="Data" GroupType="Insert" RequiredOnInsert="true" I18NResourceID="policy.Tags">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Data" I18NResourceID="policy.NewTag">
                <xpeml:Parameter EnumerativeValue="1" Name="TagName" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.TagName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="48" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="Value" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.TagValue">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="3310" ActionName="FormFill" ActionID="xpemlAction_FormFill" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.FormFillSettings">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="3310" GroupName="FormSelectionCriteria" GroupType="Display" I18NResourceID="policy.FormSelection">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Cgi" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CgiMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="Form" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3310" GroupName="FormSelection" GroupType="Selection">
              <xpeml:Choice EnumerativeValue="20" ChoiceName="Form" I18NResourceID="policy.Form " InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="2" Name="Name" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="128" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="3" Name="Number" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormNumber">
                  <xpeml:DataEntryField DataType="number" Min="0" Max="99" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="4" Name="Id" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormId">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="128" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3320" GroupName="FillOptions" GroupType="Insert" I18NResourceID="policy.FillOptions" RequiredOnInsert="true">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="InputField" I18NResourceID="policy.NewInputField" InsertMultipleValuesAllowed="true" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="Name" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.InputFieldName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="128" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="Type" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.InputFieldType">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_FormFieldTypes"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="3" Name="FillValue" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.InputFillValue">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_CredentialProfile"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_LdapAttribute"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_LibertyUserProfile"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_SharedSecret"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_StringConstant"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_virtualAttribute"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="4" Name="DataConversion" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.InputDataConversion">
                    <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_FormDataConversions"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="5" Name="FillType" Required="false" MultipleValuesAllowed="false"  I18NResourceID="policy.InputFillType" >                                                                                   
                    <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_InputFillType" />
                </xpeml:Parameter>
             </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3330" GroupName="SubmitOptions" GroupType="Display" I18NResourceID="policy.SubmitOptions">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="AutoSubmit" I18NResourceID="policy.AutoSubmit" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="Debug" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DebugMode">
                  <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="MaskData" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.MaskData">
                  <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="3" Name="LoopDetect" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.LoopDetect">
                  <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="40" ChoiceName="InsertHeaderText" I18NResourceID="policy.InsertTextInHeader" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="2" Name="HeaderText" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.HeaderText">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="50" ChoiceName="JavaScript" I18NResourceID="policy.JavaScriptHandling" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="FunctionsToKeep" Required="false" MultipleValuesAllowed="true" I18NResourceID="policy.FunctionsToKeep">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" FormatString="starts-with://function "/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="StatementsForSubmit" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.StatementsForSubmit">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3399" GroupName="ErrorHandling" GroupType="Display" I18NResourceID="policy.ErrorHandling">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Redirect" I18NResourceID="" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="Url" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.RedirectUrl">
                  <xpeml:DataEntryField DataType="url" Min="1" Max="4096" FormatString="starts-with%3A//http%3A//,starts-with%3A//https%3A//" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="3410" ActionName="FormLoginFailure" ActionID="xpemlAction_FormLoginFailure" Effect="Obligation" MultipleAllowed="true" I18NResourceID="policy.FormLoginFailureSettings">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="3310" GroupName="FormSelectionCriteria" GroupType="Display" I18NResourceID="policy.FormSelection">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Cgi" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CgiMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="Form" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3350" GroupName="LoginFailureProcessing" GroupType="Display" I18NResourceID="policy.LoginFailureProcessing">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Redirect" I18NResourceID="" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="Url" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.RedirectUrl">
                  <xpeml:DataEntryField DataType="url" Min="1" Max="4096" FormatString="starts-with%3A//http%3A//,starts-with%3A//https%3A//" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="DataMgmt" I18NResourceID="policy.NewDataValueToClear" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="ClearSharedSecretsForPolicy" Required="true" MultipleValuesAllowed="false" I18NResourceID="">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_PolicyReference"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="3510" ActionName="InjectJavaScript" ActionID="xpemlAction_InjectJavaScript" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectJavaScriptSetting">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="3310" GroupName="FormSelectionCriteria" GroupType="Display" I18NResourceID="policy.FormSelection">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Cgi" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CgiMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="Form" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3360" GroupName="ConfigureJavaScripts" GroupType="Display" I18NResourceID="policy.ConfigureJavaScripts">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="JavaScriptUnderHeadSection" I18NResourceID="policy.JavaScriptUnderHeadSection" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="JavaScriptConfigure" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.JavaScriptConfigure">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="JavaScriptBodyStart" I18NResourceID="policy.JavaScriptBodyStart" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="JavaScriptConfigure" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.JavaScriptConfigure">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="30" ChoiceName="JavaScriptBodyEnd" I18NResourceID="policy.JavaScriptBodyEnd" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="JavaScriptConfigure" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.JavaScriptConfigure">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
      </xpeml:PEPActionList>
    </xpeml:ActionTypeMapping>
  </xpeml:PolicyTypeSpecification>
  <xpeml:PolicyCollection schemaVersion="2.0"/>
  <xpeml:PolicyEnforcementList RuleCombiningAlgorithm="DenyOverridesWithPriority" schemaVersion="2.0" LastModified="4294967295" LastModifiedBy="String"/>
</NxpeService>