NetIQ Access Manager 4.1.1 iManager does not offer "Risk Score" and "OAuth Scopes" as policy rule condition

  • Document ID:7017206
  • Creation Date:29-Jan-2016
  • Modified Date:29-Jan-2016
    • Micro Focus Products:
      Access Manager (NAM)

Environment

NetIQ Access Manager 4.1
NetIQ Access Manager 4.1.1
NetIQ Access Manager Access Manager Console 4.1
NetIQ Access Manager Access Manager Console 4.1.1

Situation

  • NetIQ Access Manager Console has been upgraded from version 4.0.1 to 4.1.1
  • No error messages have been reported during the upgrade process
  • iManager Authorization Policy  conditions does not offer:
    "Risk Score" and "OAuth Scopes" as policy rule condition
  • All other Policy conditions are available

Cause

  • The attribute: romaContentCollectionXML on the: "AccessGateway.l2chy1bkgss8u3.ContentPublisherContainer.Partition.PartitionsContainer.VCDN_Root.accessManagerContainer.novell" stores the table fo condition which can be configured and has not been modified with the new condition invented with NAM 4.1 ("Risk Score" and "OAuth Scopes")

  • copying the "romaContentCollectionXML" document from a working NAM 4.1.1 system into the non working NAM 4.1.1 system "romaContentCollectionXML" after creating a backup / taking a snapshot fixed the problem


Additional Information

Working content of the "romaContentCollectionXML"attribute copied from a NAM 4.1.1 system

<?xml version="1.0" encoding="UTF-8"?>
<NxpeService xmlns:xpeml="urn:novell:schema:xpeml:2.0:policy" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="./nxpeService-2.0.xsd" Revision="0.1">
  <xpeml:PolicyTypeSpecification schemaVersion="2.0">
    <xpeml:PolicyEnforcementPointMapping>
      <xpeml:PolicyEnforcementPoint Visible="true" Name="AGAuthorization" PolicyEnforcementPointID="xpemlPEP_AGAuthorization" I18NResourceID="policy.AGAuthorization">
        <xpeml:ConditionRefList>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_date"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_day-of-week"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_day-of-month"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_integer"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_ip"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_ldap-ou"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_ldap-attr"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_regular-expression"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_string"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_time"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-scheme"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-host"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-path"/>
          <!--
                        Disabled for backward compatiablity to allow LAGs/MAGs to co-exist
                    <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-querystring"/>
                    -->
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-file"/>
          <xpeml:ConditionRef ElementRefType="IDRef" IDRef="xpemlCondition_url-file-extension"/>
        </xpeml:ConditionRefList>
        <xpeml:ActionRefList>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_Permit"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_Deny"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_Redirect"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_DoContract"/>
        </xpeml:ActionRefList>
        <xpeml:AllowedExtensionList>
          <xpeml:AllowedExtension ExtensionType="Action"/>
          <xpeml:AllowedExtension ExtensionType="Condition"/>
          <xpeml:AllowedExtension ExtensionType="ContextDataElement"/>
        </xpeml:AllowedExtensionList>
      </xpeml:PolicyEnforcementPoint>
      <xpeml:PolicyEnforcementPoint Visible="true" Name="AGIdentityInjection" PolicyEnforcementPointID="xpemlPEP_AGIdentityInjection" I18NResourceID="policy.AGIdentityInjection">
        <xpeml:ActionRefList>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectAuthHeader"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectCustomHeader"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectCustomHeaderWithTags"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectInCookieHeader"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectQueryString"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectKerberosTicket"/>
        </xpeml:ActionRefList>
        <xpeml:AllowedExtensionList>
          <xpeml:AllowedExtension ExtensionType="ContextDataElement"/>
        </xpeml:AllowedExtensionList>
      </xpeml:PolicyEnforcementPoint>
      <xpeml:PolicyEnforcementPoint Visible="true" Name="AGFormFill" PolicyEnforcementPointID="xpemlPEP_AGFormFill" AllowMultipleRules="false" I18NResourceID="policy.AGFormFill">
        <xpeml:ActionRefList>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_FormFill"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_FormLoginFailure"/>
          <xpeml:ActionRef ElementRefType="IDRef" IDRef="xpemlAction_InjectJavaScript"/>
        </xpeml:ActionRefList>
      </xpeml:PolicyEnforcementPoint>
    </xpeml:PolicyEnforcementPointMapping>
    <xpeml:InformationContextMapping>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6620" Name="AuthenticationContract" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_AuthenticationContract" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedAuthenticationContract" SupportsForcedDataRead="false" I18NResourceID="policy.AuthenticationContract">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6621" Name="SelectedAuthenticationContract" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedAuthenticationContract" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedAuthenticationContract">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2504" Name="ClientIP" DataType="ip" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_ClientIP" SupportsForcedDataRead="false" I18NResourceID="policy.ClientIP">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="7010" Name="CredentialProfile" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_CredentialProfile" SupportsForcedDataRead="false" I18NResourceID="policy.CredentialProfile">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1004" Name="Date" DataType="date" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_Date" SupportsForcedDataRead="false" I18NResourceID="policy.Date">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1002" Name="DayOfWeek" DataType="day-of-week" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_DayOfWeek" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedDayOfWeek" SupportsForcedDataRead="false" I18NResourceID="policy.DayOfWeek">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="10021" Name="SelectedDayOfWeek" DataType="day-of-week" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedDayOfWeek" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedDayOfWeek">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nxpe.jar" ClassFactoryName="com.novell.nxpe.condition.dayofweek.DayOfWeekPolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1003" Name="DayOfMonth" DataType="day-of-month" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_DayOfMonth" SupportsForcedDataRead="false" I18NResourceID="policy.DayOfMonth">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1005" Name="TimeOfDay" DataType="time" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_TimeOfDay" SupportsForcedDataRead="false" I18NResourceID="policy.TimeOfDay">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="true" EnumerativeValue="2501" Name="DestinationIP" DataType="ip" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_DestinationIP" SupportsForcedDataRead="false" I18NResourceID="policy.DestinationIP">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="true" EnumerativeValue="2502" Name="DNSMissMatch" DataType="boolean" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_DNSMissMatch" SupportsForcedDataRead="false" I18NResourceID="policy.DNS Mismatch">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="1006" Name="HTTPRequestMethod" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_HTTPRequestMethod" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedHTTPRequestMethod" SupportsForcedDataRead="false" I18NResourceID="policy.HTTPRequestMethod">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="10061" Name="SelectedHTTPRequestMethod" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedHTTPRequestMethod" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedHTTPRequestMethod">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory"/>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6647" Name="LdapAttribute" DataType="all" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_LdapAttribute" SupportsForcedDataRead="true" I18NResourceID="policy.LdapAttribute">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
            <xpeml:MethodDefinition MethodType="create">
              <xpeml:Parameter EnumerativeValue="1" Name="LdapAttributeName" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.LdapAttribute.Name">
                <xpeml:DataEntryField DataType="string" Min="1" Max="64" MultiValue="false"/>
              </xpeml:Parameter>
              <xpeml:Parameter EnumerativeValue="2" Name="ForceBase64Encoding" Required="true" I18NResourceID="policy.LdapAttribute.ForceBase64Encoding" MultipleValuesAllowed="false">
                <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
              </xpeml:Parameter>
            </xpeml:MethodDefinition>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="false" EnumerativeValue="6645" Name="LdapGroup" DataType="ldap-group" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_LdapGroup" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedLdapGroup" SupportsForcedDataRead="false" I18NResourceID="policy.LdapGroup">
        <xpeml:EntryParameter MultiValue="false" DataType="string" Min="1" Max="255"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="false" EnumerativeValue="66455" Name="SelectedLdapGroup" DataType="ldap-group" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedLdapGroup" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedLdapGroup">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query">
              <xpeml:Parameter EnumerativeValue="1" Name="LdapFilter" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.SelectedLdapGroup.LdapFilter">
                <xpeml:DataEntryField DataType="string" Min="1" Max="64" MultiValue="false"/>
              </xpeml:Parameter>
            </xpeml:MethodDefinition>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6646" Name="LdapOU" DataType="ldap-ou" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_LdapOU" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedLdapOU" SupportsForcedDataRead="false" I18NResourceID="policy.LdapOU">
        <xpeml:EntryParameter MultiValue="false" DataType="string" Min="1" Max="255"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="66465" Name="SelectedLdapOU" DataType="ldap-ou" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedLdapOU" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedLdapOU">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query">
              <xpeml:Parameter EnumerativeValue="1" Name="LdapFilter" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.SelectedLdapOU.LdapFilter">
                <xpeml:DataEntryField DataType="string" Min="1" Max="64" MultiValue="false"/>
              </xpeml:Parameter>
            </xpeml:MethodDefinition>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="7000" Name="LibertyUserProfile" DataType="all" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_LibertyUserProfile" SupportsForcedDataRead="false" I18NResourceID="policy.LibertyUserProfile">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2505" Name="ProxySessionCookie" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_ProxySessionCookie" SupportsForcedDataRead="false" I18NResourceID="policy.ProxySessionCookie">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6660" Name="CurrentRoles" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_CurrentRoles" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedRole" SupportsForcedDataRead="false" I18NResourceID="policy.CurrentRoles">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6662" Name="currentRiskLevel" DataType="number" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_currentRiskLevel" SupportsForcedDataRead="true" I18NResourceID="policy.currentRiskLevel">
            <xpeml:PEPViewList>
                <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
                <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
            </xpeml:PEPViewList>
        </xpeml:ContextDataElement>
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6663" Name="OAuthScopes" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_OAuthScope" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedOAuthScope" SupportsForcedDataRead="false" I18NResourceID="policy.OAuthScope">
            <xpeml:PEPViewList>
                <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
            </xpeml:PEPViewList>
        </xpeml:ContextDataElement>
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6664" Name="SelectedOAuthScope" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedOAuthScope" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedOAuthScope">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nam-oauth-config-nidp.jar" ClassFactoryName="com.novell.nam.nidp.oauth.config.policy.OAuthPolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6665" Name="OAuthClaims" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_OAuthClaims" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedOAuthClaims" SupportsForcedDataRead="false" I18NResourceID="policy.OAuthClaims">
          <xpeml:PEPViewList>
              <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
          </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6666" Name="SelectedOAuthClaims" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedOAuthClaims" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedOAuthClaims">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nam-oauth-config-nidp.jar" ClassFactoryName="com.novell.nam.nidp.oauth.config.policy.OAuthPolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
     
        <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="6661" Name="SelectedRole" DataType="string" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedRole" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedRole">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="vcdn_sc.jar" ClassFactoryName="com.volera.vcdn.application.sc.policy.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2506" Name="Url" DataType="url" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_Url" SupportsForcedDataRead="false" I18NResourceID="policy.Url">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2561" Name="UrlScheme" DataType="url-scheme" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlScheme" CombinedDisplayElementIDRef="xpemlContextDataElement_SelectedUrlScheme" SupportsForcedDataRead="false" I18NResourceID="policy.UrlScheme">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="25611" Name="SelectedUrlScheme" DataType="url-scheme" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SelectedUrlScheme" SupportsForcedDataRead="false" I18NResourceID="policy.SelectedUrlScheme">
        <xpeml:ContextQuery I18NResourceIDEmptyList="">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nxpe.jar" ClassFactoryName="com.novell.nxpe.condition.url.UrlPolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="7020" Name="SharedSecret" DataType="all" ElementExpansionType="ContextQuery" ContextDataElementID="xpemlContextDataElement_SharedSecret" SupportsForcedDataRead="true" I18NResourceID="policy.SharedSecret">
        <xpeml:ContextQuery I18NResourceIDEmptyList="Policy.NotDefinedUseNew">
          <xpeml:ModuleBinding BindingIdentifier="Java" LoadableModuleName="nidp.jar" ClassFactoryName="com.novell.nidp.policy.context.PolicyContextFactory">
            <xpeml:MethodDefinition MethodType="query"/>
            <xpeml:MethodDefinition MethodType="create">
              <xpeml:Parameter EnumerativeValue="1" Name="SharedSecretName" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.SharedSecret.Name">
                <xpeml:DataEntryField DataType="string" Min="1" Max="64" MultiValue="false"/>
              </xpeml:Parameter>
            </xpeml:MethodDefinition>
          </xpeml:ModuleBinding>
        </xpeml:ContextQuery>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2562" Name="UrlHost" DataType="url-host" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlHost" SupportsForcedDataRead="false" I18NResourceID="policy.UrlHost">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="false" EnumerativeValue="2567" Name="TargetHost" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_TargetHost" SupportsForcedDataRead="false" I18NResourceID="policy.TargetHost">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2563" Name="UrlPath" DataType="url-path" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlPath" SupportsForcedDataRead="false" I18NResourceID="policy.UrlPath">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <!--
            <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2566" Name="UrlQueryString" DataType="url-querystring" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlQueryString" SupportsForcedDataRead="false" I18NResourceID="policy.UrlQueryString">
                <xpeml:PEPViewList>
                    <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
                </xpeml:PEPViewList>
            </xpeml:ContextDataElement>
-->
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2564" Name="UrlFileName" DataType="url-file" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlFileName" SupportsForcedDataRead="false" I18NResourceID="policy.UrlFileName">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2565" Name="UrlFileExtension" DataType="url-file-extension" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UrlFileExtension" SupportsForcedDataRead="false" I18NResourceID="policy.FileExtension">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="false" IgnoreForCondition="true" EnumerativeValue="2551" Name="UserToken" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_UserToken" SupportsForcedDataRead="false" I18NResourceID="policy.UserToken">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="2503" Name="XForwardedForIP" DataType="ip" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_XForwardedForIP" SupportsForcedDataRead="false" I18NResourceID="policy.XForwardedForIP">
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="true" EnumerativeValue="9000" Name="StringConstant" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_StringConstant" SupportsForcedDataRead="false" I18NResourceID="policy.ConstantString">
        <xpeml:EntryParameter DataType="string" MultiValue="false" Min="1" Max="255"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGAuthorization"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="3000" Name="JavaDataInjectionModule" DataType="string" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_JavaDataInjectionModule" SupportsForcedDataRead="false" I18NResourceID="policy.JavaDataInjectionModule">
        <xpeml:EntryParameter DataType="string" MultiValue="false" Min="1" Max="1024"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGIdentityInjection"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:ContextDataElement Visible="true" IgnoreForCondition="false" EnumerativeValue="0100" Name="PolicyReference" DataType="policy-reference" ElementExpansionType="none" ContextDataElementID="xpemlContextDataElement_PolicyReference" SupportsForcedDataRead="false">
        <xpeml:EntryParameter DataType="string" MultiValue="false" Min="1" Max="1024"/>
        <xpeml:PEPViewList>
          <xpeml:PolicyEnforcementPointRef ElementRefType="IDRef" IDRef="xpemlPEP_AGFormFill"/>
        </xpeml:PEPViewList>
      </xpeml:ContextDataElement>
      <xpeml:SelectionValuesList Name="FormFieldTypes" SelectionValuesListID="xpemlSelectionValuesList_FormFieldTypes">
        <xpeml:SelectionValue Name="text" Value="text" I18NResourceID="policy.text"/>
        <xpeml:SelectionValue Name="password" Value="password" I18NResourceID="policy.Password"/>
        <xpeml:SelectionValue Name="checkbox" Value="checkbox" I18NResourceID="policy.checkbox"/>
        <xpeml:SelectionValue Name="radio" Value="radio" I18NResourceID="policy.radio"/>
        <xpeml:SelectionValue Name="select" Value="select" I18NResourceID="policy.select"/>
        <xpeml:SelectionValue Name="hidden" Value="hidden" I18NResourceID="policy.hidden"/>
        <xpeml:SelectionValue Name="unspecified" Value="unspecified" I18NResourceID="policy.unspecified"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="FormDataConversions" SelectionValuesListID="xpemlSelectionValuesList_FormDataConversions">
        <xpeml:SelectionValue Name="none" Value="none" I18NResourceID="policy.none"/>
        <xpeml:SelectionValue Name="toUpperCase" Value="toUpper" I18NResourceID="policy.toUpperCase"/>
        <xpeml:SelectionValue Name="toLowerCase" Value="toLower" I18NResourceID="policy.toLowerCase"/>
        <xpeml:SelectionValue Name="NDAP-PDN" Value="NDAP-PDN" I18NResourceID="policy.toNDAP-PDN-format"/>
        <xpeml:SelectionValue Name="NDAP-LPDN" Value="NDAP-LPDN" I18NResourceID="policy.toNDAP-LPDN-format"/>
        <xpeml:SelectionValue Name="NDAP-FQPDN" Value="NDAP-FQPDN" I18NResourceID="policy.toNDAP-FQPDN-format"/>
        <xpeml:SelectionValue Name="NDAP-FQLDN" Value="NDAP-FQLDN" I18NResourceID="policy.toNDAP-FQLDN-format"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="FillType" SelectionValuesListID="xpemlSelectionValuesList_InputFillType">
        <xpeml:SelectionValue Name="none" Value="none" I18NResourceID="policy.none" />
        <xpeml:SelectionValue Name="Remember" Value="Remember" I18NResourceID="policy.Remember" />
        <xpeml:SelectionValue Name="Fill" Value="Fill" I18NResourceID="policy.Fill" />
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="string-flags" SelectionValuesListID="xpemlSelectionValuesList_string-flags">
        <xpeml:SelectionValue Name="case-sensitive" Value="case-sensitive" I18NResourceID="policy.case-sensitive"/>
        <xpeml:SelectionValue Name="case-insensitive" Value="case-insensitive" I18NResourceID="policy.case-insensitive"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="regular-expression-flags" SelectionValuesListID="xpemlSelectionValuesList_regular-expression-flags">
        <xpeml:SelectionValue Name="canonical-equivalence" Value="canonical-equivalence" I18NResourceID="policy.canonical-equivalence"/>
        <xpeml:SelectionValue Name="case-insensitive" Value="case-insensitive" I18NResourceID="policy.case-insensitive"/>
        <xpeml:SelectionValue Name="comments" Value="comments" I18NResourceID="policy.comments"/>
        <xpeml:SelectionValue Name="dotall" Value="dotall" I18NResourceID="policy.dotall"/>
        <xpeml:SelectionValue Name="multiline" Value="multiline" I18NResourceID="policy.multiline"/>
        <xpeml:SelectionValue Name="unicode-case" Value="unicode-case" I18NResourceID="policy.unicode-case"/>
        <xpeml:SelectionValue Name="unix-lines" Value="unix-lines" I18NResourceID="policy.unix-lines"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="url-flags" SelectionValuesListID="xpemlSelectionValuesList_url-flags">
        <xpeml:SelectionValue Name="case-sensitive" Value="case-sensitive" I18NResourceID="policy.case-sensitive"/>
        <xpeml:SelectionValue Name="case-insensitive" Value="case-insensitive" I18NResourceID="policy.case-insensitive"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="date-format" SelectionValuesListID="xpemlSelectionValuesList_date-format">
        <xpeml:SelectionValue Name="slash-dmy" Value="d/M/y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.slash-dmy"/>
        <xpeml:SelectionValue Name="dash-dmy" Value="d-M-y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dash-dmy"/>
        <xpeml:SelectionValue Name="dot-dmy" Value="d.M.y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dot-dmy"/>
        <xpeml:SelectionValue Name="slash-mdy" Value="M/d/y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.slash-mdy"/>
        <xpeml:SelectionValue Name="dash-mdy" Value="M-d-y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dash-mdy"/>
        <xpeml:SelectionValue Name="dot-mdy" Value="M.d.y" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dot-mdy"/>
        <xpeml:SelectionValue Name="dash-yyyymmdd" Value="yyyy-M-d" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dash-yyyymmdd"/>
        <xpeml:SelectionValue Name="dot-yyyymmdd" Value="yyyy.M.d" I18NResourceID="policy.typespec.xpemlSelectionValue.date-format.dot-yyyymmdd"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="time-zone" SelectionValuesListID="xpemlSelectionValuesList_time-zone">
        <xpeml:SelectionValue Name="local" Value="local" I18NResourceID="policy.typespec.xpemlSelectionValue.time-zone.local"/>
        <xpeml:SelectionValue Name="GMT" Value="GMT" I18NResourceID="policy.typespec.xpemlSelectionValue.time-zone.GMT"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="HTTPRequestMethods" SelectionValuesListID="xpemlSelectionValuesList_HTTPRequestMethods">
        <xpeml:SelectionValue Name="DELETE" Value="DELETE" I18NResourceID="policy.DELETE"/>
        <xpeml:SelectionValue Name="GET" Value="GET" I18NResourceID="policy.GET"/>
        <xpeml:SelectionValue Name="HEAD" Value="HEAD" I18NResourceID="policy.HEAD"/>
        <xpeml:SelectionValue Name="OPTIONS" Value="OPTIONS" I18NResourceID="policy.OPTIONS"/>
        <xpeml:SelectionValue Name="POST" Value="POST" I18NResourceID="policy.POST"/>
        <xpeml:SelectionValue Name="PUT" Value="PUT" I18NResourceID="policy.PUT"/>
        <xpeml:SelectionValue Name="TRACE" Value="TRACE" I18NResourceID="policy.TRACE"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="DNFormatOptions" SelectionValuesListID="xpemlSelectionValuesList_DNFormatOptions">
        <xpeml:SelectionValue Name="LDAP" Value="LDAP" I18NResourceID="policy.LDAP-format"/>
        <xpeml:SelectionValue Name="NDAP-PDN" Value="NDAP-PDN" I18NResourceID="policy.NDAP-PDN-format"/>
        <xpeml:SelectionValue Name="NDAP-LPDN" Value="NDAP-LPDN" I18NResourceID="policy.NDAP-LPDN-format"/>
        <xpeml:SelectionValue Name="NDAP-FQPDN" Value="NDAP-FQPDN" I18NResourceID="policy.NDAP-FQPDN-format"/>
        <xpeml:SelectionValue Name="NDAP-FQLDN" Value="NDAP-FQLDN" I18NResourceID="policy.NDAP-FQLDN-format"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="MultiValueSeparatorCharacters" SelectionValuesListID="xpemlSelectionValuesList_MultiValueSeparatorCharacters">
        <xpeml:SelectionValue Name="comma" Value="," I18NResourceID="policy.comma"/>
        <xpeml:SelectionValue Name="dollar-sign" Value="$" I18NResourceID="policy.dollar-sign"/>
        <xpeml:SelectionValue Name="number-sign" Value="#" I18NResourceID="policy.number-sign"/>
        <xpeml:SelectionValue Name="semicolon" Value=";" I18NResourceID="policy.semicolon"/>
        <xpeml:SelectionValue Name="tilde" Value="~" I18NResourceID="policy.tilde"/>
      </xpeml:SelectionValuesList>
      <xpeml:SelectionValuesList Name="ldap-ou-flags" SelectionValuesListID="xpemlSelectionValuesList_ldap-ou-flags">
        <xpeml:SelectionValue Name="one-level" Value="one-level" I18NResourceID="policy.one-level"/>
        <xpeml:SelectionValue Name="subtree" Value="subtree" I18NResourceID="policy.subtree"/>
      </xpeml:SelectionValuesList>
    </xpeml:InformationContextMapping>
    <xpeml:ConditionTypeOperatorMapping>
      <xpeml:Condition Visible="true" ConditionName="string" ConditionID="xpemlCondition_string" NeedsDefaultForError="true" I18NResourceID="policy.string">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_string-equals" OperatorName="string-equals" NotIsAllowed="true" I18NResourceID="policy.string-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_string-starts-with" OperatorName="string-starts-with" NotIsAllowed="true" I18NResourceID="policy.string-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_string-ends-with" OperatorName="string-ends-with" NotIsAllowed="true" I18NResourceID="policy.string-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_string-substring" OperatorName="string-substring" NotIsAllowed="true" I18NResourceID="policy.string-contains-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="string" MultiValue="false" Min="1" Max="4096"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.string.StringConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.mode">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_string-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="regular-expression" ConditionID="xpemlCondition_regular-expression" NeedsDefaultForError="true" I18NResourceID="policy.regular-expression">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_regular-expression-matches" OperatorName="regular-expression-matches" NotIsAllowed="true" I18NResourceID="policy.regular-expression-matches" MultiValueOperandsAllowed="none"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="all" MultiValue="false" Min="1" Max="4096"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.regularexpression.RegularExpressionConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="flags" MultipleValuesAllowed="true" EnumerativeValue="1" Required="false" I18NResourceID="policy.mode">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_regular-expression-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="integer" ConditionID="xpemlCondition_integer" NeedsDefaultForError="true" I18NResourceID="policy.integer">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_integer-equals" OperatorName="integer-equals" NotIsAllowed="true" I18NResourceID="policy.integer-equals" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_integer-greater-than" OperatorName="integer-greater-than" NotIsAllowed="true" I18NResourceID="policy.integer-greater-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_integer-greater-than-or-equals" OperatorName="integer-greater-than-or-equals" NotIsAllowed="true" I18NResourceID="policy.integer-greater-than-or-equals" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_integer-less-than" OperatorName="integer-less-than" NotIsAllowed="true" I18NResourceID="policy.integer-less-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_integer-less-than-or-equals" OperatorName="integer-less-than-or-equals" NotIsAllowed="true" I18NResourceID="policy.integer-less-than-or-equals" MultiValueOperandsAllowed="none"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="number" MultiValue="false" Min="-2147483648" Max="2147483647"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.integer.IntegerConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="ip" ConditionID="xpemlCondition_ip" NeedsDefaultForError="true" I18NResourceID="policy.ip">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_ip-equal" OperatorName="ip-equal" NotIsAllowed="true" I18NResourceID="policy.ip-equal" MultiValueOperandsAllowed="right"/>
          <xpeml:Operator OperatorID="nxpeOperator_ip-in-range" OperatorName="ip-in-range" NotIsAllowed="true" I18NResourceID="policy.ip-in-range" MultiValueOperandsAllowed="right"/>
          <xpeml:Operator OperatorID="nxpeOperator_ip-in-subnet" OperatorName="ip-in-subnet" NotIsAllowed="true" I18NResourceID="policy.ip-in-subnet" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="ip" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.ip.IPConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="date" ConditionID="xpemlCondition_date" NeedsDefaultForError="true" I18NResourceID="policy.date">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_date-equal" OperatorName="date-equal" NotIsAllowed="true" I18NResourceID="policy.date-equal" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_date-greater-than" OperatorName="date-greater-than" NotIsAllowed="true" I18NResourceID="policy.date-greater-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_date-greater-than-or-equal" OperatorName="date-greater-than-or-equal" NotIsAllowed="true" I18NResourceID="policy.date-greater-than-or-equal" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_date-less-than" OperatorName="date-less-than" NotIsAllowed="true" I18NResourceID="policy.date-less-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_date-less-than-or-equal" OperatorName="date-less-than-or-equal" NotIsAllowed="true" I18NResourceID="policy.date-less-than-or-equal" MultiValueOperandsAllowed="none"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="date" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.date.DateConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="date-format" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.instance_parm.date-format">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_date-format"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="day-of-week" ConditionID="xpemlCondition_day-of-week" NeedsDefaultForError="true" I18NResourceID="policy.day-of-week">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_day-of-week-equal" OperatorName="day-of-week-equal" NotIsAllowed="true" I18NResourceID="policy.day-of-week-equal" MultiValueOperandsAllowed="right"/>
          <xpeml:Operator OperatorID="nxpeOperator_day-of-week-in-range" OperatorName="day-of-week-in-range" NotIsAllowed="true" I18NResourceID="policy.day-of-week-in-range" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="day-of-week" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.dayofweek.DayOfWeekConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="day-of-month" ConditionID="xpemlCondition_day-of-month" NeedsDefaultForError="true" I18NResourceID="policy.day-of-month">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_day-of-month-equal" OperatorName="day-of-month-equal" NotIsAllowed="true" I18NResourceID="policy.day-of-month-equal" MultiValueOperandsAllowed="right"/>
          <xpeml:Operator OperatorID="nxpeOperator_day-of-month-in-range" OperatorName="day-of-month-in-range" NotIsAllowed="true" I18NResourceID="policy.day-of-month-in-range" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="day-of-month" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.dayofmonth.DayOfMonthConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="time" ConditionID="xpemlCondition_time" NeedsDefaultForError="true" I18NResourceID="policy.time">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_time-greater-than" OperatorName="time-greater-than" NotIsAllowed="true" I18NResourceID="policy.time-greater-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_time-greater-than-or-equal" OperatorName="time-greater-than-or-equal" NotIsAllowed="true" I18NResourceID="policy.time-greater-than-or-equal" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_time-less-than" OperatorName="time-less-than" NotIsAllowed="true" I18NResourceID="policy.time-less-than" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_time-less-than-or-equal" OperatorName="time-less-than-or-equal" NotIsAllowed="true" I18NResourceID="policy.time-less-than-or-equal" MultiValueOperandsAllowed="none"/>
          <xpeml:Operator OperatorID="nxpeOperator_time-in-range" OperatorName="time-in-range" NotIsAllowed="true" I18NResourceID="policy.time-in-range" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="time" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.time.TimeConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="time-zone" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.instance_parm.time-zone">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_time-zone"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url" ConditionID="xpemlCondition_url" NeedsDefaultForError="true" I18NResourceID="policy.url">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-equals" OperatorName="url-equals" NotIsAllowed="true" I18NResourceID="policy.url-equals" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url-scheme" ConditionID="xpemlCondition_url-scheme" NeedsDefaultForError="true" I18NResourceID="policy.url-scheme">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-scheme-equals" OperatorName="url-scheme-equals" NotIsAllowed="true" I18NResourceID="policy.url-scheme-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-scheme-starts-with" OperatorName="url-scheme-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-scheme-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-scheme-ends-with" OperatorName="url-scheme-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-scheme-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-scheme-substring" OperatorName="url-scheme-substring" NotIsAllowed="true" I18NResourceID="policy.url-scheme-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-scheme" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url-host" ConditionID="xpemlCondition_url-host" NeedsDefaultForError="true" I18NResourceID="policy.url-host">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-host-equals" OperatorName="url-host-equals" NotIsAllowed="true" I18NResourceID="policy.url-host-equals" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-host" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url-path" ConditionID="xpemlCondition_url-path" NeedsDefaultForError="true" I18NResourceID="policy.url-path">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-path-equals" OperatorName="url-path-equals" NotIsAllowed="true" I18NResourceID="policy.url-path-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-path-starts-with" OperatorName="url-path-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-path-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-path-ends-with" OperatorName="url-path-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-path-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-path-substring" OperatorName="url-path-substring" NotIsAllowed="true" I18NResourceID="policy.url-path-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-path" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <!--
            <xpeml:Condition Visible="true" ConditionName="url-querystring" ConditionID="xpemlCondition_url-querystring" NeedsDefaultForError="true" I18NResourceID="policy.url-querystring">
                <xpeml:OperatorList>
                    <xpeml:Operator OperatorID="nxpeOperator_url-querystring-equals" OperatorName="url-querystring-equals" NotIsAllowed="true" I18NResourceID="policy.url-querystring-equals" MultiValueOperandsAllowed="both"/>
                    <xpeml:Operator OperatorID="nxpeOperator_url-querystring-starts-with" OperatorName="url-querystring-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-querystring-starts-with" MultiValueOperandsAllowed="both"/>
                    <xpeml:Operator OperatorID="nxpeOperator_url-querystring-ends-with" OperatorName="url-querystring-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-querystring-ends-with" MultiValueOperandsAllowed="both"/>
                    <xpeml:Operator OperatorID="nxpeOperator_url-querystring-substring" OperatorName="url-querystring-substring" NotIsAllowed="true" I18NResourceID="policy.url-querystring-substring" MultiValueOperandsAllowed="both"/>
                </xpeml:OperatorList>
                <xpeml:DataEntryField DataType="url-querystring" Min="1" Max="4096" MultiValue="true"/>
                <xpeml:ModuleBindingList>
                    <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
                </xpeml:ModuleBindingList>
                <xpeml:InstanceParameterList>
                    <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
                        <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
                    </xpeml:Parameter>
                </xpeml:InstanceParameterList>
            </xpeml:Condition>
-->
      <xpeml:Condition Visible="true" ConditionName="url-file" ConditionID="xpemlCondition_url-file" NeedsDefaultForError="true" I18NResourceID="policy.url-file">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-equals" OperatorName="url-file-equals" NotIsAllowed="true" I18NResourceID="policy.url-file-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-starts-with" OperatorName="url-file-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-file-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-ends-with" OperatorName="url-file-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-file-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-substring" OperatorName="url-file-substring" NotIsAllowed="true" I18NResourceID="policy.url-file-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-file" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="url-file-extension" ConditionID="xpemlCondition_url-file-extension" NeedsDefaultForError="true" I18NResourceID="policy.url-file-extension">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-extension-equals" OperatorName="url-file-extension-equals" NotIsAllowed="true" I18NResourceID="policy.url-file-extension-equals" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-extension-starts-with" OperatorName="url-file-extension-starts-with" NotIsAllowed="true" I18NResourceID="policy.url-file-extension-starts-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-extension-ends-with" OperatorName="url-file-extension-ends-with" NotIsAllowed="true" I18NResourceID="policy.url-file-extension-ends-with" MultiValueOperandsAllowed="both"/>
          <xpeml:Operator OperatorID="nxpeOperator_url-file-extension-substring" OperatorName="url-file-extension-substring" NotIsAllowed="true" I18NResourceID="policy.url-file-extension-substring" MultiValueOperandsAllowed="both"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="url-file-extension" Min="1" Max="4096" MultiValue="true"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nxpe.condition.url.UrlConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="url-flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.url-flags">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_url-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
      <xpeml:Condition Visible="false" ConditionName="ldap-group" ConditionID="xpemlCondition_ldap-group" NeedsDefaultForError="true" I18NResourceID="policy.ldap-group">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_ldap-group-is-member-of" OperatorName="ldap-group-is-member-of" NotIsAllowed="true" NotI18NResourceID="policy.ldap-group-is-not-member-of" I18NResourceID="policy.ldap-group-is-member-of" MultiValueOperandsAllowed="right"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="ldap-group" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nidp.policy.condition.ldap.LdapConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="ldap-attr" ConditionID="xpemlCondition_ldap-attr" NeedsDefaultForError="true" I18NResourceID="policy.ldap-attr">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_ldap-attr-exists" OperatorName="ldap-attr-exists" NotIsAllowed="true" NotI18NResourceID="policy.ldap-attr-does-not-exist" I18NResourceID="policy.ldap-attr-exists" MultiValueOperandsAllowed="none"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nidp.policy.condition.ldap.LdapConditionFactory"/>
        </xpeml:ModuleBindingList>
      </xpeml:Condition>
      <xpeml:Condition Visible="true" ConditionName="ldap-ou" ConditionID="xpemlCondition_ldap-ou" NeedsDefaultForError="true" I18NResourceID="policy.ldap-ou">
        <xpeml:OperatorList>
          <xpeml:Operator OperatorID="nxpeOperator_ldap-ou-contains" OperatorName="ldap-ou-contains" NotIsAllowed="true" NotI18NResourceID="policy.ldap-ou-does-not-contain" I18NResourceID="policy.ldap-ou-contains" MultiValueOperandsAllowed="left"/>
        </xpeml:OperatorList>
        <xpeml:DataEntryField DataType="ldap-ou" Min="1" Max="4096" MultiValue="false"/>
        <xpeml:ModuleBindingList>
          <xpeml:ModuleBinding InterfaceType="ClassFactory" BindingIdentifier="Java" ClassFactoryName="com.novell.nidp.policy.condition.ldap.LdapConditionFactory"/>
        </xpeml:ModuleBindingList>
        <xpeml:InstanceParameterList>
          <xpeml:Parameter Name="flags" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.mode">
            <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_ldap-ou-flags"/>
          </xpeml:Parameter>
        </xpeml:InstanceParameterList>
      </xpeml:Condition>
    </xpeml:ConditionTypeOperatorMapping>
    <xpeml:ActionTypeMapping>
      <xpeml:PEPActionList>
        <xpeml:Action Visible="true" EnumerativeValue="2610" ActionName="Permit" ActionID="xpemlAction_Permit" Effect="Permit" MultipleAllowed="false" I18NResourceID="policy.Permit"/>
        <xpeml:Action Visible="true" EnumerativeValue="2620" ActionName="Deny" ActionID="xpemlAction_Deny" Effect="Deny" MultipleAllowed="false" I18NResourceID="policy.Deny">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2621" GroupName="DenyParameters" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DefaultBlockPage" I18NResourceID="policy.DefaultBlockPage" UseParametersForSelection="false"/>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="SendBlockMessage" I18NResourceID="policy.SendBlockMessage" UseParametersForSelection="false">
                <xpeml:Parameter MultipleValuesAllowed="false" EnumerativeValue="1" Name="Message" Required="false" I18NResourceID="policy.SendBlockMessage.Message_Text">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="30" ChoiceName="RedirectToLocation" I18NResourceID="policy.RedirectToLocation" UseParametersForSelection="false">
                <xpeml:Parameter MultipleValuesAllowed="false" EnumerativeValue="1" Name="Redirect" Required="false" I18NResourceID="">
                  <xpeml:DataEntryField DataType="url" Min="1" Max="4096" FormatString="starts-with%3A//http%3A//,starts-with%3A//https%3A//" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2630" ActionName="Redirect" ActionID="xpemlAction_Redirect" Effect="Deny" MultipleAllowed="false" I18NResourceID="policy.Redirect">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2621" GroupName="RedirectParameters" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="30" ChoiceName="RedirectToLocation" I18NResourceID="" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter MultipleValuesAllowed="false" EnumerativeValue="1" Name="Redirect" Required="false" I18NResourceID="policy.RedirectToLocation">
                  <xpeml:DataEntryField DataType="url" Min="1" Max="4096" FormatString="starts-with%3A//http%3A//,starts-with%3A//https%3A//" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
          <xpeml:Action Visible="true" EnumerativeValue="2640" ActionName="DoContract" ActionID="xpemlAction_DoContract" Effect="Deny" MultipleAllowed="false" I18NResourceID="policy.DoContract">
              <xpeml:InstanceParameterList>
                  <xpeml:ParameterGroup EnumerativeValue="2621" GroupName="DoContractParameters" GroupType="Display" I18NResourceID="">
                      <xpeml:Choice EnumerativeValue="40" ChoiceName="DoContractParamChoice" I18NResourceID="" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                          <xpeml:Parameter MultipleValuesAllowed="false" EnumerativeValue="1" Name="DoContractParam" Required="true" I18NResourceID="policy.DoContractParam">
                              <xpeml:ContextDataElementSelection>
                                  <xpeml:SelectedContextDataElements>
                                    <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_AuthenticationContract"/>
                                  </xpeml:SelectedContextDataElements>
                              </xpeml:ContextDataElementSelection>
                          </xpeml:Parameter>
                      </xpeml:Choice>
                  </xpeml:ParameterGroup>
              </xpeml:InstanceParameterList>
          </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2710" ActionName="InjectAuthHeader" ActionID="xpemlAction_InjectAuthHeader" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectAuthenticationHeaderData">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2711" GroupName="AuthHeader" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="uid" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="uid" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.UserId">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="pwd" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="pwd" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.Password">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2740" ActionName="InjectKerberosTicket" ActionID="xpemlAction_InjectKerberosTicket" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectAuthenticationHeaderData">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2741" GroupName="KerberosTicketHeader" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="uid" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="uid" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.UserId">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="domain" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="domain" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.Domain">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_LdapAttribute"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_StringConstant"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="30" ChoiceName="target-host" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter Name="target-host" MultipleValuesAllowed="false" EnumerativeValue="1" Required="true" I18NResourceID="policy.target-host">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_TargetHost"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2715" ActionName="InjectInCookieHeader" ActionID="xpemlAction_InjectInCookieHeader" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectInCookieHeader">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="27151" GroupName="Data" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Data" I18NResourceID="">
                <xpeml:Parameter EnumerativeValue="1" Name="Value" Required="true" MultipleValuesAllowed="false" I18NResourceID="">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_ProxySessionCookie"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2720" ActionName="InjectCustomHeader" ActionID="xpemlAction_InjectCustomHeader" Effect="Obligation" MultipleAllowed="true" I18NResourceID="policy.InjectCustomHeader">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2721" GroupName="Name" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Name" I18NResourceID="">
                <xpeml:Parameter EnumerativeValue="1" Name="Name" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CustomHeaderName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="48" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2722" GroupName="Data" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Data" I18NResourceID="">
                <xpeml:Parameter EnumerativeValue="2" Name="Value" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CustomHeaderValue">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2725" ActionName="InjectCustomHeaderWithTags" ActionID="xpemlAction_InjectCustomHeaderWithTags" Effect="Obligation" MultipleAllowed="true" I18NResourceID="policy.InjectCustomHeaderWithTagValuePairs">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2721" GroupName="Name" GroupType="Display" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Name" I18NResourceID="">
                <xpeml:Parameter EnumerativeValue="1" Name="Name" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CustomHeaderName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="48" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2722" GroupName="Data" GroupType="Insert" I18NResourceID="policy.Tags" RequiredOnInsert="true">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Data" I18NResourceID="policy.NewTag">
                <xpeml:Parameter EnumerativeValue="1" Name="TagName" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.TagName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="48" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="Value" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.TagValue">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="2730" ActionName="InjectQueryString" ActionID="xpemlAction_InjectQueryString" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectQueryString">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="2731" GroupName="Data" GroupType="Insert" RequiredOnInsert="true" I18NResourceID="policy.Tags">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Data" I18NResourceID="policy.NewTag">
                <xpeml:Parameter EnumerativeValue="1" Name="TagName" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.TagName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="48" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="Value" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.TagValue">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:AllContextDataElements/>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2799" GroupName="MultiValueSeparator" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="MultiValueSeparator" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="SeparatorCharacter" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.SeparatorCharacter">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_MultiValueSeparatorCharacters"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="2788" GroupName="DNFormat" GroupType="Selection" I18NResourceID="">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="DNFormat" I18NResourceID="" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="DNFormatSelection" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DNFormatSelection">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_DNFormatOptions"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="3310" ActionName="FormFill" ActionID="xpemlAction_FormFill" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.FormFillSettings">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="3310" GroupName="FormSelectionCriteria" GroupType="Display" I18NResourceID="policy.FormSelection">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Cgi" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CgiMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="Form" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3310" GroupName="FormSelection" GroupType="Selection">
              <xpeml:Choice EnumerativeValue="20" ChoiceName="Form" I18NResourceID="policy.Form " InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="2" Name="Name" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="128" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="3" Name="Number" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormNumber">
                  <xpeml:DataEntryField DataType="number" Min="0" Max="99" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="4" Name="Id" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormId">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="128" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3320" GroupName="FillOptions" GroupType="Insert" I18NResourceID="policy.FillOptions" RequiredOnInsert="true">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="InputField" I18NResourceID="policy.NewInputField" InsertMultipleValuesAllowed="true" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="Name" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.InputFieldName">
                  <xpeml:DataEntryField DataType="string" Min="1" Max="128" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="Type" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.InputFieldType">
                  <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_FormFieldTypes"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="3" Name="FillValue" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.InputFillValue">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_CredentialProfile"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_LdapAttribute"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_LibertyUserProfile"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_SharedSecret"/>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_StringConstant"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="4" Name="DataConversion" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.InputDataConversion">
                    <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_FormDataConversions"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="5" Name="FillType" Required="false" MultipleValuesAllowed="false"  I18NResourceID="policy.InputFillType" >                                                                                   
                    <xpeml:SelectionValuesListRef ElementRefType="IDRef" IDRef="xpemlSelectionValuesList_InputFillType" />
                </xpeml:Parameter>
             </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3330" GroupName="SubmitOptions" GroupType="Display" I18NResourceID="policy.SubmitOptions">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="AutoSubmit" I18NResourceID="policy.AutoSubmit" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="Debug" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.DebugMode">
                  <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="MaskData" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.MaskData">
                  <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="3" Name="LoopDetect" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.LoopDetect">
                  <xpeml:DataEntryField DataType="boolean" Min="0" Max="1" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="40" ChoiceName="InsertHeaderText" I18NResourceID="policy.InsertTextInHeader" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="2" Name="HeaderText" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.HeaderText">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="50" ChoiceName="JavaScript" I18NResourceID="policy.JavaScriptHandling" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="FunctionsToKeep" Required="false" MultipleValuesAllowed="true" I18NResourceID="policy.FunctionsToKeep">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" FormatString="starts-with://function "/>
                </xpeml:Parameter>
                <xpeml:Parameter EnumerativeValue="2" Name="StatementsForSubmit" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.StatementsForSubmit">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3399" GroupName="ErrorHandling" GroupType="Display" I18NResourceID="policy.ErrorHandling">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Redirect" I18NResourceID="" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="Url" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.RedirectUrl">
                  <xpeml:DataEntryField DataType="url" Min="1" Max="4096" FormatString="starts-with%3A//http%3A//,starts-with%3A//https%3A//" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="3410" ActionName="FormLoginFailure" ActionID="xpemlAction_FormLoginFailure" Effect="Obligation" MultipleAllowed="true" I18NResourceID="policy.FormLoginFailureSettings">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="3310" GroupName="FormSelectionCriteria" GroupType="Display" I18NResourceID="policy.FormSelection">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Cgi" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CgiMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="Form" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3350" GroupName="LoginFailureProcessing" GroupType="Display" I18NResourceID="policy.LoginFailureProcessing">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Redirect" I18NResourceID="" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="Url" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.RedirectUrl">
                  <xpeml:DataEntryField DataType="url" Min="1" Max="4096" FormatString="starts-with%3A//http%3A//,starts-with%3A//https%3A//" MultiValue="false"/>
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="DataMgmt" I18NResourceID="policy.NewDataValueToClear" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="ClearSharedSecretsForPolicy" Required="true" MultipleValuesAllowed="false" I18NResourceID="">
                  <xpeml:ContextDataElementSelection>
                    <xpeml:SelectedContextDataElements>
                      <xpeml:ContextDataElementRef ElementRefType="IDRef" IDRef="xpemlContextDataElement_PolicyReference"/>
                    </xpeml:SelectedContextDataElements>
                  </xpeml:ContextDataElementSelection>
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
        <xpeml:Action Visible="true" EnumerativeValue="3510" ActionName="InjectJavaScript" ActionID="xpemlAction_InjectJavaScript" Effect="Obligation" MultipleAllowed="false" I18NResourceID="policy.InjectJavaScriptSetting">
          <xpeml:InstanceParameterList>
            <xpeml:ParameterGroup EnumerativeValue="3310" GroupName="FormSelectionCriteria" GroupType="Display" I18NResourceID="policy.FormSelection">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="Cgi" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="true" MultipleValuesAllowed="false" I18NResourceID="policy.CgiMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="Form" InsertMultipleValuesAllowed="false" UseParametersForSelection="true">
                <xpeml:Parameter EnumerativeValue="1" Name="Criteria" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.FormMatchingCriteria">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
            <xpeml:ParameterGroup EnumerativeValue="3360" GroupName="ConfigureJavaScripts" GroupType="Display" I18NResourceID="policy.ConfigureJavaScripts">
              <xpeml:Choice EnumerativeValue="10" ChoiceName="JavaScriptUnderHeadSection" I18NResourceID="policy.JavaScriptUnderHeadSection" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="JavaScriptConfigure" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.JavaScriptConfigure">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="20" ChoiceName="JavaScriptBodyStart" I18NResourceID="policy.JavaScriptBodyStart" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="JavaScriptConfigure" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.JavaScriptConfigure">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
              <xpeml:Choice EnumerativeValue="30" ChoiceName="JavaScriptBodyEnd" I18NResourceID="policy.JavaScriptBodyEnd" InsertMultipleValuesAllowed="false" UseParametersForSelection="false">
                <xpeml:Parameter EnumerativeValue="1" Name="JavaScriptConfigure" Required="false" MultipleValuesAllowed="false" I18NResourceID="policy.JavaScriptConfigure">
                  <xpeml:DataEntryField DataType="text-area" Min="1" Max="4096" MultiValue="false" />
                </xpeml:Parameter>
              </xpeml:Choice>
            </xpeml:ParameterGroup>
          </xpeml:InstanceParameterList>
        </xpeml:Action>
      </xpeml:PEPActionList>
    </xpeml:ActionTypeMapping>
  </xpeml:PolicyTypeSpecification>
  <xpeml:PolicyCollection schemaVersion="2.0"/>
  <xpeml:PolicyEnforcementList RuleCombiningAlgorithm="DenyOverridesWithPriority" schemaVersion="2.0" LastModified="4294967295" LastModifiedBy="String"/>
</NxpeService>