[plasma] Clarification of specifying WS-Trust tokens in the PLASMA authentication element

[Ed Simon <[e-mail]>]

The "Plasma Service Trust Processing" document includes a fragment of an XML Schema describing the <eps:Authentication> element as such:

     <xs:element name="Authentication" type="eps:AuthenticationType"/>
     <xs:complexType name="AuthenticationType">
       <xs:choice maxOccurs="unbounded">
         <xs:element ref="saml:Assertion"/>
...
         <xs:element name="WS-Token">
           <xs:complexType>
             <xs:simpleContent>
               <xs:extension base="xs:hexBinary">
                 <xs:attribute name="tokenType" type="xs:anyURI"/>
               </xs:extension>
             </xs:simpleContent>
           </xs:complexType>
         </xs:element>
...

I presume, based on the text of the "Plasma Service Trust Processing" document, that the "WS-Token" is actually supposed to be the

/wst:RequestSecurityTokenResponse/wst:RequestedSecurityToken

described in <http://docs.oasis-open.org/ws-sx/ws-trust/v1.4/errata01/ws-trust-1.4-errata01-complete.html>. Correct? If so, the XML Schema in the "Plasma Service Trust Processing" document needs to be adjusted to something like <xs:element ref="wst:RequestedSecurityToken">. Also, with respect to the "XML Nomenclature and Name Spaces" table, should we be not be using this namespace

http://docs.oasis-open.org/ws-sx/ws-trust/200802

for WS-Trust 1.4?

Ed