<?xml version="1.0"?>

<xs:schema
  xmlns:xs="http://www.w3.org/2001/XMLSchema"
  xmlns="http://www.cisco.com/CCX"
  targetNamespace="http://www.cisco.com/CCX"
  elementFormDefault="qualified"
  attributeFormDefault="unqualified">

  <xs:element name="eapLeap" type="EapLeap"/>

  <xs:complexType name="EapLeap">
    <xs:complexContent>
      <xs:extension base="PasswordMethods"/>
    </xs:complexContent>
  </xs:complexType>

  <xs:complexType name="IdentityPattern">
    <xs:simpleContent>
      <xs:extension base="NonEmptyString">
        <xs:attribute name="encryptContent" type="xs:boolean" use="optional" default="true">
          <xs:annotation>
            <xs:documentation>this is defaulted to 'true' as an indication to  the post-process tool that it should encrypt this element, if the element is not already encrypted (within an XML Security envelope).</xs:documentation>
          </xs:annotation>
        </xs:attribute>
      </xs:extension>
    </xs:simpleContent>
  </xs:complexType>

  <xs:complexType name="PasswordFromProfile">
    <xs:simpleContent>
      <xs:extension base="xs:string">
        <xs:attribute name="encryptContent" type="xs:boolean" use="optional" default="true">
          <xs:annotation>
            <xs:documentation>this is defaulted to 'true' as an indication to  the post-process tool that it should encrypt this element, if the element is not already encrypted (within an XML Security envelope).</xs:documentation>
          </xs:annotation>
        </xs:attribute>
      </xs:extension>
    </xs:simpleContent>
  </xs:complexType>

  <xs:complexType name="PasswordSource">
    <xs:choice>
      <xs:element name="passwordFromLogon" type="Empty"/>
      <xs:element name="passwordFromUser" type="Empty"/>
      <xs:element name="passwordFromProfile" type="PasswordFromProfile"/>
    </xs:choice>
  </xs:complexType>

  <xs:complexType name="PasswordMethods">
    <xs:sequence>
      <xs:element name="unprotectedIdentityPattern" type="IdentityPattern" minOccurs="0"/>
      <xs:element name="passwordSource" type="PasswordSource"/>
    </xs:sequence>
  </xs:complexType>

  <xs:complexType name="Empty"/>

  <xs:simpleType name="NonEmptyString">
    <xs:restriction base="xs:string">
      <xs:minLength value="1"/>
    </xs:restriction>
  </xs:simpleType>

</xs:schema>