<serviceSecurityConfig xmlns="http://www.globus.org/security/descriptor/service" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.globus.org/security/descriptor name_value_type.xsd" xmlns:param="http://www.globus.org/security/descriptor" >
	<methodAuthentication>
		<method name="createCounter">
			<auth-method>
				<GSISecureConversation/>
				<GSISecureMessage/>
			</auth-method>
		</method>
		<method name="destroy">
			<auth-method>
				<GSISecureConversation/>
				<GSISecureMessage/>
			</auth-method>
		</method>
		<method name="add">
			<auth-method>
				<GSISecureConversation/>
				<GSISecureMessage/>
			</auth-method>
		</method>
	</methodAuthentication>
	<auth-method>
		<none/>
	</auth-method>
	<authzChain>
		<pdps>
                    <interceptor name="prefix:org.globus.wsrf.impl.security.authorization.SAMLAuthorizationCallout">
                    <parameter>
                        <param:nameValueParam>
                            <param:parameter name="authzService" 
                                            value="http://localhost:8080/wsrf/services/CASService"/>
                            <!-- FIXME: change to identity of authz service -->
                            <param:parameter name="authzServiceIdentity" 
                                            value="/C=US/O=Globus Alliance/OU=User/CN=101497d3dcd.3dcd5aef"/>
                        </param:nameValueParam>
                    </parameter>
                    </interceptor>
		</pdps>
	</authzChain>
</serviceSecurityConfig>
