Olá, 

Tenho tentado encontrar a solução para o mesmo problema nos últimos 10 dias, e não consegui encontrar nada. 
Bem, meu problema é o seguinte: eu estou tentando restringir o Authentication Context XML Schema Definition da especificação SAML 2.0. O documento XSD está disponível em <http://docs.oasis-open.org/security/saml/v2.0/saml-schema-authn-context-types-2.0.xsd>.

A parte que eu estou tentando restringir é uma relacionada a esta parte do XSD original: 

    <xs:complexType name="PasswordType">
      <xs:sequence>
        <xs:element ref="Length" minOccurs="0"/>
        <xs:element ref="Alphabet" minOccurs="0"/>
        <xs:element ref="Generation" minOccurs="0"/>
        <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
      </xs:sequence>
      <xs:attribute name="ExternalVerification" type="xs:anyURI" use="optional"/>
    </xs:complexType>

    <xs:element name="RestrictedPassword" type="RestrictedPasswordType"/>

    <xs:complexType name="RestrictedPasswordType">
      <xs:complexContent>
        <xs:restriction base="PasswordType">
          <xs:sequence>
            <xs:element name="Length" type="RestrictedLengthType" minOccurs="1"/>
            <xs:element ref="Generation" minOccurs="0"/>
            <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
          </xs:sequence>
          <xs:attribute name="ExternalVerification" type="xs:anyURI" use="optional"/>
        </xs:restriction>
      </xs:complexContent>
    </xs:complexType>

Bem, eu não sei como restringir o tipo complexo RestrictedPassword. Abaixo está o meu XSD, que tenta restringir o XSD original. 

    <?xml version="1.0" encoding="UTF-8"?>

    <xs:schema version="2.0"
           targetNamespace="urn:m:SAML:2.0:ac:classes:K"
           xmlns:xs="http://www.w3.org/2001/XMLSchema"
           xmlns="urn:m:SAML:2.0:ac:classes:K"           
           finalDefault="extension"
           blockDefault="substitution">

    <xs:redefine schemaLocation="http://docs.oasis-open.org/security/saml/v2.0/saml-schema-authn-context-types-2.0.xsd">    

        <xs:complexType name="RestrictedPasswordType">
            <xs:complexContent>
                <xs:restriction base="RestrictedPasswordType">
                    <xs:sequence>
                        <xs:element ref="Length" minOccurs="0"/>
                        <xs:element ref="Generation"/>
                        <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
                    </xs:sequence>
                    <xs:attribute name="ExternalVerification" type="xs:anyURI" use="optional"/>
                </xs:restriction>
            </xs:complexContent>
        </xs:complexType>

    </xs:redefine>    
    </xs:schema>

Quando eu tento validar este XSD nesta ferramenta <http://www.utilities-online.info/xsdvalidation/#.UwJAzK69h31>, ela me retorna um erro, que eu não sei o que nem como arrumar. 

Qualquer ajuda é bem-vinda.

Obrigado!

Marlon Domenech