<?xml version="1.0" encoding="UTF-8"?>
<env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope">
    <env:Header xmlns:addressing="http://www.w3.org/2005/08/addressing">
        <addressing:Action env:mustUnderstand="1">http://docs.oasis-open.org/ws-sx/
                    ws-trust/200512/RSTR/IssueFinal</addressing:Action>
        <addressing:MessageID>uuid:0D15578D-4EED-498C-A04C-C752778DF127</addressing:MessageID>
        <addressing:RelatesTo>uuid:94EA0806-C34A-4946-B469-918BD538CA41</addressing:RelatesTo>
    </env:Header>
    <env:Body>
        <wst:RequestSecurityTokenResponseCollection xmlns:wst="http://docs.oasis-open.org/ws-sx/ws-trust/200512">
            <wst:RequestSecurityTokenResponse>
                <wst:TokenType>urn:elga:pap:create</wst:TokenType>
                <wst:RequestedSecurityToken>
                    <ts:GeneratedPolicies xmlns:ts="urn:tiani-spirit:ts">
                        <ts:IndividualRequestPolicy>
                            <PolicySet PolicyCombiningAlgId="urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides" 
                                PolicySetId="urn:elga:bes:2013:1.2.3.1.1" xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os">
                                <Description>patient request PolicySet that meet the first RST </Description>
                                <Target/>
                                <!-- Individuelle Request Policies 2.2.2.2.1 (nicht Base64 codiert)  -->
                            </PolicySet>
                        </ts:IndividualRequestPolicy>
                        <ts:IndividualResponsePolicy>
                            <PolicySet PolicyCombiningAlgId="urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides" 
                                 PolicySetId="urn:elga:bes:2013:1.2.3.2.2" xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" >
                                <Description>patient response PolicySet that meet the first RST</Description>
                                <Target/>
                                <!-- Individuelle Response Policy 2.2.2.2.2 (nicht Base64 codiert) -->
                            </PolicySet>
                        </ts:IndividualResponsePolicy>
                    </ts:GeneratedPolicies>
                </wst:RequestedSecurityToken>
            </wst:RequestSecurityTokenResponse>
        </wst:RequestSecurityTokenResponseCollection>
    </env:Body>
</env:Envelope>
