From 0dc260503a5deb581802e645ddae996ae9298968 Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Wed, 24 Feb 2016 08:07:07 +0100
Subject: Update SSO-transer authentication modul to MOA_ID 3.2.x

---
 id/server/auth/src/main/webapp/index.html | 1 +
 1 file changed, 1 insertion(+)

(limited to 'id/server/auth/src/main/webapp/index.html')

diff --git a/id/server/auth/src/main/webapp/index.html b/id/server/auth/src/main/webapp/index.html
index 0c051571b..d2e7d1e1b 100644
--- a/id/server/auth/src/main/webapp/index.html
+++ b/id/server/auth/src/main/webapp/index.html
@@ -77,6 +77,7 @@
                     <li><a href=#>Demo Clients</a></li>
                     <!--Link zum Konfigtool-->
                     <li><a href="https://localhost:8443/moa-id-configuration">Konfiguration GUI</a></li>
+                    <li><a href="./TransferSSOSession">Transfer Single Sign-On Session to Smartphone App</a></li>
                 	
                 </ul>
             </nav>
-- 
cgit v1.2.3


From f66ed1831a4877d6c7cb3c55bbc3fd84024a1523 Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Wed, 9 Mar 2016 09:14:38 +0100
Subject: move main frontend GUI to seperate package

---
 id/server/auth/pom.xml                             |  12 +-
 ....apache.axis.components.net.SecureSocketFactory |   1 -
 id/server/auth/src/main/webapp/Blockdiagramm.png   | Bin 206722 -> 0 bytes
 .../auth/src/main/webapp/WCAG-Pruefprotokoll.pdf   | Bin 721803 -> 0 bytes
 .../src/main/webapp/WEB-INF/applicationContext.xml |   6 +-
 id/server/auth/src/main/webapp/WEB-INF/web.xml     |  10 +-
 id/server/auth/src/main/webapp/anmeldeablauf.png   | Bin 51158 -> 0 bytes
 id/server/auth/src/main/webapp/common/LogoBKA.png  | Bin 8062 -> 0 bytes
 id/server/auth/src/main/webapp/common/LogoEGIZ.png | Bin 77395 -> 0 bytes
 .../auth/src/main/webapp/common/logo_digAT.png     | Bin 22964 -> 0 bytes
 id/server/auth/src/main/webapp/common/main.css     | 253 ----------------
 .../auth/src/main/webapp/img/bk_aktivieren.jpg     | Bin 30471 -> 0 bytes
 id/server/auth/src/main/webapp/img/handy.gif       | Bin 4460 -> 0 bytes
 id/server/auth/src/main/webapp/img/karte.gif       | Bin 3360 -> 0 bytes
 id/server/auth/src/main/webapp/img/logo.jpg        | Bin 18260 -> 0 bytes
 id/server/auth/src/main/webapp/img/mobile-bku.png  | Bin 4602 -> 0 bytes
 .../src/main/webapp/img/online-bku-deactivated.png | Bin 5382 -> 0 bytes
 id/server/auth/src/main/webapp/img/online-bku.png  | Bin 6011 -> 0 bytes
 id/server/auth/src/main/webapp/img/stork-logo.png  | Bin 9160 -> 0 bytes
 .../auth/src/main/webapp/img/valid-html5-blue.png  | Bin 3297 -> 0 bytes
 .../auth/src/main/webapp/img/w3cvalidhtml5.jpg     | Bin 1938 -> 0 bytes
 id/server/auth/src/main/webapp/index.html          |  92 ------
 id/server/auth/src/main/webapp/info_bk.html        | 100 -------
 id/server/auth/src/main/webapp/info_mandates.html  |  58 ----
 id/server/auth/src/main/webapp/info_stork.html     |  42 ---
 id/server/auth/src/main/webapp/moa_errorcodes.html | 333 ---------------------
 .../auth/src/main/webapp/template_handyBKU.html    |  38 ---
 .../auth/src/main/webapp/template_localBKU.html    |  30 --
 .../auth/src/main/webapp/template_onlineBKU.html   |  37 ---
 .../servlet/SAML2InterfederationSignalServlet.java |  38 ---
 id/server/moa-id-frontend-resources/.gitignore     |   1 +
 id/server/moa-id-frontend-resources/pom.xml        |  45 +++
 .../src/main/java/META-INF/MANIFEST.MF             |   3 +
 .../auth/frontend/StaticResourceConfiguration.java |  47 +++
 .../src/main/resources/mainGUI/common/LogoBKA.png  | Bin 0 -> 8062 bytes
 .../src/main/resources/mainGUI/common/LogoEGIZ.png | Bin 0 -> 77395 bytes
 .../main/resources/mainGUI/common/logo_digAT.png   | Bin 0 -> 22964 bytes
 .../src/main/resources/mainGUI/common/main.css     | 253 ++++++++++++++++
 .../main/resources/mainGUI/img/bk_aktivieren.jpg   | Bin 0 -> 30471 bytes
 .../src/main/resources/mainGUI/img/handy.gif       | Bin 0 -> 4460 bytes
 .../src/main/resources/mainGUI/img/karte.gif       | Bin 0 -> 3360 bytes
 .../src/main/resources/mainGUI/img/logo.jpg        | Bin 0 -> 18260 bytes
 .../src/main/resources/mainGUI/img/mobile-bku.png  | Bin 0 -> 4602 bytes
 .../mainGUI/img/online-bku-deactivated.png         | Bin 0 -> 5382 bytes
 .../src/main/resources/mainGUI/img/online-bku.png  | Bin 0 -> 6011 bytes
 .../src/main/resources/mainGUI/img/stork-logo.png  | Bin 0 -> 9160 bytes
 .../resources/mainGUI/img/valid-html5-blue.png     | Bin 0 -> 3297 bytes
 .../main/resources/mainGUI/img/w3cvalidhtml5.jpg   | Bin 0 -> 1938 bytes
 .../src/main/resources/mainGUI/index.html          |  92 ++++++
 .../src/main/resources/mainGUI/info_bk.html        | 100 +++++++
 .../src/main/resources/mainGUI/info_mandates.html  |  58 ++++
 .../src/main/resources/mainGUI/info_stork.html     |  42 +++
 .../src/main/resources/mainGUI/moa_errorcodes.html | 333 +++++++++++++++++++++
 .../main/resources/mainGUI/template_handyBKU.html  |  38 +++
 .../main/resources/mainGUI/template_localBKU.html  |  30 ++
 .../main/resources/mainGUI/template_onlineBKU.html |  37 +++
 id/server/modules/pom.xml                          |  12 +-
 id/server/pom.xml                                  |   3 +-
 pom.xml                                            |   6 +
 59 files changed, 1114 insertions(+), 1036 deletions(-)
 delete mode 100644 id/server/auth/src/main/resources/META-INF/services/org.apache.axis.components.net.SecureSocketFactory
 delete mode 100644 id/server/auth/src/main/webapp/Blockdiagramm.png
 delete mode 100644 id/server/auth/src/main/webapp/WCAG-Pruefprotokoll.pdf
 delete mode 100644 id/server/auth/src/main/webapp/anmeldeablauf.png
 delete mode 100644 id/server/auth/src/main/webapp/common/LogoBKA.png
 delete mode 100644 id/server/auth/src/main/webapp/common/LogoEGIZ.png
 delete mode 100644 id/server/auth/src/main/webapp/common/logo_digAT.png
 delete mode 100644 id/server/auth/src/main/webapp/common/main.css
 delete mode 100644 id/server/auth/src/main/webapp/img/bk_aktivieren.jpg
 delete mode 100644 id/server/auth/src/main/webapp/img/handy.gif
 delete mode 100644 id/server/auth/src/main/webapp/img/karte.gif
 delete mode 100644 id/server/auth/src/main/webapp/img/logo.jpg
 delete mode 100644 id/server/auth/src/main/webapp/img/mobile-bku.png
 delete mode 100644 id/server/auth/src/main/webapp/img/online-bku-deactivated.png
 delete mode 100644 id/server/auth/src/main/webapp/img/online-bku.png
 delete mode 100644 id/server/auth/src/main/webapp/img/stork-logo.png
 delete mode 100644 id/server/auth/src/main/webapp/img/valid-html5-blue.png
 delete mode 100644 id/server/auth/src/main/webapp/img/w3cvalidhtml5.jpg
 delete mode 100644 id/server/auth/src/main/webapp/index.html
 delete mode 100644 id/server/auth/src/main/webapp/info_bk.html
 delete mode 100644 id/server/auth/src/main/webapp/info_mandates.html
 delete mode 100644 id/server/auth/src/main/webapp/info_stork.html
 delete mode 100644 id/server/auth/src/main/webapp/moa_errorcodes.html
 delete mode 100644 id/server/auth/src/main/webapp/template_handyBKU.html
 delete mode 100644 id/server/auth/src/main/webapp/template_localBKU.html
 delete mode 100644 id/server/auth/src/main/webapp/template_onlineBKU.html
 delete mode 100644 id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/SAML2InterfederationSignalServlet.java
 create mode 100644 id/server/moa-id-frontend-resources/.gitignore
 create mode 100644 id/server/moa-id-frontend-resources/pom.xml
 create mode 100644 id/server/moa-id-frontend-resources/src/main/java/META-INF/MANIFEST.MF
 create mode 100644 id/server/moa-id-frontend-resources/src/main/java/at/gv/egovernment/moa/id/auth/frontend/StaticResourceConfiguration.java
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/LogoBKA.png
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/LogoEGIZ.png
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/logo_digAT.png
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/main.css
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/bk_aktivieren.jpg
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/handy.gif
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/karte.gif
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/logo.jpg
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/mobile-bku.png
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/online-bku-deactivated.png
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/online-bku.png
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/stork-logo.png
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/valid-html5-blue.png
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/w3cvalidhtml5.jpg
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/index.html
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_bk.html
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_mandates.html
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_stork.html
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/moa_errorcodes.html
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_handyBKU.html
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_localBKU.html
 create mode 100644 id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_onlineBKU.html

(limited to 'id/server/auth/src/main/webapp/index.html')

diff --git a/id/server/auth/pom.xml b/id/server/auth/pom.xml
index e88692a14..41dbe0bb4 100644
--- a/id/server/auth/pom.xml
+++ b/id/server/auth/pom.xml
@@ -132,6 +132,11 @@
 			<groupId>MOA.id.server</groupId>
 			<artifactId>moa-id-spring-initializer</artifactId>
 		</dependency>
+		<dependency>
+			<groupId>MOA.id.server</groupId>
+  		<artifactId>moa-id-frontend-resources</artifactId>
+		</dependency>
+		
 		
 		<!-- Adding eIDAS module dependency automatically adds eIDAS protocol capabilities. -->
 		<dependency>
@@ -177,13 +182,12 @@
 				<artifactId>moa-id-modules-federated_authentication</artifactId>
 			</dependency> 
 
-<!-- 		<dependency>
+		<dependency>
 			<groupId>MOA.id.server.modules</groupId>
 			<artifactId>moa-id-module-ssoTransfer</artifactId>
 			<version>${moa-id-version}</version>
-		</dependency> -->
-		
-		
+		</dependency>
+				
         <!-- transitive dependencies we don't want to include into the war -->
 		<dependency>
 			<groupId>iaik.prod</groupId>
diff --git a/id/server/auth/src/main/resources/META-INF/services/org.apache.axis.components.net.SecureSocketFactory b/id/server/auth/src/main/resources/META-INF/services/org.apache.axis.components.net.SecureSocketFactory
deleted file mode 100644
index c4547e804..000000000
--- a/id/server/auth/src/main/resources/META-INF/services/org.apache.axis.components.net.SecureSocketFactory
+++ /dev/null
@@ -1 +0,0 @@
-at.gv.egovernment.moa.id.util.AxisSecureSocketFactory
diff --git a/id/server/auth/src/main/webapp/Blockdiagramm.png b/id/server/auth/src/main/webapp/Blockdiagramm.png
deleted file mode 100644
index 18d5b84a2..000000000
Binary files a/id/server/auth/src/main/webapp/Blockdiagramm.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/WCAG-Pruefprotokoll.pdf b/id/server/auth/src/main/webapp/WCAG-Pruefprotokoll.pdf
deleted file mode 100644
index 3722c5d7e..000000000
Binary files a/id/server/auth/src/main/webapp/WCAG-Pruefprotokoll.pdf and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/WEB-INF/applicationContext.xml b/id/server/auth/src/main/webapp/WEB-INF/applicationContext.xml
index 948cd3a24..f3b133585 100644
--- a/id/server/auth/src/main/webapp/WEB-INF/applicationContext.xml
+++ b/id/server/auth/src/main/webapp/WEB-INF/applicationContext.xml
@@ -16,14 +16,16 @@
 >
 
 	<context:annotation-config />
-
 	<mvc:annotation-driven />
 
-	<mvc:default-servlet-handler/>
+	<context:component-scan base-package="at.gv.egovernment.moa.id.auth.frontend" />
 
+	<!-- <mvc:default-servlet-handler/> -->
+	
   <mvc:interceptors>
   	<bean class="at.gv.egovernment.moa.id.auth.servlet.interceptor.WebFrontEndSecurityInterceptor" />
   	<bean class="at.gv.egovernment.moa.id.auth.servlet.interceptor.UniqueSessionIdentifierInterceptor" />
   </mvc:interceptors> 
+
 	
 </beans>
diff --git a/id/server/auth/src/main/webapp/WEB-INF/web.xml b/id/server/auth/src/main/webapp/WEB-INF/web.xml
index af1603621..9ad651d42 100644
--- a/id/server/auth/src/main/webapp/WEB-INF/web.xml
+++ b/id/server/auth/src/main/webapp/WEB-INF/web.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
-	version="3.0">
+	xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
+	version="3.1">
 	<display-name>MOA ID Auth</display-name>
 	<description>MOA ID Authentication Service</description>
 
@@ -21,7 +21,11 @@
 		<filter-name>characterEncodingFilter</filter-name>
 		<url-pattern>/*</url-pattern>
 	</filter-mapping>
-
+	
+	<welcome-file-list>
+   <welcome-file>index.html</welcome-file>
+	</welcome-file-list>
+	
 	<session-config>
 		<session-timeout>5</session-timeout>
 	</session-config>
diff --git a/id/server/auth/src/main/webapp/anmeldeablauf.png b/id/server/auth/src/main/webapp/anmeldeablauf.png
deleted file mode 100644
index 59bdefe62..000000000
Binary files a/id/server/auth/src/main/webapp/anmeldeablauf.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/common/LogoBKA.png b/id/server/auth/src/main/webapp/common/LogoBKA.png
deleted file mode 100644
index 6a92647fd..000000000
Binary files a/id/server/auth/src/main/webapp/common/LogoBKA.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/common/LogoEGIZ.png b/id/server/auth/src/main/webapp/common/LogoEGIZ.png
deleted file mode 100644
index 39f05d131..000000000
Binary files a/id/server/auth/src/main/webapp/common/LogoEGIZ.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/common/logo_digAT.png b/id/server/auth/src/main/webapp/common/logo_digAT.png
deleted file mode 100644
index 4f36681e2..000000000
Binary files a/id/server/auth/src/main/webapp/common/logo_digAT.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/common/main.css b/id/server/auth/src/main/webapp/common/main.css
deleted file mode 100644
index 6bd964346..000000000
--- a/id/server/auth/src/main/webapp/common/main.css
+++ /dev/null
@@ -1,253 +0,0 @@
-html {
-	font-family: "Roboto", sans-serif;
-	color: #000;
-    font-weight:300;
-}
-
-.container {
-	margin: auto;
-	max-width: 1000px;
-	padding-left: 20px;
-	padding-right: 20px;
-}
-
-body {
-	margin: 0;
-	padding: 0;
-	letter-spacing: 0.05em;
-}
-
-h1
-{
-font-family: "Roboto", sans-serif;
-}
-
-#headline {
-	/*background: linear-gradient(center top , #FAFAFA, #F5F5F5) repeat scroll 0% 0% transparent;*/
-	background: linear-gradient(#FAFAFA, #F5F5F5);
-	border-bottom: 1px solid #EEE;
-}
-
-#headline br {
-	clear: both;
-}
-
-#headline h1 {
-		color: #404040;
-		padding-right: 1em;
-		padding-top: 0.3em;
-		margin-bottom: 0;
-		float: right;
-          font-size: 220%;
-  font-weight: 400;
-	}
-#headline img {
-        width: 300px;
-        padding-left: 0;
-        padding-top: 35px;
-        padding-bottom:20px;
-    }
-
-#description {
-	text-align: justify;
-}
-
-#maincontent {
-	height: 13em;
-}
-
-#demologin p {
-	padding-left: 10px;
-	padding-right: 10px;
-	text-align: justify;
-	font-size: 100%;
-	color: #000;
-    padding-top:20px;
-    
-}
-
-#demologin a{
-    
-}
-
-.button {
-	border-radius: 5px;
-	/*background-color: rgb(41,127,184); */
-	background-color: #E10319;
-	text-decoration: none;
-	text-transform: uppercase;
-	padding: 10px 80px 10px 80px;
-	letter-spacing: 1.5px;
-	text-shadow: 0px 1px 0px rgba(0, 0, 0, 0.3);
-	color: WHITE;
-	box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3);
-	margin-left: 10px;
-}
-
-.button:hover {
-	box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.8);
-	text-shadow: 0px 1px 0px rgba(0, 0, 0, 0.9);
-}
-
-#singlelogout {
-	clear: both;
-	width: 100%;
-	box-sizing: border-box;
-
-}
-a{
-	text-decoration: none;
-    font-size:100%;
-    color: #666;
-}
-a:hover{
-	text-decoration: none;
-    font-size:100%;
-    color: #E10319;
-}
-
-/*****************************/
-@media ( max-width :599px) {
-	  #headline {
-        /*background: linear-gradient(center top , #FAFAFA, #F5F5F5) repeat scroll 0% 0% transparent;*/
-        background: linear-gradient(#FAFAFA, #F5F5F5);
-        border-bottom: 1px solid #EEE;
-    }   
-
-    #headline img {
-        width: 150px;
-        padding-left: 0;
-        padding-top: 0.5em;
-        padding-bottom:0.5em;
-    }
-    #headline br {
-        clear: both;
-    }
-    #headline h1 {font-family: "Roboto", sans-serif;
-        color: #404040;
-        padding: 0;
-        margin-bottom: 0;
-        margin-top: 0;
-        text-align: center;
-    }
-	nav {
-		display: block;
-		width: 100%;
-        text-align: center;
-		box-sizing: border-box;
-		color: WHITE;
-		margin: 0px 0px 0px 0px;
-		overflow: hidden;
-
-	}
-	nav ul {
-		margin: 0;
-		padding: 0;
-	}
-	nav ul li {
-		list-style-type: none;
-		padding-top: 2px;
-        padding-bottom: 2px;
-	}
-	nav>ul>li>a {
-		color: #666;
-		display: block;
-		text-decoration: none;
-	}
-	nav>ul>li:hover {
-		color: #404040;
-	}
-	nav>ul>li:hover>a {
-		color: #404040;
-	}
-	nav>ul>li:active>a {
-		color: #404040;
-	}
-	#demologin {
-		width: 100%;
-		box-sizing: border-box;
-		border: 1px solid;
-		border-radius: 1px;
-		border-color: #818286;
-		background: #F5F5F5;
-		height: 182px;
-		width: 242px;
-		margin-top: 18px;
-        padding-left:0;
-	}
-}
-/*****************************/
-@media ( min-width :600px) {
-    #headline {
-	/*background: linear-gradient(center top , #FAFAFA, #F5F5F5) repeat scroll 0% 0% transparent;*/
-	background: linear-gradient(#FAFAFA, #F5F5F5);
-	border-bottom: 1px solid #EEE;
-
-    }
-	#headline br {
-		clear: both;
-	}
-
-	#headline h1 {
-        color: #404040;
-		padding-right: 1em;
-		padding-top: 0.15em;
-		margin-bottom: 0;
-		float: right;
-	}
-    #headline img {
-        width: 300px;
-        padding-left: 0;
-        padding-top: 35px;
-        padding-bottom:20px;
-    }
-	nav {
-		display: block;
-		float: left;
-		width: 30%;
-		box-sizing: border-box;
-		background-color: #fff;
-		color: #888;
-		margin: 8px 0px 8px 0px;
-		overflow: hidden;
-	}
-	nav ul {
-		margin: 0;
-		padding: 0;
-	}
-	nav ul li {
-		list-style-type: none;
-		padding-top: 15px;
-	}
-	nav>ul>li>a {
-		color: #666;
-		display: block;
-		text-decoration: none;
-	}
-	nav>ul>li:hover {
-		color: #E10319;
-	}
-	nav>ul>li:hover>a {
-		color: #E10319;
-	}
-	nav>ul>li:active>a {
-		color: #E10319;
-	}
-	#demologin {
-		float: right;
-		width: 50%;
-		box-sizing: border-box;
-		border: 1px solid;
-		border-radius: 1px;
-		border-color: #818286;
-		background: #F5F5F5;
-		height: 282px;
-		width: 342px;
-		margin-right: 150px;
-		margin-top: 18px;
-        padding-left:0;
-	}
-    #demologin a:hover{
-        color:white;
-    }
-}
\ No newline at end of file
diff --git a/id/server/auth/src/main/webapp/img/bk_aktivieren.jpg b/id/server/auth/src/main/webapp/img/bk_aktivieren.jpg
deleted file mode 100644
index a6436dc72..000000000
Binary files a/id/server/auth/src/main/webapp/img/bk_aktivieren.jpg and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/handy.gif b/id/server/auth/src/main/webapp/img/handy.gif
deleted file mode 100644
index 5aeb542db..000000000
Binary files a/id/server/auth/src/main/webapp/img/handy.gif and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/karte.gif b/id/server/auth/src/main/webapp/img/karte.gif
deleted file mode 100644
index ee9ab7cad..000000000
Binary files a/id/server/auth/src/main/webapp/img/karte.gif and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/logo.jpg b/id/server/auth/src/main/webapp/img/logo.jpg
deleted file mode 100644
index bafbccc84..000000000
Binary files a/id/server/auth/src/main/webapp/img/logo.jpg and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/mobile-bku.png b/id/server/auth/src/main/webapp/img/mobile-bku.png
deleted file mode 100644
index 697514273..000000000
Binary files a/id/server/auth/src/main/webapp/img/mobile-bku.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/online-bku-deactivated.png b/id/server/auth/src/main/webapp/img/online-bku-deactivated.png
deleted file mode 100644
index c2145f12a..000000000
Binary files a/id/server/auth/src/main/webapp/img/online-bku-deactivated.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/online-bku.png b/id/server/auth/src/main/webapp/img/online-bku.png
deleted file mode 100644
index d7d524999..000000000
Binary files a/id/server/auth/src/main/webapp/img/online-bku.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/stork-logo.png b/id/server/auth/src/main/webapp/img/stork-logo.png
deleted file mode 100644
index 70355a084..000000000
Binary files a/id/server/auth/src/main/webapp/img/stork-logo.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/valid-html5-blue.png b/id/server/auth/src/main/webapp/img/valid-html5-blue.png
deleted file mode 100644
index 91ebe3e87..000000000
Binary files a/id/server/auth/src/main/webapp/img/valid-html5-blue.png and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/img/w3cvalidhtml5.jpg b/id/server/auth/src/main/webapp/img/w3cvalidhtml5.jpg
deleted file mode 100644
index 2cd65412e..000000000
Binary files a/id/server/auth/src/main/webapp/img/w3cvalidhtml5.jpg and /dev/null differ
diff --git a/id/server/auth/src/main/webapp/index.html b/id/server/auth/src/main/webapp/index.html
deleted file mode 100644
index d2e7d1e1b..000000000
--- a/id/server/auth/src/main/webapp/index.html
+++ /dev/null
@@ -1,92 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
-<html>
-    <head>
-        <meta http-equiv="content-type" content="text/html; charset=utf8" >
-        <title>MOA-ID 3.1.x</title>
-        <link rel="stylesheet" href="./common/main.css" type="text/css">
-        <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
-        <link href='https://fonts.googleapis.com/css?family=Roboto:300,400' rel='stylesheet' type='text/css'>
-        <script language="JavaScript" type="text/javascript">
-        
-            function PVP2LoginIframe(url) {
-                var el = document.getElementById("demologin");
-                var iframe = document.createElement("iframe");
-                iframe.setAttribute("src", url);
-                iframe.setAttribute("width", "240");
-                iframe.setAttribute("height", "180");
-                iframe.setAttribute("frameborder", "0");
-                iframe.setAttribute("scrolling", "no");
-                iframe.setAttribute("title", "Login");
-                //iframe.setAttribute("scrolling", "yes");
-            
-                iframe.setAttribute("name", "iframelogin");
-                iframe.setAttribute("id", "iframelogin");
-                
-                
-                iframe.setAttribute("onload","iframeLoaded()");
-                
-                var divdemologin = document.getElementById("demologin");
-                divdemologin.innerHTML="";
-
-                el.appendChild(iframe, el); 
-            }
-            
-            function iframeLoaded(){
-                //console.log(document.title); 
-                var ifr=document.getElementById("iframelogin");
-
-                //only works on same origin
-                
-                /*
-                var iframedoc=(ifr.contentWindow||ifr.contentDocument);
-                
-                //var iframedoc=ifr.contentDocument||iframe.contentWindow.document;
-                console.log(iframedoc.title);
-                if(iframedoc.title=="Demo Applikation"){
-                    ifr.setAttribute("width",480);
-                    ifr.setAttribute("height",240);
-                    
-                    var demologin=document.getElementById("demologin");
-                    demologin.style.marginRight="250px";
-                }
-                */
-            }
-
-        </script>
-    </head>
-    <body>
-  <div id="headline">
-      <div class="container">
-          <a href="http://www.digitales.oesterreich.gv.at/"><img src="./common/logo_digAT.png"/></a>
-          <a href="../index.html"><h1>MOA-ID-AUTH </h1></a>
-          <br/>
-      </div>
-  </div>
-        <div id="description" class="container">
-            <p>Bei MOA-ID-AUTH handelt es sich um ein Modul für die Identifizierung und Authentifizierung bei Onlineapplikationen unter Verwendung der Bürgerkarte.
-            Hier kann sowohl die Smartcard-Variante (e-Card) als auch die Handysignatur verwendet werden.
-            Die Konfiguration des Modules MOA-ID-Auth erfolgt mit Hilfe des Zusatzmodules MOA-ID-Configuration welches eine web-basierte Konfigurationsschnittstelle zur Verfügung stellt.</p>
-        </div>
-        <div id="maincontent" class="container">
-            <nav>
-                <ul>
-                    <!--li><a href="_index.html">Allgemein</a></li-->
-                    <!--li><a href="http://joinup.ec.europa.eu/site/moa-idspss/">Dokumentation</a></li-->
-                    <li><a href="http://joinup.ec.europa.eu/site/moa-idspss/moa-id-3.x/doc/handbook">Dokumentation</a></li>
-                    <!--Link zu den Demo-Clients-->
-                    <li><a href=#>Demo Clients</a></li>
-                    <!--Link zum Konfigtool-->
-                    <li><a href="https://localhost:8443/moa-id-configuration">Konfiguration GUI</a></li>
-                    <li><a href="./TransferSSOSession">Transfer Single Sign-On Session to Smartphone App</a></li>
-                	
-                </ul>
-            </nav>
-        <div id="demologin" class="container">
-            <br/>
-            <a href="#" id="loginButton" class="button" onClick="PVP2LoginIframe('https://menja.iaik.tugraz.at:8443/moa-id-oa/servlet/pvp2login')">Login</a>
-            <p id="loginText">Über den Login-Button können Sie sich anschließend bei Ihrer Online-Applikation mit der Bürgerkarte oder der Handysignatur anmelden. Dazu müssen Sie allerdings zuvor die Applikation gemäß <a href="http://joinup.ec.europa.eu/site/moa-idspss/moa-id-3.x/doc/handbook/application/application.html#DemoApp_pvp21">Beschreibung</a> konfigurieren.</p>
-        </div>
-        </div>
-
-    </body>
-</html>
\ No newline at end of file
diff --git a/id/server/auth/src/main/webapp/info_bk.html b/id/server/auth/src/main/webapp/info_bk.html
deleted file mode 100644
index 59aea64cb..000000000
--- a/id/server/auth/src/main/webapp/info_bk.html
+++ /dev/null
@@ -1,100 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html lang="de">
-	<head>
-		<title>Information</title>
-        <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-        <meta http-equiv="Content-Style-Type" content="text/css">
-        <link rel="stylesheet" type="text/css" href="css/index.css">
-	</head>
-	<body>
-		<div id="wrapper">
-            <p id="skiplinks">
-                <a href="#content">Zum Inhalt springen</a>
-            </p>
-            <div id="banner">
-                <!-- [OPTIONAL] Aendern Sie hier die Titelueberschrift der Seite) -->
-                <div id="bannerleft">
-                    <h1>MOA-Template zur Bürgerkartenauswahl (Musterseite)</h1>
-                    <!-- Meldung im Browser, wenn JavaScript nicht aktiviert -->
-                    <noscript>
-                        <p>
-                            Bitte aktivieren Sie JavaScript.
-                        </p>
-	                </noscript>
-                </div>                
-                <!-- [OPTIONAL] Aendern Sie hier das Logo der Seite (und Alternativtext fuer das Bild) -->
-                <div id="bannerright">
-                    <img src="img/logo.jpg" alt="Logo">
-                </div>
-            </div>
-            <div id="main">
-                <div id="centercontent">
-                    <h2 id="contentheader" class="dunkel">
-                        Informationen zur B&uuml;rgerkarte
-                    </h2>
-                    <div id="content" class="hell">
-                        <p>
-                        	<B>Hinweis:</B>
-                            F&uuml;r nat&uuml;rliche Personen ist beim Login mit B&uuml;rgerkarte keine Erstanmeldung erforderlich.
-                        </p>
-                        <p>
-                        	Um mit der B&uuml;rgerkarte einsteigen zu k&ouml;nnen, ben&ouml;tigen Sie:
-                        </p>
-                        <ul>
-							<li>
-                               	eine Chipkarte, die f&uuml;r die Verwendung als B&uuml;rgerkarte geeignet ist, wie zum Beispiel Ihre e-card, Bankomatkarte oder Signaturkarte von A-Trust
-				      </li>
-							<li>
-                               	einen Kartenleser mit den dazugeh&ouml;rigen Treibern
-							</li>
-							<li>
-                               	eine B&uuml;rgerkartensoftware (BKU)
-                            </li>
-						</ul>
-                        <p>&nbsp;</p>
-                        <p>oder</p>
-                        <ul>
-                        	<li>
-                            	ein Mobiltelefon, das zur Nutzung als Handysignatur registriert ist.
-                            </li>
-                        </ul>
-<p>&nbsp;                        	
-            </p>
-<p>Als B&uuml;rgerkartensoftware stehen Ihnen folgende drei Varianten zur Verf&uuml;gung:
-              </p>
-                        <ul>
-                        	<li><i>Lokale BKU</i>: Diese Software wird lokal auf Ihrem Computer installiert. Die Software finden sie unter <a href="http://www.buergerkarte.at/download.de.php" target="_blank">http://www.buergerkarte.at/download.de.php</a>
-                            </li>
-                            <li><i>Online BKU</i>: Mit der Online BKU wird keine lokale B&uuml;rgerkartensoftware am PC ben&ouml;tigt. &Uuml;ber JAVA Technologien werden die ben&ouml;tigten Funktionen als Applet im Browser ausgef&uuml;hrt. Einzige Voraussetzung ist eine aktuelle JAVA Version (ab Java 6).
-                            </li>
-                            <li><i>Handysignatur</i>: Mit der Handysignatur k&ouml;nnen Sie sich mittels ihres Mobiltelefons anmelden. Voraussetzung ist eine vorherige Registrierung. Mehr Informationen hierzu finden Sie auf: <a href="https://www.handy-signatur.at/" target="_blank">https://www.handy-signatur.at/</a><br>
-                              <br>
-                        	  <b>Informationen zur B&uuml;rgerkarte finden Sie hier:</b>
-                            </li>
-                        </ul>
-                        <ul>
-                       	  <li>
-                               	<a href="http://www.digitales.oesterreich.gv.at" target="_blank">Digitales &Ouml;sterreich</a>: Informationen rund um E-Government
-                            </li>
-							<li>
-           						<a href="http://www.buergerkarte.at" target="_blank">B&uuml;rgerkarte</a>: Informationen zur B&uuml;rgerkarte                     	
-                            </li>
-                        </ul>
-						<p>
-                        	<br>
-					    	<b>Hier bekommen Sie Ihre B&uuml;rgerkarte:</b>                    
-                        </p>
-						<ul>
-                           	<li>
-                               	<a href="http://www.a-trust.at/" target="_blank">A-Trust</a>: Aktivieren der Bankomatkarte/e-card als B&uuml;rgerkarte oder Registrierung ihres Mobiltelefons als B&uuml;rgerkarte oder Ausstellung einer eigenen B&uuml;rgerkarte
-                            </li>
-                        </ul>
-						<p align="center">
-							<a href="javascript:history.back();" class="link_nav">zur&uuml;ck</a>
-						</p>                 
-					</div>
-                </div>
-            </div>
-		</div>
-	</body>
-</html>
\ No newline at end of file
diff --git a/id/server/auth/src/main/webapp/info_mandates.html b/id/server/auth/src/main/webapp/info_mandates.html
deleted file mode 100644
index c46b91636..000000000
--- a/id/server/auth/src/main/webapp/info_mandates.html
+++ /dev/null
@@ -1,58 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html lang="de">
-	<head>
-		<title>Information</title>
-        <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-        <meta http-equiv="Content-Style-Type" content="text/css">
-        <link rel="stylesheet" type="text/css" href="css/index.css">
-	</head>
-	<body>
-		<div id="wrapper">
-            <p id="skiplinks">
-                <a href="#content">Zum Inhalt springen</a>
-            </p>
-            <div id="banner">
-                <!-- [OPTIONAL] Aendern Sie hier die Titelueberschrift der Seite) -->
-                <div id="bannerleft">
-                    <h1>MOA-Template zur Bürgerkartenauswahl (Musterseite)</h1>
-                    <!-- Meldung im Browser, wenn JavaScript nicht aktiviert -->
-                    <noscript>
-                        <p>
-                            Bitte aktivieren Sie JavaScript.
-                        </p>
-	                </noscript>
-                </div>                
-                <!-- [OPTIONAL] Aendern Sie hier das Logo der Seite (und Alternativtext fuer das Bild) -->
-                <div id="bannerright">
-                    <img src="img/logo.jpg" alt="Logo">
-                </div>
-            </div>
-            <div id="main">
-                <div id="centercontent">
-                    <h2 id="contentheader" class="dunkel">
-                        Information zur Anmeldung mittels elektronischer Vollmacht
-                    </h2>
-                    <div id="content" class="hell">
-                        <p>
-                        <p>Aktivieren Sie das K&auml;stchen <input type="checkbox" checked="true" readonly="true" enabled="false"/> "in Vertretung anmelden",
-			wenn Sie sich als Vertreter f&uuml;r eine andere Person anmelden m&ouml;chten. Das Vollmachtenservice
-			der Stammzahlenregisterbeh&ouml;rde bietet Ihnen Ihre verf&uuml;gbaren Vollmachten zur Auswahl an.</p>
-
-			
-			<p>Das Service zum Eintragen einer Vollmacht zwischen zwei nat&uuml;rlichen Personen k&ouml;nnen Sie
-			unter dem Hyperlink <a href="https://vollmachten.stammzahlenregister.gv.at/">Bilaterale Vollmacht</a>
-			eintragen.</p>
-			
-			<p>Als Organwalter (gem&auml;&szlig; &sect; 5 Abs. 3 E-GovG) und berufsm&auml;&szlig;ige Parteinvertreter,
-			aktivieren Sie bitte ebenfalls das K&auml;stchen <input type="checkbox" checked="true" readonly="true" enabled="false"/> "in Vertretung anmelden".</p>
-
-			
-			<p><span style="text-decoration: underline">Hinweis</span>: Welche Vollmachten Ihnen bei der jeweiligen
-			B&uuml;rgerkartenapplikation zur Verf&uuml;gung stehen, h&auml;ngt vom Anwendungsbetreiber ab.</p>
-                        </p>
-					</div>
-                </div>
-            </div>
-		</div>
-	</body>
-</html>
\ No newline at end of file
diff --git a/id/server/auth/src/main/webapp/info_stork.html b/id/server/auth/src/main/webapp/info_stork.html
deleted file mode 100644
index 2bdf62711..000000000
--- a/id/server/auth/src/main/webapp/info_stork.html
+++ /dev/null
@@ -1,42 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html lang="de">
-	<head>
-		<title>Information (STORK)</title>
-        <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-        <meta http-equiv="Content-Style-Type" content="text/css">
-        <link rel="stylesheet" type="text/css" href="css/index.css">
-	</head>
-	<body>
-		<div id="wrapper">
-            <p id="skiplinks">
-                <a href="#content">Go to contents</a>
-            </p>
-            <div id="banner">
-                <!-- [OPTIONAL] Aendern Sie hier die Titelueberschrift der Seite) -->
-                <div id="bannerleft">
-                    <h1>Information using STORK for secure authentication</h1>
-                    <!-- Meldung im Browser, wenn JavaScript nicht aktiviert -->
-                    <noscript>
-                        <p>
-                            Please activate JavaScript.
-                        </p>
-	                </noscript>
-                </div>                
-                <!-- [OPTIONAL] Aendern Sie hier das Logo der Seite (und Alternativtext fuer das Bild) -->
-                <div id="bannerright">
-                    <img src="img/stork-logo.png" alt="STORK-Logo">
-                </div>
-            </div>
-            <div id="main">
-                    <h2 id="contentheader" class="dunkel">
-                        Information using STORK for secure authentication
-                    </h2>
-                    <div id="content" class="hell">
-                        
-                        <p>The STORK project makes it easier for citizens to access online public services across borders by implementing Europe-wide interoperable cross border platforms for the mutual recognition of national electronic identity (eID) between participating countries.</p>
-                        <p>For more information, please consult the STORK website:</p><a href="https://www.eid-stork2.eu/">https://www.eid-stork2.eu/</a>
-					</div>
-            </div>
-		</div>
-	</body>
-</html>
\ No newline at end of file
diff --git a/id/server/auth/src/main/webapp/moa_errorcodes.html b/id/server/auth/src/main/webapp/moa_errorcodes.html
deleted file mode 100644
index a5702d60d..000000000
--- a/id/server/auth/src/main/webapp/moa_errorcodes.html
+++ /dev/null
@@ -1,333 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
-<html>
-<head>
-  <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1" >
-  <title>MOA-ID 2.0.x</title>
-  <link rel="stylesheet" href="./common/MOA.css" type="text/css">
-</head>
-<body>
-<h2>&Uuml;bersicht der m&ouml;glichen MOA-ID spezifischen Statuscodes
-</h2>
-<h3><a name="statuscodes_1xxxx" id="allgemeines_zugangspunkte7"></a>1.3.1 Statuscodes 1xxxx</h3>
-<p>Alle Statuscodes beginnent mit der Zahl eins beschreiben Fehler welche w&auml;hrend des Identifizerungs- und Authentifizierungsvorgangs aufgetreten sind.</p>
-<h4><a name="statuscodes_10xxx" id="allgemeines_zugangspunkte11"></a>1.3.1.1 Authentifizierung (10xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="1000" id="allgemeines_zugangspunkte"></a>1000</td>
-    <td>Anmeldung an der angeforderten Online-Applikation wird nicht unterst&uuml;tzt.</td>
-  </tr>
-  <tr>
-    <td><a name="1001" id="allgemeines_zugangspunkte2"></a>1001</td>
-    <td>Es ist bereits eine Anmeldung im Gange.</td>
-  </tr>
-  <tr>
-    <td><a name="1002" id="allgemeines_zugangspunkte3"></a>1002</td>
-    <td>Fehlerhafter Parameter</td>
-  </tr>
-  <tr>
-    <td><a name="1003" id="allgemeines_zugangspunkte4"></a>1003</td>
-    <td>Anfrage nur &uuml;ber https m&ouml;glich</td>
-  </tr>
-  <tr>
-    <td><a name="1004" id="allgemeines_zugangspunkte5"></a>1004</td>
-    <td>Zertifikat konnte nicht ausgelesen werden</td>
-  </tr>
-  <tr>
-    <td><a name="1005" id="allgemeines_zugangspunkte6"></a>1005</td>
-    <td>Die Authentifizierung wurde durch den Benutzer abgebrochen</td>
-  </tr>
-  <tr>
-    <td><a name="1006" id="allgemeines_zugangspunkte25"></a>1006</td>
-    <td>Vollmachtsmodus f&uuml;r nicht-&ouml;ffentlichen Bereich wird nicht unterst&uuml;tzt.</td>
-  </tr>
-  <tr>
-    <td><a name="1007" id="allgemeines_zugangspunkte26"></a>1007</td>
-    <td>Vollmachtsmodus f&uuml;r ausl&auml;ndische Personen wird nicht unterst&uuml;tzt.</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_11xxx" id="allgemeines_zugangspunkte12"></a>1.3.1.2 Validierung (11xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="1100" id="allgemeines_zugangspunkte27"></a>1100</td>
-    <td>Ung&uuml;ltige MOA SessionID</td>
-  </tr>
-  <tr>
-    <td><a name="1101" id="allgemeines_zugangspunkte28"></a>1101</td>
-    <td>Fehler beim Parsen eines Parameters</td>
-  </tr>
-  <tr>
-    <td><a name="1102" id="allgemeines_zugangspunkte29"></a>1102</td>
-    <td>Fehler beim Validieren der Personenbindung</td>
-  </tr>
-  <tr>
-    <td><a name="1103" id="allgemeines_zugangspunkte30"></a>1103</td>
-    <td>Signatur ung&uuml;ltig</td>
-  </tr>
-  <tr>
-    <td><a name="1104" id="allgemeines_zugangspunkte31"></a>1104</td>
-    <td>Zertifikat der Personenbindung ung&uuml;ltig</td>
-  </tr>
-  <tr>
-    <td><a name="1105" id="allgemeines_zugangspunkte32"></a>1105</td>
-    <td>Zertifikat der Signature ung&uuml;ltig</td>
-  </tr>
-  <tr>
-    <td><a name="1106" id="allgemeines_zugangspunkte33"></a>1106</td>
-    <td>Fehler beim Validieren des AuthBlocks</td>
-  </tr>
-  <tr>
-    <td><a name="1107" id="allgemeines_zugangspunkte34"></a>1107</td>
-    <td>Fehler beim Validieren eines  SSL-Server-Endzertifikates</td>
-  </tr>
-  <tr>
-    <td><a name="1108" id="allgemeines_zugangspunkte35"></a>1108</td>
-    <td>Fehler beim Validieren der Online Vollmacht.</td>
-  </tr>
-  <tr>
-    <td><a name="1109" id="allgemeines_zugangspunkte36"></a>1109</td>
-    <td>Fehler beim validieren der SZR-Gateway Response</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_12xxx" id="allgemeines_zugangspunkte13"></a>1.3.1.3 STORK (12xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="1200" id="allgemeines_zugangspunkte37"></a>1200</td>
-    <td>Fehler beim erstellen des STORK Authentifizierungsrequests</td>
-  </tr>
-  <tr>
-    <td><a name="1201" id="allgemeines_zugangspunkte38"></a>1201</td>
-    <td>Fehler beim validieren der STORK Authentifizierungsresponse</td>
-  </tr>
-  <tr>
-    <td><a name="1202" id="allgemeines_zugangspunkte39"></a>1202</td>
-    <td>STORK Authentifizierungsresponse antwortet mit einem Fehler</td>
-  </tr>
-  <tr>
-    <td><a name="1203" id="allgemeines_zugangspunkte40"></a>1203</td>
-    <td>Fehler beim Sammeln von STORK Attributen</td>
-  </tr>
-    <tr>
-        <td><a name="1204" id="allgemeines_zugangspunkte70"></a>1203</td>
-        <td>Fehler bei der Datenkonversion - eingegebenes Datum fehlerhaft</td>
-    </tr>
-</table>
-<h3><a name="statuscodes_4xxxx" id="allgemeines_zugangspunkte8"></a>1.3.2 Statuscodes 4xxxx</h3>
-<p>Alles Statuscodes beginnent mit der Zahl vier beschreiben Fehler die w&auml;hrend der Kommunikation mit externen Services aufgetreten sind.</p>
-<h4><a name="statuscodes_40xxx" id="allgemeines_zugangspunkte19"></a>1.3.2.1 BKU (40xxxx)</h4>
-<p>Tritt w&auml;hrend des Anmeldevorgangs in der B&uuml;rgerkartenumgebung ein Fehler auf so wird der entsprechende Fehlercode an den Service Provider weitergereicht. Der der durch das Modul MOA-ID-Auth weitergereichte Statuscode f&uuml;r B&uuml;rgerkartenumgebungsfehler wei&szlig;t das folgende zweiteilige Format auf. Der erste Teil, bestehend aus zwei Dezimalstellen, kennzeichnet den Fehler als Fehler als B&uuml;rgerkartenumgebungsfehler. Der zweite Teil, bestehend aus vier Dezimalstellen bezeichnet den eindeutigen Identifikator des Fehers aus der B&uuml;rgerkartenumgebung (<a href="http://www.buergerkarte.at/konzept/securitylayer/spezifikation/20140114/">siehe SecurityLayer Spezifikation</a>). </p>
-<p align="right"><em><a name="40" id="allgemeines_zugangspunkte41"></a>{40}{xxxxx}</em></p>
-<blockquote>
-  <p>{40}  ... MOA-ID Statuscode f&uuml;r Fehler aus der B&uuml;rgerkartenumgebung</p>
-  <p>{xxxx}  .... Fehlercode der B&uuml;rgerkartenumgebung.</p>
-</blockquote>
-<h4><a name="statuscodes_41xxx" id="allgemeines_zugangspunkte20"></a>1.3.2.2 MIS (41xxxx)</h4>
-<p>Tritt w&auml;hrend der Kommunikation mit dem Online-Vollmachten Service oder der Vollmachtsauswahl ein Fehler auf so wird der entsprechende Fehlercode an den Service Provider weitergereicht. Der der durch das Modul MOA-ID-Auth weitergereichte Statuscode f&uuml;r Fehler aus dem Online-Vollmachten Service wei&szlig;t das folgende zweiteilige Format auf. Der erste Teil, bestehend aus drei Dezimalstellen, kennzeichnet den Fehler als Fehler als Online-Vollmachten Service Fehler. Der zweite Teil, bestehend aus drei Dezimalstellen bezeichnet den eindeutigen Identifikator des Fehlers aus dem Online-Vollmachten Service (<a href="http://reference.e-government.gv.at/AG-II-Architektur-mis-1-1-0.2890.0.html">siehe Online-Vollmachten Spezifikation</a>). </p>
-<p><em><a name="41" id="allgemeines_zugangspunkte42"></a>{411}{xxxx}</em></p>
-<blockquote>
-  <p>{411}  ... MOA-ID Statuscode f&uuml;r Fehler aus  dem Online-Vollmachten Service.</p>
-  <p>{xxx}  .... Fehlercode des Online-Vollmachten Service.</p>
-</blockquote>
-<p>Zus&auml;tzlich zu den gemappeden Fehlern aus dem Online-Vollmachen Service werden zus&auml;tzliche weitere Fehlercodes definiert.</p>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td>41000</td>
-    <td>Das Online-Vollmachten Service ist nicht erreichbar</td>
-  </tr>
-  <tr>
-    <td>41001</td>
-    <td>Allgemeiner Fehler bei der Kommunikation mit dem Online-Vollmachten Service</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_42xxx" id="allgemeines_zugangspunkte21"></a>1.3.2.3 SZR-Gateway (42xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="4200" id="allgemeines_zugangspunkte43"></a>4200</td>
-    <td>Das SZR-Gateway Service ist nicht erreichbar</td>
-  </tr>
-  <tr>
-    <td><a name="4201" id="allgemeines_zugangspunkte44"></a>4201</td>
-    <td>Die Antragung in das SZR ist fehlgeschlagen</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_43xxx" id="allgemeines_zugangspunkte22"></a>1.3.2.4 MOA SP/SS(43xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="4300" id="allgemeines_zugangspunkte45"></a>4300</td>
-    <td>Fehler beim Aufruf von MOA SP/SS</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_44xxx" id="allgemeines_zugangspunkte23"></a>1.3.2.5 Interfederation (44xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="4400" id="allgemeines_zugangspunkte46"></a>4400</td>
-    <td>Fehler beim generieren der Anmeldedaten</td>
-  </tr>
-</table>
-<h3><a name="statuscodes_6xxxx" id="allgemeines_zugangspunkte9"></a>1.3.3 Statuscodes 6xxxx</h3>
-<p>Alles Statuscodes beginnent mit der Zahl sechs beschreiben protokolspezifische Fehler die nicht durch das jeweilige Authentifizierungsprotokoll abgebildet werden.</p>
-<h4><a name="statuscodes_61xxx" id="allgemeines_zugangspunkte24"></a>1.3.3.1 Allgemein (61xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="6000" id="allgemeines_zugangspunkte47"></a>6000</td>
-    <td>Das Authentifizierungsprotokoll wurde nicht erkannt oder wird nicht unterst&uuml;zt</td>
-  </tr>
-  <tr>
-    <td><a name="6001" id="allgemeines_zugangspunkte48"></a>6001</td>
-    <td>Der STORK Request wurde nicht erkannt oder wird nicht unterst&uuml;zt</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_61xxx" id="allgemeines_zugangspunkte16"></a>1.3.3.2 PVP 2.1 (61xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="6100" id="allgemeines_zugangspunkte49"></a>6100</td>
-    <td>Fehler beim erstellen der PVP 2.1 Response</td>
-  </tr>
-  <tr>
-    <td><a name="6101" id="allgemeines_zugangspunkte50"></a>6101</td>
-    <td>Fehler beim verschl&uuml;sseln der PVP 2.1 Assertion</td>
-  </tr>
-  <tr>
-    <td><a name="6102" id="allgemeines_zugangspunkte51"></a>6102</td>
-    <td>Authentifizierung entspricht nicht dem geforderten QAA Level</td>
-  </tr>
-  <tr>
-    <td><a name="6103" id="allgemeines_zugangspunkte52"></a>6103</td>
-    <td>F&uuml;r die im Requst angegebene EnityID konnten keine g&uuml;ltigen Metadaten gefunden werden</td>
-  </tr>
-  <tr>
-    <td><a name="6104" id="allgemeines_zugangspunkte53"></a>6104</td>
-    <td>Die Signatur des Requests konnte nicht g&uuml;ltig validiert werden. Entweder ist die Signatur ung&uuml;ltig oder das Signaturzertifikat stimmt nicht mit dem in den Metadaten hinterlegten Zertifikat &uuml;berein.</td>
-  </tr>
-  <tr>
-    <td><a name="6105" id="allgemeines_zugangspunkte54"></a>6105</td>
-    <td>Der Request konnte nicht g&uuml;ltig validiert werden.</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_62xxx" id="allgemeines_zugangspunkte17"></a>1.3.3.3 OpenID Connect (62xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="6200" id="allgemeines_zugangspunkte55"></a>6200</td>
-    <td>Fehlerhafte redirect url</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_63xxx" id="allgemeines_zugangspunkte18"></a>1.3.3.4 SAML 1(63xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="6300" id="allgemeines_zugangspunkte56"></a>6300</td>
-    <td>Fehlerhaftes SAML Artifact Format</td>
-  </tr>
-</table>
-<h3><a name="statuscodes_9xxxx" id="allgemeines_zugangspunkte10"></a>1.3.4 Statuscodes 9xxxx</h3>
-<p>Alles Statuscodes beginnent mit der Zahl neun beschreiben interne Serverfehler.</p>
-<h4><a name="statuscodes_90xxx" id="allgemeines_zugangspunkte14"></a>1.3.4.1 Konfigurationsfehler (90xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="9000" id="allgemeines_zugangspunkte57"></a>9000</td>
-    <td>Fehlerhaftes BKU-Selection Template</td>
-  </tr>
-  <tr>
-    <td><a name="9001" id="allgemeines_zugangspunkte58"></a>9001</td>
-    <td>Fehlerhaftes Send-Assertion Template</td>
-  </tr>
-  <tr>
-    <td><a name="9002" id="allgemeines_zugangspunkte59"></a>9002</td>
-    <td>Fehlerhaftes SecurityLayer Template.</td>
-  </tr>
-  <tr>
-    <td><a name="9003" id="allgemeines_zugangspunkte60"></a>9003</td>
-    <td>Fehlerhafte STORK VIDP Konfiguration</td>
-  </tr>
-  <tr>
-    <td><a name="9004" id="allgemeines_zugangspunkte61"></a>9004</td>
-    <td>Fehlerhafte STORK Konfiguration</td>
-  </tr>
-  <tr>
-    <td><a name="9005" id="allgemeines_zugangspunkte62"></a>9005</td>
-    <td>Fehlerhafte OpenID Connect Konfiguration</td>
-  </tr>
-  <tr>
-    <td><a name="9006" id="allgemeines_zugangspunkte63"></a>9006</td>
-    <td>Es sind keine Vollmachtsprofile konfiguriert.</td>
-  </tr>
-  <tr>
-    <td><a name="9007" id="allgemeines_zugangspunkte64"></a>9007</td>
-    <td>Der SZR-Gateway Client konnte nicht initialisiert werden.</td>
-  </tr>
-</table>
-<h4><a name="statuscodes_91xxx" id="allgemeines_zugangspunkte15"></a>1.3.4.2 Interne Fehler (91xxx)</h4>
-<table width="1237" border="1">
-  <tr>
-    <th width="214" scope="col">Statuscode</th>
-    <th width="1007" scope="col">Beschreibung</th>
-  </tr>
-  <tr>
-    <td><a name="9100" id="allgemeines_zugangspunkte65"></a>9100</td>
-    <td>Fehler beim einlesen einer externen Resource.</td>
-  </tr>
-  <tr>
-    <td><a name="9101" id="allgemeines_zugangspunkte66"></a>9101</td>
-    <td>Datenbankzugriffsfehler</td>
-  </tr>
-  <tr>
-    <td><a name="9102" id="allgemeines_zugangspunkte67"></a>9102</td>
-    <td>Fehler beim Erzeugen einer internen Datenstruktur</td>
-  </tr>
-  <tr>
-    <td><a name="9103" id="allgemeines_zugangspunkte68"></a>9103</td>
-    <td>Fehler bei der Verarbeitung eines Templates</td>
-  </tr>
-  <tr>
-    <td><a name="9199" id="allgemeines_zugangspunkte69"></a>9199</td>
-    <td>Allgemeiner interner Fehler</td>
-  </tr>
-</table>
-</body>
-</html>
\ No newline at end of file
diff --git a/id/server/auth/src/main/webapp/template_handyBKU.html b/id/server/auth/src/main/webapp/template_handyBKU.html
deleted file mode 100644
index 6c3dc563c..000000000
--- a/id/server/auth/src/main/webapp/template_handyBKU.html
+++ /dev/null
@@ -1,38 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html lang="de">
-	<head>
-		<title></title>
-		<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-		<script language="javascript" type="text/javascript">
-			function onAnmeldeSubmit() {
-				document.CustomizedForm.submit();
-				document.CustomizedForm.Senden.disabled=true;
-			}
-		</script>
-	</head>
-	<body onLoad="onAnmeldeSubmit()">		 
-      <form name="CustomizedForm" action="<BKU>" method="post" enctype="multipart/form-data">
-			Falls Sie nicht automatisch weitergeleitet werden klicken Sie bitte hier:
-     		<input class="button" type="submit" value="Starte Anmeldung" name="Senden">
-			<input type="hidden" name="XMLRequest" value="<XMLRequest>">
-			<input type="hidden" name="DataURL" value="<DataURL>">
-			<input type="hidden" name="PushInfobox" value="<PushInfobox>">
-			
-			<!-- Angabe der Parameter für die Handy-BKU -->
-			<input type="hidden" name="appletWidth" value="<APPLETWIDTH>">
-			<input type="hidden" name="appletHeight" value="<APPLETHEIGHT>">
-			
-			<!-- [OPTIONAL] Aendern Sie hier die Hintergrundfarbe der Handy-BKU -->
-			<input type="hidden" name="backgroundColor" value="<COLOR>"> 
-            
-			<input type="hidden" name="redirecttarget" value="<REDIRECTTARGET>">
-		</form>
-
-		<form name="CustomizedInfoForm" action="<BKU>" method="post">
-			<input type="hidden" name="XMLRequest" value="<CertInfoXMLRequest>">
-			<input type="hidden" name="DataURL" value="<CertInfoDataURL>">
-		</form>
-		<form name="DummyForm" action="<BKU>" method="post">
-		</form>
-	</body>
-</html>
\ No newline at end of file
diff --git a/id/server/auth/src/main/webapp/template_localBKU.html b/id/server/auth/src/main/webapp/template_localBKU.html
deleted file mode 100644
index 0ec8e52c2..000000000
--- a/id/server/auth/src/main/webapp/template_localBKU.html
+++ /dev/null
@@ -1,30 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html lang="de">
-	<head>
-		<title></title>
-		<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-		<script language="javascript" type="text/javascript">
-			function onAnmeldeSubmit() {
-				document.CustomizedForm.submit();
-				document.CustomizedForm.Senden.disabled=true;
-			}
-		</script>
-	</head>
-	<body onLoad="onAnmeldeSubmit()">	   
-		<form target=<REDIRECTTARGET> name="CustomizedForm" action="<BKU>" method="post" enctype="multipart/form-data">
-			Falls Sie nicht automatisch weitergeleitet werden klicken Sie bitte hier: 
-     		<input class="button" type="submit" value="Starte Anmeldung" name="Senden">
-			<input type="hidden" name="XMLRequest" value="<XMLRequest>">
-			<input type="hidden" name="DataURL" value="<DataURL>">
-			<input type="hidden" name="PushInfobox" value="<PushInfobox>">
-		</form>
-		
-		<form name="CustomizedInfoForm" action="<BKU>" method="post">
-			<input type="hidden" name="XMLRequest" value="<CertInfoXMLRequest>">
-			<input type="hidden" name="DataURL" value="<CertInfoDataURL>">
-		</form>
-		
-		<form name="DummyForm" action="<BKU>" method="post">
-		</form>
-	</body>
-</html>
diff --git a/id/server/auth/src/main/webapp/template_onlineBKU.html b/id/server/auth/src/main/webapp/template_onlineBKU.html
deleted file mode 100644
index 39d7bb8e1..000000000
--- a/id/server/auth/src/main/webapp/template_onlineBKU.html
+++ /dev/null
@@ -1,37 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html lang="de">
-	<head>
-		<title></title>
-		<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-		<script language="javascript" type="text/javascript">
-			function onAnmeldeSubmit() {
-				document.CustomizedForm.submit();
-				document.CustomizedForm.Senden.disabled=true;
-			}
-		</script>
-	</head>
-	<body onLoad="onAnmeldeSubmit()">	 
-		<form name="CustomizedForm" action="<BKU>" method="post" enctype="multipart/form-data">
-			Falls Sie nicht automatisch weitergeleitet werden klicken Sie bitte hier: 
-		    <input class="button" type="hidden" value="Starte Anmeldung" name="Senden">
-			<input type="hidden" name="XMLRequest" value="<XMLRequest>">
-			<input type="hidden" name="DataURL" value="<DataURL>">
-			<input type="hidden" name="PushInfobox" value="<PushInfobox>">
-		
-			<!-- Angabe der Parameter fuer die Online-BKU -->
-			<input type="hidden" name="appletWidth" value="<APPLETWIDTH>">
-			<input type="hidden" name="appletHeight" value="<APPLETHEIGHT>">
-			
-			<!-- [OPTIONAL] Aendern Sie hier die Hintergrundfarbe der Online-BKU -->
-	      <input type="hidden" name="appletBackgroundColor" value="<COLOR>">
-	      <input type="hidden" name="redirectTarget" value="<REDIRECTTARGET>">
-		</form>
-		
-		<form name="CustomizedInfoForm" action="<BKU>" method="post">
-			<input type="hidden" name="XMLRequest" value="<CertInfoXMLRequest>">
-			<input type="hidden" name="DataURL" value="<CertInfoDataURL>">
-		</form>
-		<form name="DummyForm" action="<BKU>" method="post">
-		</form>
-	</body>
-</html>
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/SAML2InterfederationSignalServlet.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/SAML2InterfederationSignalServlet.java
deleted file mode 100644
index 1d18ccb2c..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/SAML2InterfederationSignalServlet.java
+++ /dev/null
@@ -1,38 +0,0 @@
-/*
- * Copyright 2014 Federal Chancellery Austria
- * MOA-ID has been developed in a cooperation between BRZ, the Federal
- * Chancellery Austria - ICT staff unit, and Graz University of Technology.
- *
- * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
- * the European Commission - subsequent versions of the EUPL (the "Licence");
- * You may not use this work except in compliance with the Licence.
- * You may obtain a copy of the Licence at:
- * http://www.osor.eu/eupl/
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the Licence is distributed on an "AS IS" basis,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the Licence for the specific language governing permissions and
- * limitations under the Licence.
- *
- * This product combines work with different licenses. See the "NOTICE" text
- * file for details on the various modules and licenses.
- * The "NOTICE" text file is part of the distribution. Any derivative works
- * that you distribute must include a readable copy of the "NOTICE" text file.
- */
-package at.gv.egovernment.moa.id.auth.servlet;
-
-/**
- * @author tlenz
- *
- */
-
-public class SAML2InterfederationSignalServlet extends
-		AbstractProcessEngineSignalController {
-
-	
-	//TODO: getMOASessionID from SAML2 relayState
-	//TODO: add WebService EndPoints for pvp2/sp/post and redirect
-	//TODO: implement SAML2 preprocessing
-	
-}
diff --git a/id/server/moa-id-frontend-resources/.gitignore b/id/server/moa-id-frontend-resources/.gitignore
new file mode 100644
index 000000000..b83d22266
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/.gitignore
@@ -0,0 +1 @@
+/target/
diff --git a/id/server/moa-id-frontend-resources/pom.xml b/id/server/moa-id-frontend-resources/pom.xml
new file mode 100644
index 000000000..4107e98e3
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/pom.xml
@@ -0,0 +1,45 @@
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+  <modelVersion>4.0.0</modelVersion>
+  <parent>
+    <groupId>MOA.id</groupId>
+    <artifactId>moa-id</artifactId>
+    <version>3.x</version>
+  </parent>
+  
+  <groupId>MOA.id.server</groupId>
+  <artifactId>moa-id-frontend-resources</artifactId>
+  <version>${moa-id-version}</version>  
+  <packaging>jar</packaging>
+  
+  <name>MOA-ID-Auth FrontEnd-Resources</name>
+  <description>Static FrontEnd resources for MOA-ID-Auth </description>
+  <organization>
+  	<name>EGIZ</name>
+  	<url>https://www.egiz.gv.at</url>
+  </organization>
+  <developers>
+  	<developer>
+  		<name>Thomas Lenz</name>
+  		<organization>EGIZ</organization>
+  		<email>thomas.lenz@egiz.gv.at</email>
+  	</developer>
+  </developers>
+  
+ 	<properties>
+		<repositoryPath>${basedir}/../../../../repository</repositoryPath>
+	</properties>
+  
+  <dependencies>
+  	<dependency>
+			<groupId>org.springframework</groupId>
+			<artifactId>spring-webmvc</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>commons-logging</groupId>
+					<artifactId>commons-logging</artifactId>
+				</exclusion>
+			</exclusions>
+  	</dependency>
+  </dependencies>
+  
+</project>
\ No newline at end of file
diff --git a/id/server/moa-id-frontend-resources/src/main/java/META-INF/MANIFEST.MF b/id/server/moa-id-frontend-resources/src/main/java/META-INF/MANIFEST.MF
new file mode 100644
index 000000000..254272e1c
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/java/META-INF/MANIFEST.MF
@@ -0,0 +1,3 @@
+Manifest-Version: 1.0
+Class-Path: 
+
diff --git a/id/server/moa-id-frontend-resources/src/main/java/at/gv/egovernment/moa/id/auth/frontend/StaticResourceConfiguration.java b/id/server/moa-id-frontend-resources/src/main/java/at/gv/egovernment/moa/id/auth/frontend/StaticResourceConfiguration.java
new file mode 100644
index 000000000..bc71a9511
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/java/at/gv/egovernment/moa/id/auth/frontend/StaticResourceConfiguration.java
@@ -0,0 +1,47 @@
+/*
+ * Copyright 2014 Federal Chancellery Austria
+ * MOA-ID has been developed in a cooperation between BRZ, the Federal
+ * Chancellery Austria - ICT staff unit, and Graz University of Technology.
+ *
+ * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
+ * the European Commission - subsequent versions of the EUPL (the "Licence");
+ * You may not use this work except in compliance with the Licence.
+ * You may obtain a copy of the Licence at:
+ * http://www.osor.eu/eupl/
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the Licence is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the Licence for the specific language governing permissions and
+ * limitations under the Licence.
+ *
+ * This product combines work with different licenses. See the "NOTICE" text
+ * file for details on the various modules and licenses.
+ * The "NOTICE" text file is part of the distribution. Any derivative works
+ * that you distribute must include a readable copy of the "NOTICE" text file.
+ */
+package at.gv.egovernment.moa.id.auth.frontend;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.EnableWebMvc;
+import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
+
+/**
+ * @author tlenz
+ *
+ */
+@Configuration
+@EnableWebMvc
+public class StaticResourceConfiguration extends WebMvcConfigurerAdapter {
+
+	private static final String[] CLASSPATH_RESOURCE_LOCATIONS = {
+			"classpath:/mainGUI/"};
+
+	@Override
+	public void addResourceHandlers(ResourceHandlerRegistry registry) {
+	    registry.addResourceHandler("/**").addResourceLocations(CLASSPATH_RESOURCE_LOCATIONS);
+
+	    
+	}
+}
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/LogoBKA.png b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/LogoBKA.png
new file mode 100644
index 000000000..6a92647fd
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/LogoBKA.png differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/LogoEGIZ.png b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/LogoEGIZ.png
new file mode 100644
index 000000000..39f05d131
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/LogoEGIZ.png differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/logo_digAT.png b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/logo_digAT.png
new file mode 100644
index 000000000..4f36681e2
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/logo_digAT.png differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/main.css b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/main.css
new file mode 100644
index 000000000..6bd964346
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/common/main.css
@@ -0,0 +1,253 @@
+html {
+	font-family: "Roboto", sans-serif;
+	color: #000;
+    font-weight:300;
+}
+
+.container {
+	margin: auto;
+	max-width: 1000px;
+	padding-left: 20px;
+	padding-right: 20px;
+}
+
+body {
+	margin: 0;
+	padding: 0;
+	letter-spacing: 0.05em;
+}
+
+h1
+{
+font-family: "Roboto", sans-serif;
+}
+
+#headline {
+	/*background: linear-gradient(center top , #FAFAFA, #F5F5F5) repeat scroll 0% 0% transparent;*/
+	background: linear-gradient(#FAFAFA, #F5F5F5);
+	border-bottom: 1px solid #EEE;
+}
+
+#headline br {
+	clear: both;
+}
+
+#headline h1 {
+		color: #404040;
+		padding-right: 1em;
+		padding-top: 0.3em;
+		margin-bottom: 0;
+		float: right;
+          font-size: 220%;
+  font-weight: 400;
+	}
+#headline img {
+        width: 300px;
+        padding-left: 0;
+        padding-top: 35px;
+        padding-bottom:20px;
+    }
+
+#description {
+	text-align: justify;
+}
+
+#maincontent {
+	height: 13em;
+}
+
+#demologin p {
+	padding-left: 10px;
+	padding-right: 10px;
+	text-align: justify;
+	font-size: 100%;
+	color: #000;
+    padding-top:20px;
+    
+}
+
+#demologin a{
+    
+}
+
+.button {
+	border-radius: 5px;
+	/*background-color: rgb(41,127,184); */
+	background-color: #E10319;
+	text-decoration: none;
+	text-transform: uppercase;
+	padding: 10px 80px 10px 80px;
+	letter-spacing: 1.5px;
+	text-shadow: 0px 1px 0px rgba(0, 0, 0, 0.3);
+	color: WHITE;
+	box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3);
+	margin-left: 10px;
+}
+
+.button:hover {
+	box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.8);
+	text-shadow: 0px 1px 0px rgba(0, 0, 0, 0.9);
+}
+
+#singlelogout {
+	clear: both;
+	width: 100%;
+	box-sizing: border-box;
+
+}
+a{
+	text-decoration: none;
+    font-size:100%;
+    color: #666;
+}
+a:hover{
+	text-decoration: none;
+    font-size:100%;
+    color: #E10319;
+}
+
+/*****************************/
+@media ( max-width :599px) {
+	  #headline {
+        /*background: linear-gradient(center top , #FAFAFA, #F5F5F5) repeat scroll 0% 0% transparent;*/
+        background: linear-gradient(#FAFAFA, #F5F5F5);
+        border-bottom: 1px solid #EEE;
+    }   
+
+    #headline img {
+        width: 150px;
+        padding-left: 0;
+        padding-top: 0.5em;
+        padding-bottom:0.5em;
+    }
+    #headline br {
+        clear: both;
+    }
+    #headline h1 {font-family: "Roboto", sans-serif;
+        color: #404040;
+        padding: 0;
+        margin-bottom: 0;
+        margin-top: 0;
+        text-align: center;
+    }
+	nav {
+		display: block;
+		width: 100%;
+        text-align: center;
+		box-sizing: border-box;
+		color: WHITE;
+		margin: 0px 0px 0px 0px;
+		overflow: hidden;
+
+	}
+	nav ul {
+		margin: 0;
+		padding: 0;
+	}
+	nav ul li {
+		list-style-type: none;
+		padding-top: 2px;
+        padding-bottom: 2px;
+	}
+	nav>ul>li>a {
+		color: #666;
+		display: block;
+		text-decoration: none;
+	}
+	nav>ul>li:hover {
+		color: #404040;
+	}
+	nav>ul>li:hover>a {
+		color: #404040;
+	}
+	nav>ul>li:active>a {
+		color: #404040;
+	}
+	#demologin {
+		width: 100%;
+		box-sizing: border-box;
+		border: 1px solid;
+		border-radius: 1px;
+		border-color: #818286;
+		background: #F5F5F5;
+		height: 182px;
+		width: 242px;
+		margin-top: 18px;
+        padding-left:0;
+	}
+}
+/*****************************/
+@media ( min-width :600px) {
+    #headline {
+	/*background: linear-gradient(center top , #FAFAFA, #F5F5F5) repeat scroll 0% 0% transparent;*/
+	background: linear-gradient(#FAFAFA, #F5F5F5);
+	border-bottom: 1px solid #EEE;
+
+    }
+	#headline br {
+		clear: both;
+	}
+
+	#headline h1 {
+        color: #404040;
+		padding-right: 1em;
+		padding-top: 0.15em;
+		margin-bottom: 0;
+		float: right;
+	}
+    #headline img {
+        width: 300px;
+        padding-left: 0;
+        padding-top: 35px;
+        padding-bottom:20px;
+    }
+	nav {
+		display: block;
+		float: left;
+		width: 30%;
+		box-sizing: border-box;
+		background-color: #fff;
+		color: #888;
+		margin: 8px 0px 8px 0px;
+		overflow: hidden;
+	}
+	nav ul {
+		margin: 0;
+		padding: 0;
+	}
+	nav ul li {
+		list-style-type: none;
+		padding-top: 15px;
+	}
+	nav>ul>li>a {
+		color: #666;
+		display: block;
+		text-decoration: none;
+	}
+	nav>ul>li:hover {
+		color: #E10319;
+	}
+	nav>ul>li:hover>a {
+		color: #E10319;
+	}
+	nav>ul>li:active>a {
+		color: #E10319;
+	}
+	#demologin {
+		float: right;
+		width: 50%;
+		box-sizing: border-box;
+		border: 1px solid;
+		border-radius: 1px;
+		border-color: #818286;
+		background: #F5F5F5;
+		height: 282px;
+		width: 342px;
+		margin-right: 150px;
+		margin-top: 18px;
+        padding-left:0;
+	}
+    #demologin a:hover{
+        color:white;
+    }
+}
\ No newline at end of file
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/bk_aktivieren.jpg b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/bk_aktivieren.jpg
new file mode 100644
index 000000000..a6436dc72
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/bk_aktivieren.jpg differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/handy.gif b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/handy.gif
new file mode 100644
index 000000000..5aeb542db
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/handy.gif differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/karte.gif b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/karte.gif
new file mode 100644
index 000000000..ee9ab7cad
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/karte.gif differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/logo.jpg b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/logo.jpg
new file mode 100644
index 000000000..bafbccc84
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/logo.jpg differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/mobile-bku.png b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/mobile-bku.png
new file mode 100644
index 000000000..697514273
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/mobile-bku.png differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/online-bku-deactivated.png b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/online-bku-deactivated.png
new file mode 100644
index 000000000..c2145f12a
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/online-bku-deactivated.png differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/online-bku.png b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/online-bku.png
new file mode 100644
index 000000000..d7d524999
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/online-bku.png differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/stork-logo.png b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/stork-logo.png
new file mode 100644
index 000000000..70355a084
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/stork-logo.png differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/valid-html5-blue.png b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/valid-html5-blue.png
new file mode 100644
index 000000000..91ebe3e87
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/valid-html5-blue.png differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/w3cvalidhtml5.jpg b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/w3cvalidhtml5.jpg
new file mode 100644
index 000000000..2cd65412e
Binary files /dev/null and b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/img/w3cvalidhtml5.jpg differ
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/index.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/index.html
new file mode 100644
index 000000000..d2e7d1e1b
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/index.html
@@ -0,0 +1,92 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<html>
+    <head>
+        <meta http-equiv="content-type" content="text/html; charset=utf8" >
+        <title>MOA-ID 3.1.x</title>
+        <link rel="stylesheet" href="./common/main.css" type="text/css">
+        <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
+        <link href='https://fonts.googleapis.com/css?family=Roboto:300,400' rel='stylesheet' type='text/css'>
+        <script language="JavaScript" type="text/javascript">
+        
+            function PVP2LoginIframe(url) {
+                var el = document.getElementById("demologin");
+                var iframe = document.createElement("iframe");
+                iframe.setAttribute("src", url);
+                iframe.setAttribute("width", "240");
+                iframe.setAttribute("height", "180");
+                iframe.setAttribute("frameborder", "0");
+                iframe.setAttribute("scrolling", "no");
+                iframe.setAttribute("title", "Login");
+                //iframe.setAttribute("scrolling", "yes");
+            
+                iframe.setAttribute("name", "iframelogin");
+                iframe.setAttribute("id", "iframelogin");
+                
+                
+                iframe.setAttribute("onload","iframeLoaded()");
+                
+                var divdemologin = document.getElementById("demologin");
+                divdemologin.innerHTML="";
+
+                el.appendChild(iframe, el); 
+            }
+            
+            function iframeLoaded(){
+                //console.log(document.title); 
+                var ifr=document.getElementById("iframelogin");
+
+                //only works on same origin
+                
+                /*
+                var iframedoc=(ifr.contentWindow||ifr.contentDocument);
+                
+                //var iframedoc=ifr.contentDocument||iframe.contentWindow.document;
+                console.log(iframedoc.title);
+                if(iframedoc.title=="Demo Applikation"){
+                    ifr.setAttribute("width",480);
+                    ifr.setAttribute("height",240);
+                    
+                    var demologin=document.getElementById("demologin");
+                    demologin.style.marginRight="250px";
+                }
+                */
+            }
+
+        </script>
+    </head>
+    <body>
+  <div id="headline">
+      <div class="container">
+          <a href="http://www.digitales.oesterreich.gv.at/"><img src="./common/logo_digAT.png"/></a>
+          <a href="../index.html"><h1>MOA-ID-AUTH </h1></a>
+          <br/>
+      </div>
+  </div>
+        <div id="description" class="container">
+            <p>Bei MOA-ID-AUTH handelt es sich um ein Modul für die Identifizierung und Authentifizierung bei Onlineapplikationen unter Verwendung der Bürgerkarte.
+            Hier kann sowohl die Smartcard-Variante (e-Card) als auch die Handysignatur verwendet werden.
+            Die Konfiguration des Modules MOA-ID-Auth erfolgt mit Hilfe des Zusatzmodules MOA-ID-Configuration welches eine web-basierte Konfigurationsschnittstelle zur Verfügung stellt.</p>
+        </div>
+        <div id="maincontent" class="container">
+            <nav>
+                <ul>
+                    <!--li><a href="_index.html">Allgemein</a></li-->
+                    <!--li><a href="http://joinup.ec.europa.eu/site/moa-idspss/">Dokumentation</a></li-->
+                    <li><a href="http://joinup.ec.europa.eu/site/moa-idspss/moa-id-3.x/doc/handbook">Dokumentation</a></li>
+                    <!--Link zu den Demo-Clients-->
+                    <li><a href=#>Demo Clients</a></li>
+                    <!--Link zum Konfigtool-->
+                    <li><a href="https://localhost:8443/moa-id-configuration">Konfiguration GUI</a></li>
+                    <li><a href="./TransferSSOSession">Transfer Single Sign-On Session to Smartphone App</a></li>
+                	
+                </ul>
+            </nav>
+        <div id="demologin" class="container">
+            <br/>
+            <a href="#" id="loginButton" class="button" onClick="PVP2LoginIframe('https://menja.iaik.tugraz.at:8443/moa-id-oa/servlet/pvp2login')">Login</a>
+            <p id="loginText">Über den Login-Button können Sie sich anschließend bei Ihrer Online-Applikation mit der Bürgerkarte oder der Handysignatur anmelden. Dazu müssen Sie allerdings zuvor die Applikation gemäß <a href="http://joinup.ec.europa.eu/site/moa-idspss/moa-id-3.x/doc/handbook/application/application.html#DemoApp_pvp21">Beschreibung</a> konfigurieren.</p>
+        </div>
+        </div>
+
+    </body>
+</html>
\ No newline at end of file
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_bk.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_bk.html
new file mode 100644
index 000000000..708be703b
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_bk.html
@@ -0,0 +1,100 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html lang="de">
+	<head>
+		<title>Information</title>
+        <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+        <meta http-equiv="Content-Style-Type" content="text/css">
+        <link rel="stylesheet" type="text/css" href="css/index.css">
+	</head>
+	<body>
+		<div id="wrapper">
+            <p id="skiplinks">
+                <a href="#content">Zum Inhalt springen</a>
+            </p>
+            <div id="banner">
+                <!-- [OPTIONAL] Aendern Sie hier die Titelueberschrift der Seite) -->
+                <div id="bannerleft">
+                    <h1>MOA-Template zur Bürgerkartenauswahl (Musterseite)</h1>
+                    <!-- Meldung im Browser, wenn JavaScript nicht aktiviert -->
+                    <noscript>
+                        <p>
+                            Bitte aktivieren Sie JavaScript.
+                        </p>
+	                </noscript>
+                </div>                
+                <!-- [OPTIONAL] Aendern Sie hier das Logo der Seite (und Alternativtext fuer das Bild) -->
+                <div id="bannerright">
+                    <img src="img/logo.jpg" alt="Logo">
+                </div>
+            </div>
+            <div id="main">
+                <div id="centercontent">
+                    <h2 id="contentheader" class="dunkel">
+                        Informationen zur B&uuml;rgerkarte
+                    </h2>
+                    <div id="content" class="hell">
+                        <p>
+                        	<B>Hinweis:</B>
+                            F&uuml;r nat&uuml;rliche Personen ist beim Login mit B&uuml;rgerkarte keine Erstanmeldung erforderlich.
+                        </p>
+                        <p>
+                        	Um mit der B&uuml;rgerkarte einsteigen zu k&ouml;nnen, ben&ouml;tigen Sie:
+                        </p>
+                        <ul>
+							<li>
+                               	eine Chipkarte, die f&uuml;r die Verwendung als B&uuml;rgerkarte geeignet ist, wie zum Beispiel Ihre e-card, Bankomatkarte oder Signaturkarte von A-Trust
+				      </li>
+							<li>
+                               	einen Kartenleser mit den dazugeh&ouml;rigen Treibern
+							</li>
+							<li>
+                               	eine B&uuml;rgerkartensoftware (BKU)
+                            </li>
+						</ul>
+                        <p>&nbsp;</p>
+                        <p>oder</p>
+                        <ul>
+                        	<li>
+                            	ein Mobiltelefon, das zur Nutzung als Handysignatur registriert ist.
+                            </li>
+                        </ul>
+<p>&nbsp;                        	
+            </p>
+<p>Als B&uuml;rgerkartensoftware stehen Ihnen folgende drei Varianten zur Verf&uuml;gung:
+              </p>
+                        <ul>
+                        	<li><i>Lokale BKU</i>: Diese Software wird lokal auf Ihrem Computer installiert. Die Software finden sie unter <a href="http://www.buergerkarte.at/download.de.php" target="_blank">http://www.buergerkarte.at/download.de.php</a>
+                            </li>
+                            <li><i>Online BKU</i>: Mit der Online BKU wird keine lokale B&uuml;rgerkartensoftware am PC ben&ouml;tigt. &Uuml;ber JAVA Technologien werden die ben&ouml;tigten Funktionen als Applet im Browser ausgef&uuml;hrt. Einzige Voraussetzung ist eine aktuelle JAVA Version (ab Java 6).
+                            </li>
+                            <li><i>Handysignatur</i>: Mit der Handysignatur k&ouml;nnen Sie sich mittels ihres Mobiltelefons anmelden. Voraussetzung ist eine vorherige Registrierung. Mehr Informationen hierzu finden Sie auf: <a href="https://www.handy-signatur.at/" target="_blank">https://www.handy-signatur.at/</a><br>
+                              <br>
+                        	  <b>Informationen zur B&uuml;rgerkarte finden Sie hier:</b>
+                            </li>
+                        </ul>
+                        <ul>
+                       	  <li>
+                               	<a href="http://www.digitales.oesterreich.gv.at" target="_blank">Digitales &Ouml;sterreich</a>: Informationen rund um E-Government
+                            </li>
+							<li>
+           						<a href="http://www.buergerkarte.at" target="_blank">B&uuml;rgerkarte</a>: Informationen zur B&uuml;rgerkarte                     	
+                            </li>
+                        </ul>
+						<p>
+                        	<br>
+					    	<b>Hier bekommen Sie Ihre B&uuml;rgerkarte:</b>                    
+                        </p>
+						<ul>
+                           	<li>
+                               	<a href="http://www.a-trust.at/" target="_blank">A-Trust</a>: Aktivieren der Bankomatkarte/e-card als B&uuml;rgerkarte oder Registrierung ihres Mobiltelefons als B&uuml;rgerkarte oder Ausstellung einer eigenen B&uuml;rgerkarte
+                            </li>
+                        </ul>
+						<p align="center">
+							<a href="javascript:history.back();" class="link_nav">zur&uuml;ck</a>
+						</p>                 
+					</div>
+                </div>
+            </div>
+		</div>
+	</body>
+</html>
\ No newline at end of file
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_mandates.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_mandates.html
new file mode 100644
index 000000000..f5e935338
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_mandates.html
@@ -0,0 +1,58 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html lang="de">
+	<head>
+		<title>Information</title>
+        <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+        <meta http-equiv="Content-Style-Type" content="text/css">
+        <link rel="stylesheet" type="text/css" href="css/index.css">
+	</head>
+	<body>
+		<div id="wrapper">
+            <p id="skiplinks">
+                <a href="#content">Zum Inhalt springen</a>
+            </p>
+            <div id="banner">
+                <!-- [OPTIONAL] Aendern Sie hier die Titelueberschrift der Seite) -->
+                <div id="bannerleft">
+                    <h1>MOA-Template zur Bürgerkartenauswahl (Musterseite)</h1>
+                    <!-- Meldung im Browser, wenn JavaScript nicht aktiviert -->
+                    <noscript>
+                        <p>
+                            Bitte aktivieren Sie JavaScript.
+                        </p>
+	                </noscript>
+                </div>                
+                <!-- [OPTIONAL] Aendern Sie hier das Logo der Seite (und Alternativtext fuer das Bild) -->
+                <div id="bannerright">
+                    <img src="img/logo.jpg" alt="Logo">
+                </div>
+            </div>
+            <div id="main">
+                <div id="centercontent">
+                    <h2 id="contentheader" class="dunkel">
+                        Information zur Anmeldung mittels elektronischer Vollmacht
+                    </h2>
+                    <div id="content" class="hell">
+                        <p>
+                        <p>Aktivieren Sie das K&auml;stchen <input type="checkbox" checked="true" readonly="true" enabled="false"/> "in Vertretung anmelden",
+			wenn Sie sich als Vertreter f&uuml;r eine andere Person anmelden m&ouml;chten. Das Vollmachtenservice
+			der Stammzahlenregisterbeh&ouml;rde bietet Ihnen Ihre verf&uuml;gbaren Vollmachten zur Auswahl an.</p>
+
+			
+			<p>Das Service zum Eintragen einer Vollmacht zwischen zwei nat&uuml;rlichen Personen k&ouml;nnen Sie
+			unter dem Hyperlink <a href="https://vollmachten.stammzahlenregister.gv.at/">Bilaterale Vollmacht</a>
+			eintragen.</p>
+			
+			<p>Als Organwalter (gem&auml;&szlig; &sect; 5 Abs. 3 E-GovG) und berufsm&auml;&szlig;ige Parteinvertreter,
+			aktivieren Sie bitte ebenfalls das K&auml;stchen <input type="checkbox" checked="true" readonly="true" enabled="false"/> "in Vertretung anmelden".</p>
+
+			
+			<p><span style="text-decoration: underline">Hinweis</span>: Welche Vollmachten Ihnen bei der jeweiligen
+			B&uuml;rgerkartenapplikation zur Verf&uuml;gung stehen, h&auml;ngt vom Anwendungsbetreiber ab.</p>
+                        </p>
+					</div>
+                </div>
+            </div>
+		</div>
+	</body>
+</html>
\ No newline at end of file
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_stork.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_stork.html
new file mode 100644
index 000000000..048f0ac78
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/info_stork.html
@@ -0,0 +1,42 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html lang="de">
+	<head>
+		<title>Information (STORK)</title>
+        <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+        <meta http-equiv="Content-Style-Type" content="text/css">
+        <link rel="stylesheet" type="text/css" href="css/index.css">
+	</head>
+	<body>
+		<div id="wrapper">
+            <p id="skiplinks">
+                <a href="#content">Go to contents</a>
+            </p>
+            <div id="banner">
+                <!-- [OPTIONAL] Aendern Sie hier die Titelueberschrift der Seite) -->
+                <div id="bannerleft">
+                    <h1>Information using STORK for secure authentication</h1>
+                    <!-- Meldung im Browser, wenn JavaScript nicht aktiviert -->
+                    <noscript>
+                        <p>
+                            Please activate JavaScript.
+                        </p>
+	                </noscript>
+                </div>                
+                <!-- [OPTIONAL] Aendern Sie hier das Logo der Seite (und Alternativtext fuer das Bild) -->
+                <div id="bannerright">
+                    <img src="img/stork-logo.png" alt="STORK-Logo">
+                </div>
+            </div>
+            <div id="main">
+                    <h2 id="contentheader" class="dunkel">
+                        Information using STORK for secure authentication
+                    </h2>
+                    <div id="content" class="hell">
+                        
+                        <p>The STORK project makes it easier for citizens to access online public services across borders by implementing Europe-wide interoperable cross border platforms for the mutual recognition of national electronic identity (eID) between participating countries.</p>
+                        <p>For more information, please consult the STORK website:</p><a href="https://www.eid-stork2.eu/">https://www.eid-stork2.eu/</a>
+					</div>
+            </div>
+		</div>
+	</body>
+</html>
\ No newline at end of file
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/moa_errorcodes.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/moa_errorcodes.html
new file mode 100644
index 000000000..a5702d60d
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/moa_errorcodes.html
@@ -0,0 +1,333 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<html>
+<head>
+  <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1" >
+  <title>MOA-ID 2.0.x</title>
+  <link rel="stylesheet" href="./common/MOA.css" type="text/css">
+</head>
+<body>
+<h2>&Uuml;bersicht der m&ouml;glichen MOA-ID spezifischen Statuscodes
+</h2>
+<h3><a name="statuscodes_1xxxx" id="allgemeines_zugangspunkte7"></a>1.3.1 Statuscodes 1xxxx</h3>
+<p>Alle Statuscodes beginnent mit der Zahl eins beschreiben Fehler welche w&auml;hrend des Identifizerungs- und Authentifizierungsvorgangs aufgetreten sind.</p>
+<h4><a name="statuscodes_10xxx" id="allgemeines_zugangspunkte11"></a>1.3.1.1 Authentifizierung (10xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="1000" id="allgemeines_zugangspunkte"></a>1000</td>
+    <td>Anmeldung an der angeforderten Online-Applikation wird nicht unterst&uuml;tzt.</td>
+  </tr>
+  <tr>
+    <td><a name="1001" id="allgemeines_zugangspunkte2"></a>1001</td>
+    <td>Es ist bereits eine Anmeldung im Gange.</td>
+  </tr>
+  <tr>
+    <td><a name="1002" id="allgemeines_zugangspunkte3"></a>1002</td>
+    <td>Fehlerhafter Parameter</td>
+  </tr>
+  <tr>
+    <td><a name="1003" id="allgemeines_zugangspunkte4"></a>1003</td>
+    <td>Anfrage nur &uuml;ber https m&ouml;glich</td>
+  </tr>
+  <tr>
+    <td><a name="1004" id="allgemeines_zugangspunkte5"></a>1004</td>
+    <td>Zertifikat konnte nicht ausgelesen werden</td>
+  </tr>
+  <tr>
+    <td><a name="1005" id="allgemeines_zugangspunkte6"></a>1005</td>
+    <td>Die Authentifizierung wurde durch den Benutzer abgebrochen</td>
+  </tr>
+  <tr>
+    <td><a name="1006" id="allgemeines_zugangspunkte25"></a>1006</td>
+    <td>Vollmachtsmodus f&uuml;r nicht-&ouml;ffentlichen Bereich wird nicht unterst&uuml;tzt.</td>
+  </tr>
+  <tr>
+    <td><a name="1007" id="allgemeines_zugangspunkte26"></a>1007</td>
+    <td>Vollmachtsmodus f&uuml;r ausl&auml;ndische Personen wird nicht unterst&uuml;tzt.</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_11xxx" id="allgemeines_zugangspunkte12"></a>1.3.1.2 Validierung (11xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="1100" id="allgemeines_zugangspunkte27"></a>1100</td>
+    <td>Ung&uuml;ltige MOA SessionID</td>
+  </tr>
+  <tr>
+    <td><a name="1101" id="allgemeines_zugangspunkte28"></a>1101</td>
+    <td>Fehler beim Parsen eines Parameters</td>
+  </tr>
+  <tr>
+    <td><a name="1102" id="allgemeines_zugangspunkte29"></a>1102</td>
+    <td>Fehler beim Validieren der Personenbindung</td>
+  </tr>
+  <tr>
+    <td><a name="1103" id="allgemeines_zugangspunkte30"></a>1103</td>
+    <td>Signatur ung&uuml;ltig</td>
+  </tr>
+  <tr>
+    <td><a name="1104" id="allgemeines_zugangspunkte31"></a>1104</td>
+    <td>Zertifikat der Personenbindung ung&uuml;ltig</td>
+  </tr>
+  <tr>
+    <td><a name="1105" id="allgemeines_zugangspunkte32"></a>1105</td>
+    <td>Zertifikat der Signature ung&uuml;ltig</td>
+  </tr>
+  <tr>
+    <td><a name="1106" id="allgemeines_zugangspunkte33"></a>1106</td>
+    <td>Fehler beim Validieren des AuthBlocks</td>
+  </tr>
+  <tr>
+    <td><a name="1107" id="allgemeines_zugangspunkte34"></a>1107</td>
+    <td>Fehler beim Validieren eines  SSL-Server-Endzertifikates</td>
+  </tr>
+  <tr>
+    <td><a name="1108" id="allgemeines_zugangspunkte35"></a>1108</td>
+    <td>Fehler beim Validieren der Online Vollmacht.</td>
+  </tr>
+  <tr>
+    <td><a name="1109" id="allgemeines_zugangspunkte36"></a>1109</td>
+    <td>Fehler beim validieren der SZR-Gateway Response</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_12xxx" id="allgemeines_zugangspunkte13"></a>1.3.1.3 STORK (12xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="1200" id="allgemeines_zugangspunkte37"></a>1200</td>
+    <td>Fehler beim erstellen des STORK Authentifizierungsrequests</td>
+  </tr>
+  <tr>
+    <td><a name="1201" id="allgemeines_zugangspunkte38"></a>1201</td>
+    <td>Fehler beim validieren der STORK Authentifizierungsresponse</td>
+  </tr>
+  <tr>
+    <td><a name="1202" id="allgemeines_zugangspunkte39"></a>1202</td>
+    <td>STORK Authentifizierungsresponse antwortet mit einem Fehler</td>
+  </tr>
+  <tr>
+    <td><a name="1203" id="allgemeines_zugangspunkte40"></a>1203</td>
+    <td>Fehler beim Sammeln von STORK Attributen</td>
+  </tr>
+    <tr>
+        <td><a name="1204" id="allgemeines_zugangspunkte70"></a>1203</td>
+        <td>Fehler bei der Datenkonversion - eingegebenes Datum fehlerhaft</td>
+    </tr>
+</table>
+<h3><a name="statuscodes_4xxxx" id="allgemeines_zugangspunkte8"></a>1.3.2 Statuscodes 4xxxx</h3>
+<p>Alles Statuscodes beginnent mit der Zahl vier beschreiben Fehler die w&auml;hrend der Kommunikation mit externen Services aufgetreten sind.</p>
+<h4><a name="statuscodes_40xxx" id="allgemeines_zugangspunkte19"></a>1.3.2.1 BKU (40xxxx)</h4>
+<p>Tritt w&auml;hrend des Anmeldevorgangs in der B&uuml;rgerkartenumgebung ein Fehler auf so wird der entsprechende Fehlercode an den Service Provider weitergereicht. Der der durch das Modul MOA-ID-Auth weitergereichte Statuscode f&uuml;r B&uuml;rgerkartenumgebungsfehler wei&szlig;t das folgende zweiteilige Format auf. Der erste Teil, bestehend aus zwei Dezimalstellen, kennzeichnet den Fehler als Fehler als B&uuml;rgerkartenumgebungsfehler. Der zweite Teil, bestehend aus vier Dezimalstellen bezeichnet den eindeutigen Identifikator des Fehers aus der B&uuml;rgerkartenumgebung (<a href="http://www.buergerkarte.at/konzept/securitylayer/spezifikation/20140114/">siehe SecurityLayer Spezifikation</a>). </p>
+<p align="right"><em><a name="40" id="allgemeines_zugangspunkte41"></a>{40}{xxxxx}</em></p>
+<blockquote>
+  <p>{40}  ... MOA-ID Statuscode f&uuml;r Fehler aus der B&uuml;rgerkartenumgebung</p>
+  <p>{xxxx}  .... Fehlercode der B&uuml;rgerkartenumgebung.</p>
+</blockquote>
+<h4><a name="statuscodes_41xxx" id="allgemeines_zugangspunkte20"></a>1.3.2.2 MIS (41xxxx)</h4>
+<p>Tritt w&auml;hrend der Kommunikation mit dem Online-Vollmachten Service oder der Vollmachtsauswahl ein Fehler auf so wird der entsprechende Fehlercode an den Service Provider weitergereicht. Der der durch das Modul MOA-ID-Auth weitergereichte Statuscode f&uuml;r Fehler aus dem Online-Vollmachten Service wei&szlig;t das folgende zweiteilige Format auf. Der erste Teil, bestehend aus drei Dezimalstellen, kennzeichnet den Fehler als Fehler als Online-Vollmachten Service Fehler. Der zweite Teil, bestehend aus drei Dezimalstellen bezeichnet den eindeutigen Identifikator des Fehlers aus dem Online-Vollmachten Service (<a href="http://reference.e-government.gv.at/AG-II-Architektur-mis-1-1-0.2890.0.html">siehe Online-Vollmachten Spezifikation</a>). </p>
+<p><em><a name="41" id="allgemeines_zugangspunkte42"></a>{411}{xxxx}</em></p>
+<blockquote>
+  <p>{411}  ... MOA-ID Statuscode f&uuml;r Fehler aus  dem Online-Vollmachten Service.</p>
+  <p>{xxx}  .... Fehlercode des Online-Vollmachten Service.</p>
+</blockquote>
+<p>Zus&auml;tzlich zu den gemappeden Fehlern aus dem Online-Vollmachen Service werden zus&auml;tzliche weitere Fehlercodes definiert.</p>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td>41000</td>
+    <td>Das Online-Vollmachten Service ist nicht erreichbar</td>
+  </tr>
+  <tr>
+    <td>41001</td>
+    <td>Allgemeiner Fehler bei der Kommunikation mit dem Online-Vollmachten Service</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_42xxx" id="allgemeines_zugangspunkte21"></a>1.3.2.3 SZR-Gateway (42xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="4200" id="allgemeines_zugangspunkte43"></a>4200</td>
+    <td>Das SZR-Gateway Service ist nicht erreichbar</td>
+  </tr>
+  <tr>
+    <td><a name="4201" id="allgemeines_zugangspunkte44"></a>4201</td>
+    <td>Die Antragung in das SZR ist fehlgeschlagen</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_43xxx" id="allgemeines_zugangspunkte22"></a>1.3.2.4 MOA SP/SS(43xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="4300" id="allgemeines_zugangspunkte45"></a>4300</td>
+    <td>Fehler beim Aufruf von MOA SP/SS</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_44xxx" id="allgemeines_zugangspunkte23"></a>1.3.2.5 Interfederation (44xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="4400" id="allgemeines_zugangspunkte46"></a>4400</td>
+    <td>Fehler beim generieren der Anmeldedaten</td>
+  </tr>
+</table>
+<h3><a name="statuscodes_6xxxx" id="allgemeines_zugangspunkte9"></a>1.3.3 Statuscodes 6xxxx</h3>
+<p>Alles Statuscodes beginnent mit der Zahl sechs beschreiben protokolspezifische Fehler die nicht durch das jeweilige Authentifizierungsprotokoll abgebildet werden.</p>
+<h4><a name="statuscodes_61xxx" id="allgemeines_zugangspunkte24"></a>1.3.3.1 Allgemein (61xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="6000" id="allgemeines_zugangspunkte47"></a>6000</td>
+    <td>Das Authentifizierungsprotokoll wurde nicht erkannt oder wird nicht unterst&uuml;zt</td>
+  </tr>
+  <tr>
+    <td><a name="6001" id="allgemeines_zugangspunkte48"></a>6001</td>
+    <td>Der STORK Request wurde nicht erkannt oder wird nicht unterst&uuml;zt</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_61xxx" id="allgemeines_zugangspunkte16"></a>1.3.3.2 PVP 2.1 (61xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="6100" id="allgemeines_zugangspunkte49"></a>6100</td>
+    <td>Fehler beim erstellen der PVP 2.1 Response</td>
+  </tr>
+  <tr>
+    <td><a name="6101" id="allgemeines_zugangspunkte50"></a>6101</td>
+    <td>Fehler beim verschl&uuml;sseln der PVP 2.1 Assertion</td>
+  </tr>
+  <tr>
+    <td><a name="6102" id="allgemeines_zugangspunkte51"></a>6102</td>
+    <td>Authentifizierung entspricht nicht dem geforderten QAA Level</td>
+  </tr>
+  <tr>
+    <td><a name="6103" id="allgemeines_zugangspunkte52"></a>6103</td>
+    <td>F&uuml;r die im Requst angegebene EnityID konnten keine g&uuml;ltigen Metadaten gefunden werden</td>
+  </tr>
+  <tr>
+    <td><a name="6104" id="allgemeines_zugangspunkte53"></a>6104</td>
+    <td>Die Signatur des Requests konnte nicht g&uuml;ltig validiert werden. Entweder ist die Signatur ung&uuml;ltig oder das Signaturzertifikat stimmt nicht mit dem in den Metadaten hinterlegten Zertifikat &uuml;berein.</td>
+  </tr>
+  <tr>
+    <td><a name="6105" id="allgemeines_zugangspunkte54"></a>6105</td>
+    <td>Der Request konnte nicht g&uuml;ltig validiert werden.</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_62xxx" id="allgemeines_zugangspunkte17"></a>1.3.3.3 OpenID Connect (62xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="6200" id="allgemeines_zugangspunkte55"></a>6200</td>
+    <td>Fehlerhafte redirect url</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_63xxx" id="allgemeines_zugangspunkte18"></a>1.3.3.4 SAML 1(63xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="6300" id="allgemeines_zugangspunkte56"></a>6300</td>
+    <td>Fehlerhaftes SAML Artifact Format</td>
+  </tr>
+</table>
+<h3><a name="statuscodes_9xxxx" id="allgemeines_zugangspunkte10"></a>1.3.4 Statuscodes 9xxxx</h3>
+<p>Alles Statuscodes beginnent mit der Zahl neun beschreiben interne Serverfehler.</p>
+<h4><a name="statuscodes_90xxx" id="allgemeines_zugangspunkte14"></a>1.3.4.1 Konfigurationsfehler (90xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="9000" id="allgemeines_zugangspunkte57"></a>9000</td>
+    <td>Fehlerhaftes BKU-Selection Template</td>
+  </tr>
+  <tr>
+    <td><a name="9001" id="allgemeines_zugangspunkte58"></a>9001</td>
+    <td>Fehlerhaftes Send-Assertion Template</td>
+  </tr>
+  <tr>
+    <td><a name="9002" id="allgemeines_zugangspunkte59"></a>9002</td>
+    <td>Fehlerhaftes SecurityLayer Template.</td>
+  </tr>
+  <tr>
+    <td><a name="9003" id="allgemeines_zugangspunkte60"></a>9003</td>
+    <td>Fehlerhafte STORK VIDP Konfiguration</td>
+  </tr>
+  <tr>
+    <td><a name="9004" id="allgemeines_zugangspunkte61"></a>9004</td>
+    <td>Fehlerhafte STORK Konfiguration</td>
+  </tr>
+  <tr>
+    <td><a name="9005" id="allgemeines_zugangspunkte62"></a>9005</td>
+    <td>Fehlerhafte OpenID Connect Konfiguration</td>
+  </tr>
+  <tr>
+    <td><a name="9006" id="allgemeines_zugangspunkte63"></a>9006</td>
+    <td>Es sind keine Vollmachtsprofile konfiguriert.</td>
+  </tr>
+  <tr>
+    <td><a name="9007" id="allgemeines_zugangspunkte64"></a>9007</td>
+    <td>Der SZR-Gateway Client konnte nicht initialisiert werden.</td>
+  </tr>
+</table>
+<h4><a name="statuscodes_91xxx" id="allgemeines_zugangspunkte15"></a>1.3.4.2 Interne Fehler (91xxx)</h4>
+<table width="1237" border="1">
+  <tr>
+    <th width="214" scope="col">Statuscode</th>
+    <th width="1007" scope="col">Beschreibung</th>
+  </tr>
+  <tr>
+    <td><a name="9100" id="allgemeines_zugangspunkte65"></a>9100</td>
+    <td>Fehler beim einlesen einer externen Resource.</td>
+  </tr>
+  <tr>
+    <td><a name="9101" id="allgemeines_zugangspunkte66"></a>9101</td>
+    <td>Datenbankzugriffsfehler</td>
+  </tr>
+  <tr>
+    <td><a name="9102" id="allgemeines_zugangspunkte67"></a>9102</td>
+    <td>Fehler beim Erzeugen einer internen Datenstruktur</td>
+  </tr>
+  <tr>
+    <td><a name="9103" id="allgemeines_zugangspunkte68"></a>9103</td>
+    <td>Fehler bei der Verarbeitung eines Templates</td>
+  </tr>
+  <tr>
+    <td><a name="9199" id="allgemeines_zugangspunkte69"></a>9199</td>
+    <td>Allgemeiner interner Fehler</td>
+  </tr>
+</table>
+</body>
+</html>
\ No newline at end of file
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_handyBKU.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_handyBKU.html
new file mode 100644
index 000000000..08071ac3a
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_handyBKU.html
@@ -0,0 +1,38 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html lang="de">
+	<head>
+		<title></title>
+		<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+		<script language="javascript" type="text/javascript">
+			function onAnmeldeSubmit() {
+				document.CustomizedForm.submit();
+				document.CustomizedForm.Senden.disabled=true;
+			}
+		</script>
+	</head>
+	<body onLoad="onAnmeldeSubmit()">		 
+      <form name="CustomizedForm" action="<BKU>" method="post" enctype="multipart/form-data">
+			Falls Sie nicht automatisch weitergeleitet werden klicken Sie bitte hier:
+     		<input class="button" type="submit" value="Starte Anmeldung" name="Senden">
+			<input type="hidden" name="XMLRequest" value="<XMLRequest>">
+			<input type="hidden" name="DataURL" value="<DataURL>">
+			<input type="hidden" name="PushInfobox" value="<PushInfobox>">
+			
+			<!-- Angabe der Parameter für die Handy-BKU -->
+			<input type="hidden" name="appletWidth" value="<APPLETWIDTH>">
+			<input type="hidden" name="appletHeight" value="<APPLETHEIGHT>">
+			
+			<!-- [OPTIONAL] Aendern Sie hier die Hintergrundfarbe der Handy-BKU -->
+			<input type="hidden" name="backgroundColor" value="<COLOR>"> 
+            
+			<input type="hidden" name="redirecttarget" value="<REDIRECTTARGET>">
+		</form>
+
+		<form name="CustomizedInfoForm" action="<BKU>" method="post">
+			<input type="hidden" name="XMLRequest" value="<CertInfoXMLRequest>">
+			<input type="hidden" name="DataURL" value="<CertInfoDataURL>">
+		</form>
+		<form name="DummyForm" action="<BKU>" method="post">
+		</form>
+	</body>
+</html>
\ No newline at end of file
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_localBKU.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_localBKU.html
new file mode 100644
index 000000000..b9905c4af
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_localBKU.html
@@ -0,0 +1,30 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html lang="de">
+	<head>
+		<title></title>
+		<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+		<script language="javascript" type="text/javascript">
+			function onAnmeldeSubmit() {
+				document.CustomizedForm.submit();
+				document.CustomizedForm.Senden.disabled=true;
+			}
+		</script>
+	</head>
+	<body onLoad="onAnmeldeSubmit()">	   
+		<form target=<REDIRECTTARGET> name="CustomizedForm" action="<BKU>" method="post" enctype="multipart/form-data">
+			Falls Sie nicht automatisch weitergeleitet werden klicken Sie bitte hier: 
+     		<input class="button" type="submit" value="Starte Anmeldung" name="Senden">
+			<input type="hidden" name="XMLRequest" value="<XMLRequest>">
+			<input type="hidden" name="DataURL" value="<DataURL>">
+			<input type="hidden" name="PushInfobox" value="<PushInfobox>">
+		</form>
+		
+		<form name="CustomizedInfoForm" action="<BKU>" method="post">
+			<input type="hidden" name="XMLRequest" value="<CertInfoXMLRequest>">
+			<input type="hidden" name="DataURL" value="<CertInfoDataURL>">
+		</form>
+		
+		<form name="DummyForm" action="<BKU>" method="post">
+		</form>
+	</body>
+</html>
diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_onlineBKU.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_onlineBKU.html
new file mode 100644
index 000000000..a9932d49d
--- /dev/null
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/template_onlineBKU.html
@@ -0,0 +1,37 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html lang="de">
+	<head>
+		<title></title>
+		<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+		<script language="javascript" type="text/javascript">
+			function onAnmeldeSubmit() {
+				document.CustomizedForm.submit();
+				document.CustomizedForm.Senden.disabled=true;
+			}
+		</script>
+	</head>
+	<body onLoad="onAnmeldeSubmit()">	 
+		<form name="CustomizedForm" action="<BKU>" method="post" enctype="multipart/form-data">
+			Falls Sie nicht automatisch weitergeleitet werden klicken Sie bitte hier: 
+		    <input class="button" type="hidden" value="Starte Anmeldung" name="Senden">
+			<input type="hidden" name="XMLRequest" value="<XMLRequest>">
+			<input type="hidden" name="DataURL" value="<DataURL>">
+			<input type="hidden" name="PushInfobox" value="<PushInfobox>">
+		
+			<!-- Angabe der Parameter fuer die Online-BKU -->
+			<input type="hidden" name="appletWidth" value="<APPLETWIDTH>">
+			<input type="hidden" name="appletHeight" value="<APPLETHEIGHT>">
+			
+			<!-- [OPTIONAL] Aendern Sie hier die Hintergrundfarbe der Online-BKU -->
+	      <input type="hidden" name="appletBackgroundColor" value="<COLOR>">
+	      <input type="hidden" name="redirectTarget" value="<REDIRECTTARGET>">
+		</form>
+		
+		<form name="CustomizedInfoForm" action="<BKU>" method="post">
+			<input type="hidden" name="XMLRequest" value="<CertInfoXMLRequest>">
+			<input type="hidden" name="DataURL" value="<CertInfoDataURL>">
+		</form>
+		<form name="DummyForm" action="<BKU>" method="post">
+		</form>
+	</body>
+</html>
diff --git a/id/server/modules/pom.xml b/id/server/modules/pom.xml
index 77d63c35c..3ca3497a0 100644
--- a/id/server/modules/pom.xml
+++ b/id/server/modules/pom.xml
@@ -19,15 +19,19 @@
 		<repositoryPath>${basedir}/../../../repository</repositoryPath>
 	</properties>
 	
-	<modules>
+	<modules>	
+		<module>moa-id-modul-citizencard_authentication</module>
+		
 		<module>module-monitoring</module>
+
 		<module>moa-id-modules-saml1</module>
 		<module>moa-id-module-openID</module>
-		<module>moa-id-modul-citizencard_authentication</module>
-		<module>moa-id-module-eIDAS</module>
-		<!-- <module>moa-id-module-pvp2</module> -->
+		
+		<module>moa-id-module-eIDAS</module>		
 		<module>moa-id-modules-federated_authentication</module>
 		<module>moa-id-module-elga_mandate_service</module>
+		
+		<module>moa-id-module-ssoTransfer</module>
 	</modules>
 	
 	<dependencies>
diff --git a/id/server/pom.xml b/id/server/pom.xml
index c311d8d96..dd1d88e76 100644
--- a/id/server/pom.xml
+++ b/id/server/pom.xml
@@ -22,8 +22,9 @@
         <module>moa-id-commons</module>
         <module>modules</module>
         <module>moa-id-spring-initializer</module>
-        
+        <module>moa-id-frontend-resources</module>        
         <module>auth</module>
+        
     </modules>
 
 	<dependencyManagement>
diff --git a/pom.xml b/pom.xml
index ed1c361f8..467f2cf28 100644
--- a/pom.xml
+++ b/pom.xml
@@ -427,6 +427,12 @@
 							<version>${moa-id-version}</version>
 						</dependency>
 
+						<dependency>
+							<groupId>MOA.id.server</groupId>
+  						<artifactId>moa-id-frontend-resources</artifactId>
+  						<version>${moa-id-version}</version>
+						</dependency>
+
             <dependency>
                 <groupId>MOA</groupId>
                 <artifactId>moa-common</artifactId>
-- 
cgit v1.2.3


From f9020f47b60bc1cff6c671461924ba606ce87853 Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Wed, 9 Mar 2016 09:15:03 +0100
Subject: fix some problems in ELGA-mandate module

---
 id/server/auth/src/main/webapp/index.html          |  0
 .../java/at/gv/egovernment/moa/id/util/Random.java |  4 +-
 .../moa/id/commons/utils/KeyValueUtils.java        | 23 +++++++++++-
 .../elgamandates/ELGAMandatesAuthConstants.java    |  1 +
 .../tasks/ELGAInitializeBKUAuthenticationTask.java | 43 ++++++++++++++++++++--
 5 files changed, 64 insertions(+), 7 deletions(-)
 create mode 100644 id/server/auth/src/main/webapp/index.html

(limited to 'id/server/auth/src/main/webapp/index.html')

diff --git a/id/server/auth/src/main/webapp/index.html b/id/server/auth/src/main/webapp/index.html
new file mode 100644
index 000000000..e69de29bb
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/util/Random.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/util/Random.java
index 07679999b..47f784c33 100644
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/util/Random.java
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/util/Random.java
@@ -99,7 +99,7 @@ public class Random {
 		char preFix = allowedPreFix[Math.abs(random.nextInt() % allowedPreFix.length)];
 	 
 		//generate ID
-		return preFix + new String(Hex.encodeHex(Bytes.concat(now.getBytes(), randValue), true)); // 20 bytes = 160 bits
+		return preFix + new String(Hex.encodeHex(Bytes.concat(now.getBytes(), randValue))); // 20 bytes = 160 bits
 		
 	}
 	
@@ -111,7 +111,7 @@ public class Random {
 	 * @return random hex encoded value [256bit]
 	 */
 	public static String nextHexRandom() {
-		return new String(Hex.encodeHex(nextByteRandom(32), true)); // 32 bytes = 256 bits
+		return new String(Hex.encodeHex(nextByteRandom(32))); // 32 bytes = 256 bits
 		
 	}
 	
diff --git a/id/server/moa-id-commons/src/main/java/at/gv/egovernment/moa/id/commons/utils/KeyValueUtils.java b/id/server/moa-id-commons/src/main/java/at/gv/egovernment/moa/id/commons/utils/KeyValueUtils.java
index cbdd13d0e..add929e1d 100644
--- a/id/server/moa-id-commons/src/main/java/at/gv/egovernment/moa/id/commons/utils/KeyValueUtils.java
+++ b/id/server/moa-id-commons/src/main/java/at/gv/egovernment/moa/id/commons/utils/KeyValueUtils.java
@@ -31,8 +31,6 @@ import java.util.Map;
 import java.util.Map.Entry;
 import java.util.Set;
 
-import org.apache.commons.lang3.StringUtils;
-
 import at.gv.egovernment.moa.util.MiscUtil;
 
 /**
@@ -283,6 +281,27 @@ public class KeyValueUtils {
 		return false;
 	}
 	
+	/**
+	 * Convert a CSV list to a List of CSV values
+	 * <br><br>
+	 * This method removes all whitespace at the begin or the 
+	 * end of CSV values and remove newLine signs at the end of value.
+	 * The ',' is used as list delimiter
+	 * 
+	 * @param csv CSV encoded input data
+	 * @return List of CSV normalized values, but never null
+	 */
+	public static List<String> getListOfCSVValues(String csv) {
+		List<String> list = new ArrayList<String>();
+		if (MiscUtil.isNotEmpty(csv)) {		
+			String[] values = csv.split(CSV_DELIMITER);
+			for (String el: values)
+				list.add(el.trim());
+		
+		}
+		
+		return list;
+	}
 	
 	/**
 	 * This method remove all newline delimiter (\n or \r\n) from input data
diff --git a/id/server/modules/moa-id-module-elga_mandate_service/src/main/java/at/gv/egovernment/moa/id/auth/modules/elgamandates/ELGAMandatesAuthConstants.java b/id/server/modules/moa-id-module-elga_mandate_service/src/main/java/at/gv/egovernment/moa/id/auth/modules/elgamandates/ELGAMandatesAuthConstants.java
index f682913e6..acb0b3aa1 100644
--- a/id/server/modules/moa-id-module-elga_mandate_service/src/main/java/at/gv/egovernment/moa/id/auth/modules/elgamandates/ELGAMandatesAuthConstants.java
+++ b/id/server/modules/moa-id-module-elga_mandate_service/src/main/java/at/gv/egovernment/moa/id/auth/modules/elgamandates/ELGAMandatesAuthConstants.java
@@ -52,6 +52,7 @@ public class ELGAMandatesAuthConstants {
 	public static final String CONFIG_PROPS_ENTITYID = CONFIG_PROPS_PREFIX + "service.entityID";
 	public static final String CONFIG_PROPS_METADATAURL = CONFIG_PROPS_PREFIX + "service.metadataurl";
 	public static final String CONFIG_PROPS_METADATA_TRUSTPROFILE = CONFIG_PROPS_PREFIX + "service.metadata.trustprofileID";
+	public static final String CONFIG_PROPS_ALLOWED_MANDATE_TYPES = "service.mandateprofiles";
 	
 	public static final String CONFIG_PROPS_KEYSTORE = CONFIG_PROPS_PREFIX + "keystore.path";
 	public static final String CONFIG_PROPS_KEYSTOREPASSWORD = CONFIG_PROPS_PREFIX + "keystore.password";
diff --git a/id/server/modules/moa-id-module-elga_mandate_service/src/main/java/at/gv/egovernment/moa/id/auth/modules/elgamandates/tasks/ELGAInitializeBKUAuthenticationTask.java b/id/server/modules/moa-id-module-elga_mandate_service/src/main/java/at/gv/egovernment/moa/id/auth/modules/elgamandates/tasks/ELGAInitializeBKUAuthenticationTask.java
index 50bac3eab..03711aa40 100644
--- a/id/server/modules/moa-id-module-elga_mandate_service/src/main/java/at/gv/egovernment/moa/id/auth/modules/elgamandates/tasks/ELGAInitializeBKUAuthenticationTask.java
+++ b/id/server/modules/moa-id-module-elga_mandate_service/src/main/java/at/gv/egovernment/moa/id/auth/modules/elgamandates/tasks/ELGAInitializeBKUAuthenticationTask.java
@@ -22,6 +22,8 @@
  */
 package at.gv.egovernment.moa.id.auth.modules.elgamandates.tasks;
 
+import java.util.List;
+
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 
@@ -30,8 +32,10 @@ import org.springframework.stereotype.Component;
 import at.gv.egovernment.moa.id.auth.MOAIDAuthConstants;
 import at.gv.egovernment.moa.id.auth.exception.MOAIDException;
 import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;
+import at.gv.egovernment.moa.id.auth.modules.elgamandates.ELGAMandatesAuthConstants;
 import at.gv.egovernment.moa.id.auth.modules.internal.tasks.InitializeBKUAuthenticationTask;
 import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;
+import at.gv.egovernment.moa.id.commons.utils.KeyValueUtils;
 import at.gv.egovernment.moa.id.process.api.ExecutionContext;
 import at.gv.egovernment.moa.logging.Logger;
 
@@ -69,8 +73,7 @@ public class ELGAInitializeBKUAuthenticationTask extends InitializeBKUAuthentica
 					elgaMandateUsed = (boolean) elgaMandateUsedObj;
 								
 			}
-			
-			
+						
 			//check if both mandate Services are requested
 			if ( (misMandateUsed != null && misMandateUsed) &&
 					elgaMandateUsed ) {
@@ -79,8 +82,19 @@ public class ELGAInitializeBKUAuthenticationTask extends InitializeBKUAuthentica
 				
 			}
 			
-			//remove MIS-Mandate flag and set useMandate flag to MOASession
+			
 			if (elgaMandateUsed) {
+				//check mandateProfiles against ELGA-MandateService configuration				
+				if (!checkServiceProviderAgainstELGAModulConfigration()) {
+					Logger.info("Service-Provider: " + pendingReq.getOnlineApplicationConfiguration().getPublicURLPrefix() 
+							+ " does not fulfill requirements to use ELGA-MandateService.");
+					throw new MOAIDException("service.10", new Object[]{
+							ELGAMandatesAuthConstants.MODULE_NAME_FOR_LOGGING,
+							"No valid mandate-profile defined"});
+					
+				}
+				
+				//remove MIS-Mandate flag and set useMandate flag to MOASession
 				Logger.debug("Authentication process select ELGA-MandateService.");
 				executionContext.remove(MOAIDAuthConstants.PARAM_USEMISMANDATE);
 				moasession.setUseMandates(elgaMandateUsed);
@@ -104,4 +118,27 @@ public class ELGAInitializeBKUAuthenticationTask extends InitializeBKUAuthentica
 			
 		}
 	}
+
+	/**
+	 * Check Service-Provider mandate-profiles against allowed mandate-profiles for ELGA MandateService.
+	 * 
+	 * @return true, if ELGA mandateservice is allowed, otherwise false
+	 */
+	private boolean checkServiceProviderAgainstELGAModulConfigration() {
+		String allowedMandateTypesCSV = 
+				authConfig.getBasicMOAIDConfiguration(ELGAMandatesAuthConstants.CONFIG_PROPS_ALLOWED_MANDATE_TYPES);		
+		List<String> allowedMandateTypes = KeyValueUtils.getListOfCSVValues(allowedMandateTypesCSV);		
+		List<String> spMandateProfiles = pendingReq.getOnlineApplicationConfiguration().getMandateProfiles();
+
+		boolean isELGAMandateServiceAllowed = false;
+		if (spMandateProfiles != null) {			
+			for (String el : allowedMandateTypes) {
+				if (spMandateProfiles.contains(el))
+					isELGAMandateServiceAllowed = true;
+			
+			}
+		}
+		
+		return isELGAMandateServiceAllowed;
+	}
 }
-- 
cgit v1.2.3


From d60ceb70869148deb9f85751c63460fa245a8c7f Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Wed, 9 Mar 2016 12:14:18 +0100
Subject: split moa-id-auth in a final- and an edjucation- version

---
 id/assembly-auth-edu.xml                           | 191 +++++++++
 id/assembly-auth-final.xml                         | 191 +++++++++
 id/assembly-auth.xml                               | 190 ---------
 id/pom.xml                                         |   2 +-
 id/server/auth-edu/.gitignore                      |   2 +
 id/server/auth-edu/pom.xml                         | 265 ++++++++++++
 .../auth-edu/src/main/resources/log4j.properties   |  27 ++
 .../auth-edu/src/main/webapp/META-INF/MANIFEST.MF  |   2 +
 id/server/auth-edu/src/main/webapp/WEB-INF/web.xml |  47 +++
 id/server/auth-edu/src/main/webapp/index.html      |   0
 id/server/auth-edu/src/main/wsdl/MOA-ID-1.0.wsdl   |  40 ++
 id/server/auth-edu/src/main/wsdl/MOA-ID-1.x.wsdl   |  40 ++
 id/server/auth-edu/src/main/wsdl/MOA-SPSS-1.2.xsd  | 454 +++++++++++++++++++++
 id/server/auth-final/.gitignore                    |   2 +
 id/server/auth-final/pom.xml                       | 250 ++++++++++++
 .../auth-final/src/main/resources/log4j.properties |  27 ++
 .../src/main/webapp/META-INF/MANIFEST.MF           |   2 +
 .../auth-final/src/main/webapp/WEB-INF/web.xml     |  47 +++
 id/server/auth-final/src/main/webapp/index.html    |   0
 id/server/auth-final/src/main/wsdl/MOA-ID-1.0.wsdl |  40 ++
 id/server/auth-final/src/main/wsdl/MOA-ID-1.x.wsdl |  40 ++
 .../auth-final/src/main/wsdl/MOA-SPSS-1.2.xsd      | 454 +++++++++++++++++++++
 id/server/auth/.gitignore                          |   2 -
 id/server/auth/pom.xml                             | 264 ------------
 id/server/auth/src/main/resources/log4j.properties |  27 --
 .../auth/src/main/webapp/META-INF/MANIFEST.MF      |   2 -
 id/server/auth/src/main/webapp/WEB-INF/web.xml     |  47 ---
 id/server/auth/src/main/webapp/index.html          |   0
 id/server/auth/src/main/wsdl/MOA-ID-1.0.wsdl       |  40 --
 id/server/auth/src/main/wsdl/MOA-ID-1.x.wsdl       |  40 --
 id/server/auth/src/main/wsdl/MOA-SPSS-1.2.xsd      | 454 ---------------------
 id/server/pom.xml                                  |   4 +-
 pom.xml                                            |   7 +-
 33 files changed, 2130 insertions(+), 1070 deletions(-)
 create mode 100644 id/assembly-auth-edu.xml
 create mode 100644 id/assembly-auth-final.xml
 delete mode 100644 id/assembly-auth.xml
 create mode 100644 id/server/auth-edu/.gitignore
 create mode 100644 id/server/auth-edu/pom.xml
 create mode 100644 id/server/auth-edu/src/main/resources/log4j.properties
 create mode 100644 id/server/auth-edu/src/main/webapp/META-INF/MANIFEST.MF
 create mode 100644 id/server/auth-edu/src/main/webapp/WEB-INF/web.xml
 create mode 100644 id/server/auth-edu/src/main/webapp/index.html
 create mode 100644 id/server/auth-edu/src/main/wsdl/MOA-ID-1.0.wsdl
 create mode 100644 id/server/auth-edu/src/main/wsdl/MOA-ID-1.x.wsdl
 create mode 100644 id/server/auth-edu/src/main/wsdl/MOA-SPSS-1.2.xsd
 create mode 100644 id/server/auth-final/.gitignore
 create mode 100644 id/server/auth-final/pom.xml
 create mode 100644 id/server/auth-final/src/main/resources/log4j.properties
 create mode 100644 id/server/auth-final/src/main/webapp/META-INF/MANIFEST.MF
 create mode 100644 id/server/auth-final/src/main/webapp/WEB-INF/web.xml
 create mode 100644 id/server/auth-final/src/main/webapp/index.html
 create mode 100644 id/server/auth-final/src/main/wsdl/MOA-ID-1.0.wsdl
 create mode 100644 id/server/auth-final/src/main/wsdl/MOA-ID-1.x.wsdl
 create mode 100644 id/server/auth-final/src/main/wsdl/MOA-SPSS-1.2.xsd
 delete mode 100644 id/server/auth/.gitignore
 delete mode 100644 id/server/auth/pom.xml
 delete mode 100644 id/server/auth/src/main/resources/log4j.properties
 delete mode 100644 id/server/auth/src/main/webapp/META-INF/MANIFEST.MF
 delete mode 100644 id/server/auth/src/main/webapp/WEB-INF/web.xml
 delete mode 100644 id/server/auth/src/main/webapp/index.html
 delete mode 100644 id/server/auth/src/main/wsdl/MOA-ID-1.0.wsdl
 delete mode 100644 id/server/auth/src/main/wsdl/MOA-ID-1.x.wsdl
 delete mode 100644 id/server/auth/src/main/wsdl/MOA-SPSS-1.2.xsd

(limited to 'id/server/auth/src/main/webapp/index.html')

diff --git a/id/assembly-auth-edu.xml b/id/assembly-auth-edu.xml
new file mode 100644
index 000000000..c11f790e4
--- /dev/null
+++ b/id/assembly-auth-edu.xml
@@ -0,0 +1,191 @@
+<assembly>
+	<id>id-auth-edu-${moa-id-version}</id>
+	
+	<formats>
+		<format>dir</format>
+		<format>zip</format>
+		<!-- <format>tar.gz</format> -->
+	</formats>
+
+	<baseDirectory>moa-id-auth-edu-${moa-id-version}</baseDirectory>
+
+	<fileSets>
+		<fileSet>
+			<directory>${basedir}/id/server/data/deploy</directory>
+			<outputDirectory>/</outputDirectory>
+			<excludes>
+				<exclude>**/conf/Catalina/**</exclude>
+				<exclude>${basedir}/id/server/data/deploy/conf/moa-id-proxy/**</exclude>
+			</excludes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}/spss/handbook/conf/moa-spss/certstore</directory>
+			<outputDirectory>/conf/moa-id/certs/certstore</outputDirectory>
+			<includes>
+				<include>**/*</include>
+			</includes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}/spss/handbook/conf/moa-spss/certstore</directory>
+			<outputDirectory>/conf/moa-spss/certstore</outputDirectory>
+			<includes>
+				<include>**/*</include>
+			</includes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}/id/server/doc</directory>
+			<outputDirectory>/doc</outputDirectory>
+			<excludes>
+				<exclude>${basedir}/id/server/doc/proxy/**</exclude>
+			</excludes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}/id/server/data/deploy/conf</directory>
+			<outputDirectory>/doc/conf</outputDirectory>
+			<excludes>
+				<exclude>${basedir}/id/server/data/deploy/conf/moa-id-proxy/**</exclude>
+			</excludes>
+		</fileSet>				
+		<fileSet>
+			<directory>${basedir}/id</directory>
+			<outputDirectory>/</outputDirectory>
+			<includes>
+				<include>history.txt</include>
+				<include>readme_${moa-id-version}.txt</include>
+			</includes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}</directory>
+			<outputDirectory>/</outputDirectory>
+			<includes>
+				<include>LICENSE-2.0.txt</include>
+				<include>NOTICE.txt</include>
+				<include>IAIK-LICENSE.txt</include>
+				<include>EUPL v.1.1 - Licence.pdf</include>
+				<include>SIC_LICENSE.txt</include>				
+			</includes>
+		</fileSet>
+	</fileSets>
+
+	<moduleSets>
+		<moduleSet>
+			<includes>
+				<include>MOA.id.server:moa-id-auth-edu</include>
+			</includes>
+			<binaries>
+				<includeDependencies>true</includeDependencies>
+				<outputDirectory>/</outputDirectory>
+				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+				<dependencySets>
+					<dependencySet>
+						<includes>
+							<include>xalan-bin-dist:xalan</include>
+							<include>xerces:xercesImpl</include>
+							<include>xalan-bin-dist:xml-apis</include>
+							<include>xalan-bin-dist:serializer</include>
+						</includes>
+						<outputDirectory>/endorsed</outputDirectory>
+						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+					</dependencySet>
+					<dependencySet>
+						<includes>
+							<include>iaik.prod:iaik_ecc</include>
+							<include>iaik.prod:iaik_jce_full</include>
+							<include>iaik.prod:iaik_Pkcs11Provider</include>
+							<include>iaik.prod:iaik_Pkcs11Wrapper:jar</include>
+						</includes>
+						<outputDirectory>/ext</outputDirectory>
+						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+					</dependencySet>
+				</dependencySets>
+				<unpack>false</unpack>
+			</binaries>
+		</moduleSet>
+		
+		<moduleSet>
+			<includes>
+				<include>MOA.id.server:moa-id-lib</include>
+			</includes>
+			<binaries>
+				<attachmentClassifier>javadoc</attachmentClassifier>
+				<includeDependencies>false</includeDependencies>
+				<outputFileNameMapping>api-doc</outputFileNameMapping>
+				<outputDirectory>/doc</outputDirectory>
+				<unpack>true</unpack>
+			</binaries>
+		</moduleSet>
+
+		<moduleSet>
+			<includes>
+				<include>MOA.id:moa-id-configuration</include>
+			</includes>
+			<binaries>
+				<includeDependencies>false</includeDependencies>
+				<outputDirectory>/</outputDirectory>
+				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+				<unpack>false</unpack>
+			</binaries>
+		</moduleSet>
+		
+		<moduleSet>
+			<includes>
+				<include>MOA.id.server:moa-id-commons</include>
+			</includes>
+			<binaries>
+				<includeDependencies>false</includeDependencies>
+				<outputDirectory>/migration/</outputDirectory>
+				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+				<unpack>false</unpack>
+				<dependencySets>
+					<dependencySet>
+						<outputDirectory>/migration/dependency-jars</outputDirectory>
+						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+					</dependencySet>
+				</dependencySets>
+			</binaries>
+		</moduleSet>
+		
+		<moduleSet>
+			<includes>
+				<include>MOA.id:moa-id-oa</include>
+			</includes>
+			<sources>
+			   <useDefaultExcludes>true</useDefaultExcludes>
+			   <outputDirectory>../</outputDirectory>
+			   <includeModuleDirectory>true</includeModuleDirectory>
+			   <outputDirectoryMapping>/source/${artifactId}/src</outputDirectoryMapping>
+			   <excludes>			           
+         		<exclude>**/target/**</exclude>
+         		<exclude>**/bin/**</exclude>
+      			<exclude>**/.settings/**</exclude>
+			      <exclude>.*</exclude>
+			   </excludes>
+			   <includes>
+						<include>pom.xml</include>
+					</includes>
+			</sources>
+			<binaries>
+				<includeDependencies>false</includeDependencies>
+				<outputDirectory>/</outputDirectory>
+				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+				<unpack>false</unpack>
+				<dependencySets>
+					<dependencySet>
+						<includes>
+							<include>iaik:commons-iaik</include>
+							<include>MOA:moa-common</include>
+						</includes>
+						<outputDirectory>/source/repositority</outputDirectory>
+						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+					</dependencySet>
+				</dependencySets>
+			</binaries>
+		</moduleSet>
+
+	</moduleSets>
+
+	<componentDescriptors>
+		<componentDescriptor>component-pkcs11libs.xml</componentDescriptor>
+	</componentDescriptors>
+
+</assembly>
diff --git a/id/assembly-auth-final.xml b/id/assembly-auth-final.xml
new file mode 100644
index 000000000..504f5620a
--- /dev/null
+++ b/id/assembly-auth-final.xml
@@ -0,0 +1,191 @@
+<assembly>
+	<id>id-auth-final-${moa-id-version}</id>
+	
+	<formats>
+		<format>dir</format>
+		<format>zip</format>
+		<!-- <format>tar.gz</format> -->
+	</formats>
+
+	<baseDirectory>moa-id-auth-final-${moa-id-version}</baseDirectory>
+
+	<fileSets>
+		<fileSet>
+			<directory>${basedir}/id/server/data/deploy</directory>
+			<outputDirectory>/</outputDirectory>
+			<excludes>
+				<exclude>**/conf/Catalina/**</exclude>
+				<exclude>${basedir}/id/server/data/deploy/conf/moa-id-proxy/**</exclude>
+			</excludes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}/spss/handbook/conf/moa-spss/certstore</directory>
+			<outputDirectory>/conf/moa-id/certs/certstore</outputDirectory>
+			<includes>
+				<include>**/*</include>
+			</includes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}/spss/handbook/conf/moa-spss/certstore</directory>
+			<outputDirectory>/conf/moa-spss/certstore</outputDirectory>
+			<includes>
+				<include>**/*</include>
+			</includes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}/id/server/doc</directory>
+			<outputDirectory>/doc</outputDirectory>
+			<excludes>
+				<exclude>${basedir}/id/server/doc/proxy/**</exclude>
+			</excludes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}/id/server/data/deploy/conf</directory>
+			<outputDirectory>/doc/conf</outputDirectory>
+			<excludes>
+				<exclude>${basedir}/id/server/data/deploy/conf/moa-id-proxy/**</exclude>
+			</excludes>
+		</fileSet>				
+		<fileSet>
+			<directory>${basedir}/id</directory>
+			<outputDirectory>/</outputDirectory>
+			<includes>
+				<include>history.txt</include>
+				<include>readme_${moa-id-version}.txt</include>
+			</includes>
+		</fileSet>
+		<fileSet>
+			<directory>${basedir}</directory>
+			<outputDirectory>/</outputDirectory>
+			<includes>
+				<include>LICENSE-2.0.txt</include>
+				<include>NOTICE.txt</include>
+				<include>IAIK-LICENSE.txt</include>
+				<include>EUPL v.1.1 - Licence.pdf</include>
+				<include>SIC_LICENSE.txt</include>				
+			</includes>
+		</fileSet>
+	</fileSets>
+
+	<moduleSets>
+		<moduleSet>
+			<includes>
+				<include>MOA.id.server:moa-id-auth-final</include>
+			</includes>
+			<binaries>
+				<includeDependencies>true</includeDependencies>
+				<outputDirectory>/</outputDirectory>
+				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+				<dependencySets>
+					<dependencySet>
+						<includes>
+							<include>xalan-bin-dist:xalan</include>
+							<include>xerces:xercesImpl</include>
+							<include>xalan-bin-dist:xml-apis</include>
+							<include>xalan-bin-dist:serializer</include>
+						</includes>
+						<outputDirectory>/endorsed</outputDirectory>
+						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+					</dependencySet>
+					<dependencySet>
+						<includes>
+							<include>iaik.prod:iaik_ecc</include>
+							<include>iaik.prod:iaik_jce_full</include>
+							<include>iaik.prod:iaik_Pkcs11Provider</include>
+							<include>iaik.prod:iaik_Pkcs11Wrapper:jar</include>
+						</includes>
+						<outputDirectory>/ext</outputDirectory>
+						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+					</dependencySet>
+				</dependencySets>
+				<unpack>false</unpack>
+			</binaries>
+		</moduleSet>
+		
+		<moduleSet>
+			<includes>
+				<include>MOA.id.server:moa-id-lib</include>
+			</includes>
+			<binaries>
+				<attachmentClassifier>javadoc</attachmentClassifier>
+				<includeDependencies>false</includeDependencies>
+				<outputFileNameMapping>api-doc</outputFileNameMapping>
+				<outputDirectory>/doc</outputDirectory>
+				<unpack>true</unpack>
+			</binaries>
+		</moduleSet>
+
+		<moduleSet>
+			<includes>
+				<include>MOA.id:moa-id-configuration</include>
+			</includes>
+			<binaries>
+				<includeDependencies>false</includeDependencies>
+				<outputDirectory>/</outputDirectory>
+				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+				<unpack>false</unpack>
+			</binaries>
+		</moduleSet>
+		
+		<moduleSet>
+			<includes>
+				<include>MOA.id.server:moa-id-commons</include>
+			</includes>
+			<binaries>
+				<includeDependencies>false</includeDependencies>
+				<outputDirectory>/migration/</outputDirectory>
+				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+				<unpack>false</unpack>
+				<dependencySets>
+					<dependencySet>
+						<outputDirectory>/migration/dependency-jars</outputDirectory>
+						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+					</dependencySet>
+				</dependencySets>
+			</binaries>
+		</moduleSet>
+		
+		<moduleSet>
+			<includes>
+				<include>MOA.id:moa-id-oa</include>
+			</includes>
+			<sources>
+			   <useDefaultExcludes>true</useDefaultExcludes>
+			   <outputDirectory>../</outputDirectory>
+			   <includeModuleDirectory>true</includeModuleDirectory>
+			   <outputDirectoryMapping>/source/${artifactId}/src</outputDirectoryMapping>
+			   <excludes>			           
+         		<exclude>**/target/**</exclude>
+         		<exclude>**/bin/**</exclude>
+      			<exclude>**/.settings/**</exclude>
+			      <exclude>.*</exclude>
+			   </excludes>
+			   <includes>
+						<include>pom.xml</include>
+					</includes>
+			</sources>
+			<binaries>
+				<includeDependencies>false</includeDependencies>
+				<outputDirectory>/</outputDirectory>
+				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+				<unpack>false</unpack>
+				<dependencySets>
+					<dependencySet>
+						<includes>
+							<include>iaik:commons-iaik</include>
+							<include>MOA:moa-common</include>
+						</includes>
+						<outputDirectory>/source/repositority</outputDirectory>
+						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
+					</dependencySet>
+				</dependencySets>
+			</binaries>
+		</moduleSet>
+
+	</moduleSets>
+
+	<componentDescriptors>
+		<componentDescriptor>component-pkcs11libs.xml</componentDescriptor>
+	</componentDescriptors>
+
+</assembly>
diff --git a/id/assembly-auth.xml b/id/assembly-auth.xml
deleted file mode 100644
index 5e0ca564a..000000000
--- a/id/assembly-auth.xml
+++ /dev/null
@@ -1,190 +0,0 @@
-<assembly>
-	<id>id-auth-${moa-id-version}</id>
-	
-	<formats>
-		<format>dir</format>
-		<format>zip</format>
-		<!-- <format>tar.gz</format> -->
-	</formats>
-
-	<baseDirectory>moa-id-auth-${moa-id-version}</baseDirectory>
-
-	<fileSets>
-		<fileSet>
-			<directory>${basedir}/id/server/data/deploy</directory>
-			<outputDirectory>/</outputDirectory>
-			<excludes>
-				<exclude>**/conf/Catalina/**</exclude>
-				<exclude>${basedir}/id/server/data/deploy/conf/moa-id-proxy/**</exclude>
-			</excludes>
-		</fileSet>
-		<fileSet>
-			<directory>${basedir}/spss/handbook/conf/moa-spss/certstore</directory>
-			<outputDirectory>/conf/moa-id/certs/certstore</outputDirectory>
-			<includes>
-				<include>**/*</include>
-			</includes>
-		</fileSet>
-		<fileSet>
-			<directory>${basedir}/spss/handbook/conf/moa-spss/certstore</directory>
-			<outputDirectory>/conf/moa-spss/certstore</outputDirectory>
-			<includes>
-				<include>**/*</include>
-			</includes>
-		</fileSet>
-		<fileSet>
-			<directory>${basedir}/id/server/doc</directory>
-			<outputDirectory>/doc</outputDirectory>
-			<excludes>
-				<exclude>${basedir}/id/server/doc/proxy/**</exclude>
-			</excludes>
-		</fileSet>
-		<fileSet>
-			<directory>${basedir}/id/server/data/deploy/conf</directory>
-			<outputDirectory>/doc/conf</outputDirectory>
-			<excludes>
-				<exclude>${basedir}/id/server/data/deploy/conf/moa-id-proxy/**</exclude>
-			</excludes>
-		</fileSet>				
-		<fileSet>
-			<directory>${basedir}/id</directory>
-			<outputDirectory>/</outputDirectory>
-			<includes>
-				<include>history.txt</include>
-				<include>readme_${moa-id-version}.txt</include>
-			</includes>
-		</fileSet>
-		<fileSet>
-			<directory>${basedir}</directory>
-			<outputDirectory>/</outputDirectory>
-			<includes>
-				<include>LICENSE-2.0.txt</include>
-				<include>NOTICE.txt</include>
-				<include>IAIK-LICENSE.txt</include>
-				<include>EUPL v.1.1 - Licence.pdf</include>
-				<include>SIC_LICENSE.txt</include>				
-			</includes>
-		</fileSet>
-	</fileSets>
-
-	<moduleSets>
-		<moduleSet>
-			<includes>
-				<include>MOA.id.server:moa-id-auth</include>
-			</includes>
-			<binaries>
-				<includeDependencies>true</includeDependencies>
-				<outputDirectory>/</outputDirectory>
-				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
-				<dependencySets>
-					<dependencySet>
-						<includes>
-							<include>xalan-bin-dist:xalan</include>
-							<include>xerces:xercesImpl</include>
-							<include>xalan-bin-dist:xml-apis</include>
-							<include>xalan-bin-dist:serializer</include>
-						</includes>
-						<outputDirectory>/endorsed</outputDirectory>
-						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
-					</dependencySet>
-					<dependencySet>
-						<includes>
-							<include>iaik.prod:iaik_ecc</include>
-							<include>iaik.prod:iaik_jce_full</include>
-							<include>iaik.prod:iaik_Pkcs11Provider</include>
-							<include>iaik.prod:iaik_Pkcs11Wrapper:jar</include>
-						</includes>
-						<outputDirectory>/ext</outputDirectory>
-						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
-					</dependencySet>
-				</dependencySets>
-				<unpack>false</unpack>
-			</binaries>
-		</moduleSet>
-		<moduleSet>
-			<includes>
-				<include>MOA.id.server:moa-id-lib</include>
-			</includes>
-			<binaries>
-				<attachmentClassifier>javadoc</attachmentClassifier>
-				<includeDependencies>false</includeDependencies>
-				<outputFileNameMapping>api-doc</outputFileNameMapping>
-				<outputDirectory>/doc</outputDirectory>
-				<unpack>true</unpack>
-			</binaries>
-		</moduleSet>
-
-		<moduleSet>
-			<includes>
-				<include>MOA.id:moa-id-configuration</include>
-			</includes>
-			<binaries>
-				<includeDependencies>false</includeDependencies>
-				<outputDirectory>/</outputDirectory>
-				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
-				<unpack>false</unpack>
-			</binaries>
-		</moduleSet>
-		
-		<moduleSet>
-			<includes>
-				<include>MOA.id.server:moa-id-commons</include>
-			</includes>
-			<binaries>
-				<includeDependencies>false</includeDependencies>
-				<outputDirectory>/migration/</outputDirectory>
-				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
-				<unpack>false</unpack>
-				<dependencySets>
-					<dependencySet>
-						<outputDirectory>/migration/dependency-jars</outputDirectory>
-						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
-					</dependencySet>
-				</dependencySets>
-			</binaries>
-		</moduleSet>
-		
-		<moduleSet>
-			<includes>
-				<include>MOA.id:moa-id-oa</include>
-			</includes>
-			<sources>
-			   <useDefaultExcludes>true</useDefaultExcludes>
-			   <outputDirectory>../</outputDirectory>
-			   <includeModuleDirectory>true</includeModuleDirectory>
-			   <outputDirectoryMapping>/source/${artifactId}/src</outputDirectoryMapping>
-			   <excludes>			           
-         		<exclude>**/target/**</exclude>
-         		<exclude>**/bin/**</exclude>
-      			<exclude>**/.settings/**</exclude>
-			      <exclude>.*</exclude>
-			   </excludes>
-			   <includes>
-						<include>pom.xml</include>
-					</includes>
-			</sources>
-			<binaries>
-				<includeDependencies>false</includeDependencies>
-				<outputDirectory>/</outputDirectory>
-				<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
-				<unpack>false</unpack>
-				<dependencySets>
-					<dependencySet>
-						<includes>
-							<include>iaik:commons-iaik</include>
-							<include>MOA:moa-common</include>
-						</includes>
-						<outputDirectory>/source/repositority</outputDirectory>
-						<outputFileNameMapping>${artifactId}.${extension}</outputFileNameMapping>
-					</dependencySet>
-				</dependencySets>
-			</binaries>
-		</moduleSet>
-
-	</moduleSets>
-
-	<componentDescriptors>
-		<componentDescriptor>component-pkcs11libs.xml</componentDescriptor>
-	</componentDescriptors>
-
-</assembly>
diff --git a/id/pom.xml b/id/pom.xml
index 49dd99a1c..0aa9740ac 100644
--- a/id/pom.xml
+++ b/id/pom.xml
@@ -17,7 +17,7 @@
 <!--         <module>templates</module> -->
         <module>server</module>
         <module>ConfigWebTool</module>
-    	<module>moa-id-webgui</module>
+    	  <module>moa-id-webgui</module>
     </modules>
 
     <properties>
diff --git a/id/server/auth-edu/.gitignore b/id/server/auth-edu/.gitignore
new file mode 100644
index 000000000..4dc009173
--- /dev/null
+++ b/id/server/auth-edu/.gitignore
@@ -0,0 +1,2 @@
+/target
+/bin
diff --git a/id/server/auth-edu/pom.xml b/id/server/auth-edu/pom.xml
new file mode 100644
index 000000000..3d7f0b94a
--- /dev/null
+++ b/id/server/auth-edu/pom.xml
@@ -0,0 +1,265 @@
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+	<parent>
+		<groupId>MOA.id</groupId>
+		<artifactId>moa-id</artifactId>
+		<version>3.x</version>
+	</parent>
+	
+	<modelVersion>4.0.0</modelVersion>
+	<groupId>MOA.id.server</groupId>
+	<artifactId>moa-id-auth-edu</artifactId>
+	<version>${moa-id-version-edu}</version>
+	<packaging>war</packaging>
+	<name>MOA ID-Auth-Edjucation</name>
+	<description>Education release-version of MOA-ID-Auth which includes all development functionality</description>
+	
+	<properties>
+		<repositoryPath>${basedir}/../../../repository</repositoryPath>
+	</properties>
+	
+	<repositories>
+		<repository>
+			<id>shibboleth.internet2.edu</id>
+			<name>Internet2</name>
+			<url>https://build.shibboleth.net/nexus/content/groups/public/</url>
+		</repository>
+	</repositories>
+	
+	<build>
+		<!--sourceDirectory>${basedir}/../idserverlib/src/main/java</sourceDirectory-->
+		<!--testSourceDirectory>${basedir}/../idserverlib/src/test/java</testSourceDirectory-->
+		<plugins>
+		
+			<plugin>
+      	<groupId>org.codehaus.mojo</groupId>
+      	<artifactId>versions-maven-plugin</artifactId>
+      	<version>2.1</version>
+    	</plugin>
+		
+		
+<!-- 		        	<plugin>
+            		<groupId>org.codehaus.mojo</groupId>
+            		<artifactId>properties-maven-plugin</artifactId>
+            		<version>1.0-alpha-2</version>
+            		<executions>
+                		<execution>
+                    		<phase>initialize</phase>
+                    		<goals>
+                        		<goal>read-project-properties</goal>
+                    		</goals>
+                    		<configuration>
+    	                   		<files>
+		                            <file>${basedir}/../../../moa-id.properties</file>
+      		                  </files>
+          		          </configuration>
+              		  </execution>
+            		</executions>
+        		</plugin> -->
+				<plugin>
+				<groupId>org.apache.maven.plugins</groupId>
+				<artifactId>maven-war-plugin</artifactId>
+				<version>2.1.1</version>
+				<!-- <version>2.0.2</version>-->
+				<configuration>
+					<archive>
+						<manifest>
+							<addDefaultSpecificationEntries>false</addDefaultSpecificationEntries>
+							<addDefaultImplementationEntries>true</addDefaultImplementationEntries>
+						</manifest>
+						<addMavenDescriptor>false</addMavenDescriptor>
+					</archive>
+
+					<!-- extract moa-id classes for debugging -->
+					<!--warSourceExcludes>WEB-INF/lib/moa-id-lib*.jar</warSourceExcludes-->
+					<webResources>
+						<resource>
+							<directory>${basedir}/src/main/wsdl</directory>
+							<targetPath>WEB-INF/classes/resources/wsdl</targetPath>
+						</resource>
+					<!--
+						<resource>
+							<directory>${basedir}/../idserverlib/target/classes</directory>
+							<targetPath>WEB-INF/classes</targetPath>
+						</resource>
+-->
+					</webResources>
+				</configuration>
+			</plugin>
+		</plugins>
+	</build>
+	
+	<dependencies>
+
+
+        <!-- we need Axis 1.1 here, 1.0 is included in SPSS -->
+		<dependency>
+			<groupId>MOA.spss.server</groupId>
+			<artifactId>moa-spss-lib</artifactId>
+			<exclusions>
+				<exclusion>
+					<artifactId>iaik_pki_module</artifactId>
+					<groupId>iaik</groupId>
+				</exclusion>
+				<exclusion>
+					<groupId>commons-logging</groupId>
+					<artifactId>commons-logging</artifactId>
+				</exclusion>
+				<exclusion>
+					<artifactId>axis-wsdl4j</artifactId>
+					<groupId>axis</groupId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		<dependency>
+			<groupId>MOA.id.server</groupId>
+			<artifactId>moa-id-lib</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>commons-logging</groupId>
+					<artifactId>commons-logging</artifactId>
+				</exclusion>
+				<exclusion>
+					<groupId>ch.qos.logback</groupId>
+					<artifactId>logback-classic</artifactId>
+				</exclusion>
+				<exclusion>
+					<artifactId>axis</artifactId>
+					<groupId>axis</groupId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		
+		<dependency>
+			<groupId>MOA.id.server</groupId>
+			<artifactId>moa-id-spring-initializer</artifactId>
+		</dependency>
+		<dependency>
+			<groupId>MOA.id.server</groupId>
+  		<artifactId>moa-id-frontend-resources</artifactId>
+		</dependency>
+		
+		
+		<!-- Adding eIDAS module dependency automatically adds eIDAS protocol capabilities. -->
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-eIDAS</artifactId>
+		</dependency>
+		
+		
+		<!-- Adding monitoring module dependency automatically adds monitoring capabilities. -->
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-monitoring</artifactId>
+		</dependency>
+
+
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-saml1</artifactId>
+		</dependency>
+
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-openID</artifactId>
+		</dependency>
+
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+    	<artifactId>moa-id-module-elga_mandate_service</artifactId>
+		</dependency>
+
+<!-- 		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-pvp2</artifactId>
+		</dependency> -->
+
+ 		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-modul-citizencard_authentication</artifactId>
+		</dependency>
+
+			<dependency>
+				<groupId>MOA.id.server.modules</groupId>
+				<artifactId>moa-id-modules-federated_authentication</artifactId>
+			</dependency> 
+
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-ssoTransfer</artifactId>
+			<version>${moa-id-version}</version>
+		</dependency>
+				
+        <!-- transitive dependencies we don't want to include into the war -->
+		<dependency>
+			<groupId>iaik.prod</groupId>
+			<artifactId>iaik_jce_full</artifactId>
+			<!-- should be in the ext directory of the jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>iaik.prod</groupId>
+			<artifactId>iaik_ecc</artifactId>
+			<!-- should be in the ext directory of the jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>iaik.prod</groupId>
+			<artifactId>iaik_Pkcs11Provider</artifactId>
+			<!-- should be in the ext directory of the jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>iaik.prod</groupId>
+			<artifactId>iaik_Pkcs11Wrapper</artifactId>
+			<!-- should be in the ext directory of the jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>xalan-bin-dist</groupId>
+			<artifactId>xalan</artifactId>
+			<!-- should be provided by the container or jre -->
+			<scope>provided</scope>
+			<exclusions>
+				<exclusion>
+					<groupId>xalan</groupId>
+					<artifactId>serializer</artifactId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		<dependency>
+			<groupId>xerces</groupId>
+			<artifactId>xercesImpl</artifactId>
+			<!-- should be provided by the container or jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>xalan-bin-dist</groupId>
+			<artifactId>xml-apis</artifactId>
+			<!-- should be provided by the container or jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>xalan-bin-dist</groupId>
+			<artifactId>serializer</artifactId>
+			<!-- should be provided by the container or jre -->
+			<scope>provided</scope>
+		</dependency>
+
+		<dependency>
+			<groupId>org.springframework</groupId>
+			<artifactId>spring-webmvc</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>commons-logging</groupId>
+					<artifactId>commons-logging</artifactId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		<dependency>
+			<groupId>org.slf4j</groupId>
+			<artifactId>jcl-over-slf4j</artifactId>
+		</dependency>
+
+	</dependencies>
+
+</project>
diff --git a/id/server/auth-edu/src/main/resources/log4j.properties b/id/server/auth-edu/src/main/resources/log4j.properties
new file mode 100644
index 000000000..ecdfad165
--- /dev/null
+++ b/id/server/auth-edu/src/main/resources/log4j.properties
@@ -0,0 +1,27 @@
+# commons-logging setup
+org.apache.commons.logging.LogFactory=org.apache.commons.logging.impl.Log4jFactory
+
+# define log4j root loggers
+log4j.rootLogger=info, stdout, R
+log4j.logger.at.gv.egovernment.moa=info, R
+log4j.logger.at.gv.egovernment.moa.spss=info, R
+log4j.logger.iaik.server=info, R
+log4j.logger.at.gv.egovernment.moa.id=info, R
+log4j.logger.at.gv.egovernment.moa.id.proxy=info, R
+log4j.logger.eu.stork=info, R
+log4j.logger.org.hibernate=warn, R
+
+# configure the stdout appender
+log4j.appender.stdout=org.apache.log4j.ConsoleAppender
+log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
+#log4j.appender.stdout.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %20c |  %10t | %m%n
+log4j.appender.stdout.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %20.20c | %10t | %m%n
+
+# configure the rolling file appender (R)
+log4j.appender.R=org.apache.log4j.RollingFileAppender
+log4j.appender.R.File=${catalina.base}/logs/moa-id.log
+log4j.appender.R.MaxFileSize=10000KB
+log4j.appender.R.MaxBackupIndex=1
+log4j.appender.R.layout=org.apache.log4j.PatternLayout
+log4j.appender.R.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %t | %m%n
+
diff --git a/id/server/auth-edu/src/main/webapp/META-INF/MANIFEST.MF b/id/server/auth-edu/src/main/webapp/META-INF/MANIFEST.MF
new file mode 100644
index 000000000..59499bce4
--- /dev/null
+++ b/id/server/auth-edu/src/main/webapp/META-INF/MANIFEST.MF
@@ -0,0 +1,2 @@
+Manifest-Version: 1.0
+
diff --git a/id/server/auth-edu/src/main/webapp/WEB-INF/web.xml b/id/server/auth-edu/src/main/webapp/WEB-INF/web.xml
new file mode 100644
index 000000000..9ad651d42
--- /dev/null
+++ b/id/server/auth-edu/src/main/webapp/WEB-INF/web.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
+	version="3.1">
+	<display-name>MOA ID Auth</display-name>
+	<description>MOA ID Authentication Service</description>
+
+	<filter>
+		<filter-name>characterEncodingFilter</filter-name>
+		<filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
+		<init-param>
+			<param-name>encoding</param-name>
+			<param-value>UTF-8</param-value>
+		</init-param>
+		<init-param>
+			<param-name>forceEncoding</param-name>
+			<param-value>true</param-value>
+		</init-param>
+	</filter>
+	<filter-mapping>
+		<filter-name>characterEncodingFilter</filter-name>
+		<url-pattern>/*</url-pattern>
+	</filter-mapping>
+	
+	<welcome-file-list>
+   <welcome-file>index.html</welcome-file>
+	</welcome-file-list>
+	
+	<session-config>
+		<session-timeout>5</session-timeout>
+	</session-config>
+	
+	<error-page>
+		<error-code>500</error-code>
+		<location>/errorpage.jsp</location>
+	</error-page>
+	
+	<login-config>
+		<auth-method>BASIC</auth-method>
+		<realm-name>UserDatabase</realm-name>
+	</login-config>
+	<security-role>
+		<description>The role that is required to log in to the moa Application</description>
+		<role-name>moa-admin</role-name>
+	</security-role>
+
+</web-app>
diff --git a/id/server/auth-edu/src/main/webapp/index.html b/id/server/auth-edu/src/main/webapp/index.html
new file mode 100644
index 000000000..e69de29bb
diff --git a/id/server/auth-edu/src/main/wsdl/MOA-ID-1.0.wsdl b/id/server/auth-edu/src/main/wsdl/MOA-ID-1.0.wsdl
new file mode 100644
index 000000000..ce24e83c9
--- /dev/null
+++ b/id/server/auth-edu/src/main/wsdl/MOA-ID-1.0.wsdl
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<definitions name="MOA" targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:tns="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:moa="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:xsd="http://www.w3.org/1999/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/ http://schemas.xmlsoap.org/wsdl/">
+	<import namespace="http://reference.e-government.gv.at/namespace/moa/20020822#" location="MOA-20020812.xsd"/>
+	<message name="GetAuthenticationDataInput">
+		<part name="body" element="samlp:Request"/>
+	</message>
+	<message name="GetAuthenticationDataOutput">
+		<part name="body" element="samlp:Response"/>
+	</message>
+	<message name="MOAFault">
+		<part name="body" element="moa:ErrorResponse"/>
+	</message>
+	<portType name="IdentificationPortType">
+		<operation name="getAuthenticationData">
+			<input message="tns:GetAuthenticationDataInput"/>
+			<output message="tns:GetAuthenticationDataOutput"/>
+			<fault name="MOAFault" message="tns:MOAFault"/>
+		</operation>
+	</portType>
+	<binding name="IdentificationBinding" type="tns:IdentificationPortType" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/soap/ http://schemas.xmlsoap.org/wsdl/soap/">
+		<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
+		<operation name="getAuthenticationData">
+			<soap:operation soapAction="urn:GetAuthenticationDataAction"/>
+			<input>
+				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</input>
+			<output>
+				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</output>
+			<fault name="MOAFault">
+				<soap:fault name="MOAFault" use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</fault>
+		</operation>
+	</binding>
+	<service name="GetAuthenticationDataService">
+		<port name="IdentificationPort" binding="tns:IdentificationBinding">
+			<soap:address location="http://localhost/moa-id-auth/services/GetAuthenticationData"/>
+		</port>
+	</service>
+</definitions>
diff --git a/id/server/auth-edu/src/main/wsdl/MOA-ID-1.x.wsdl b/id/server/auth-edu/src/main/wsdl/MOA-ID-1.x.wsdl
new file mode 100644
index 000000000..218f0f013
--- /dev/null
+++ b/id/server/auth-edu/src/main/wsdl/MOA-ID-1.x.wsdl
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<definitions name="MOA" targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:tns="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:moa="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:xsd="http://www.w3.org/1999/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/ http://schemas.xmlsoap.org/wsdl/">
+	<import namespace="http://reference.e-government.gv.at/namespace/moa/20020822#" location="MOA-SPSS-2.0.0.xsd"/>
+	<message name="GetAuthenticationDataInput">
+		<part name="body" element="samlp:Request"/>
+	</message>
+	<message name="GetAuthenticationDataOutput">
+		<part name="body" element="samlp:Response"/>
+	</message>
+	<message name="MOAFault">
+		<part name="body" element="moa:ErrorResponse"/>
+	</message>
+	<portType name="IdentificationPortType">
+		<operation name="getAuthenticationData">
+			<input message="tns:GetAuthenticationDataInput"/>
+			<output message="tns:GetAuthenticationDataOutput"/>
+			<fault name="MOAFault" message="tns:MOAFault"/>
+		</operation>
+	</portType>
+	<binding name="IdentificationBinding" type="tns:IdentificationPortType" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/soap/ http://schemas.xmlsoap.org/wsdl/soap/">
+		<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
+		<operation name="getAuthenticationData">
+			<soap:operation soapAction="urn:GetAuthenticationDataAction"/>
+			<input>
+				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</input>
+			<output>
+				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</output>
+			<fault name="MOAFault">
+				<soap:fault name="MOAFault" use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</fault>
+		</operation>
+	</binding>
+	<service name="GetAuthenticationDataService">
+		<port name="IdentificationPort" binding="tns:IdentificationBinding">
+			<soap:address location="http://localhost/Identification"/>
+		</port>
+	</service>
+</definitions>
diff --git a/id/server/auth-edu/src/main/wsdl/MOA-SPSS-1.2.xsd b/id/server/auth-edu/src/main/wsdl/MOA-SPSS-1.2.xsd
new file mode 100644
index 000000000..8c994f079
--- /dev/null
+++ b/id/server/auth-edu/src/main/wsdl/MOA-SPSS-1.2.xsd
@@ -0,0 +1,454 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  MOA SP/SS 1.2 Schema
+-->
+<xsd:schema targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://reference.e-government.gv.at/namespace/moa/20020822#" elementFormDefault="qualified" attributeFormDefault="unqualified" version="1.2">
+  <xsd:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="http://www.w3.org/TR/xmldsig-core/xmldsig-core-schema.xsd"/>
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+  <!--########## Create XML Signature ###-->
+  <!--### Create XML Signature Request ###-->
+  <xsd:element name="CreateXMLSignatureRequest">
+    <xsd:complexType>
+      <xsd:complexContent>
+        <xsd:extension base="CreateXMLSignatureRequestType"/>
+      </xsd:complexContent>
+    </xsd:complexType>
+  </xsd:element>
+  <xsd:complexType name="CreateXMLSignatureRequestType">
+    <xsd:sequence>
+      <xsd:element name="KeyIdentifier" type="KeyIdentifierType"/>
+      <xsd:element name="SingleSignatureInfo" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>Ermöglichung der Stapelsignatur durch wiederholte Angabe dieses Elements</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element name="DataObjectInfo" maxOccurs="unbounded">
+              <xsd:complexType>
+                <xsd:complexContent>
+                  <xsd:extension base="DataObjectInfoType">
+                    <xsd:attribute name="ChildOfManifest" type="xsd:boolean" use="optional" default="false"/>
+                  </xsd:extension>
+                </xsd:complexContent>
+              </xsd:complexType>
+            </xsd:element>
+            <xsd:element name="CreateSignatureInfo" minOccurs="0">
+              <xsd:complexType>
+                <xsd:sequence>
+                  <xsd:element name="CreateSignatureEnvironment" type="ContentOptionalRefType"/>
+                  <xsd:choice>
+                    <xsd:annotation>
+                      <xsd:documentation>Auswahl: Entweder explizite Angabe des Signaturorts sowie ggf. sinnvoller Supplements im Zshg. mit der Signaturumgebung, oder Verweis auf ein benanntes Profil</xsd:documentation>
+                    </xsd:annotation>
+                    <xsd:element ref="CreateSignatureEnvironmentProfile"/>
+                    <xsd:element name="CreateSignatureEnvironmentProfileID" type="ProfileIdentifierType"/>
+                  </xsd:choice>
+                </xsd:sequence>
+              </xsd:complexType>
+            </xsd:element>
+          </xsd:sequence>
+          <xsd:attribute name="SecurityLayerConformity" type="xsd:boolean" use="optional" default="true"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--### Create XML Signature Response ###-->
+  <xsd:complexType name="CreateXMLSignatureResponseType">
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:annotation>
+        <xsd:documentation>Kardinalität 1..oo erlaubt die Antwort auf eine Stapelsignatur-Anfrage</xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="SignatureEnvironment">
+        <xsd:annotation>
+          <xsd:documentation>Resultat, falls die Signaturerstellung erfolgreich war</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any" processContents="lax"/>
+          </xsd:sequence>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element ref="ErrorResponse"/>
+    </xsd:choice>
+  </xsd:complexType>
+  <xsd:element name="CreateXMLSignatureResponse" type="CreateXMLSignatureResponseType"/>
+  <!--########## Verify CMS Signature ###-->
+  <!--### Verifiy CMS Signature Request ###-->
+  <xsd:element name="VerifyCMSSignatureRequest">
+    <xsd:complexType>
+      <xsd:complexContent>
+        <xsd:extension base="VerifyCMSSignatureRequestType">
+          <xsd:attribute name="Signatories" type="SignatoriesType" use="optional" default="1"/>
+        </xsd:extension>
+      </xsd:complexContent>
+    </xsd:complexType>
+  </xsd:element>
+  <xsd:complexType name="VerifyCMSSignatureRequestType">
+    <xsd:sequence>
+      <xsd:element name="DateTime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="CMSSignature" type="xsd:base64Binary"/>
+      <xsd:element name="DataObject" type="CMSDataObjectOptionalMetaType" minOccurs="0"/>
+      <xsd:element name="TrustProfileID">
+        <xsd:annotation>
+          <xsd:documentation>mit diesem Profil wird eine Menge von vertrauenswürdigen Wurzelzertifikaten spezifiziert</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--### Verify CMS Signature Response ###-->
+  <xsd:element name="VerifyCMSSignatureResponse" type="VerifyCMSSignatureResponseType"/>
+  <xsd:complexType name="VerifyCMSSignatureResponseType">
+    <xsd:sequence maxOccurs="unbounded">
+      <xsd:element name="SignerInfo" type="dsig:KeyInfoType">
+        <xsd:annotation>
+          <xsd:documentation>only ds:X509Data and RetrievalMethod is supported; QualifiedCertificate is included as X509Data/any;publicAuthority is included as X509Data/any</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="SignatureCheck" type="CheckResultType"/>
+      <xsd:element name="CertificateCheck" type="CheckResultType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--########## Verify XML Signature ###-->
+  <!--### Verify XML Signature Request ###-->
+  <xsd:element name="VerifyXMLSignatureRequest" type="VerifyXMLSignatureRequestType"/>
+  <xsd:complexType name="VerifyXMLSignatureRequestType">
+    <xsd:sequence>
+      <xsd:element name="DateTime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="VerifySignatureInfo">
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element name="VerifySignatureEnvironment" type="ContentOptionalRefType"/>
+            <xsd:element name="VerifySignatureLocation" type="xsd:token"/>
+          </xsd:sequence>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:choice minOccurs="0" maxOccurs="unbounded">
+        <xsd:element ref="SupplementProfile"/>
+        <xsd:element name="SupplementProfileID" type="xsd:string"/>
+      </xsd:choice>
+      <xsd:element name="SignatureManifestCheckParams" minOccurs="0">
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element name="ReferenceInfo" type="VerifyTransformsDataType" maxOccurs="unbounded">
+              <xsd:annotation>
+                <xsd:documentation>Pro dsig:Reference-Element in der zu überprüfenden XML-Signatur muss hier ein ReferenceInfo-Element erscheinen. Die Reihenfolge der einzelnen ReferenceInfo Elemente entspricht jener der dsig:Reference Elemente in der XML-Signatur.</xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+          </xsd:sequence>
+          <xsd:attribute name="ReturnReferenceInputData" type="xsd:boolean" use="optional" default="true"/>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element name="ReturnHashInputData" minOccurs="0"/>
+      <xsd:element name="TrustProfileID">
+        <xsd:annotation>
+          <xsd:documentation>mit diesem Profil wird eine Menge von vertrauenswürdigen Wurzelzertifikaten spezifiziert</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--### Verify XML Signature Response ###-->
+  <xsd:element name="VerifyXMLSignatureResponse" type="VerifyXMLSignatureResponseType"/>
+  <xsd:complexType name="VerifyXMLSignatureResponseType">
+    <xsd:sequence>
+      <xsd:element name="SignerInfo" type="dsig:KeyInfoType">
+        <xsd:annotation>
+          <xsd:documentation>only ds:X509Data and ds:RetrievalMethod is supported; QualifiedCertificate is included as X509Data/any; PublicAuthority is included as X509Data/any</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="HashInputData" type="ContentExLocRefBaseType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="ReferenceInputData" type="ContentExLocRefBaseType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="SignatureCheck" type="ReferencesCheckResultType"/>
+      <xsd:element name="SignatureManifestCheck" type="ReferencesCheckResultType" minOccurs="0"/>
+      <xsd:element name="XMLDSIGManifestCheck" type="ManifestRefsCheckResultType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="CertificateCheck" type="CheckResultType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:simpleType name="ProfileIdentifierType">
+    <xsd:restriction base="xsd:token"/>
+  </xsd:simpleType>
+  <xsd:complexType name="MetaInfoType">
+    <xsd:sequence>
+      <xsd:element name="MimeType" type="MimeTypeType"/>
+      <xsd:element name="Description" type="xsd:anyURI" minOccurs="0"/>
+      <xsd:any namespace="##other" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="FinalDataMetaInfoType">
+    <xsd:complexContent>
+      <xsd:extension base="MetaInfoType">
+        <xsd:sequence>
+          <xsd:element name="Type" type="xsd:anyURI" minOccurs="0"/>
+        </xsd:sequence>
+      </xsd:extension>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="DataObjectInfoType">
+    <xsd:sequence>
+      <xsd:element name="DataObject">
+        <xsd:complexType>
+          <xsd:complexContent>
+            <xsd:extension base="ContentOptionalRefType"/>
+          </xsd:complexContent>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:annotation>
+          <xsd:documentation>Auswahl: Entweder explizite Angabe EINER Transformationskette inklusive ggf. sinnvoller Supplements oder Verweis auf ein benanntes Profil</xsd:documentation>
+        </xsd:annotation>
+        <xsd:element ref="CreateTransformsInfoProfile"/>
+        <xsd:element name="CreateTransformsInfoProfileID" type="ProfileIdentifierType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="Structure" use="required">
+      <xsd:simpleType>
+        <xsd:restriction base="xsd:string">
+          <xsd:enumeration value="detached"/>
+          <xsd:enumeration value="enveloping"/>
+        </xsd:restriction>
+      </xsd:simpleType>
+    </xsd:attribute>
+  </xsd:complexType>
+  <xsd:complexType name="TransformsInfoType">
+    <xsd:sequence>
+      <xsd:element ref="dsig:Transforms" minOccurs="0"/>
+      <xsd:element name="FinalDataMetaInfo" type="FinalDataMetaInfoType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="XMLDataObjectAssociationType">
+    <xsd:sequence>
+      <xsd:element name="MetaInfo" type="MetaInfoType" minOccurs="0"/>
+      <xsd:element name="Content" type="ContentRequiredRefType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="CMSDataObjectOptionalMetaType">
+    <xsd:sequence>
+      <xsd:element name="MetaInfo" type="MetaInfoType" minOccurs="0"/>
+      <xsd:element name="Content" type="CMSContentBaseType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="CMSContentBaseType">
+    <xsd:complexContent>
+      <xsd:restriction base="ContentOptionalRefType">
+        <xsd:choice minOccurs="0">
+          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
+        </xsd:choice>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="CheckResultType">
+    <xsd:sequence>
+      <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
+      <xsd:element name="Info" type="AnyChildrenType" minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="ReferencesCheckResultType">
+    <xsd:complexContent>
+      <xsd:restriction base="CheckResultType">
+        <xsd:sequence>
+          <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
+          <xsd:element name="Info" type="ReferencesCheckResultInfoType" minOccurs="0"/>
+        </xsd:sequence>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ReferencesCheckResultInfoType" mixed="true">
+    <xsd:complexContent mixed="true">
+      <xsd:restriction base="AnyChildrenType">
+        <xsd:sequence>
+          <xsd:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="FailedReference" type="xsd:positiveInteger" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ManifestRefsCheckResultType">
+    <xsd:complexContent>
+      <xsd:restriction base="CheckResultType">
+        <xsd:sequence>
+          <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
+          <xsd:element name="Info" type="ManifestRefsCheckResultInfoType"/>
+        </xsd:sequence>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ManifestRefsCheckResultInfoType" mixed="true">
+    <xsd:complexContent mixed="true">
+      <xsd:restriction base="AnyChildrenType">
+        <xsd:sequence>
+          <xsd:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="FailedReference" type="xsd:positiveInteger" minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="ReferringSigReference" type="xsd:positiveInteger"/>
+        </xsd:sequence>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <!--########## Error Response ###-->
+  <xsd:element name="ErrorResponse" type="ErrorResponseType">
+    <xsd:annotation>
+      <xsd:documentation>Resultat, falls die Signaturerstellung gescheitert ist</xsd:documentation>
+    </xsd:annotation>
+  </xsd:element>
+  <xsd:complexType name="ErrorResponseType">
+    <xsd:sequence>
+      <xsd:element name="ErrorCode" type="xsd:integer"/>
+      <xsd:element name="Info" type="xsd:string"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--########## Auxiliary Types ###-->
+  <xsd:simpleType name="KeyIdentifierType">
+    <xsd:restriction base="xsd:string"/>
+  </xsd:simpleType>
+  <xsd:simpleType name="KeyStorageType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="Software"/>
+      <xsd:enumeration value="Hardware"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <xsd:simpleType name="MimeTypeType">
+    <xsd:restriction base="xsd:token"/>
+  </xsd:simpleType>
+  <xsd:complexType name="AnyChildrenType" mixed="true">
+    <xsd:sequence>
+      <xsd:any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="XMLContentType" mixed="true">
+    <xsd:complexContent mixed="true">
+      <xsd:extension base="AnyChildrenType">
+        <xsd:attribute ref="xml:space" use="optional"/>
+      </xsd:extension>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ContentBaseType">
+    <xsd:choice minOccurs="0">
+      <xsd:element name="Base64Content" type="xsd:base64Binary"/>
+      <xsd:element name="XMLContent" type="XMLContentType"/>
+      <xsd:element name="LocRefContent" type="xsd:anyURI"/>
+    </xsd:choice>
+  </xsd:complexType>
+  <xsd:complexType name="ContentExLocRefBaseType">
+    <xsd:complexContent>
+      <xsd:restriction base="ContentBaseType">
+        <xsd:choice minOccurs="0">
+          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
+          <xsd:element name="XMLContent" type="XMLContentType"/>
+        </xsd:choice>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ContentOptionalRefType">
+    <xsd:complexContent>
+      <xsd:extension base="ContentBaseType">
+        <xsd:attribute name="Reference" type="xsd:anyURI" use="optional"/>
+      </xsd:extension>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ContentRequiredRefType">
+    <xsd:complexContent>
+      <xsd:restriction base="ContentOptionalRefType">
+        <xsd:choice minOccurs="0">
+          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
+          <xsd:element name="XMLContent" type="XMLContentType"/>
+          <xsd:element name="LocRefContent" type="xsd:anyURI"/>
+        </xsd:choice>
+        <xsd:attribute name="Reference" type="xsd:anyURI" use="required"/>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="VerifyTransformsDataType">
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:annotation>
+        <xsd:documentation>Ein oder mehrere Transformationswege können von der Applikation an MOA mitgeteilt werden. Die zu prüfende Signatur hat zumindest einem dieser Transformationswege zu entsprechen. Die Angabe kann explizit oder als Profilbezeichner erfolgen.</xsd:documentation>
+      </xsd:annotation>
+      <xsd:element ref="VerifyTransformsInfoProfile"/>
+      <xsd:element name="VerifyTransformsInfoProfileID" type="xsd:string">
+        <xsd:annotation>
+          <xsd:documentation>Profilbezeichner für einen Transformationsweg</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:choice>
+  </xsd:complexType>
+  <xsd:element name="QualifiedCertificate"/>
+  <xsd:element name="PublicAuthority" type="PublicAuthorityType"/>
+  <xsd:complexType name="PublicAuthorityType">
+    <xsd:sequence>
+      <xsd:element name="Code" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:simpleType name="SignatoriesType">
+    <xsd:union memberTypes="AllSignatoriesType">
+      <xsd:simpleType>
+        <xsd:list itemType="xsd:positiveInteger"/>
+      </xsd:simpleType>
+    </xsd:union>
+  </xsd:simpleType>
+  <xsd:simpleType name="AllSignatoriesType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="all"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <xsd:complexType name="CreateSignatureLocationType">
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+        <xsd:attribute name="Index" type="xsd:nonNegativeInteger" use="required"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+  <xsd:complexType name="TransformParameterType">
+    <xsd:choice minOccurs="0">
+      <xsd:annotation>
+        <xsd:documentation>Die Angabe des Transformationsparameters (explizit oder als Hashwert) kann unterlassen werden, wenn die Applikation von der Unveränderlichkeit des Inhalts der in "Transformationsparamter", Attribut "URI" angegebenen URI ausgehen kann.</xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="Base64Content" type="xsd:base64Binary">
+        <xsd:annotation>
+          <xsd:documentation>Der Transformationsparameter explizit angegeben.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="Hash">
+        <xsd:annotation>
+          <xsd:documentation>Der Hashwert des Transformationsparameters.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element ref="dsig:DigestMethod"/>
+            <xsd:element ref="dsig:DigestValue"/>
+          </xsd:sequence>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:choice>
+    <xsd:attribute name="URI" type="xsd:anyURI" use="required"/>
+  </xsd:complexType>
+  <xsd:element name="CreateSignatureEnvironmentProfile">
+    <xsd:complexType>
+      <xsd:sequence>
+        <xsd:element name="CreateSignatureLocation" type="CreateSignatureLocationType"/>
+        <xsd:element name="Supplement" type="XMLDataObjectAssociationType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:complexType>
+  </xsd:element>
+  <xsd:element name="VerifyTransformsInfoProfile">
+    <xsd:annotation>
+      <xsd:documentation>Explizite Angabe des Transformationswegs</xsd:documentation>
+    </xsd:annotation>
+    <xsd:complexType>
+      <xsd:sequence>
+        <xsd:element ref="dsig:Transforms" minOccurs="0"/>
+        <xsd:element name="TransformParameter" type="TransformParameterType" minOccurs="0" maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>Alle impliziten Transformationsparameter, die zum Durchlaufen der oben angeführten Transformationskette bekannt sein müssen, müssen hier angeführt werden. Das Attribut "URI" bezeichnet den Transformationsparameter in exakt jener Weise, wie er in der zu überprüfenden Signatur gebraucht wird.</xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:sequence>
+    </xsd:complexType>
+  </xsd:element>
+  <xsd:element name="Supplement" type="XMLDataObjectAssociationType"/>
+  <xsd:element name="SupplementProfile" type="XMLDataObjectAssociationType"/>
+  <xsd:element name="CreateTransformsInfoProfile">
+    <xsd:complexType>
+      <xsd:sequence>
+        <xsd:element name="CreateTransformsInfo" type="TransformsInfoType"/>
+        <xsd:element ref="Supplement" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:complexType>
+  </xsd:element>
+</xsd:schema>
diff --git a/id/server/auth-final/.gitignore b/id/server/auth-final/.gitignore
new file mode 100644
index 000000000..4dc009173
--- /dev/null
+++ b/id/server/auth-final/.gitignore
@@ -0,0 +1,2 @@
+/target
+/bin
diff --git a/id/server/auth-final/pom.xml b/id/server/auth-final/pom.xml
new file mode 100644
index 000000000..b6b153ec3
--- /dev/null
+++ b/id/server/auth-final/pom.xml
@@ -0,0 +1,250 @@
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+	<parent>
+		<groupId>MOA.id</groupId>
+		<artifactId>moa-id</artifactId>
+		<version>3.x</version>
+	</parent>
+	
+	<modelVersion>4.0.0</modelVersion>
+	<groupId>MOA.id.server</groupId>
+	<artifactId>moa-id-auth-final</artifactId>
+	<version>${moa-id-version-final}</version>
+	<packaging>war</packaging>
+	<name>MOA ID-Auth-Final</name>
+	<description>Final release-version of MOA-ID-Auth without education and development functionality</description>
+	
+	<properties>
+		<repositoryPath>${basedir}/../../../repository</repositoryPath>
+	</properties>
+	
+	<repositories>
+		<repository>
+			<id>shibboleth.internet2.edu</id>
+			<name>Internet2</name>
+			<url>https://build.shibboleth.net/nexus/content/groups/public/</url>
+		</repository>
+	</repositories>
+	
+	<build>
+		<!--sourceDirectory>${basedir}/../idserverlib/src/main/java</sourceDirectory-->
+		<!--testSourceDirectory>${basedir}/../idserverlib/src/test/java</testSourceDirectory-->
+		<plugins>
+		
+			<plugin>
+      	<groupId>org.codehaus.mojo</groupId>
+      	<artifactId>versions-maven-plugin</artifactId>
+      	<version>2.1</version>
+    	</plugin>
+		
+		
+<!-- 		        	<plugin>
+            		<groupId>org.codehaus.mojo</groupId>
+            		<artifactId>properties-maven-plugin</artifactId>
+            		<version>1.0-alpha-2</version>
+            		<executions>
+                		<execution>
+                    		<phase>initialize</phase>
+                    		<goals>
+                        		<goal>read-project-properties</goal>
+                    		</goals>
+                    		<configuration>
+    	                   		<files>
+		                            <file>${basedir}/../../../moa-id.properties</file>
+      		                  </files>
+          		          </configuration>
+              		  </execution>
+            		</executions>
+        		</plugin> -->
+				<plugin>
+				<groupId>org.apache.maven.plugins</groupId>
+				<artifactId>maven-war-plugin</artifactId>
+				<version>2.1.1</version>
+				<!-- <version>2.0.2</version>-->
+				<configuration>
+					<archive>
+						<manifest>
+							<addDefaultSpecificationEntries>false</addDefaultSpecificationEntries>
+							<addDefaultImplementationEntries>true</addDefaultImplementationEntries>
+						</manifest>
+						<addMavenDescriptor>false</addMavenDescriptor>
+					</archive>
+				</configuration>
+			</plugin>
+		</plugins>
+	</build>
+	
+	<dependencies>
+
+
+        <!-- we need Axis 1.1 here, 1.0 is included in SPSS -->
+		<dependency>
+			<groupId>MOA.spss.server</groupId>
+			<artifactId>moa-spss-lib</artifactId>
+			<exclusions>
+				<exclusion>
+					<artifactId>iaik_pki_module</artifactId>
+					<groupId>iaik</groupId>
+				</exclusion>
+				<exclusion>
+					<groupId>commons-logging</groupId>
+					<artifactId>commons-logging</artifactId>
+				</exclusion>
+				<exclusion>
+					<artifactId>axis-wsdl4j</artifactId>
+					<groupId>axis</groupId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		<dependency>
+			<groupId>MOA.id.server</groupId>
+			<artifactId>moa-id-lib</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>commons-logging</groupId>
+					<artifactId>commons-logging</artifactId>
+				</exclusion>
+				<exclusion>
+					<groupId>ch.qos.logback</groupId>
+					<artifactId>logback-classic</artifactId>
+				</exclusion>
+				<exclusion>
+					<artifactId>axis</artifactId>
+					<groupId>axis</groupId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		
+		<dependency>
+			<groupId>MOA.id.server</groupId>
+			<artifactId>moa-id-spring-initializer</artifactId>
+		</dependency>
+		<dependency>
+			<groupId>MOA.id.server</groupId>
+  		<artifactId>moa-id-frontend-resources</artifactId>
+		</dependency>
+		
+		
+		<!-- Adding eIDAS module dependency automatically adds eIDAS protocol capabilities. -->
+		<!--dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-eIDAS</artifactId>
+		</dependency-->
+		
+		
+		<!-- Adding monitoring module dependency automatically adds monitoring capabilities. -->
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-monitoring</artifactId>
+		</dependency>
+
+
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-saml1</artifactId>
+		</dependency>
+
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-openID</artifactId>
+		</dependency>
+
+		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+    	<artifactId>moa-id-module-elga_mandate_service</artifactId>
+		</dependency>
+
+<!-- 		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-pvp2</artifactId>
+		</dependency> -->
+
+ 		<dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-modul-citizencard_authentication</artifactId>
+		</dependency>
+
+			<!--dependency>
+				<groupId>MOA.id.server.modules</groupId>
+				<artifactId>moa-id-modules-federated_authentication</artifactId>
+			</dependency--> 
+
+		<!--dependency>
+			<groupId>MOA.id.server.modules</groupId>
+			<artifactId>moa-id-module-ssoTransfer</artifactId>
+			<version>${moa-id-version}</version>
+		</dependency-->
+				
+        <!-- transitive dependencies we don't want to include into the war -->
+		<dependency>
+			<groupId>iaik.prod</groupId>
+			<artifactId>iaik_jce_full</artifactId>
+			<!-- should be in the ext directory of the jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>iaik.prod</groupId>
+			<artifactId>iaik_ecc</artifactId>
+			<!-- should be in the ext directory of the jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>iaik.prod</groupId>
+			<artifactId>iaik_Pkcs11Provider</artifactId>
+			<!-- should be in the ext directory of the jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>iaik.prod</groupId>
+			<artifactId>iaik_Pkcs11Wrapper</artifactId>
+			<!-- should be in the ext directory of the jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>xalan-bin-dist</groupId>
+			<artifactId>xalan</artifactId>
+			<!-- should be provided by the container or jre -->
+			<scope>provided</scope>
+			<exclusions>
+				<exclusion>
+					<groupId>xalan</groupId>
+					<artifactId>serializer</artifactId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		<dependency>
+			<groupId>xerces</groupId>
+			<artifactId>xercesImpl</artifactId>
+			<!-- should be provided by the container or jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>xalan-bin-dist</groupId>
+			<artifactId>xml-apis</artifactId>
+			<!-- should be provided by the container or jre -->
+			<scope>provided</scope>
+		</dependency>
+		<dependency>
+			<groupId>xalan-bin-dist</groupId>
+			<artifactId>serializer</artifactId>
+			<!-- should be provided by the container or jre -->
+			<scope>provided</scope>
+		</dependency>
+
+		<dependency>
+			<groupId>org.springframework</groupId>
+			<artifactId>spring-webmvc</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>commons-logging</groupId>
+					<artifactId>commons-logging</artifactId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		<dependency>
+			<groupId>org.slf4j</groupId>
+			<artifactId>jcl-over-slf4j</artifactId>
+		</dependency>
+
+	</dependencies>
+
+</project>
diff --git a/id/server/auth-final/src/main/resources/log4j.properties b/id/server/auth-final/src/main/resources/log4j.properties
new file mode 100644
index 000000000..ecdfad165
--- /dev/null
+++ b/id/server/auth-final/src/main/resources/log4j.properties
@@ -0,0 +1,27 @@
+# commons-logging setup
+org.apache.commons.logging.LogFactory=org.apache.commons.logging.impl.Log4jFactory
+
+# define log4j root loggers
+log4j.rootLogger=info, stdout, R
+log4j.logger.at.gv.egovernment.moa=info, R
+log4j.logger.at.gv.egovernment.moa.spss=info, R
+log4j.logger.iaik.server=info, R
+log4j.logger.at.gv.egovernment.moa.id=info, R
+log4j.logger.at.gv.egovernment.moa.id.proxy=info, R
+log4j.logger.eu.stork=info, R
+log4j.logger.org.hibernate=warn, R
+
+# configure the stdout appender
+log4j.appender.stdout=org.apache.log4j.ConsoleAppender
+log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
+#log4j.appender.stdout.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %20c |  %10t | %m%n
+log4j.appender.stdout.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %20.20c | %10t | %m%n
+
+# configure the rolling file appender (R)
+log4j.appender.R=org.apache.log4j.RollingFileAppender
+log4j.appender.R.File=${catalina.base}/logs/moa-id.log
+log4j.appender.R.MaxFileSize=10000KB
+log4j.appender.R.MaxBackupIndex=1
+log4j.appender.R.layout=org.apache.log4j.PatternLayout
+log4j.appender.R.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %t | %m%n
+
diff --git a/id/server/auth-final/src/main/webapp/META-INF/MANIFEST.MF b/id/server/auth-final/src/main/webapp/META-INF/MANIFEST.MF
new file mode 100644
index 000000000..58630c02e
--- /dev/null
+++ b/id/server/auth-final/src/main/webapp/META-INF/MANIFEST.MF
@@ -0,0 +1,2 @@
+Manifest-Version: 1.0
+
diff --git a/id/server/auth-final/src/main/webapp/WEB-INF/web.xml b/id/server/auth-final/src/main/webapp/WEB-INF/web.xml
new file mode 100644
index 000000000..9ad651d42
--- /dev/null
+++ b/id/server/auth-final/src/main/webapp/WEB-INF/web.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
+	version="3.1">
+	<display-name>MOA ID Auth</display-name>
+	<description>MOA ID Authentication Service</description>
+
+	<filter>
+		<filter-name>characterEncodingFilter</filter-name>
+		<filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
+		<init-param>
+			<param-name>encoding</param-name>
+			<param-value>UTF-8</param-value>
+		</init-param>
+		<init-param>
+			<param-name>forceEncoding</param-name>
+			<param-value>true</param-value>
+		</init-param>
+	</filter>
+	<filter-mapping>
+		<filter-name>characterEncodingFilter</filter-name>
+		<url-pattern>/*</url-pattern>
+	</filter-mapping>
+	
+	<welcome-file-list>
+   <welcome-file>index.html</welcome-file>
+	</welcome-file-list>
+	
+	<session-config>
+		<session-timeout>5</session-timeout>
+	</session-config>
+	
+	<error-page>
+		<error-code>500</error-code>
+		<location>/errorpage.jsp</location>
+	</error-page>
+	
+	<login-config>
+		<auth-method>BASIC</auth-method>
+		<realm-name>UserDatabase</realm-name>
+	</login-config>
+	<security-role>
+		<description>The role that is required to log in to the moa Application</description>
+		<role-name>moa-admin</role-name>
+	</security-role>
+
+</web-app>
diff --git a/id/server/auth-final/src/main/webapp/index.html b/id/server/auth-final/src/main/webapp/index.html
new file mode 100644
index 000000000..e69de29bb
diff --git a/id/server/auth-final/src/main/wsdl/MOA-ID-1.0.wsdl b/id/server/auth-final/src/main/wsdl/MOA-ID-1.0.wsdl
new file mode 100644
index 000000000..5751b3e58
--- /dev/null
+++ b/id/server/auth-final/src/main/wsdl/MOA-ID-1.0.wsdl
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<definitions name="MOA" targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:tns="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:moa="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:xsd="http://www.w3.org/1999/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/ http://schemas.xmlsoap.org/wsdl/">
+	<import namespace="http://reference.e-government.gv.at/namespace/moa/20020822#" location="MOA-20020812.xsd"/>
+	<message name="GetAuthenticationDataInput">
+		<part name="body" element="samlp:Request"/>
+	</message>
+	<message name="GetAuthenticationDataOutput">
+		<part name="body" element="samlp:Response"/>
+	</message>
+	<message name="MOAFault">
+		<part name="body" element="moa:ErrorResponse"/>
+	</message>
+	<portType name="IdentificationPortType">
+		<operation name="getAuthenticationData">
+			<input message="tns:GetAuthenticationDataInput"/>
+			<output message="tns:GetAuthenticationDataOutput"/>
+			<fault name="MOAFault" message="tns:MOAFault"/>
+		</operation>
+	</portType>
+	<binding name="IdentificationBinding" type="tns:IdentificationPortType" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/soap/ http://schemas.xmlsoap.org/wsdl/soap/">
+		<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
+		<operation name="getAuthenticationData">
+			<soap:operation soapAction="urn:GetAuthenticationDataAction"/>
+			<input>
+				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</input>
+			<output>
+				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</output>
+			<fault name="MOAFault">
+				<soap:fault name="MOAFault" use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</fault>
+		</operation>
+	</binding>
+	<service name="GetAuthenticationDataService">
+		<port name="IdentificationPort" binding="tns:IdentificationBinding">
+			<soap:address location="http://localhost/moa-id-auth/services/GetAuthenticationData"/>
+		</port>
+	</service>
+</definitions>
diff --git a/id/server/auth-final/src/main/wsdl/MOA-ID-1.x.wsdl b/id/server/auth-final/src/main/wsdl/MOA-ID-1.x.wsdl
new file mode 100644
index 000000000..37f86aad5
--- /dev/null
+++ b/id/server/auth-final/src/main/wsdl/MOA-ID-1.x.wsdl
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<definitions name="MOA" targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:tns="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:moa="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:xsd="http://www.w3.org/1999/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/ http://schemas.xmlsoap.org/wsdl/">
+	<import namespace="http://reference.e-government.gv.at/namespace/moa/20020822#" location="MOA-SPSS-2.0.0.xsd"/>
+	<message name="GetAuthenticationDataInput">
+		<part name="body" element="samlp:Request"/>
+	</message>
+	<message name="GetAuthenticationDataOutput">
+		<part name="body" element="samlp:Response"/>
+	</message>
+	<message name="MOAFault">
+		<part name="body" element="moa:ErrorResponse"/>
+	</message>
+	<portType name="IdentificationPortType">
+		<operation name="getAuthenticationData">
+			<input message="tns:GetAuthenticationDataInput"/>
+			<output message="tns:GetAuthenticationDataOutput"/>
+			<fault name="MOAFault" message="tns:MOAFault"/>
+		</operation>
+	</portType>
+	<binding name="IdentificationBinding" type="tns:IdentificationPortType" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/soap/ http://schemas.xmlsoap.org/wsdl/soap/">
+		<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
+		<operation name="getAuthenticationData">
+			<soap:operation soapAction="urn:GetAuthenticationDataAction"/>
+			<input>
+				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</input>
+			<output>
+				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</output>
+			<fault name="MOAFault">
+				<soap:fault name="MOAFault" use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
+			</fault>
+		</operation>
+	</binding>
+	<service name="GetAuthenticationDataService">
+		<port name="IdentificationPort" binding="tns:IdentificationBinding">
+			<soap:address location="http://localhost/Identification"/>
+		</port>
+	</service>
+</definitions>
diff --git a/id/server/auth-final/src/main/wsdl/MOA-SPSS-1.2.xsd b/id/server/auth-final/src/main/wsdl/MOA-SPSS-1.2.xsd
new file mode 100644
index 000000000..d7a06d6e7
--- /dev/null
+++ b/id/server/auth-final/src/main/wsdl/MOA-SPSS-1.2.xsd
@@ -0,0 +1,454 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  MOA SP/SS 1.2 Schema
+-->
+<xsd:schema targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://reference.e-government.gv.at/namespace/moa/20020822#" elementFormDefault="qualified" attributeFormDefault="unqualified" version="1.2">
+  <xsd:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="http://www.w3.org/TR/xmldsig-core/xmldsig-core-schema.xsd"/>
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+  <!--########## Create XML Signature ###-->
+  <!--### Create XML Signature Request ###-->
+  <xsd:element name="CreateXMLSignatureRequest">
+    <xsd:complexType>
+      <xsd:complexContent>
+        <xsd:extension base="CreateXMLSignatureRequestType"/>
+      </xsd:complexContent>
+    </xsd:complexType>
+  </xsd:element>
+  <xsd:complexType name="CreateXMLSignatureRequestType">
+    <xsd:sequence>
+      <xsd:element name="KeyIdentifier" type="KeyIdentifierType"/>
+      <xsd:element name="SingleSignatureInfo" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>Ermöglichung der Stapelsignatur durch wiederholte Angabe dieses Elements</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element name="DataObjectInfo" maxOccurs="unbounded">
+              <xsd:complexType>
+                <xsd:complexContent>
+                  <xsd:extension base="DataObjectInfoType">
+                    <xsd:attribute name="ChildOfManifest" type="xsd:boolean" use="optional" default="false"/>
+                  </xsd:extension>
+                </xsd:complexContent>
+              </xsd:complexType>
+            </xsd:element>
+            <xsd:element name="CreateSignatureInfo" minOccurs="0">
+              <xsd:complexType>
+                <xsd:sequence>
+                  <xsd:element name="CreateSignatureEnvironment" type="ContentOptionalRefType"/>
+                  <xsd:choice>
+                    <xsd:annotation>
+                      <xsd:documentation>Auswahl: Entweder explizite Angabe des Signaturorts sowie ggf. sinnvoller Supplements im Zshg. mit der Signaturumgebung, oder Verweis auf ein benanntes Profil</xsd:documentation>
+                    </xsd:annotation>
+                    <xsd:element ref="CreateSignatureEnvironmentProfile"/>
+                    <xsd:element name="CreateSignatureEnvironmentProfileID" type="ProfileIdentifierType"/>
+                  </xsd:choice>
+                </xsd:sequence>
+              </xsd:complexType>
+            </xsd:element>
+          </xsd:sequence>
+          <xsd:attribute name="SecurityLayerConformity" type="xsd:boolean" use="optional" default="true"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--### Create XML Signature Response ###-->
+  <xsd:complexType name="CreateXMLSignatureResponseType">
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:annotation>
+        <xsd:documentation>Kardinalität 1..oo erlaubt die Antwort auf eine Stapelsignatur-Anfrage</xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="SignatureEnvironment">
+        <xsd:annotation>
+          <xsd:documentation>Resultat, falls die Signaturerstellung erfolgreich war</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any" processContents="lax"/>
+          </xsd:sequence>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element ref="ErrorResponse"/>
+    </xsd:choice>
+  </xsd:complexType>
+  <xsd:element name="CreateXMLSignatureResponse" type="CreateXMLSignatureResponseType"/>
+  <!--########## Verify CMS Signature ###-->
+  <!--### Verifiy CMS Signature Request ###-->
+  <xsd:element name="VerifyCMSSignatureRequest">
+    <xsd:complexType>
+      <xsd:complexContent>
+        <xsd:extension base="VerifyCMSSignatureRequestType">
+          <xsd:attribute name="Signatories" type="SignatoriesType" use="optional" default="1"/>
+        </xsd:extension>
+      </xsd:complexContent>
+    </xsd:complexType>
+  </xsd:element>
+  <xsd:complexType name="VerifyCMSSignatureRequestType">
+    <xsd:sequence>
+      <xsd:element name="DateTime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="CMSSignature" type="xsd:base64Binary"/>
+      <xsd:element name="DataObject" type="CMSDataObjectOptionalMetaType" minOccurs="0"/>
+      <xsd:element name="TrustProfileID">
+        <xsd:annotation>
+          <xsd:documentation>mit diesem Profil wird eine Menge von vertrauenswürdigen Wurzelzertifikaten spezifiziert</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--### Verify CMS Signature Response ###-->
+  <xsd:element name="VerifyCMSSignatureResponse" type="VerifyCMSSignatureResponseType"/>
+  <xsd:complexType name="VerifyCMSSignatureResponseType">
+    <xsd:sequence maxOccurs="unbounded">
+      <xsd:element name="SignerInfo" type="dsig:KeyInfoType">
+        <xsd:annotation>
+          <xsd:documentation>only ds:X509Data and RetrievalMethod is supported; QualifiedCertificate is included as X509Data/any;publicAuthority is included as X509Data/any</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="SignatureCheck" type="CheckResultType"/>
+      <xsd:element name="CertificateCheck" type="CheckResultType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--########## Verify XML Signature ###-->
+  <!--### Verify XML Signature Request ###-->
+  <xsd:element name="VerifyXMLSignatureRequest" type="VerifyXMLSignatureRequestType"/>
+  <xsd:complexType name="VerifyXMLSignatureRequestType">
+    <xsd:sequence>
+      <xsd:element name="DateTime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="VerifySignatureInfo">
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element name="VerifySignatureEnvironment" type="ContentOptionalRefType"/>
+            <xsd:element name="VerifySignatureLocation" type="xsd:token"/>
+          </xsd:sequence>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:choice minOccurs="0" maxOccurs="unbounded">
+        <xsd:element ref="SupplementProfile"/>
+        <xsd:element name="SupplementProfileID" type="xsd:string"/>
+      </xsd:choice>
+      <xsd:element name="SignatureManifestCheckParams" minOccurs="0">
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element name="ReferenceInfo" type="VerifyTransformsDataType" maxOccurs="unbounded">
+              <xsd:annotation>
+                <xsd:documentation>Pro dsig:Reference-Element in der zu überprüfenden XML-Signatur muss hier ein ReferenceInfo-Element erscheinen. Die Reihenfolge der einzelnen ReferenceInfo Elemente entspricht jener der dsig:Reference Elemente in der XML-Signatur.</xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+          </xsd:sequence>
+          <xsd:attribute name="ReturnReferenceInputData" type="xsd:boolean" use="optional" default="true"/>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element name="ReturnHashInputData" minOccurs="0"/>
+      <xsd:element name="TrustProfileID">
+        <xsd:annotation>
+          <xsd:documentation>mit diesem Profil wird eine Menge von vertrauenswürdigen Wurzelzertifikaten spezifiziert</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--### Verify XML Signature Response ###-->
+  <xsd:element name="VerifyXMLSignatureResponse" type="VerifyXMLSignatureResponseType"/>
+  <xsd:complexType name="VerifyXMLSignatureResponseType">
+    <xsd:sequence>
+      <xsd:element name="SignerInfo" type="dsig:KeyInfoType">
+        <xsd:annotation>
+          <xsd:documentation>only ds:X509Data and ds:RetrievalMethod is supported; QualifiedCertificate is included as X509Data/any; PublicAuthority is included as X509Data/any</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="HashInputData" type="ContentExLocRefBaseType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="ReferenceInputData" type="ContentExLocRefBaseType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="SignatureCheck" type="ReferencesCheckResultType"/>
+      <xsd:element name="SignatureManifestCheck" type="ReferencesCheckResultType" minOccurs="0"/>
+      <xsd:element name="XMLDSIGManifestCheck" type="ManifestRefsCheckResultType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="CertificateCheck" type="CheckResultType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:simpleType name="ProfileIdentifierType">
+    <xsd:restriction base="xsd:token"/>
+  </xsd:simpleType>
+  <xsd:complexType name="MetaInfoType">
+    <xsd:sequence>
+      <xsd:element name="MimeType" type="MimeTypeType"/>
+      <xsd:element name="Description" type="xsd:anyURI" minOccurs="0"/>
+      <xsd:any namespace="##other" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="FinalDataMetaInfoType">
+    <xsd:complexContent>
+      <xsd:extension base="MetaInfoType">
+        <xsd:sequence>
+          <xsd:element name="Type" type="xsd:anyURI" minOccurs="0"/>
+        </xsd:sequence>
+      </xsd:extension>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="DataObjectInfoType">
+    <xsd:sequence>
+      <xsd:element name="DataObject">
+        <xsd:complexType>
+          <xsd:complexContent>
+            <xsd:extension base="ContentOptionalRefType"/>
+          </xsd:complexContent>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:annotation>
+          <xsd:documentation>Auswahl: Entweder explizite Angabe EINER Transformationskette inklusive ggf. sinnvoller Supplements oder Verweis auf ein benanntes Profil</xsd:documentation>
+        </xsd:annotation>
+        <xsd:element ref="CreateTransformsInfoProfile"/>
+        <xsd:element name="CreateTransformsInfoProfileID" type="ProfileIdentifierType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="Structure" use="required">
+      <xsd:simpleType>
+        <xsd:restriction base="xsd:string">
+          <xsd:enumeration value="detached"/>
+          <xsd:enumeration value="enveloping"/>
+        </xsd:restriction>
+      </xsd:simpleType>
+    </xsd:attribute>
+  </xsd:complexType>
+  <xsd:complexType name="TransformsInfoType">
+    <xsd:sequence>
+      <xsd:element ref="dsig:Transforms" minOccurs="0"/>
+      <xsd:element name="FinalDataMetaInfo" type="FinalDataMetaInfoType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="XMLDataObjectAssociationType">
+    <xsd:sequence>
+      <xsd:element name="MetaInfo" type="MetaInfoType" minOccurs="0"/>
+      <xsd:element name="Content" type="ContentRequiredRefType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="CMSDataObjectOptionalMetaType">
+    <xsd:sequence>
+      <xsd:element name="MetaInfo" type="MetaInfoType" minOccurs="0"/>
+      <xsd:element name="Content" type="CMSContentBaseType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="CMSContentBaseType">
+    <xsd:complexContent>
+      <xsd:restriction base="ContentOptionalRefType">
+        <xsd:choice minOccurs="0">
+          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
+        </xsd:choice>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="CheckResultType">
+    <xsd:sequence>
+      <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
+      <xsd:element name="Info" type="AnyChildrenType" minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="ReferencesCheckResultType">
+    <xsd:complexContent>
+      <xsd:restriction base="CheckResultType">
+        <xsd:sequence>
+          <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
+          <xsd:element name="Info" type="ReferencesCheckResultInfoType" minOccurs="0"/>
+        </xsd:sequence>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ReferencesCheckResultInfoType" mixed="true">
+    <xsd:complexContent mixed="true">
+      <xsd:restriction base="AnyChildrenType">
+        <xsd:sequence>
+          <xsd:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="FailedReference" type="xsd:positiveInteger" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ManifestRefsCheckResultType">
+    <xsd:complexContent>
+      <xsd:restriction base="CheckResultType">
+        <xsd:sequence>
+          <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
+          <xsd:element name="Info" type="ManifestRefsCheckResultInfoType"/>
+        </xsd:sequence>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ManifestRefsCheckResultInfoType" mixed="true">
+    <xsd:complexContent mixed="true">
+      <xsd:restriction base="AnyChildrenType">
+        <xsd:sequence>
+          <xsd:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="FailedReference" type="xsd:positiveInteger" minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="ReferringSigReference" type="xsd:positiveInteger"/>
+        </xsd:sequence>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <!--########## Error Response ###-->
+  <xsd:element name="ErrorResponse" type="ErrorResponseType">
+    <xsd:annotation>
+      <xsd:documentation>Resultat, falls die Signaturerstellung gescheitert ist</xsd:documentation>
+    </xsd:annotation>
+  </xsd:element>
+  <xsd:complexType name="ErrorResponseType">
+    <xsd:sequence>
+      <xsd:element name="ErrorCode" type="xsd:integer"/>
+      <xsd:element name="Info" type="xsd:string"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!--########## Auxiliary Types ###-->
+  <xsd:simpleType name="KeyIdentifierType">
+    <xsd:restriction base="xsd:string"/>
+  </xsd:simpleType>
+  <xsd:simpleType name="KeyStorageType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="Software"/>
+      <xsd:enumeration value="Hardware"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <xsd:simpleType name="MimeTypeType">
+    <xsd:restriction base="xsd:token"/>
+  </xsd:simpleType>
+  <xsd:complexType name="AnyChildrenType" mixed="true">
+    <xsd:sequence>
+      <xsd:any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:complexType name="XMLContentType" mixed="true">
+    <xsd:complexContent mixed="true">
+      <xsd:extension base="AnyChildrenType">
+        <xsd:attribute ref="xml:space" use="optional"/>
+      </xsd:extension>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ContentBaseType">
+    <xsd:choice minOccurs="0">
+      <xsd:element name="Base64Content" type="xsd:base64Binary"/>
+      <xsd:element name="XMLContent" type="XMLContentType"/>
+      <xsd:element name="LocRefContent" type="xsd:anyURI"/>
+    </xsd:choice>
+  </xsd:complexType>
+  <xsd:complexType name="ContentExLocRefBaseType">
+    <xsd:complexContent>
+      <xsd:restriction base="ContentBaseType">
+        <xsd:choice minOccurs="0">
+          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
+          <xsd:element name="XMLContent" type="XMLContentType"/>
+        </xsd:choice>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ContentOptionalRefType">
+    <xsd:complexContent>
+      <xsd:extension base="ContentBaseType">
+        <xsd:attribute name="Reference" type="xsd:anyURI" use="optional"/>
+      </xsd:extension>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="ContentRequiredRefType">
+    <xsd:complexContent>
+      <xsd:restriction base="ContentOptionalRefType">
+        <xsd:choice minOccurs="0">
+          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
+          <xsd:element name="XMLContent" type="XMLContentType"/>
+          <xsd:element name="LocRefContent" type="xsd:anyURI"/>
+        </xsd:choice>
+        <xsd:attribute name="Reference" type="xsd:anyURI" use="required"/>
+      </xsd:restriction>
+    </xsd:complexContent>
+  </xsd:complexType>
+  <xsd:complexType name="VerifyTransformsDataType">
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:annotation>
+        <xsd:documentation>Ein oder mehrere Transformationswege können von der Applikation an MOA mitgeteilt werden. Die zu prüfende Signatur hat zumindest einem dieser Transformationswege zu entsprechen. Die Angabe kann explizit oder als Profilbezeichner erfolgen.</xsd:documentation>
+      </xsd:annotation>
+      <xsd:element ref="VerifyTransformsInfoProfile"/>
+      <xsd:element name="VerifyTransformsInfoProfileID" type="xsd:string">
+        <xsd:annotation>
+          <xsd:documentation>Profilbezeichner für einen Transformationsweg</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:choice>
+  </xsd:complexType>
+  <xsd:element name="QualifiedCertificate"/>
+  <xsd:element name="PublicAuthority" type="PublicAuthorityType"/>
+  <xsd:complexType name="PublicAuthorityType">
+    <xsd:sequence>
+      <xsd:element name="Code" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <xsd:simpleType name="SignatoriesType">
+    <xsd:union memberTypes="AllSignatoriesType">
+      <xsd:simpleType>
+        <xsd:list itemType="xsd:positiveInteger"/>
+      </xsd:simpleType>
+    </xsd:union>
+  </xsd:simpleType>
+  <xsd:simpleType name="AllSignatoriesType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="all"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <xsd:complexType name="CreateSignatureLocationType">
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+        <xsd:attribute name="Index" type="xsd:nonNegativeInteger" use="required"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+  <xsd:complexType name="TransformParameterType">
+    <xsd:choice minOccurs="0">
+      <xsd:annotation>
+        <xsd:documentation>Die Angabe des Transformationsparameters (explizit oder als Hashwert) kann unterlassen werden, wenn die Applikation von der Unveränderlichkeit des Inhalts der in "Transformationsparamter", Attribut "URI" angegebenen URI ausgehen kann.</xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="Base64Content" type="xsd:base64Binary">
+        <xsd:annotation>
+          <xsd:documentation>Der Transformationsparameter explizit angegeben.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="Hash">
+        <xsd:annotation>
+          <xsd:documentation>Der Hashwert des Transformationsparameters.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element ref="dsig:DigestMethod"/>
+            <xsd:element ref="dsig:DigestValue"/>
+          </xsd:sequence>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:choice>
+    <xsd:attribute name="URI" type="xsd:anyURI" use="required"/>
+  </xsd:complexType>
+  <xsd:element name="CreateSignatureEnvironmentProfile">
+    <xsd:complexType>
+      <xsd:sequence>
+        <xsd:element name="CreateSignatureLocation" type="CreateSignatureLocationType"/>
+        <xsd:element name="Supplement" type="XMLDataObjectAssociationType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:complexType>
+  </xsd:element>
+  <xsd:element name="VerifyTransformsInfoProfile">
+    <xsd:annotation>
+      <xsd:documentation>Explizite Angabe des Transformationswegs</xsd:documentation>
+    </xsd:annotation>
+    <xsd:complexType>
+      <xsd:sequence>
+        <xsd:element ref="dsig:Transforms" minOccurs="0"/>
+        <xsd:element name="TransformParameter" type="TransformParameterType" minOccurs="0" maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>Alle impliziten Transformationsparameter, die zum Durchlaufen der oben angeführten Transformationskette bekannt sein müssen, müssen hier angeführt werden. Das Attribut "URI" bezeichnet den Transformationsparameter in exakt jener Weise, wie er in der zu überprüfenden Signatur gebraucht wird.</xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:sequence>
+    </xsd:complexType>
+  </xsd:element>
+  <xsd:element name="Supplement" type="XMLDataObjectAssociationType"/>
+  <xsd:element name="SupplementProfile" type="XMLDataObjectAssociationType"/>
+  <xsd:element name="CreateTransformsInfoProfile">
+    <xsd:complexType>
+      <xsd:sequence>
+        <xsd:element name="CreateTransformsInfo" type="TransformsInfoType"/>
+        <xsd:element ref="Supplement" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:complexType>
+  </xsd:element>
+</xsd:schema>
diff --git a/id/server/auth/.gitignore b/id/server/auth/.gitignore
deleted file mode 100644
index 4dc009173..000000000
--- a/id/server/auth/.gitignore
+++ /dev/null
@@ -1,2 +0,0 @@
-/target
-/bin
diff --git a/id/server/auth/pom.xml b/id/server/auth/pom.xml
deleted file mode 100644
index 41dbe0bb4..000000000
--- a/id/server/auth/pom.xml
+++ /dev/null
@@ -1,264 +0,0 @@
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
-	<parent>
-		<groupId>MOA.id</groupId>
-		<artifactId>moa-id</artifactId>
-		<version>3.x</version>
-	</parent>
-	
-	<modelVersion>4.0.0</modelVersion>
-	<groupId>MOA.id.server</groupId>
-	<artifactId>moa-id-auth</artifactId>
-	<version>${moa-id-version}</version>
-	<packaging>war</packaging>
-	<name>MOA ID-Auth WebService</name>
-	
-	<properties>
-		<repositoryPath>${basedir}/../../../repository</repositoryPath>
-	</properties>
-	
-	<repositories>
-		<repository>
-			<id>shibboleth.internet2.edu</id>
-			<name>Internet2</name>
-			<url>https://build.shibboleth.net/nexus/content/groups/public/</url>
-		</repository>
-	</repositories>
-	
-	<build>
-		<!--sourceDirectory>${basedir}/../idserverlib/src/main/java</sourceDirectory-->
-		<!--testSourceDirectory>${basedir}/../idserverlib/src/test/java</testSourceDirectory-->
-		<plugins>
-		
-			<plugin>
-      	<groupId>org.codehaus.mojo</groupId>
-      	<artifactId>versions-maven-plugin</artifactId>
-      	<version>2.1</version>
-    	</plugin>
-		
-		
-<!-- 		        	<plugin>
-            		<groupId>org.codehaus.mojo</groupId>
-            		<artifactId>properties-maven-plugin</artifactId>
-            		<version>1.0-alpha-2</version>
-            		<executions>
-                		<execution>
-                    		<phase>initialize</phase>
-                    		<goals>
-                        		<goal>read-project-properties</goal>
-                    		</goals>
-                    		<configuration>
-    	                   		<files>
-		                            <file>${basedir}/../../../moa-id.properties</file>
-      		                  </files>
-          		          </configuration>
-              		  </execution>
-            		</executions>
-        		</plugin> -->
-				<plugin>
-				<groupId>org.apache.maven.plugins</groupId>
-				<artifactId>maven-war-plugin</artifactId>
-				<version>2.1.1</version>
-				<!-- <version>2.0.2</version>-->
-				<configuration>
-					<archive>
-						<manifest>
-							<addDefaultSpecificationEntries>false</addDefaultSpecificationEntries>
-							<addDefaultImplementationEntries>true</addDefaultImplementationEntries>
-						</manifest>
-						<addMavenDescriptor>false</addMavenDescriptor>
-					</archive>
-
-					<!-- extract moa-id classes for debugging -->
-					<!--warSourceExcludes>WEB-INF/lib/moa-id-lib*.jar</warSourceExcludes-->
-					<webResources>
-						<resource>
-							<directory>${basedir}/src/main/wsdl</directory>
-							<targetPath>WEB-INF/classes/resources/wsdl</targetPath>
-						</resource>
-					<!--
-						<resource>
-							<directory>${basedir}/../idserverlib/target/classes</directory>
-							<targetPath>WEB-INF/classes</targetPath>
-						</resource>
--->
-					</webResources>
-				</configuration>
-			</plugin>
-		</plugins>
-	</build>
-	
-	<dependencies>
-
-
-        <!-- we need Axis 1.1 here, 1.0 is included in SPSS -->
-		<dependency>
-			<groupId>MOA.spss.server</groupId>
-			<artifactId>moa-spss-lib</artifactId>
-			<exclusions>
-				<exclusion>
-					<artifactId>iaik_pki_module</artifactId>
-					<groupId>iaik</groupId>
-				</exclusion>
-				<exclusion>
-					<groupId>commons-logging</groupId>
-					<artifactId>commons-logging</artifactId>
-				</exclusion>
-				<exclusion>
-					<artifactId>axis-wsdl4j</artifactId>
-					<groupId>axis</groupId>
-				</exclusion>
-			</exclusions>
-		</dependency>
-		<dependency>
-			<groupId>MOA.id.server</groupId>
-			<artifactId>moa-id-lib</artifactId>
-			<exclusions>
-				<exclusion>
-					<groupId>commons-logging</groupId>
-					<artifactId>commons-logging</artifactId>
-				</exclusion>
-				<exclusion>
-					<groupId>ch.qos.logback</groupId>
-					<artifactId>logback-classic</artifactId>
-				</exclusion>
-				<exclusion>
-					<artifactId>axis</artifactId>
-					<groupId>axis</groupId>
-				</exclusion>
-			</exclusions>
-		</dependency>
-		
-		<dependency>
-			<groupId>MOA.id.server</groupId>
-			<artifactId>moa-id-spring-initializer</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>MOA.id.server</groupId>
-  		<artifactId>moa-id-frontend-resources</artifactId>
-		</dependency>
-		
-		
-		<!-- Adding eIDAS module dependency automatically adds eIDAS protocol capabilities. -->
-		<dependency>
-			<groupId>MOA.id.server.modules</groupId>
-			<artifactId>moa-id-module-eIDAS</artifactId>
-		</dependency>
-		
-		
-		<!-- Adding monitoring module dependency automatically adds monitoring capabilities. -->
-		<dependency>
-			<groupId>MOA.id.server.modules</groupId>
-			<artifactId>moa-id-module-monitoring</artifactId>
-		</dependency>
-
-
-		<dependency>
-			<groupId>MOA.id.server.modules</groupId>
-			<artifactId>moa-id-module-saml1</artifactId>
-		</dependency>
-
-		<dependency>
-			<groupId>MOA.id.server.modules</groupId>
-			<artifactId>moa-id-module-openID</artifactId>
-		</dependency>
-
-		<dependency>
-			<groupId>MOA.id.server.modules</groupId>
-    	<artifactId>moa-id-module-elga_mandate_service</artifactId>
-		</dependency>
-
-<!-- 		<dependency>
-			<groupId>MOA.id.server.modules</groupId>
-			<artifactId>moa-id-module-pvp2</artifactId>
-		</dependency> -->
-
- 		<dependency>
-			<groupId>MOA.id.server.modules</groupId>
-			<artifactId>moa-id-modul-citizencard_authentication</artifactId>
-		</dependency>
-
-			<dependency>
-				<groupId>MOA.id.server.modules</groupId>
-				<artifactId>moa-id-modules-federated_authentication</artifactId>
-			</dependency> 
-
-		<dependency>
-			<groupId>MOA.id.server.modules</groupId>
-			<artifactId>moa-id-module-ssoTransfer</artifactId>
-			<version>${moa-id-version}</version>
-		</dependency>
-				
-        <!-- transitive dependencies we don't want to include into the war -->
-		<dependency>
-			<groupId>iaik.prod</groupId>
-			<artifactId>iaik_jce_full</artifactId>
-			<!-- should be in the ext directory of the jre -->
-			<scope>provided</scope>
-		</dependency>
-		<dependency>
-			<groupId>iaik.prod</groupId>
-			<artifactId>iaik_ecc</artifactId>
-			<!-- should be in the ext directory of the jre -->
-			<scope>provided</scope>
-		</dependency>
-		<dependency>
-			<groupId>iaik.prod</groupId>
-			<artifactId>iaik_Pkcs11Provider</artifactId>
-			<!-- should be in the ext directory of the jre -->
-			<scope>provided</scope>
-		</dependency>
-		<dependency>
-			<groupId>iaik.prod</groupId>
-			<artifactId>iaik_Pkcs11Wrapper</artifactId>
-			<!-- should be in the ext directory of the jre -->
-			<scope>provided</scope>
-		</dependency>
-		<dependency>
-			<groupId>xalan-bin-dist</groupId>
-			<artifactId>xalan</artifactId>
-			<!-- should be provided by the container or jre -->
-			<scope>provided</scope>
-			<exclusions>
-				<exclusion>
-					<groupId>xalan</groupId>
-					<artifactId>serializer</artifactId>
-				</exclusion>
-			</exclusions>
-		</dependency>
-		<dependency>
-			<groupId>xerces</groupId>
-			<artifactId>xercesImpl</artifactId>
-			<!-- should be provided by the container or jre -->
-			<scope>provided</scope>
-		</dependency>
-		<dependency>
-			<groupId>xalan-bin-dist</groupId>
-			<artifactId>xml-apis</artifactId>
-			<!-- should be provided by the container or jre -->
-			<scope>provided</scope>
-		</dependency>
-		<dependency>
-			<groupId>xalan-bin-dist</groupId>
-			<artifactId>serializer</artifactId>
-			<!-- should be provided by the container or jre -->
-			<scope>provided</scope>
-		</dependency>
-
-		<dependency>
-			<groupId>org.springframework</groupId>
-			<artifactId>spring-webmvc</artifactId>
-			<exclusions>
-				<exclusion>
-					<groupId>commons-logging</groupId>
-					<artifactId>commons-logging</artifactId>
-				</exclusion>
-			</exclusions>
-		</dependency>
-		<dependency>
-			<groupId>org.slf4j</groupId>
-			<artifactId>jcl-over-slf4j</artifactId>
-		</dependency>
-
-	</dependencies>
-
-</project>
diff --git a/id/server/auth/src/main/resources/log4j.properties b/id/server/auth/src/main/resources/log4j.properties
deleted file mode 100644
index ecdfad165..000000000
--- a/id/server/auth/src/main/resources/log4j.properties
+++ /dev/null
@@ -1,27 +0,0 @@
-# commons-logging setup
-org.apache.commons.logging.LogFactory=org.apache.commons.logging.impl.Log4jFactory
-
-# define log4j root loggers
-log4j.rootLogger=info, stdout, R
-log4j.logger.at.gv.egovernment.moa=info, R
-log4j.logger.at.gv.egovernment.moa.spss=info, R
-log4j.logger.iaik.server=info, R
-log4j.logger.at.gv.egovernment.moa.id=info, R
-log4j.logger.at.gv.egovernment.moa.id.proxy=info, R
-log4j.logger.eu.stork=info, R
-log4j.logger.org.hibernate=warn, R
-
-# configure the stdout appender
-log4j.appender.stdout=org.apache.log4j.ConsoleAppender
-log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
-#log4j.appender.stdout.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %20c |  %10t | %m%n
-log4j.appender.stdout.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %20.20c | %10t | %m%n
-
-# configure the rolling file appender (R)
-log4j.appender.R=org.apache.log4j.RollingFileAppender
-log4j.appender.R.File=${catalina.base}/logs/moa-id.log
-log4j.appender.R.MaxFileSize=10000KB
-log4j.appender.R.MaxBackupIndex=1
-log4j.appender.R.layout=org.apache.log4j.PatternLayout
-log4j.appender.R.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %t | %m%n
-
diff --git a/id/server/auth/src/main/webapp/META-INF/MANIFEST.MF b/id/server/auth/src/main/webapp/META-INF/MANIFEST.MF
deleted file mode 100644
index 58630c02e..000000000
--- a/id/server/auth/src/main/webapp/META-INF/MANIFEST.MF
+++ /dev/null
@@ -1,2 +0,0 @@
-Manifest-Version: 1.0
-
diff --git a/id/server/auth/src/main/webapp/WEB-INF/web.xml b/id/server/auth/src/main/webapp/WEB-INF/web.xml
deleted file mode 100644
index 9ad651d42..000000000
--- a/id/server/auth/src/main/webapp/WEB-INF/web.xml
+++ /dev/null
@@ -1,47 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-	xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
-	version="3.1">
-	<display-name>MOA ID Auth</display-name>
-	<description>MOA ID Authentication Service</description>
-
-	<filter>
-		<filter-name>characterEncodingFilter</filter-name>
-		<filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
-		<init-param>
-			<param-name>encoding</param-name>
-			<param-value>UTF-8</param-value>
-		</init-param>
-		<init-param>
-			<param-name>forceEncoding</param-name>
-			<param-value>true</param-value>
-		</init-param>
-	</filter>
-	<filter-mapping>
-		<filter-name>characterEncodingFilter</filter-name>
-		<url-pattern>/*</url-pattern>
-	</filter-mapping>
-	
-	<welcome-file-list>
-   <welcome-file>index.html</welcome-file>
-	</welcome-file-list>
-	
-	<session-config>
-		<session-timeout>5</session-timeout>
-	</session-config>
-	
-	<error-page>
-		<error-code>500</error-code>
-		<location>/errorpage.jsp</location>
-	</error-page>
-	
-	<login-config>
-		<auth-method>BASIC</auth-method>
-		<realm-name>UserDatabase</realm-name>
-	</login-config>
-	<security-role>
-		<description>The role that is required to log in to the moa Application</description>
-		<role-name>moa-admin</role-name>
-	</security-role>
-
-</web-app>
diff --git a/id/server/auth/src/main/webapp/index.html b/id/server/auth/src/main/webapp/index.html
deleted file mode 100644
index e69de29bb..000000000
diff --git a/id/server/auth/src/main/wsdl/MOA-ID-1.0.wsdl b/id/server/auth/src/main/wsdl/MOA-ID-1.0.wsdl
deleted file mode 100644
index 5751b3e58..000000000
--- a/id/server/auth/src/main/wsdl/MOA-ID-1.0.wsdl
+++ /dev/null
@@ -1,40 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<definitions name="MOA" targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:tns="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:moa="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:xsd="http://www.w3.org/1999/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/ http://schemas.xmlsoap.org/wsdl/">
-	<import namespace="http://reference.e-government.gv.at/namespace/moa/20020822#" location="MOA-20020812.xsd"/>
-	<message name="GetAuthenticationDataInput">
-		<part name="body" element="samlp:Request"/>
-	</message>
-	<message name="GetAuthenticationDataOutput">
-		<part name="body" element="samlp:Response"/>
-	</message>
-	<message name="MOAFault">
-		<part name="body" element="moa:ErrorResponse"/>
-	</message>
-	<portType name="IdentificationPortType">
-		<operation name="getAuthenticationData">
-			<input message="tns:GetAuthenticationDataInput"/>
-			<output message="tns:GetAuthenticationDataOutput"/>
-			<fault name="MOAFault" message="tns:MOAFault"/>
-		</operation>
-	</portType>
-	<binding name="IdentificationBinding" type="tns:IdentificationPortType" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/soap/ http://schemas.xmlsoap.org/wsdl/soap/">
-		<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
-		<operation name="getAuthenticationData">
-			<soap:operation soapAction="urn:GetAuthenticationDataAction"/>
-			<input>
-				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
-			</input>
-			<output>
-				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
-			</output>
-			<fault name="MOAFault">
-				<soap:fault name="MOAFault" use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
-			</fault>
-		</operation>
-	</binding>
-	<service name="GetAuthenticationDataService">
-		<port name="IdentificationPort" binding="tns:IdentificationBinding">
-			<soap:address location="http://localhost/moa-id-auth/services/GetAuthenticationData"/>
-		</port>
-	</service>
-</definitions>
diff --git a/id/server/auth/src/main/wsdl/MOA-ID-1.x.wsdl b/id/server/auth/src/main/wsdl/MOA-ID-1.x.wsdl
deleted file mode 100644
index 37f86aad5..000000000
--- a/id/server/auth/src/main/wsdl/MOA-ID-1.x.wsdl
+++ /dev/null
@@ -1,40 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<definitions name="MOA" targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:tns="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:moa="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:xsd="http://www.w3.org/1999/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/ http://schemas.xmlsoap.org/wsdl/">
-	<import namespace="http://reference.e-government.gv.at/namespace/moa/20020822#" location="MOA-SPSS-2.0.0.xsd"/>
-	<message name="GetAuthenticationDataInput">
-		<part name="body" element="samlp:Request"/>
-	</message>
-	<message name="GetAuthenticationDataOutput">
-		<part name="body" element="samlp:Response"/>
-	</message>
-	<message name="MOAFault">
-		<part name="body" element="moa:ErrorResponse"/>
-	</message>
-	<portType name="IdentificationPortType">
-		<operation name="getAuthenticationData">
-			<input message="tns:GetAuthenticationDataInput"/>
-			<output message="tns:GetAuthenticationDataOutput"/>
-			<fault name="MOAFault" message="tns:MOAFault"/>
-		</operation>
-	</portType>
-	<binding name="IdentificationBinding" type="tns:IdentificationPortType" xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/soap/ http://schemas.xmlsoap.org/wsdl/soap/">
-		<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
-		<operation name="getAuthenticationData">
-			<soap:operation soapAction="urn:GetAuthenticationDataAction"/>
-			<input>
-				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
-			</input>
-			<output>
-				<soap:body use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
-			</output>
-			<fault name="MOAFault">
-				<soap:fault name="MOAFault" use="literal" namespace="http://reference.e-government.gv.at/namespace/moa/20020822#"/>
-			</fault>
-		</operation>
-	</binding>
-	<service name="GetAuthenticationDataService">
-		<port name="IdentificationPort" binding="tns:IdentificationBinding">
-			<soap:address location="http://localhost/Identification"/>
-		</port>
-	</service>
-</definitions>
diff --git a/id/server/auth/src/main/wsdl/MOA-SPSS-1.2.xsd b/id/server/auth/src/main/wsdl/MOA-SPSS-1.2.xsd
deleted file mode 100644
index d7a06d6e7..000000000
--- a/id/server/auth/src/main/wsdl/MOA-SPSS-1.2.xsd
+++ /dev/null
@@ -1,454 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!--
-  MOA SP/SS 1.2 Schema
--->
-<xsd:schema targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://reference.e-government.gv.at/namespace/moa/20020822#" elementFormDefault="qualified" attributeFormDefault="unqualified" version="1.2">
-  <xsd:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="http://www.w3.org/TR/xmldsig-core/xmldsig-core-schema.xsd"/>
-  <xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/xml.xsd"/>
-  <!--########## Create XML Signature ###-->
-  <!--### Create XML Signature Request ###-->
-  <xsd:element name="CreateXMLSignatureRequest">
-    <xsd:complexType>
-      <xsd:complexContent>
-        <xsd:extension base="CreateXMLSignatureRequestType"/>
-      </xsd:complexContent>
-    </xsd:complexType>
-  </xsd:element>
-  <xsd:complexType name="CreateXMLSignatureRequestType">
-    <xsd:sequence>
-      <xsd:element name="KeyIdentifier" type="KeyIdentifierType"/>
-      <xsd:element name="SingleSignatureInfo" maxOccurs="unbounded">
-        <xsd:annotation>
-          <xsd:documentation>Ermöglichung der Stapelsignatur durch wiederholte Angabe dieses Elements</xsd:documentation>
-        </xsd:annotation>
-        <xsd:complexType>
-          <xsd:sequence>
-            <xsd:element name="DataObjectInfo" maxOccurs="unbounded">
-              <xsd:complexType>
-                <xsd:complexContent>
-                  <xsd:extension base="DataObjectInfoType">
-                    <xsd:attribute name="ChildOfManifest" type="xsd:boolean" use="optional" default="false"/>
-                  </xsd:extension>
-                </xsd:complexContent>
-              </xsd:complexType>
-            </xsd:element>
-            <xsd:element name="CreateSignatureInfo" minOccurs="0">
-              <xsd:complexType>
-                <xsd:sequence>
-                  <xsd:element name="CreateSignatureEnvironment" type="ContentOptionalRefType"/>
-                  <xsd:choice>
-                    <xsd:annotation>
-                      <xsd:documentation>Auswahl: Entweder explizite Angabe des Signaturorts sowie ggf. sinnvoller Supplements im Zshg. mit der Signaturumgebung, oder Verweis auf ein benanntes Profil</xsd:documentation>
-                    </xsd:annotation>
-                    <xsd:element ref="CreateSignatureEnvironmentProfile"/>
-                    <xsd:element name="CreateSignatureEnvironmentProfileID" type="ProfileIdentifierType"/>
-                  </xsd:choice>
-                </xsd:sequence>
-              </xsd:complexType>
-            </xsd:element>
-          </xsd:sequence>
-          <xsd:attribute name="SecurityLayerConformity" type="xsd:boolean" use="optional" default="true"/>
-        </xsd:complexType>
-      </xsd:element>
-    </xsd:sequence>
-  </xsd:complexType>
-  <!--### Create XML Signature Response ###-->
-  <xsd:complexType name="CreateXMLSignatureResponseType">
-    <xsd:choice maxOccurs="unbounded">
-      <xsd:annotation>
-        <xsd:documentation>Kardinalität 1..oo erlaubt die Antwort auf eine Stapelsignatur-Anfrage</xsd:documentation>
-      </xsd:annotation>
-      <xsd:element name="SignatureEnvironment">
-        <xsd:annotation>
-          <xsd:documentation>Resultat, falls die Signaturerstellung erfolgreich war</xsd:documentation>
-        </xsd:annotation>
-        <xsd:complexType>
-          <xsd:sequence>
-            <xsd:any namespace="##any" processContents="lax"/>
-          </xsd:sequence>
-        </xsd:complexType>
-      </xsd:element>
-      <xsd:element ref="ErrorResponse"/>
-    </xsd:choice>
-  </xsd:complexType>
-  <xsd:element name="CreateXMLSignatureResponse" type="CreateXMLSignatureResponseType"/>
-  <!--########## Verify CMS Signature ###-->
-  <!--### Verifiy CMS Signature Request ###-->
-  <xsd:element name="VerifyCMSSignatureRequest">
-    <xsd:complexType>
-      <xsd:complexContent>
-        <xsd:extension base="VerifyCMSSignatureRequestType">
-          <xsd:attribute name="Signatories" type="SignatoriesType" use="optional" default="1"/>
-        </xsd:extension>
-      </xsd:complexContent>
-    </xsd:complexType>
-  </xsd:element>
-  <xsd:complexType name="VerifyCMSSignatureRequestType">
-    <xsd:sequence>
-      <xsd:element name="DateTime" type="xsd:dateTime" minOccurs="0"/>
-      <xsd:element name="CMSSignature" type="xsd:base64Binary"/>
-      <xsd:element name="DataObject" type="CMSDataObjectOptionalMetaType" minOccurs="0"/>
-      <xsd:element name="TrustProfileID">
-        <xsd:annotation>
-          <xsd:documentation>mit diesem Profil wird eine Menge von vertrauenswürdigen Wurzelzertifikaten spezifiziert</xsd:documentation>
-        </xsd:annotation>
-      </xsd:element>
-    </xsd:sequence>
-  </xsd:complexType>
-  <!--### Verify CMS Signature Response ###-->
-  <xsd:element name="VerifyCMSSignatureResponse" type="VerifyCMSSignatureResponseType"/>
-  <xsd:complexType name="VerifyCMSSignatureResponseType">
-    <xsd:sequence maxOccurs="unbounded">
-      <xsd:element name="SignerInfo" type="dsig:KeyInfoType">
-        <xsd:annotation>
-          <xsd:documentation>only ds:X509Data and RetrievalMethod is supported; QualifiedCertificate is included as X509Data/any;publicAuthority is included as X509Data/any</xsd:documentation>
-        </xsd:annotation>
-      </xsd:element>
-      <xsd:element name="SignatureCheck" type="CheckResultType"/>
-      <xsd:element name="CertificateCheck" type="CheckResultType"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <!--########## Verify XML Signature ###-->
-  <!--### Verify XML Signature Request ###-->
-  <xsd:element name="VerifyXMLSignatureRequest" type="VerifyXMLSignatureRequestType"/>
-  <xsd:complexType name="VerifyXMLSignatureRequestType">
-    <xsd:sequence>
-      <xsd:element name="DateTime" type="xsd:dateTime" minOccurs="0"/>
-      <xsd:element name="VerifySignatureInfo">
-        <xsd:complexType>
-          <xsd:sequence>
-            <xsd:element name="VerifySignatureEnvironment" type="ContentOptionalRefType"/>
-            <xsd:element name="VerifySignatureLocation" type="xsd:token"/>
-          </xsd:sequence>
-        </xsd:complexType>
-      </xsd:element>
-      <xsd:choice minOccurs="0" maxOccurs="unbounded">
-        <xsd:element ref="SupplementProfile"/>
-        <xsd:element name="SupplementProfileID" type="xsd:string"/>
-      </xsd:choice>
-      <xsd:element name="SignatureManifestCheckParams" minOccurs="0">
-        <xsd:complexType>
-          <xsd:sequence>
-            <xsd:element name="ReferenceInfo" type="VerifyTransformsDataType" maxOccurs="unbounded">
-              <xsd:annotation>
-                <xsd:documentation>Pro dsig:Reference-Element in der zu überprüfenden XML-Signatur muss hier ein ReferenceInfo-Element erscheinen. Die Reihenfolge der einzelnen ReferenceInfo Elemente entspricht jener der dsig:Reference Elemente in der XML-Signatur.</xsd:documentation>
-              </xsd:annotation>
-            </xsd:element>
-          </xsd:sequence>
-          <xsd:attribute name="ReturnReferenceInputData" type="xsd:boolean" use="optional" default="true"/>
-        </xsd:complexType>
-      </xsd:element>
-      <xsd:element name="ReturnHashInputData" minOccurs="0"/>
-      <xsd:element name="TrustProfileID">
-        <xsd:annotation>
-          <xsd:documentation>mit diesem Profil wird eine Menge von vertrauenswürdigen Wurzelzertifikaten spezifiziert</xsd:documentation>
-        </xsd:annotation>
-      </xsd:element>
-    </xsd:sequence>
-  </xsd:complexType>
-  <!--### Verify XML Signature Response ###-->
-  <xsd:element name="VerifyXMLSignatureResponse" type="VerifyXMLSignatureResponseType"/>
-  <xsd:complexType name="VerifyXMLSignatureResponseType">
-    <xsd:sequence>
-      <xsd:element name="SignerInfo" type="dsig:KeyInfoType">
-        <xsd:annotation>
-          <xsd:documentation>only ds:X509Data and ds:RetrievalMethod is supported; QualifiedCertificate is included as X509Data/any; PublicAuthority is included as X509Data/any</xsd:documentation>
-        </xsd:annotation>
-      </xsd:element>
-      <xsd:element name="HashInputData" type="ContentExLocRefBaseType" minOccurs="0" maxOccurs="unbounded"/>
-      <xsd:element name="ReferenceInputData" type="ContentExLocRefBaseType" minOccurs="0" maxOccurs="unbounded"/>
-      <xsd:element name="SignatureCheck" type="ReferencesCheckResultType"/>
-      <xsd:element name="SignatureManifestCheck" type="ReferencesCheckResultType" minOccurs="0"/>
-      <xsd:element name="XMLDSIGManifestCheck" type="ManifestRefsCheckResultType" minOccurs="0" maxOccurs="unbounded"/>
-      <xsd:element name="CertificateCheck" type="CheckResultType"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <xsd:simpleType name="ProfileIdentifierType">
-    <xsd:restriction base="xsd:token"/>
-  </xsd:simpleType>
-  <xsd:complexType name="MetaInfoType">
-    <xsd:sequence>
-      <xsd:element name="MimeType" type="MimeTypeType"/>
-      <xsd:element name="Description" type="xsd:anyURI" minOccurs="0"/>
-      <xsd:any namespace="##other" minOccurs="0" maxOccurs="unbounded"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <xsd:complexType name="FinalDataMetaInfoType">
-    <xsd:complexContent>
-      <xsd:extension base="MetaInfoType">
-        <xsd:sequence>
-          <xsd:element name="Type" type="xsd:anyURI" minOccurs="0"/>
-        </xsd:sequence>
-      </xsd:extension>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="DataObjectInfoType">
-    <xsd:sequence>
-      <xsd:element name="DataObject">
-        <xsd:complexType>
-          <xsd:complexContent>
-            <xsd:extension base="ContentOptionalRefType"/>
-          </xsd:complexContent>
-        </xsd:complexType>
-      </xsd:element>
-      <xsd:choice>
-        <xsd:annotation>
-          <xsd:documentation>Auswahl: Entweder explizite Angabe EINER Transformationskette inklusive ggf. sinnvoller Supplements oder Verweis auf ein benanntes Profil</xsd:documentation>
-        </xsd:annotation>
-        <xsd:element ref="CreateTransformsInfoProfile"/>
-        <xsd:element name="CreateTransformsInfoProfileID" type="ProfileIdentifierType"/>
-      </xsd:choice>
-    </xsd:sequence>
-    <xsd:attribute name="Structure" use="required">
-      <xsd:simpleType>
-        <xsd:restriction base="xsd:string">
-          <xsd:enumeration value="detached"/>
-          <xsd:enumeration value="enveloping"/>
-        </xsd:restriction>
-      </xsd:simpleType>
-    </xsd:attribute>
-  </xsd:complexType>
-  <xsd:complexType name="TransformsInfoType">
-    <xsd:sequence>
-      <xsd:element ref="dsig:Transforms" minOccurs="0"/>
-      <xsd:element name="FinalDataMetaInfo" type="FinalDataMetaInfoType"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <xsd:complexType name="XMLDataObjectAssociationType">
-    <xsd:sequence>
-      <xsd:element name="MetaInfo" type="MetaInfoType" minOccurs="0"/>
-      <xsd:element name="Content" type="ContentRequiredRefType"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <xsd:complexType name="CMSDataObjectOptionalMetaType">
-    <xsd:sequence>
-      <xsd:element name="MetaInfo" type="MetaInfoType" minOccurs="0"/>
-      <xsd:element name="Content" type="CMSContentBaseType"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <xsd:complexType name="CMSContentBaseType">
-    <xsd:complexContent>
-      <xsd:restriction base="ContentOptionalRefType">
-        <xsd:choice minOccurs="0">
-          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
-        </xsd:choice>
-      </xsd:restriction>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="CheckResultType">
-    <xsd:sequence>
-      <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
-      <xsd:element name="Info" type="AnyChildrenType" minOccurs="0"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <xsd:complexType name="ReferencesCheckResultType">
-    <xsd:complexContent>
-      <xsd:restriction base="CheckResultType">
-        <xsd:sequence>
-          <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
-          <xsd:element name="Info" type="ReferencesCheckResultInfoType" minOccurs="0"/>
-        </xsd:sequence>
-      </xsd:restriction>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="ReferencesCheckResultInfoType" mixed="true">
-    <xsd:complexContent mixed="true">
-      <xsd:restriction base="AnyChildrenType">
-        <xsd:sequence>
-          <xsd:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
-          <xsd:element name="FailedReference" type="xsd:positiveInteger" minOccurs="0" maxOccurs="unbounded"/>
-        </xsd:sequence>
-      </xsd:restriction>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="ManifestRefsCheckResultType">
-    <xsd:complexContent>
-      <xsd:restriction base="CheckResultType">
-        <xsd:sequence>
-          <xsd:element name="Code" type="xsd:nonNegativeInteger"/>
-          <xsd:element name="Info" type="ManifestRefsCheckResultInfoType"/>
-        </xsd:sequence>
-      </xsd:restriction>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="ManifestRefsCheckResultInfoType" mixed="true">
-    <xsd:complexContent mixed="true">
-      <xsd:restriction base="AnyChildrenType">
-        <xsd:sequence>
-          <xsd:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
-          <xsd:element name="FailedReference" type="xsd:positiveInteger" minOccurs="0" maxOccurs="unbounded"/>
-          <xsd:element name="ReferringSigReference" type="xsd:positiveInteger"/>
-        </xsd:sequence>
-      </xsd:restriction>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <!--########## Error Response ###-->
-  <xsd:element name="ErrorResponse" type="ErrorResponseType">
-    <xsd:annotation>
-      <xsd:documentation>Resultat, falls die Signaturerstellung gescheitert ist</xsd:documentation>
-    </xsd:annotation>
-  </xsd:element>
-  <xsd:complexType name="ErrorResponseType">
-    <xsd:sequence>
-      <xsd:element name="ErrorCode" type="xsd:integer"/>
-      <xsd:element name="Info" type="xsd:string"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <!--########## Auxiliary Types ###-->
-  <xsd:simpleType name="KeyIdentifierType">
-    <xsd:restriction base="xsd:string"/>
-  </xsd:simpleType>
-  <xsd:simpleType name="KeyStorageType">
-    <xsd:restriction base="xsd:string">
-      <xsd:enumeration value="Software"/>
-      <xsd:enumeration value="Hardware"/>
-    </xsd:restriction>
-  </xsd:simpleType>
-  <xsd:simpleType name="MimeTypeType">
-    <xsd:restriction base="xsd:token"/>
-  </xsd:simpleType>
-  <xsd:complexType name="AnyChildrenType" mixed="true">
-    <xsd:sequence>
-      <xsd:any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <xsd:complexType name="XMLContentType" mixed="true">
-    <xsd:complexContent mixed="true">
-      <xsd:extension base="AnyChildrenType">
-        <xsd:attribute ref="xml:space" use="optional"/>
-      </xsd:extension>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="ContentBaseType">
-    <xsd:choice minOccurs="0">
-      <xsd:element name="Base64Content" type="xsd:base64Binary"/>
-      <xsd:element name="XMLContent" type="XMLContentType"/>
-      <xsd:element name="LocRefContent" type="xsd:anyURI"/>
-    </xsd:choice>
-  </xsd:complexType>
-  <xsd:complexType name="ContentExLocRefBaseType">
-    <xsd:complexContent>
-      <xsd:restriction base="ContentBaseType">
-        <xsd:choice minOccurs="0">
-          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
-          <xsd:element name="XMLContent" type="XMLContentType"/>
-        </xsd:choice>
-      </xsd:restriction>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="ContentOptionalRefType">
-    <xsd:complexContent>
-      <xsd:extension base="ContentBaseType">
-        <xsd:attribute name="Reference" type="xsd:anyURI" use="optional"/>
-      </xsd:extension>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="ContentRequiredRefType">
-    <xsd:complexContent>
-      <xsd:restriction base="ContentOptionalRefType">
-        <xsd:choice minOccurs="0">
-          <xsd:element name="Base64Content" type="xsd:base64Binary"/>
-          <xsd:element name="XMLContent" type="XMLContentType"/>
-          <xsd:element name="LocRefContent" type="xsd:anyURI"/>
-        </xsd:choice>
-        <xsd:attribute name="Reference" type="xsd:anyURI" use="required"/>
-      </xsd:restriction>
-    </xsd:complexContent>
-  </xsd:complexType>
-  <xsd:complexType name="VerifyTransformsDataType">
-    <xsd:choice maxOccurs="unbounded">
-      <xsd:annotation>
-        <xsd:documentation>Ein oder mehrere Transformationswege können von der Applikation an MOA mitgeteilt werden. Die zu prüfende Signatur hat zumindest einem dieser Transformationswege zu entsprechen. Die Angabe kann explizit oder als Profilbezeichner erfolgen.</xsd:documentation>
-      </xsd:annotation>
-      <xsd:element ref="VerifyTransformsInfoProfile"/>
-      <xsd:element name="VerifyTransformsInfoProfileID" type="xsd:string">
-        <xsd:annotation>
-          <xsd:documentation>Profilbezeichner für einen Transformationsweg</xsd:documentation>
-        </xsd:annotation>
-      </xsd:element>
-    </xsd:choice>
-  </xsd:complexType>
-  <xsd:element name="QualifiedCertificate"/>
-  <xsd:element name="PublicAuthority" type="PublicAuthorityType"/>
-  <xsd:complexType name="PublicAuthorityType">
-    <xsd:sequence>
-      <xsd:element name="Code" type="xsd:string" minOccurs="0"/>
-    </xsd:sequence>
-  </xsd:complexType>
-  <xsd:simpleType name="SignatoriesType">
-    <xsd:union memberTypes="AllSignatoriesType">
-      <xsd:simpleType>
-        <xsd:list itemType="xsd:positiveInteger"/>
-      </xsd:simpleType>
-    </xsd:union>
-  </xsd:simpleType>
-  <xsd:simpleType name="AllSignatoriesType">
-    <xsd:restriction base="xsd:string">
-      <xsd:enumeration value="all"/>
-    </xsd:restriction>
-  </xsd:simpleType>
-  <xsd:complexType name="CreateSignatureLocationType">
-    <xsd:simpleContent>
-      <xsd:extension base="xsd:token">
-        <xsd:attribute name="Index" type="xsd:nonNegativeInteger" use="required"/>
-      </xsd:extension>
-    </xsd:simpleContent>
-  </xsd:complexType>
-  <xsd:complexType name="TransformParameterType">
-    <xsd:choice minOccurs="0">
-      <xsd:annotation>
-        <xsd:documentation>Die Angabe des Transformationsparameters (explizit oder als Hashwert) kann unterlassen werden, wenn die Applikation von der Unveränderlichkeit des Inhalts der in "Transformationsparamter", Attribut "URI" angegebenen URI ausgehen kann.</xsd:documentation>
-      </xsd:annotation>
-      <xsd:element name="Base64Content" type="xsd:base64Binary">
-        <xsd:annotation>
-          <xsd:documentation>Der Transformationsparameter explizit angegeben.</xsd:documentation>
-        </xsd:annotation>
-      </xsd:element>
-      <xsd:element name="Hash">
-        <xsd:annotation>
-          <xsd:documentation>Der Hashwert des Transformationsparameters.</xsd:documentation>
-        </xsd:annotation>
-        <xsd:complexType>
-          <xsd:sequence>
-            <xsd:element ref="dsig:DigestMethod"/>
-            <xsd:element ref="dsig:DigestValue"/>
-          </xsd:sequence>
-        </xsd:complexType>
-      </xsd:element>
-    </xsd:choice>
-    <xsd:attribute name="URI" type="xsd:anyURI" use="required"/>
-  </xsd:complexType>
-  <xsd:element name="CreateSignatureEnvironmentProfile">
-    <xsd:complexType>
-      <xsd:sequence>
-        <xsd:element name="CreateSignatureLocation" type="CreateSignatureLocationType"/>
-        <xsd:element name="Supplement" type="XMLDataObjectAssociationType" minOccurs="0" maxOccurs="unbounded"/>
-      </xsd:sequence>
-    </xsd:complexType>
-  </xsd:element>
-  <xsd:element name="VerifyTransformsInfoProfile">
-    <xsd:annotation>
-      <xsd:documentation>Explizite Angabe des Transformationswegs</xsd:documentation>
-    </xsd:annotation>
-    <xsd:complexType>
-      <xsd:sequence>
-        <xsd:element ref="dsig:Transforms" minOccurs="0"/>
-        <xsd:element name="TransformParameter" type="TransformParameterType" minOccurs="0" maxOccurs="unbounded">
-          <xsd:annotation>
-            <xsd:documentation>Alle impliziten Transformationsparameter, die zum Durchlaufen der oben angeführten Transformationskette bekannt sein müssen, müssen hier angeführt werden. Das Attribut "URI" bezeichnet den Transformationsparameter in exakt jener Weise, wie er in der zu überprüfenden Signatur gebraucht wird.</xsd:documentation>
-          </xsd:annotation>
-        </xsd:element>
-      </xsd:sequence>
-    </xsd:complexType>
-  </xsd:element>
-  <xsd:element name="Supplement" type="XMLDataObjectAssociationType"/>
-  <xsd:element name="SupplementProfile" type="XMLDataObjectAssociationType"/>
-  <xsd:element name="CreateTransformsInfoProfile">
-    <xsd:complexType>
-      <xsd:sequence>
-        <xsd:element name="CreateTransformsInfo" type="TransformsInfoType"/>
-        <xsd:element ref="Supplement" minOccurs="0" maxOccurs="unbounded"/>
-      </xsd:sequence>
-    </xsd:complexType>
-  </xsd:element>
-</xsd:schema>
diff --git a/id/server/pom.xml b/id/server/pom.xml
index dd1d88e76..2fbd3dd06 100644
--- a/id/server/pom.xml
+++ b/id/server/pom.xml
@@ -23,8 +23,8 @@
         <module>modules</module>
         <module>moa-id-spring-initializer</module>
         <module>moa-id-frontend-resources</module>        
-        <module>auth</module>
-        
+        <module>auth-final</module>
+        <module>auth-edu</module>
     </modules>
 
 	<dependencyManagement>
diff --git a/pom.xml b/pom.xml
index 467f2cf28..9fb67e58a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -23,7 +23,11 @@
 		
 			<!-- Project Version -->
 			<moa-commons-version>3.2.0-OPB-Snapshot</moa-commons-version>
+			
 			<moa-id-version>3.2.0-OPB-Snapshot</moa-id-version>
+			<moa-id-version-final>3.2.0-RC1</moa-id-version-final>
+			<moa-id-version-edu>3.2.0-OPB-Snapshot</moa-id-version-edu>			
+			
 			<moa-id-proxy-version>2.0.1-Snapshot</moa-id-proxy-version>
 			<moa-spss-version>2.0.5-RC1</moa-spss-version>
 			<configtool-version>2.2.0-OPB-Snapshot</configtool-version>
@@ -218,7 +222,8 @@
                     <finalName>moa</finalName>
                     <encoding>UTF-8</encoding>
                     <descriptors>
-                        <descriptor>id/assembly-auth.xml</descriptor>
+                        <descriptor>id/assembly-auth-final.xml</descriptor>
+                        <descriptor>id/assembly-auth-edu.xml</descriptor>
                         <descriptor>id/assembly-proxy.xml</descriptor>                         
                         <descriptor>spss/assembly.xml</descriptor>
                         <descriptor>spss/assembly-lib.xml</descriptor>
-- 
cgit v1.2.3