Sample Policy

<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
         xmlns:wsp="http://www.w3.org/2004/08/20-ws-pol-pos/ns#"
         xmlns:p3p="http://www.w3.org/TR/p3p-rdfschema/"
         xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsp:Policy>
  <wsp:or rdf:parseType="resource">
    <wsp:require>
      <wsse:SecurityToken wsp:Preference="100">
        <wsp:Usage rdf:resource="http://www.w3.org/2004/08/20-ws-pol-pos/ns#Required"/>
        <wsse:tokenType>wsse:Kerberosv5TGT</wsse:tokenType>
      </wsse:SecurityToken>
    </wsp:require>
    <wsp:require>
      <wsse:SecurityToken wsp:Preference="1">
        <wsp:Usage rdf:resource="http://www.w3.org/2004/08/20-ws-pol-pos/ns#Required"/>
        <wsse:tokenType>wsse:X509v3</wsse:tokenType>
      </wsse:SecurityToken>
    </wsp:require>
  </wsp:or>
  <p3p:hasPolicy rdf:resource="http://foo.example/svcPolicy1">
    <p3p:describes>
      <p3p:Collectionact>
        <p3p:collects>
          <p3p:Data-Group>
            <p3p:may-include-members-of 
        rdf:resource="http://p3p.jrc.it/privacyontology/2004/07/p3powlv1.owl#User"/> 
          </p3p:Data-Group>
        </p3p:collects>
      </p3p:Collectionact>
    </p3p:describes>
  </p3p:hasPolicy>
</wsp:Policy>
</rdf:RDF>