<processor>
   <!-- Remove the scope validator from the identity.xml if it exists. Otherwise running the build several times
   causes several scope validator elements to be added--> 	
   <remove>
        <name>//s:Server/s:OAuth/s:OAuthScopeValidator</name>
   </remove>
   <remove>
      <name>//s:Server/s:OAuth/s:SupportedGrantTypes/s:SupportedGrantType[s:GrantTypeName='urn:ietf:params:oauth:grant-type:uma-ticket']</name>
   </remove>

   <add>
      <after>//s:Server/s:OAuth/s:EnableAssertions</after>
      <value>
         <![CDATA[<BuildSubjectIdentifierFromSPConfig>false</BuildSubjectIdentifierFromSPConfig>]]></value>
   </add>

    <remove>
        <name>//s:Server/s:OAuth/s:ScopeValidators</name>
    </remove>

   <!-- Add the ntlm grant type validator config element -->
   <add>
      <after>//s:Server/s:OAuth/s:SupportedGrantTypes/s:SupportedGrantType[s:GrantTypeName='iwa:ntlm']/s:GrantTypeName</after>
      <value>
         <![CDATA[<GrantTypeValidatorImplClass>org.wso2.carbon.identity.oauth.common.NTLMAuthenticationValidator</GrantTypeValidatorImplClass>]]></value>
   </add>
</processor>
