security-services-comment message

Subject: Public Comment

From: comment-form@oasis-open.org
To: security-services-comment@lists.oasis-open.org
Date: 3 Feb 2006 14:34:32 -0000

Comment from: Anne.Anderson@sun.com

Name:Anne Anderson
Title:Secretary
Organization:OASIS XACML TC
Regarding Specification:

    * SAML 2.0 profile of XACML v2.0,
      which includes:
       * Core specification document
       * SAML 2.0 Assertion Extension Schema
       * SAML 2.0 Protocol Extension Schema

The XACML TC voted on 2/1/06 to request inclusion of this profile in the "SAML Profiles, Bindings, and Extensions" list at
http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security#extensions

This profile consists of a specification and 2 schemas that have been approved as OASIS Standards.  They describe the use of SAML assertions and protocols as part of an XACML system.  They also describe the use of the enhanced authorization decision features provided by XACML that are mentioned in Sections 2.7.4 and 3.4.2.4 of the SAML 2.0 core specification.

I would recommend listing our three documents (or simply the title of the profile) along with a link to the XACML 2.0 Standard specification set on our XACML TC home page (http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml#XACML20) as this will guide users not only to the approved OASIS Standard profile, but to the errata and other related information.