Re: [xacml-users] RV: XACML question

[Seth Proctor <Seth.Proctor@Sun.COM>]

Hello Ariel!

On Mar 11, 2005, at 9:22 AM, Ariel M. Neisen wrote:
> My name is Ariel Neisen and I'm a developer from Argentina.
> I'm investigating about how to bind XACML to a Web Service. It's been 
> a little hard for me to figure out in my head how to implement the XML 
> that would be passed via SOAP.

Could you provide a little more detail about how you're trying to use 
XACML in a web services environment? For instance, when you talk about 
binding, are you trying to send an XACML Request/Response in SOAP, are 
you trying to pass messgaes that include XACML policy, or are you 
trying to use XACML to let the service make authorization decisions?

> Reading the XACML profile for Web Services, I saw that there's a way 
> to perform a request-response-operation through SOAP, but I've not 
> been able to find an example of its implementation, since it's a 
> fairly new ground. I was wondering if you could provide me one 
> example, or help me with my problem.

This profile effectively defines a subset of XACML that can be used for 
negotiation with web services. It really was an experiement, and to my 
knowledge no one has implemented the SOAP bindings described in the 
second half of that spec. You're probably better off looking at the 
SAML profile included with the 2.0 specification, which is now a 
standard and may have what you're looking for.


seth