Re: [xacml-dev] XACML obligations in SAML assertions??

[Seth Proctor <Seth.Proctor@Sun.COM>]

Hi Jackson.

On Fri, 2005-03-25 at 08:33, Jackson Wynn wrote:
> Can anyone tell me what provisions are made for conveying XACML obligations
> in a SAML authorization decision assertion?

What specifically are you looking for? With XACML 2.0 there is a SAML
profile that defines how to convey an XACML Response in SAML. In turn,
the Response includes any Obligations. Are you looking for a way to only
convey Obligations in a decision? (ie, not include a Response)

> How are obligations conveyed to
> policy enforcement points, if not through SAML assertions??

Again, I think I need a little more understanding of what you're trying
to do. XACML Obligations are typically conveyed as part of an XACML
Response. These can be passed around through any number of formats,
though the obvious standard for doing this is SAML.


seth