Re: [xacml] [Fwd: [xacml-users] SAML statement extension for XACML]

[Anne Anderson <Anne.Anderson@sun.com>]

Hi Argyn,

It appears that a substitionGroup is the only XML mechanism that will
allow us to extend the SAML schema with two new "saml:Statement" types
(for XACMLAuthzDecisionStatement and XACMLPolicyStatement) that can then
be used as one of the choices for a "saml:Assertion".  SAML defines an
"AbstractStatementType" with "abstract" = "true", but you can't include
a type as one of the elements in a "choice".

Do you have an alternative way to accomplish this?

Anne

Argyn wrote On 09/26/05 14:18,:
> Anne
> 
> personally, I don't like substitution groups in general. I was thinking
> about somehow getting rid of it from xacml schema.
> 
> thanks,
> argyn

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692