Groups - SAML 2.0 Profile of XACML, Version 2 (zip), WD 3, 06 March 2007 (xacml-profile-saml2.0-v2.zip) uploaded

[Anne.Anderson@Sun.com]

Working Draft 3 of the revised SAML 2.0 Profile of XACML

Changes from previous working draft:
-Updated boilerplate to new OASIS template
-Changed title to reflect application to all versions of XACML
-Added section on backwards compatibility
-Removed INTERNAL ENTITIES by fulling expanding the abbreviations
-Add "Namespaces" section describing the namespaces associated with
different versions of XACML
-Insert "Conveying XACML Attributes in a SOAP Message" and "XACML
Authorization Token" sections moved here from the WS-XACML specification
-Reword description of matching SAML Subject in Attribute Assertions with
the XACML Request Attributes group describing the Subject entity so it
applies to all versions of XACML
-Clarify that <saml:Subject> is not translated into an XACML -id
Attribute
-Add syntax for passing AdditionalAttributes in an XACMLAuthzDecisionQuery
for use with Admin Policy
-Add syntax for including policies referenced from Policy or PolicySet
elements included in an XACMLAuthzDecisionQuery
-Clarify that XACMLPolicyQuery returns all potentially applicable
policies
-Remove Target element from XACMLPolicyQuery
-Change Choice lower bound on XACMLPolicyStatementType to 0 and remove
error case where no elements are included
-Add non-normative note to XACMLPolicyQuery to consider SPML if a robust
policy provisioning protocol is required
-Use valid ID values in the <samlp:Response> section of Policies
-Require use of SAML's standard "TooManyResponses" StatusCode if the
responder is unable to supply all policies that apply to an
XACMLPolicyQuery
-Create versions of the xacml-saml and xacml-samlp schemas for all versions
of XACML.  These use different xacml and xacml-context namespaces, and only
the XACML 3.0 versions include the "AdditionalAttributes" element in
XACMLAuthzDecisionQuery
-xacml-samlp (protocol) schema: remove Target element from
XACMLPolicyQuery
-xacml-samlp: Add Administrative Policy elements to
XACMLAuthzDecisionQuery
-xacml-samlp: Add ReferencedPolicies element to XACMLAuthzDecisionQuery

 -- Anne Anderson

The document named SAML 2.0 Profile of XACML, Version 2 (zip), WD 3, 06
March 2007 (xacml-profile-saml2.0-v2.zip) has been submitted by Anne
Anderson to the OASIS eXtensible Access Control Markup Language (XACML) TC
document repository.

Document Description:
A profile for the integration of SAML 2.0 with all versions of XACML.

View Document Details:
http://www.oasis-open.org/apps/org/workgroup/xacml/document.php?document_id=22765

Download Document:  
http://www.oasis-open.org/apps/org/workgroup/xacml/download.php/22765/xacml-profile-saml2.0-v2.zip


PLEASE NOTE:  If the above links do not work for you, your email application
may be breaking the link into two pieces.  You may be able to copy and paste
the entire link address into the address field of your web browser.

-OASIS Open Administration