Status and changes in SAML 2.0 Profile of XACML, Version 2, WD 5

[Anne Anderson - Sun Microsystems <Anne.Anderson@sun.com>]

The editor recommends SAML 2.0 Profile of XACML, Version 2, WD 5 as the 
basis for any future XACML Interop using the SAML profile.  A couple of 
sections are specific to XACML 3.0 Administrative Policy, but these are 
clearly called out and are required only for use with an XACML 3.0 PDP. 
  The SAML Metadata section is incomplete and needs more development - I 
wanted to capture the current state; it is normative, but only RECOMMENDED.

Otherwise, the differences between the existing SAML 2.0 Profile (the 
XACML 2.0 standard version) and Version 2 WD 4 are fixes to the problems 
that have been discovered in trying to use the existing profile:

-Fixes to the schema errors discovered in XACML 2.0
-Better explanations of the usage of the various types and elements, 
including examples of using xsi:type to create instances of XACML 
statements inside standard SAML Assertions
-Schemas all validated
-Schemas created for each version of XACML, so the Profile can be used 
with XACML 1.0, 1.1, 2.0, or 3.0
-OASIS copyrights included in schemas

The changes between WD 4 and WD 5 are:

-Import XACML 1.0 schemas from local copies
-Import XACML 2.0 schemas from http://docs.oasis-open.
org/xacml/ directory to fix import problem
-Import XACML 3.0 schema from Erik's WD3
-Add OASIS copyright to all schemas
-Made “Conveying XACML Attributes in a SOAP Message”
a separate Section for easier reference in Conformance
Section
-Revised Conformance Section to refer to current document
sections and to include previously omitted elements.
-Made Introduction non-normative except for Namespaces
and Normative References sections.
-Made SAML Metadata section normative but
RECOMMENDED
-Plus very minor editorial fixes I noticed along the way

Regards,
Anne
-- 
Anne H. Anderson, Sun Microsystems Laboratories
1 Network Drive,UBUR02-311, Burlington, MA 01803-0902 USA
Tel: 781/442-0928  Fax: 781/442-0399
Email: Anne.Anderson@Sun.COM until 3 August 2007
Email: Anne.Anderson@alum.swarthmore.edu after 3 August 2007