RE: [xacml] REST Profile - General Plan

[<remon.sinnema@emc.com>]

Hal,


> -----Original Message-----
> From: Hal Lockhart [mailto:hal.lockhart@oracle.com]
> Sent: Thursday, May 17, 2012 4:24 PM
> To: Sinnema, Remon
> Cc: xacml@lists.oasis-open.org; robin@oasis-open.org
> Subject: RE: [xacml] REST Profile - General Plan
> 
> So far what I have heard (outside the TC) is a lot of interest in REST
> with no XML, but not a whole lot of interest in XML over HTTP. 

At last month's "XACML in Practice" seminar in the Netherlands, two different uses of XML over HTTP were presented:

eRecognition is authentication (based on SAML) and authorization (based on XACML) infrastructure that is mandatory for all Dutch national, regional, and local government agencies. They use the SAML HTTP-Post binding for transport, but would have been better served by the functionality in the REST profile with the XML format.
https://docs.google.com/file/d/0B73oMwBhIq9Ta3NYVmExa2N5V00/edit?pli=1

The European Grid Infrastructure is used by particle physics researchers in Europe (and the US) in a federated manner with virtual organizations. They send the XACML request/response over HTTP as well.
https://docs.google.com/file/d/0B73oMwBhIq9TWm9pOU5uSHI1SEk/edit?pli=1
BTW, they make heavy use of obligations and could be a useful source of input should we wish to pursue the Obligation Family profile further.
They also seem interested in the Metadata profile.


Thanks,
Ray


P.S. The other presentations given at the seminar, including those of David Brossard and myself, can be found here:
https://docs.google.com/folder/d/0B73oMwBhIq9TMjEzMjA1Y2EtYjVlZi00MDgxLTg2ZmMtZDlmNmRhODU3MmYx/edit?pli=1&docId=0B73oMwBhIq9Tdm40b0tZbDdRdzJZNTBWV2lyREpOUQ