OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Re: Need to resolve the name of the SAML Profile of XACML


Hi all,

I've researched the history of how we got to this point, and why a new title is needed:

In 2005, the TC published an OASIS Standard  "SAML 2.0 profile of XACML v2.0".
This is a fairly unfortunate title, because the "v2.0" refers to XACML v2.0.  The "Work Product" did not really have a true version number of its own, but that was common in OASIS publications at that time.
The abstract stated:  "This specification defines a profile for the use of SAML Version 2.0 to carry XACML 2.0 policies [...]"
(see http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf)

In 2006, the TC worked on an update to that OASIS Standard, with a Work Product which was initially entitled "SAML 2.0 Profile of XACML 2.0, Version 2" (see https://www.oasis-open.org/committees/download.php/18921/xacml-2.0-profile-saml2.0-v2-wd-2.zip). (Working Draft 2)

However, by 2007, the work expanded to include all versions of XACML (according to the new abstract), and the "2.0" after XACML was removed. The title was changed to "SAML 2.0 Profile of XACML, Version 2". (see https://www.oasis-open.org/committees/download.php/22766/xacml-profile-saml2.0-v2-spec-wd-3-en.pdf)

This was unfortunate, because this was essentially a new Work Product, and should probably have begun life as "Version 1.0".  In addition, the title became essentially identical to the earlier OASIS Standard.  This is the root of the current issue.

Another minor title change came with the first publication as a Committee Draft in 2009, which expanded "Version 2" to "Version 2.0".  The title "SAML 2.0 Profile of XACML, Version 2.0" was used in the publication of cd-1, cd-03, cs-01, and csd04 from 2009 to 2011.

In December 2013, the TC requested templates for several XACML profiles using the MS-Word format (changing from the earlier OpenOffice format).  Since the use of a comma in titles has been deprecated, the template was delivered using the title "SAML 2.0 Profile of XACML: Version 2.0".  The Committee Specification Draft currently being published was submitted with this title, but during preparation we realized that it is not really an acceptable title for the reasons Chet has identified.

I hope this background information will be useful as the TC comes up with a title to accurately reflect the purpose of this Work Product.  As noted above, this is actually a new Work Product, and not really "Version 2.0" of the earlier OASIS Standard.  I think it would be fine to use "Version 1.0" with a new title which reflects the applicability across all versions of XACML.

Best regards,
Paul



On Tue, May 13, 2014 at 10:31 AM, Chet Ensign <chet.ensign@oasis-open.org> wrote:
Members of the XACML TC, 

We are preparing the SAML 2.0 Profile of XACML for its public review and we've run into a glitch. I'd like to get your preference on how we proceed. 

In a nutshell, the name SAML 2.0 Profile of XACML Version 2.0 is already an OASIS Standard so, as they say, something's gotta give. The title must, in some way, be new. 

I remember that this document is made more difficult by the fact that it describes the SAML Version 2.0 profile for all versions of XACML including the current version of XACML - 3.0. So the version numbers tend to trip over each other. 

Note also that the naming directives (http://docs.oasis-open.org/specGuidelines/ndr/namingDirectives.html) don't allow punctuation before the Version # so we are losing the comma in any case. 

Here are some ways I can see resolving this: 

1. Go out with the original title presented - SAML 2.0 Profile of XACML, Version 2.0 - and we'll present this feedback as a public review comment so that you can sort it out during the review period. In other words, decide later. 

2. Change the Version number. This strikes me as the most straight forward. SAML 2.0 Profile of XACML Version 2.1 or SAML 2.0 Profile of XACML Version 3.0. The second might be the more accurate versioning but does carry some element of confusion with XACML Version 3.0. 

3. Change the title to be more descriptive, e.g. SAML 2.0 Profile for All Versions of XACML Version 2.0. 

Please consult and send me your preference for how to proceed. I don't need anything more formal than a reply email - everything is ready to stage as soon as the title question is sorted out. 

Thanks for your understanding...  

/chet 
----------------
Chet Ensign
Director of Standards Development and TC Administration 
OASIS: Advancing open standards for the information society
http://www.oasis-open.org

Primary: +1 973-996-2298
Mobile: +1 201-341-1393 

Check your work using the Support Request Submission Checklist at http://www.oasis-open.org/committees/download.php/47248/tc-admin-submission-checklist.html 

TC Administration information and support is available at http://www.oasis-open.org/resources/tcadmin

Follow OASIS on:
LinkedIn:    http://linkd.in/OASISopen
Twitter:        http://twitter.com/OASISopen
Facebook:  http://facebook.com/oasis.open



--
Paul Knight  - Tel: +1 781-861-1013
OASIS - Advancing open standards for the information society
Document Process Analyst



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]