security-services-comment message

Subject: Public Comment

From: comment-form@oasis-open.org
To: security-services-comment@lists.oasis-open.org
Date: 23 Aug 2004 15:00:42 -0000

Comment from: Srilekha.Mudumbai@jerichosystems.com

Provision for reasoning the denial of access to a resource:

Sometimes it may be necessary to give a detailed information for the denial of access to a resource for a specific action. There is a StatusDetail element specified in the SAML core spec 1.x, 2.0 which MAY be used to specify an error condition that occurred while processing a SAML request. The specification DOES NOT MANDATE the usage of this element ONLY as a feedback for an error condition or any condition at the request level. Does that mean this element can be used for other purposes? Please comment.