NIST ABAC Practice Guide includes use of SAML Federation - Public comments invited

[Hal Lockhart <hal.lockhart@oracle.com>]

NIST has published a set of materials (NIST 1800-3) describing in detail Attribute-based Access Control (ABAC) configurations that they set up in the National Cybersecurity Center of Excellence using commercial products. The configurations feature SAML and OIDC-based federations and thus may be of interests to members of the SS TC.

NIST is inviting public comments until December 4, 2015.

The information can be found here:

https://nccoe.nist.gov/projects/building_blocks/attribute_based_access_control

There are three documents listed in order of increasing detail. If your time is limited I suggest looking at the second one. (NIST 1800-3b) The link is here:

https://nccoe.nist.gov/sites/default/files/nccoe/NIST_SP1800-3b_ABAC.pdf

Hal