FW: XACML: Access Control for Web Services

["Hal Lockhart" <hlockhar@bea.com>]

-----Original Message-----
From: Chiusano Joseph [mailto:chiusano_joseph@bah.com]
Sent: Sunday, October 05, 2003 2:59 PM
To: hlockhar@bea.com
Subject: XACML: Access Control for Web Services


Hal,

My name is Joe Chiusano of Booz Allen Hamilton; I am a member of several
OASIS TCs. I just sent a request to the XACML comment list using the
"Send a Comment" button, but I would also like to forward it to you
because on the OASIS/ebXML Registry TC we discovered that that mechanism
is not currently working.

My request is as follows - the document I reference is a Web Services
Standards Analysis that I am writing for the U.S. Department of Defense,
in which I will include a section on XACML:

"I have a need to list an example of XACML used with Web Services,
particulary for access control (the most recent XACML Profile for Web
Services does not have one for access control). Can someone please offer
an example if they have one of:

(1) XACML used in conjunction with an X.509 cert, or 
(2) XACML used in conjunction with a SAML assertion

preferably with the X.509 or SAML assertion specified in a WS-Security
header."

Thanks so much.

Thanks so much.

Kind Regards
Joe Chiusano
Booz | Allen | Hamilton
begin:vcard 
n:Chiusano;Joseph
tel;work:(703) 902-6923
x-mozilla-html:FALSE
url:www.bah.com
org:Booz | Allen | Hamilton;IT Digital Strategies Team
adr:;;8283 Greensboro Drive;McLean;VA;22012;
version:2.1
email;internet:chiusano_joseph@bah.com
title:Senior Consultant
fn:Joseph M. Chiusano
end:vcard