OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-dev message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [xacml-dev] XACML obligations in SAML assertions??

Hi Jackson.

On Fri, 2005-03-25 at 08:33, Jackson Wynn wrote:
> Can anyone tell me what provisions are made for conveying XACML obligations
> in a SAML authorization decision assertion?

What specifically are you looking for? With XACML 2.0 there is a SAML
profile that defines how to convey an XACML Response in SAML. In turn,
the Response includes any Obligations. Are you looking for a way to only
convey Obligations in a decision? (ie, not include a Response)

> How are obligations conveyed to
> policy enforcement points, if not through SAML assertions??

Again, I think I need a little more understanding of what you're trying
to do. XACML Obligations are typically conveyed as part of an XACML
Response. These can be passed around through any number of formats,
though the obvious standard for doing this is SAML.


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]