Subject: Re: [xacml-dev] XACML obligations in SAML assertions??
Hi Jackson. On Fri, 2005-03-25 at 08:33, Jackson Wynn wrote: > Can anyone tell me what provisions are made for conveying XACML obligations > in a SAML authorization decision assertion? What specifically are you looking for? With XACML 2.0 there is a SAML profile that defines how to convey an XACML Response in SAML. In turn, the Response includes any Obligations. Are you looking for a way to only convey Obligations in a decision? (ie, not include a Response) > How are obligations conveyed to > policy enforcement points, if not through SAML assertions?? Again, I think I need a little more understanding of what you're trying to do. XACML Obligations are typically conveyed as part of an XACML Response. These can be passed around through any number of formats, though the obvious standard for doing this is SAML. seth