Re: [xacml-users] Which XSD of SAML Profile of XACML to use?

[David Brossard <david.brossard@axiomatics.com>]

Hi Nick,

My understanding is that the initial SAML profile of XACML was specific to XACML 2.0. With the new XACML 3.0 specification, that profile was updated to cater for XACML 2.0 and XACML 3.0 at the same time.

These are the links you should focus on (copied from http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml#CURRENT):

• SAML 2.0 Profile of XACML, Version 2.0
  Committee Specification 01, 10 August 2010
  (covers XACML 1.0, 1.1, 2.0, 3.0)
  • SAML 2.0 Profile of XACML, Version 2 (pdf) (covers XACML v1.0, v1.1, v2.0, v3.0)
  • XACML 1.0: schema-protocol (xsd)
  • XACML 1.0: schema-assertion (xsd)
  • XACML 1.1: schema-protocol (xsd)
  • XACML 1.1: schema-assertion (xsd)
  • XACML 2.0: schema-protocol (xsd)
  • XACML 2.0: schema-assertion (xsd)
  • XACML 3.0: schema-protocol (xsd)
  • XACML 3.0: schema-assertion (xsd)

WD 13 does stand for working draft.

Based on the latest work on the core XACML specification, I doubt the SAML profile will be impacted but Erik, the editor, will know best.

On Wed, Jun 22, 2011 at 6:36 PM, Nick Duan <nduan@verizon.net> wrote:

The official xsd files published under SAML Profile of XACML 2.0 (access_control-xacml-2.0-saml-protocol-schema-os.xsd & access_control-xacml-2.0-saml-assertion-schema-os.xsd) seem to contain some bugs and won’t validate.   I found the other two new xsd files under XACML 3.0 link on OASIS web site (xacml-2.0-profile-saml2.0-v2-schema-assertion-wd-13.xsd & xacml-2.0-profile-saml2.0-v2-schema-protocol-wd-13.xsd) that have no validation errors.  

 

So my question is, are these two xsd files (xxx-wd-13.xsd) the latest version of xacml-samlp & xacml-saml?  If yes, why they are labeled with wd-13 (I believe wd stands for working draft)?  If not,  Is the XACML TC going to come up with new schema files for xacml-samlp and xacml-saml?

 

Thanks a lot!

 

ND

-- 
David Brossard, M.Eng, SCEA, CSTP
Solutions Architect
+46(0)760 25 85 75
Axiomatics AB
Skeppsbron 40
S-111 30 Stockholm, Sweden
http://www.linkedin.com/companies/536082
http://www.axiomatics.com
http://twitter.com/axiomatics