Re: [xacml-users] XML Elements in SAML profile for XACML 2.0

[Erik Rissanen <erik@axiomatics.com>]

Nick,

This is because these types extend the SAML Statement element, and you would use the xsi:type mechanism in your XML. You would do something like this in your XML document instance:

...
<saml:Statement xmlns:xacml-saml="urn:oasis:names:tc:xacml:3.0:profile:saml2.0:v2:schema:assertion:wd-13" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xacml-saml:XACMLPolicyStatementType">
<xacml:PolicySet>
...
</xacml:PolicySet>
</saml:Statement
...

Best regards,
Erik

On 2011-07-17 00:50, Nick Duan wrote:

I’ve noticed that the latest SAML 2.0 profile for XACML 2.0 assertion schema “xacml-2.0-profile-saml2.0-v2-schema-assertion-wd-13.xsd” doesn’t have any XML element definition for XACMLAuthzDecisionStatementType and XACMLPolicyStatementType.   Is there any reason why these two XML elements are not included in the schema?  For any other schema types in the SAML/XACML spec, there is always a corresponding XML element defined.  

 

If these two elements are not defined in the spec, the user/developer/vendor will need to define them by themselves.  Then whatever protocol/schema bindings they developed, won’t be standard-compliant.

 

Thanks!

 

ND