Re: [xacml] OAuth tokens and XACML?

[Mohammad Jafari <mohammad.jafari@bookzurman.com>]

Although I am not aware of an implementation that supports this, this seems to be a PEP-specific issue. If the PEP can consume an OAuth/OpenID Connect token (which might require doing OAuth Introspection as well) and turn the content into attributes in an XACML request, the rest of the flow should be orthogonal to where these attributes originate from.

Regards,
Mohammad

ïOn 2018-11-05, 10:24 AM, "xacml@lists.oasis-open.org on behalf of rich levinson" <xacml@lists.oasis-open.org on behalf of rich.levinson@oracle.com> wrote:

    Is there any way an OAuth Access Token or Identity Token can be passed
    in a XACML Request, and have its contents used in a Policy?
    
    (I think the answer is no, but checking just in case)
    
       Thanks,
       Rich
    
    
    ---------------------------------------------------------------------
    To unsubscribe from this mail list, you must leave the OASIS TC that 
    generates this mail.  Follow this link to all your TCs in OASIS at:
    https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php