OASIS eXtensible Access Control Markup Language (XACML) TC

See separate email for notes.

 -- Erik Rissanen

The document named xacml-profile-saml2.0-v2-wd-6.zip has been submitted by
Erik Rissanen to the OASIS eXtensible Access Control Markup Language
(XACML) TC document repository.

Document Description:


View Document Details:
http://www.oasis-open.org/committees/document.php?document_id=31465

Download Document:  
http://www.oasis-open.org/committees/download.php/31465/xacml-profile-saml2.0-v2-wd-6.zip


PLEASE NOTE:  If the above links do not work for you, your email application
may be breaking the link into two pieces.  You may be able to copy and paste
the entire link address into the address field of your web browser.

-OASIS Open Administration

All,

I just posted an updated SAML profile with all the fixes to the SAML 
profile we have discussed recently.

One thing worth noting is that when we discussed the issue of policy 
references and supplied policies, we were only considering the case when 
policies are provided with an Authz Query. But there is also the issue 
of policy references in the policies in an XACML policy assertion in 
general.

I think that it really depends on what the policy assertion is used for 
how one wants to resolve policy references. So I have added this to the 
policy assertion section:

--8<--
5.7 Policy references and Policy assertions

It may be noted that in relation to a policy assertion, there are three 
broad classes of policies to consider when resolving policy references: 
the top level policy in the policy assertion, the policies in the