OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only

RE: [xacml] XPATH expressions pointing to SAML Assertions

  • 1.  RE: [xacml] XPATH expressions pointing to SAML Assertions

    Posted 11-29-2001 10:05
     MHonArc v2.5.2 -->
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    

    xacml message

    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


    Subject: RE: [xacml] XPATH expressions pointing to SAML Assertions


    Title: [xacml] XPATH expressions pointing to SAML Assertions
    Hal - Perhaps you have a point.  Attribute types should be identified by URIs.  Our policy statements should also indicate which authorities can be considered authoritative for the attribute.  This too can be a URI.
     
    Perhaps, the "reserved words" we have talked about should be XPATH expressions into the saml authorization query message.  That would allow us to make statements about the particular resource and the particular principal identified in the authorization query message.  These would then be fixed values.
     
    All the best.  Tim.

    -----------------------------------------
    Tim Moses
    Tel: 613.270.3183