MHonArc v2.5.2 -->
xacml message
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [Elist Home]
Subject: RE: [xacml] XPATH expressions pointing to SAML Assertions
Title: [xacml] XPATH expressions pointing to SAML Assertions
Hal -
Perhaps you have a point. Attribute types should be identified by
URIs. Our policy statements should also indicate which authorities can be
considered authoritative for the attribute. This too can be a
URI.
Perhaps, the "reserved words" we have talked about should be
XPATH expressions into the saml authorization query message. That would
allow us to make statements about the particular resource and the particular
principal identified in the authorization query message. These would then
be fixed values.
All
the best. Tim.
-----------------------------------------
Tim Moses
Tel:
613.270.3183