OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only

[xacml] PDP Inputs and Outputs

  • 1.  [xacml] PDP Inputs and Outputs

    Posted 02-27-2002 21:37
    Title: PDP Inputs and Outputs I have looked again at the charter. It says "Note that, aside from the XACML policy instance itself, all PDP inputs and outputs MUST be SAML-compliant (i.e., conform with the assertions and protocol messages defined in the SS-TC SAML specification), although other syntaxes/formats for the PDP input and output MAY be supported in addition to this." I had been taking this to mean that the XACML policy language must be capable of accepting the inputs provided from SAML. I had not construed this to mean that XACML must be restricted to use just the format that SAML uses. For example, if SAML provides A and we support A or B or C this is ok. I admit that I had mostly been thinking about user attributes as an input, where there is no real issue, since SAML attributes can use arbitrary schemas. Hal