OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only
  • 1.  RE: [xacml] Attribute validation

    Posted 10-31-2008 16:17
    Anil Tappetla (atappetl) wrote:
    > As a related strand - how does the PEP determine what attributes it must
    > pass in a request to the PDP ? For apparently, the applicability of
    > policies may vary with what attributes are present in the request.
    
    The Liberty Alliance Identity Governance Framework (IGF) provides
    perfect solution for this. Each party, here PDP, declares formally
    what attributes it needs and other parties (PEP) can be configured
    to match in more or less automatic way.
    
    Cheers,
    --Sampo
    
    > Regards,
    > Anil
    >
    > 


  • 2.  RE: [xacml] Attribute validation

    Posted 11-06-2008 15:04
    Well the IGF (which we are in favor of, obviously) solves part of the problem, but at the moment it only covers Subject Attributes. This is an area we are actively pursuing inside and outside the TC.
    
    Hal
    
    >