Does OpenSAML support profile of XACML 2.0?

[Chad La Joie]

The only implementation that I'm aware of HERAS[1].  I used it in a
XACML project a few years back.  I have no idea what state it's
currently in.

[1] http://www.herasaf.org/

On Mon, Mar 5, 2012 at 13:40, Yang, Gang CTR (US)
<gang.yang.ctr at mail.mil> wrote:
> Got it. Thanks! I wasn't expecting any PDP functions, but that is what I'm looking to do though, hopefuly with the help of OpenSAML lib. Would appreciate if anyone knows and can recommend an existing open source implementation of XACML.
>
> Gang
> ________________________________________
> From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of Chad La Joie [lajoie at itumi.biz]
> Sent: Monday, March 05, 2012 12:31 PM
> To: Shib Dev
> Subject: Re: Does OpenSAML support profile of XACML 2.0?
>
> Sorry, binding as in XML binding.  You can use OpenSAML to generate,
> or read, XACML messages.  It does not, however, have any support for
> evaluating policies.
>
> On Mon, Mar 5, 2012 at 13:22, Yang, Gang CTR (US)
> <gang.yang.ctr at mail.mil> wrote:
>> Thanks for the reply, Chad. But I'm not sure I understand what you mean by "binding support". Did you mean the SAML binding, as SOAP or HTTP POST binding? Doesn't supporting the profile of  XACML 2.0 involve extending the assertion to include the extra statements and extending the protocol to support the extra queries?
>>
>> Gang
>> ________________________________________
>> From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of Chad La Joie [lajoie at itumi.biz]
>> Sent: Monday, March 05, 2012 11:18 AM
>> To: Shib Dev
>> Subject: Re: Does OpenSAML support profile of XACML 2.0?
>>
>> It has binding support for it, yes.
>>
>> On Mon, Mar 5, 2012 at 10:40, Yang, Gang CTR (US)
>> <gang.yang.ctr at mail.mil> wrote:
>>> Does OpenSAML support the profile of XACML 2.0 with the assertion extension?
>>
>>
>> --
>> Chad La Joie
>> www.itumi.biz
>> trusted identities, delivered
>> --
>> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
>> --
>> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
>
>
>
> --
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered