Does OpenSAML support profile of XACML 2.0?

[Nick Duan]

Sun's XACML is the most popular one. It should be easy to google it out.  It
is not based on OpenSAML APIs, though.

Nick

-----Original Message-----
From: dev-bounces at shibboleth.net [mailto:dev-bounces at shibboleth.net] On
Behalf Of Yang, Gang CTR (US)
Sent: Monday, March 05, 2012 1:41 PM
To: Shib Dev
Subject: RE: Does OpenSAML support profile of XACML 2.0?

Got it. Thanks! I wasn't expecting any PDP functions, but that is what I'm
looking to do though, hopefuly with the help of OpenSAML lib. Would
appreciate if anyone knows and can recommend an existing open source
implementation of XACML.

Gang
________________________________________
From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of
Chad La Joie [lajoie at itumi.biz]
Sent: Monday, March 05, 2012 12:31 PM
To: Shib Dev
Subject: Re: Does OpenSAML support profile of XACML 2.0?

Sorry, binding as in XML binding.  You can use OpenSAML to generate,
or read, XACML messages.  It does not, however, have any support for
evaluating policies.

On Mon, Mar 5, 2012 at 13:22, Yang, Gang CTR (US)
<gang.yang.ctr at mail.mil> wrote:
> Thanks for the reply, Chad. But I'm not sure I understand what you mean by
"binding support". Did you mean the SAML binding, as SOAP or HTTP POST
binding? Doesn't supporting the profile of  XACML 2.0 involve extending the
assertion to include the extra statements and extending the protocol to
support the extra queries?
>
> Gang
> ________________________________________
> From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of
Chad La Joie [lajoie at itumi.biz]
> Sent: Monday, March 05, 2012 11:18 AM
> To: Shib Dev
> Subject: Re: Does OpenSAML support profile of XACML 2.0?
>
> It has binding support for it, yes.
>
> On Mon, Mar 5, 2012 at 10:40, Yang, Gang CTR (US)
> <gang.yang.ctr at mail.mil> wrote:
>> Does OpenSAML support the profile of XACML 2.0 with the assertion
extension?
>
>
> --
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to
dev-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to
dev-unsubscribe at shibboleth.net



--
Chad La Joie
www.itumi.biz
trusted identities, delivered
--
To unsubscribe from this list send an email to
dev-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to
dev-unsubscribe at shibboleth.net