Does OpenSAML support profile of XACML 2.0?

[David Chadwick]

Gang

in the EC TAS3 project (http://www.tas3.eu/) we used the SAML profile of 
XACMLv2 to talk between our SP PEPs and PDPs. Open source code is 
available for both the PEP (based on ZXID) and the PDP (based on 
PERMIS). The latter supports plugging in Sun's XACML PDP to the PERMIS 
authz server, which handles the SAML protocol and can then call multiple 
subordinate PDPs via the XACML request/response context. You can 
download the latter from here

http://sec.cs.kent.ac.uk/permis/downloads/download.shtml

you will want package 18, the standalone PERMIS authz server

To get the latest version of ZXID, talk to Sampo the author

regards

David


On 05/03/2012 18:40, Yang, Gang CTR (US) wrote:
> Got it. Thanks! I wasn't expecting any PDP functions, but that is
> what I'm looking to do though, hopefuly with the help of OpenSAML
> lib. Would appreciate if anyone knows and can recommend an existing
> open source implementation of XACML.
>
> Gang ________________________________________ From:
> dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of
> Chad La Joie [lajoie at itumi.biz] Sent: Monday, March 05, 2012 12:31
> PM To: Shib Dev Subject: Re: Does OpenSAML support profile of XACML
> 2.0?
>
> Sorry, binding as in XML binding.  You can use OpenSAML to generate,
> or read, XACML messages.  It does not, however, have any support for
> evaluating policies.
>
> On Mon, Mar 5, 2012 at 13:22, Yang, Gang CTR (US)
> <gang.yang.ctr at mail.mil>  wrote:
>> Thanks for the reply, Chad. But I'm not sure I understand what you
>> mean by "binding support". Did you mean the SAML binding, as SOAP
>> or HTTP POST binding? Doesn't supporting the profile of  XACML 2.0
>> involve extending the assertion to include the extra statements and
>> extending the protocol to support the extra queries?
>>
>> Gang ________________________________________ From:
>> dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf
>> of Chad La Joie [lajoie at itumi.biz] Sent: Monday, March 05, 2012
>> 11:18 AM To: Shib Dev Subject: Re: Does OpenSAML support profile of
>> XACML 2.0?
>>
>> It has binding support for it, yes.
>>
>> On Mon, Mar 5, 2012 at 10:40, Yang, Gang CTR (US)
>> <gang.yang.ctr at mail.mil>  wrote:
>>> Does OpenSAML support the profile of XACML 2.0 with the assertion
>>> extension?
>>
>>
>> -- Chad La Joie www.itumi.biz trusted identities, delivered -- To
>> unsubscribe from this list send an email to
>> dev-unsubscribe at shibboleth.net -- To unsubscribe from this list
>> send an email to dev-unsubscribe at shibboleth.net
>
>
>
> -- Chad La Joie www.itumi.biz trusted identities, delivered -- To
> unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net -- To unsubscribe from this list send
> an email to dev-unsubscribe at shibboleth.net
>

-- 

*****************************************************************
David W. Chadwick, BSc PhD
Professor of Information Systems Security
School of Computing, University of Kent, Canterbury, CT2 7NF
Skype Name: davidwchadwick
Tel: +44 1227 82 3221
Fax +44 1227 762 811
Mobile: +44 77 96 44 7184
Email: D.W.Chadwick at kent.ac.uk
Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html
Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html
Entrust key validation string: MLJ9-DU5T-HV8J
PGP Key ID is 0xBC238DE5

*****************************************************************