|
Document Name:
|
OGF25 draft: Use of XACML Request Context to Obtain an Authorisation Decision
|
| Document ID: |
doc15551 |
| Description: |
The attached is reasonably complete and consistent, and is a significant change from the previously published version. However, this is the only one of the 4 profiles whose edits have not been finished n
order to cater for all requirements.
Specifically, it is currently not possible for the PEP to pass the policy that is to be used by the PDP, to the PDP. In order to do this, it is necessary to specify the profile in terms of the OASIS doc "SAML 2.0 Profile of XACML, Version 2, Working Draft 5, 19 July 2007" instead of "SAML 2.0 profile of XACML v2.0, ERRATA, Working Draft 01, 17 November 2005" which is the version that the profile is currently based on. The 2007 version of the SAML profile of XACML allows the PEP to pass a policy to the PDP. This allows for dynamic use of policies on a per request basis, which is currently not possible with the existing profile as it stands (since the policy must be static).
|
| Version Comment: |
|
| Version Created By: |
David Groep - 03/05/2009 3:28 AM EST |
|
| Status: |
Draft |
| Current Version: |
1
|
| Size: |
345 KB |
| Lock: |
 Unlocked
|
|
