Hello Ariel!
On Mar 11, 2005, at 9:22 AM, Ariel M. Neisen wrote:
> My name is Ariel Neisen and I'm a developer from Argentina.
> I'm investigating about how to bind XACML to a Web Service. It's been
> a little hard for me to figure out in my head how to implement the XML
> that would be passed via SOAP.
Could you provide a little more detail about how you're trying to use
XACML in a web services environment? For instance, when you talk about
binding, are you trying to send an XACML Request/Response in SOAP, are
you trying to pass messgaes that include XACML policy, or are you
trying to use XACML to let the service make authorization decisions?
> Reading the XACML profile for Web Services, I saw that there's a way
> to perform a request-response-operation through SOAP, but I've not
> been able to find an example of its implementation, since it's a
> fairly new ground. I was wondering if you could provide me one
> example, or help me with my problem.
This profile effectively defines a subset of XACML that can be used for
negotiation with web services. It really was an experiement, and to my
knowledge no one has implemented the SOAP bindings described in the
second half of that spec. You're probably better off looking at the
SAML profile included with the 2.0 specification, which is now a
standard and may have what you're looking for.
seth
