← Prev in month ← Prev in thread

SAML statement extension for XACML

From
Grederic Eeleon
Date
2005-09-23T15:43:06+00:00
ID
Thread
SAML statement extension for XACML
Hello,

Specification of SAML 2.0 profile of XACML defines XACMLPolicyStatement 
and XACMLAuthzDecisionStatement whose types are extensions of SAML 
StatementAbstractType element.
It says that these statements should be placed in SAML Assertion 
elements (themselves placed inside SAML Response elements).
As extended type from Statement I suppose.

However, XACMLPolicyStatement and XACMLAuthzDecisionStatement are not 
defined as possible substitutions for Statement, as there is no 
"substitutionGroup" attribute in the XML schema, and substitutions are 
blocked anyway by blobkDefault="substitution" in both schemas (SAML and 
XACML-SAML profile).

So, it seems that putting XACMLPolicyStatement and 
XACMLAuthzDecisionStatement in SAML assertions is not correct according 
to schemas.
What is your mind about this ?
Is schema of SAML extension for XACML profile normative ?

Thanks in advance,
Sincerely

Fr嶮廨ic Del廩n
← Prev in month ← Prev in thread