Hi Fr嶮廨ic,
It is certainly our intent that XACMLPolicyStatement and
XACMLAuthzDecisionStatement could be included in a SAML Assertion. I
will investigate this with our XML experts.
Thank you for your comment.
Anne Anderson
Frederic Deleon wrote On 09/23/05 11:42,:
> Hello,
>
> Specification of SAML 2.0 profile of XACML defines XACMLPolicyStatement
> and XACMLAuthzDecisionStatement whose types are extensions of SAML
> StatementAbstractType element.
> It says that these statements should be placed in SAML Assertion
> elements (themselves placed inside SAML Response elements).
> As extended type from Statement I suppose.
>
> However, XACMLPolicyStatement and XACMLAuthzDecisionStatement are not
> defined as possible substitutions for Statement, as there is no
> "substitutionGroup" attribute in the XML schema, and substitutions are
> blocked anyway by blobkDefault="substitution" in both schemas (SAML and
> XACML-SAML profile).
>
> So, it seems that putting XACMLPolicyStatement and
> XACMLAuthzDecisionStatement in SAML assertions is not correct according
> to schemas.
> What is your mind about this ?
> Is schema of SAML extension for XACML profile normative ?
>
> Thanks in advance,
> Sincerely
>
>
> Fr嶮廨ic Del廩n
>
>
> ---------------------------------------------------------------------
> This publicly archived list supports open discussion on using the
> XACML OASIS Standard. To minimize spam in the archives, you
> must subscribe before posting.
>
> [Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
> Alternately, using email: list-[un]
> List archives: http://lists.oasis-open.org/archives/xacml-users/
> Committee homepage: http://www.oasis-open.org/committees/xacml/
> List Guidelines: http://www.oasis-open.org/maillists/guidelines.php
> Join OASIS: http://www.oasis-open.org/join/
>
--
Anne H. Anderson Email:
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311 Tel: 781/442-0928
Burlington, MA 01803-0902 USA Fax: 781/442-1692
