Skip to Content.
Sympa Menu

mace-opensaml-users - RE: SAML 2.0 profile of XACML 2.0 (XACMLAuthzDecisionStatement)

Subject: OpenSAML user discussion

List archive

RE: SAML 2.0 profile of XACML 2.0 (XACMLAuthzDecisionStatement)


Chronological Thread 
  • From: "Scott Cantor" <>
  • To: <>
  • Subject: RE: SAML 2.0 profile of XACML 2.0 (XACMLAuthzDecisionStatement)
  • Date: Fri, 3 Aug 2007 12:53:49 -0400
> Note, that you don't get
> <saml:Statement xsi:type="xacml-saml:XACMLAuthzDecisionStatementType">
>
> You get:
> <XACMLAuthzDecisionStatement ..... />

SAML 2.0 requires the former, not the latter. Substitution is blocked in the
schema.

> Assertions, in the code, are set up to properly handle new statement
> types already, as well.

They are, but a validating parser will reject substitution.

-- Scott



Archive powered by MHonArc 2.6.16.

Top of Page