XACML Service Interface

1
XACML Service Interface

• Port type generated
• Uses XACML SAML 2.0 profile
• Services will need to implement port type
• Sample Authorization Service provided
• Returns a permit for any non-anonymous access
  that is not on a configured list

2
XACML Authorization Callout

• PDP that can be configured to talk to any XACML
  Authorization Service
• Authorization service endpoint should be
  configured
• If a permit is returned for the said
  resource/action, a PERMIT is returned
• If deny is returned, DENY is returned
• If error occurs or no decision about request,
  INDETERMINATE is returned

3
XACML Library

• Helper classes
• Construct query/decisions
• Attribute processing
• Missing pieces
• Signature
• Obligations

4
Source code and details

• http//www-unix.mcs.anl.gov/ranantha/xacmlPDP/