[higgins-dev] RP Policy discussed during the higgins call

["Duane Buss" <DBuss@xxxxxxxxxx>]

http://wiki.eclipse.org/index.php/Relying_Party_Security_Policy

 

I joined the call late, and just caught the very last part of this discussion so I apologize if this issue was covered.   I was curious about why we are proposing a new assertion language for the Relying Party when there are several language definitions already out there, as well as execution / evaluation engines for those languages.    I would hate to have many policy languages evaluated and translated across the Higgins infrastructure.

 

One example of using XACML as WS-Policy constraints was described here http://research.sun.com/projects/xacml/ws-policy-constraints-current.pdf      I have successfully used the http://sunxacml.sourceforge.net/ evaluation engine to evaluate predicates outside of authorization policy.

 

 

Duane