XACML
Sign in to saveAlso known as Extensible Access Control Markup Language
The eXtensible Access Control Markup Language (XACML) is an XML-based standard markup language for specifying access control policies. The standard, published by OASIS, defines a declarative fine-grained, attribute-based access control policy language, an architecture, and a processing model describing how to evaluate access requests according to the rules defined in policies.
Wikidata facts
- Official website
- www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml
Sources (3)
via Wikidata · CC0
~39 min read
Article
57 sectionsContents
- History
- Architecture
- Terminology
- Flow
- Policy elements
- Structural elements
- Attributes and categories
- Targets
- Conditions
- Obligations & Advice
- Combining algorithms
- Functions
- Equality, inequality and other matching functions
- Arithmetic functions
- String functions
- Logical functions (and, or, not)
- Set and bag functions
- Regular expression functions
- XPath functions
- Higher order functions
- XACML 4.0
- Core specification and schema
- Profiles
- New in XACML 4.0
- Model simplifications
- New features
- XACML 3.0
- Schema
- Data types
- New in XACML 3.0
- New profiles
- Delegation
- Other features
- Sample policies
- Date and time-based authorization in XACML
- Time-based authorization in XACML
- Sample requests and responses
- XACML 3.0 request
- XACML 3.0 responses
- XACML 3.0 sample response
- XACML 3.0 sample response with obligation
- The Multiple Decision Profile of XACML 3.0
- Sample JSON Request for the Multiple Decision Profile
- Sample JSON Response for the Multiple Decision Profile
- Developer orientation
- XACML 4.0 and the JSON representation of ACAL (JACAL)
- The ALFA Profile of XACML 3.0
- The JSON Profile of XACML 3.0
- Sample JSON request
- Sample JSON response
- XACML and other standards
- XACML and Open Policy Agent
- XACML and SAML
- XACML and OAuth
- See also
- References
- External links
The eXtensible Access Control Markup Language (XACML) is an XML-based standard markup language for specifying access control policies. The standard, published by OASIS, defines a declarative fine-grained, attribute-based access control policy language, an architecture, and a processing model describing how to evaluate access requests according to the rules defined in policies.
XACML is primarily an attribute-based access control policy language, but also defines syntaxes for the requests (resp. responses) sent (resp. received) by the Policy Enforcement Point to (resp. from) the Policy Decision Point, also called authorization decision requests (resp. responses). In XACML, attributes – information about the subject accessing a resource, the resource to be addressed, the action to be performed on the resource, and the environment – act as inputs for the decision of whether access is granted or not. XACML can also be used to implement role-based access control.