XACML and SAML - a Match Made in... 2005

Pat Patterson responded to a blog posting by David Kearns but missed out on several opportunities to share Sun's vision of implementing standards-based approaches in an open world.

Hopefully, Pat can provide clarification on:

• Will Sun be releasing an XACML PAP and PDP?


• Will Sun be releasing an implementation of the OASIS AAPML and CARML specifications?


• If you can pass XACML within a SAML profile, how does this XACML can applied to an XACML application that has its own PDP as additional restrictions?


• If you are passing SAML/XACML via a web access management platform (other than Sun), how does this get integrated into say Siteminder or other equivalent products?