Template / starter document request for XACML v3.0 Dynamic Attribute Authority Version 1.0

Submitted on Monday, November 30, 2020 - 03:05
Submitted by user:
Submitted values are:

Your name: Steven Legg
TC name: eXtensible Access Control Markup Language (XACML)
TC email address: xacml@lists.oasis-open.org
Work product title and version number: XACML v3.0 Dynamic Attribute Authority
Version 1.0
Work product abbreviation: xacml-3.0-dynamic-attributes-1.0
Track: Standards Track Work Product
Abstract:
A Dynamic Attribute Authority augments the request context of an XACML
authorization request with additional attributes and attribute values that
are
generated on demand according to a set of rules. The rules are expressed as
XACML policies, use obligations to specify the additional attributes and
values,
and are processed in the normal manner of a Policy Decision Point. This means
that a Dynamic Attribute Authority can be readily constructed from existing
XACML system components.

A primary use case for the Dynamic Attribute Authority is role enablement,
where
the dynamic attribute in question is the subject role.
Format: Microsoft Word
Chair(s):
Hal Lochhart, harold.w.lochhart@gmail.com, Individual member
Bill Parducci, bill@parducci.net, Individual member
Editor(s): Steven Legg, steven.legg@viewds.com, ViewDS Identity Solutions
Namespace(s): None
Notes:

The results of this submission may be viewed at:
http://tools.oasis-open.org/issues/browse/TCADMIN