XACML is an XML-based language for access control that has been standardized by the Technical Committee of the OASIS consortium. XACML is very popular as a fine grained authorization method among the community. Fine-grained authorization specifies the requirements and variables in an access control policy that is used to authorize access to a resource. However, there are plenty of other aspects of XACML other than it being just a fine grained authorization mechanism.
For more information about XACML, see XACML Architecture.
Using thrift in XACML calls
In order to use thrift in XACML calls, you must first enable the thrift service in the <IS_HOME>/repository/conf/identity/identity.xml file. Set this to true.
<Server xmlns="http://wso2.org/projects/carbon/carbon.xml"> ... <EntitlementSettings> ... <ThirftBasedEntitlementConfig> <EnableThriftService>true</EnableThriftService> ... </ThirftBasedEntitlementConfig> </EntitlementSettings> </Server>
The following topics provide information and instructions on how to use XACML to perform various access control related functions.