This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, visit https://wso2.com/documentation/.

Working with XACML

Owned by Former user (Deleted)
Last updated: Jan 05, 2016 by Former user (Deleted)
1 min read

XACML is an XML-based language for access control that has been standardized by the Technical Committee of the OASIS consortium. XACML is very popular as a fine grained authorization method among the community. However, there are plenty of other aspects of XACML other than it being just a fine grained authorization mechanism.

Using thrift in XACML calls

In order to use thrift in XACML calls, you must first enable the thrift service in the <IS_HOME>/repository/conf/identity/identity.xml file. Set this to true.

<Server xmlns="http://wso2.org/projects/carbon/carbon.xml">
	...
	<EntitlementSettings>
		...
		<ThirftBasedEntitlementConfig>
			<EnableThriftService>true</EnableThriftService>
			...
		</ThirftBasedEntitlementConfig>
	</EntitlementSettings>
</Server>

The following topics provide information and instructions on how to use XACML to perform various access control related functions.