Creating basic XACML requests for Evaluation

XACML Try allows users to test their policies easily, without creating and sending authorization requests to Identity Server. It is a UI tool through which authorization requests can be created and evaluated against available policies in the system. Users can create simple authorization requests using the web UI of the Try-It feature. By switching to “Create Request Using Editor” mode, it is possible to compose more complex authorization requests.

Follow the instructions below to create a basic XACML request for Evaluation.

1. Sign in. Enter your user name and password to log on to the Management Console.
2. Click the "Tools" button to access the "XACML" menu.
3. Click "TryIt".
4. Click on the "Create Request Using Editor" link or the "Create Request" button.
   
5. Use the "Toggle editor" to create a request in XML. The default elements are as follows:
   • <Resource>
   • <Subject>
   • <Action>
   • <Attribute AttributeId>
   • <AttributeValue/>
   • <Environment>
   Please refer to XACML 2.0/3.0 specification for details on XACML authorization requests.
   
6. Click on the "Evaluate" button to complete the process.
   

See also Evaluating an XACML Policy.