eXtensible Access Control Markup Language

ABSTRACT

eXtensible Access Control Markup language (XACML) is an OASIS initiative to standardize representation of access control policies in a flexible, extensible XML format. This facilitates transfer of policy between disparate legacy security systems as well as allowing for new policy enforcement mechanisms that support granular access control across heterogeneous data and application environments, including XML documents, relational data bases, and application servers. The presentation provides an overview of the standard, to be released in Q1 2002, so that attendees are prepared to take advantage of its functionality. It lays out advantages of XACML for consolidating access control from implementations fragmented across applications, web/application servers, firewalls and operating systems. Finally, it addresses the intersection of entitlement management, personalization, digital rights management, and data asset management in a consolidated policy store.