<div dir="ltr">We're not supporting XACML 2.0 or 3.0. I haven't looked at XACML 3 yet myself, but it sounds like it is a significant improvement and it would be worth considering adding a XACML 3 policy.<div><br></div><div>Aggregated policies are a natural addition to Keycloak and it's not directly an answer to XACML rather an alternative approach.</div><div><br></div><div>Pedro can probably elaborate a bit more on this though.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 13 July 2016 at 00:40, Alexander Zagniotov <span dir="ltr"><<a href="mailto:azagniotov@gmail.com" target="_blank">azagniotov@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hello All,<div><br></div><div>As per subject. </div><div><br></div><div>I am also interested to know if Keycloak supports new features provided by XACML 3.0: </div><div>Multiple Decision Profile, Policy combination algorithms, Delegation, etc.</div><div><br></div><div>That being said, is aggregated policies feature is Keycloak's answer to some of the XACML 3.0 new features?</div><div><br></div><div><br></div><div>Thanks</div></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>