We're not supporting XACML 2.0 or 3.0. I haven't looked at XACML 3 yet myself, but it sounds like it is a significant improvement and it would be worth considering adding a XACML 3 policy.

Aggregated policies are a natural addition to Keycloak and it's not directly an answer to XACML rather an alternative approach.

Pedro can probably elaborate a bit more on this though.

On 13 July 2016 at 00:40, Alexander Zagniotov <azagniotov@gmail.com> wrote:

Hello All,

As per subject.

I am also interested to know if Keycloak supports new features provided by XACML 3.0:
Multiple Decision Profile, Policy combination algorithms, Delegation, etc.

That being said, is aggregated policies feature is Keycloak's answer to some of the XACML 3.0 new features?

Thanks

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user