SAML AuthzDecisionQuery and AuthzDecisionStatement: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
(Created page with "=Internal= * SAML Concepts - Authorization Assertion =Example= ==AuthzDecisionQuery== <pre> </pre> ==AuthzDecisionState...")
 
Line 8: Line 8:


<pre>
<pre>
<samlp:AuthzDecisionQuery xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                    xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  IssueInstant="2005-06-01T09:30:47.0Z" Version="2.0"
  InResponseTo="NCName"
  Destination="http://www.coresecuritypatterns.com"
  ID="ID000065">
<saml:Subject>
<saml:BaseID xsi:type="a type derived from BaseIDAbstractType"/>
<saml:SubjectConfirmation Method="http://www.coresecuritypatterns.com">
                  ...
</saml:SubjectConfirmation>
</saml:Subject>
<saml:Action Namespace="http://www.coresecuritypatterns.com">SomeAction</saml:Action>
<saml:Evidence>
            ...
</saml:Evidence>
</samlp:AuthzDecisionQuery>
</pre>
</pre>



Revision as of 15:35, 22 February 2017

Internal

Example

AuthzDecisionQuery

<samlp:AuthzDecisionQuery xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" 
                    xmlns:ds="http://www.w3.org/2000/09/xmldsig#" 
                    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
   IssueInstant="2005-06-01T09:30:47.0Z" Version="2.0" 
   InResponseTo="NCName" 
   Destination="http://www.coresecuritypatterns.com" 
   ID="ID000065">
		<saml:Subject>
			<saml:BaseID xsi:type="a type derived from BaseIDAbstractType"/>
			<saml:SubjectConfirmation Method="http://www.coresecuritypatterns.com">
                   ...
 			</saml:SubjectConfirmation>
		</saml:Subject>
		<saml:Action Namespace="http://www.coresecuritypatterns.com">SomeAction</saml:Action>
		<saml:Evidence>
            ...
		</saml:Evidence>
</samlp:AuthzDecisionQuery>

AuthzDecisionStatement