New XACML system component is ready for testing and implementation
OASIS is pleased to announce the approval and publication of a new Committee Specification by the members of the eXtensible Access Control Markup Language (XACML) TC :
XACML v3.0 Dynamic Attribute Authority Version 1.0
Committee Specification 01
25 January 2022
This specification defines a new XACML system component, the Dynamic Attribute Authority, which augments the request context of an XACML authorization request with additional attributes and attribute values that are generated on demand according to a set of rules. The rules are expressed as XACML policies, use obligations to specify the additional attributes and values, and are processed in the normal manner of a Policy Decision Point. This means that a Dynamic Attribute Authority can be readily constructed from existing XACML system components.
A primary use case for the Dynamic Attribute Authority is role enablement, where the dynamic attribute in question is the subject role.
This Committee Specification is an OASIS deliverable, completed and approved by the TC and fully ready for testing and implementation.
The documents and related files are available here:
Editable source (Authoritative):
Distribution ZIP file
For your convenience, OASIS provides a complete package of the prose specification and related files in a ZIP distribution file. You can download the ZIP file here:
Members of the eXtensible Access Control Markup Language (XACML) TC  approved this specification by Special Majority Vote. The specification had been released for public review as required by the TC Process . The vote to approve as a Committee Specification passed , and the document is now available online in the OASIS Library as referenced above.
Our congratulations to the TC on achieving this milestone and our thanks to the reviewers who provided feedback on the specification drafts to help improve the quality of the work.
 eXtensible Access Control Markup Language (XACML) TC
 Details of public review:
 Approval ballot: