Description
This document specifies ways to use XACML in the context of Web Services for authorization,
access control, and privacy policies. It specifies a policy Assertion type based on XACML
elements for use with WS-Policy or other schemas and protocols; standard formats, matching
semantics, and usage guidelines are provided for this Assertion type. Two specific Assertions are
derived from this type: XACMLAuthzAssertion for authorization policies and
XACMLPrivacyAssertion for privacy policies. The Profile gives non-normative examples of
how to express P3P policy preferences and match them using the new
XACMLPrivacyAssertion.