This documentation is for WSO2 Identity Server 5.2.0 . View documentation for the latest release.
||
Skip to end of metadata
Go to start of metadata

XACML is an XML-based language for access control that has been standardized by the Technical Committee of the OASIS consortium. XACML is very popular as a fine grained authorization method among the community. However, there are plenty of other aspects of XACML other than it being just a fine grained authorization mechanism.

Using thrift in XACML calls

In order to use thrift in XACML calls, you must first enable the thrift service in the <IS_HOME>/repository/conf/identity/identity.xml file. Set this to true.

<Server xmlns="http://wso2.org/projects/carbon/carbon.xml">
	...
	<EntitlementSettings>
		...
		<ThirftBasedEntitlementConfig>
			<EnableThriftService>true</EnableThriftService>
			...
		</ThirftBasedEntitlementConfig>
	</EntitlementSettings>
</Server>

The following topics provide information and instructions on how to use XACML to perform various access control related functions.

  • No labels