This documentation is for WSO2 Identity Server 5.4.0. View documentation for the latest release.
Page Comparison - Working with XACML (v.4 vs v.5) - Identity Server 5.4.0 - WSO2 Documentation

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Info

For more information about XACML, see Access Control and Entitlement Management.

We generally uses the HTTPS transport for calling the Web Service API that has been exposed by the PDP.  With WSO2 Identity Server, we can also use Thrift protocal to communicate with PDP.  It is said that thrift is more faster than the HTTP.  Therefore we hope that we can get more performance and less response time by using thrift protocol with WSO2 Identity Server.


Note
titleUsing thrift in XACML calls

In order to use thrift in XACML calls, you must first enable the thrift service in the <IS_HOME>/repository/conf/identity/identity.xml file. Set this to true.

Code Block
languagexml
<Server xmlns="http://wso2.org/projects/carbon/carbon.xml">
	...
	<EntitlementSettings>
		...
		<ThirftBasedEntitlementConfig>
			<EnableThriftService>true</EnableThriftService>
			...
		</ThirftBasedEntitlementConfig>
	</EntitlementSettings>
</Server>

...