Who knows actively developed XACML Implemtations other than the Sun XACML Implementation and XEngine?
Who uses them in their products?
Which vendors provide a PDP? I read something about a WebLogic XACML Privider. What other products support XACML?
+2
A:
I'm a member of the team at IBM that builds a security policy management solution, including XACML for authorization policy; and I used to be the team lead for the XACML runtime component itself. The product is called Tivoli Security Policy Manager, and is definitely under active development.
WebLogic used to be built by BEA, before they were acquired by Oracle. I'm not sure if Oracle still sells it or not.
Axiomatics also has a XACML solution, as does Jericho Systems.
craigforster
2010-05-23 21:45:50
Does Tivoli Security Policy Manager use Sun's XACML Implementation or does IBM have it's own?Background:I'm writing a diploma thesis about security for OGC Web Services and my main topic is GeoXACML. I want to write about alternatives to Sun's Implementation.
lajuette
2010-05-26 14:25:52
We have our own. It's XACML 2.0 compliant and used in a number of other IBM products too.Drop me an email if you need more information, and I'll see what public information I can gather for you.
craigforster
2010-05-27 19:04:36
I'm really interested in ths information but i can't find any valid e-mail address. The IBM MTA for au1.ibm.com tells me you are not listed in it's Domino Directoy.I didn't found an address on your blog either. Can you send a mail to lajuette _a_t_ gmail _d-o-t._ com ?
lajuette
2010-06-25 08:48:18
A:
This may not be helpful as it's not a COTS product, but it may be of interest to you or others.
There is an open-source XACML implementation at http://code.google.com/p/enterprise-java-xacml/ which I've used recently. It covers the entire specification and has pretty decent policy evaluation performance considering it's not optimised.
Ben L
2010-07-30 10:42:55