On Tue, May 15, 2012 at 9:23 PM, Arleis Prieto Riverón <
[email protected]> wrote:

> Hi all.
> My question is if the Identity Server can know the IP address of which
> comes a authorization request without need specify the IP address in the
> XACML request.
>

If the IP address (or any attribute) is not specify in the XACML request,
you need to feed it to the XACML engine (PDP) by using a PIP (policy
information  point) .  As an example there can be attribute source that
contains list of IP addresses with respect to the user id.  If XACML
request contains the user id, PIP can be used to find the IP address
corresponding to the user id and feeds it to PDP.  You can find more info
about PIP from here [1]

[1] http://xacmlinfo.com/2011/12/18/understanding-pip/

Thanks,
Asela.


> Thanks in advance
>
> 10mo. ANIVERSARIO DE LA CREACION DE LA UNIVERSIDAD DE LAS CIENCIAS
> INFORMATICAS...
> CONECTADOS AL FUTURO, CONECTADOS A LA REVOLUCION
>
> http://www.uci.cu
> http://www.facebook.com/universidad.uci
> http://www.flickr.com/photos/universidad_uci
> _______________________________________________
> User mailing list
> [email protected]
> http://wso2.org/cgi-bin/mailman/listinfo/user
>
_______________________________________________
User mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/user

Reply via email to