I believe that support for obligations are included in XACML 3.0, e.g.:
https://docs.wso2.org/display/IS450/Managing+Entitlement#ManagingEntitlement-ImprovementsinObligation
and that WSO2 (4.6) is supposed to support XACML 3.0. However, I haven't been able to find any information on enabling this support in WSO2.
Does anyone know if this is possible?
Thanks,
Jim
Yes. Obligations are supported by WSO2IS. It is basically about the underline XACML engine.. WSO2IS uses Balana XACML engine that supports obligations and advices. You can write a policy with obligations and try out with WSO2 Identity Server.
Related
I am trying to utilise multitenancy feature in WSO2 by using github releases(https://github.com/wso2/product-is/releases/tag/v5.11.0). I just wanted to understand if there are any limitations for the same between enterprise version downloaded from wso2 site and github releases.
Thanks
WSO2 doesn't have an Enterprise Version of the product. Everybody uses the same base release and if you have a subscription you will be receiving product updates for bug fixes, improvements, security issues etc. Other than that there are no hidden features or limitations in the Opensource version.(Rarely some features are introduced as updates, in these cases you may not receive them) The subscription is for getting updates and getting support from WSO2.
You can read more about WSO2 subscription from here.
Adding to #YCR answer, yes, multi tenancy is supported in IS 5.11.0 and IS 6.0.0 and it was supported throughout IS 5.x series. Please see Tenant Management on WSO2 documentation.
I am running WSO2 IS 5.10 on [Linux 4.4.0-176-generic x86_64] and am logged in using the built in admin account. I need to troubleshoot a SAML Request generated from the testing of an IdP and SP that I have setup. I would like to use the SAML2 Toolkit from the Tools tab, but that functionality is missing. I remember this functionality being available in my 5.09 setup. Has this functionality been removed with 5.10 or is there a configuration that needs to be updated to make this available?
Image of carbon UI
You have to add a SAML enabled service provider first in that version in order to use the tool.
I am trying to follow the documentation Enabling Role-Based Access Control Using XACML for WSO2 API Manager 2.0.0.
But adding the features described failed,
complaining: the XACML feature 5.0.7 cannot be installed since 5.2.0 is already installed (although not visible under "installed features"). Adding XACML Mediation fails due to missing dependencies.
Anyone got this working and can share some insight?
Looks like the features in the new p2 repository has conflicts with existing ones. Basically, it's a bug. I reported this here in WSO2 APIM JIRA.
As a workaround, if you only need role based authorization, you can use oAuth2 scope based authorization.
Is WSO2 API Manager support RAML specification? I want use RAML spec in the place of swagger 2.0. I am using WSO2 AM 1.9
No - WSO2 API Manager 1.9.0 doesn't support RAML. However there was a discussion on adding this support in API Manager[1].
[1] http://markmail.org/message/5noiwvohgpd2sk6q?q=Supporting+RAML+in+API+Manager
Is there a way to inactivate a user in WSO2 identity server 5.0.0?
Inactivating should mean that the user cannot login to other applications which are SSO integrated into the IS.
Removing roles/permissions seems not to do the trick.
WSO2 IS supports account lock feature to cater your requirement from IS 4.5.0 onwards. Please follow this document.
Account disable functionality is not yet implemented and we have already reported a jira to track it in future releases.