Identity & Access
XACML
eXtensible Access Control Markup Language
The XML policy language and reference architecture that gave attribute-based access control its vocabulary: policy decision point, policy enforcement point, policy information point.
The architecture outlived the syntax. New systems adopt the PDP/PEP split but express the policy in Rego or Cedar; you will still meet XACML in identity and healthcare platforms that standardised on it a decade ago.
At a glance
- Category
- Identity & Access
- Jurisdiction
- Global
- Governance
- OASIS
- Status
- XACML 3.0 OASIS Standard (2013)
- First released
- 2003
Links
Related frameworks
Other entries under Identity & Access.
- SAML: Security Assertion Markup Language
- OAuth 2.0: OAuth 2.0 Authorization Framework
- OpenID Connect: OpenID Connect Core
- SCIM: System for Cross-domain Identity Management
See XACML in context
Open the interactive Data Landscape for Regulation to compare XACML against every other framework, or grab the raw JSON. Certification schemes and editions move — follow the source links before relying on this page.