SAML and XACML as a New Way of Identity Management

Today, the number of websites that are offering personalised web content ( some special information for somebody) are growing rapidly. To provide personalised content,websites require users to identify themselves, which is typically done by giving the user an account with an associated user name and password or other secure information. Security Assertion Markup Language (SAML) is an open standard defined by the OASIS. SAML provides a common language that online entities can use to universally share and exchange security information. Extensible Access Control Markup Language (XACML) is an XML based language for access control. The policy language is used to express acces control policies who can do what. SAML and XACML can be used for very complex identity management, for acces control policy. This paper is about the possibility how to use XACML and SAML for identity management. One model of authetication and authorization by XACML and SAML is presented here, to