If send the 'urn:oasis:names:tc:xacml:1.0:subject-category:access-subject' attribute in the request, this will be resolved. You can have a set of policies with sample requests and responses from here at as a series at my blog,http://pushpalankajaya.blogspot.com/2013/06/working-with-xacml-30-policies-for-fine.html
WSO2 Identity Server XACML Request giving Indeterminate Response
Question
I am using the sample policy at:
and sample request from:
and getting an Indeterminate response from WSO2 identity server stating "Couldn't find AttributeDesignator attribute"
<Response xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17">
<Result>
<Decision>Indeterminate</Decision>
<Status>
<StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:missing-attribute"/>
<StatusMessage>Couldn't find AttributeDesignator attribute</StatusMessage>
<StatusDetail>
<MissingAttributeDetail AttributeId="http://kmarket.com/id/role" DataType="http://www.w3.org/2001/XMLSchema#string" Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" ></MissingAttributeDetail>
</StatusDetail>
</Status>
</Result>
</Response>
Not sure what i am missing
Solution
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow