As I mentioned on this morning's TC-call, there is a "OGSA-Authz Working Group" at the Global Grid Forum, that has a strong XACML component.

Working Group Charter:

The objective of the OGSA Authorization WG is to define the specifications needed to allow for basic interoperability and pluggability of authorization components in the OGSA framework. There are a number of authorization systems emerging in the Grid today (Akenti, PERMIS, CAS, VOMS, Cardea, etc.), these specifications will allow these solutions to be interchangeably used with middleware that requires authorization functionality.

This group will leverage authorization work that is ongoing in the Web services world (e.g. SAML, XACML, the WS Security suite) and define specification for how these should be used for Grid services.

"https://forge.gridforum.org/projects/ogsa-authz/"

If you have a few cycles left, please join the associated mailing list and let us benefit from your expertise and experience.

Regards, Frank.