108
Sample Authorization Decision Statement
<Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
                   Version="2.0"
                   IssueInstant="2005-01-31T12:00:00Z"
                   ID="cccc315">
    <Issuer>
        http://www.AirlineInc.com
    </Issuer>
    <Subject>
        <NameID Format="urn:oasis:names:tc:1.1:nameid-format:emailAddress">
            j.doe@acompany.com
        </NameID>
    </Subject>
    <Conditions NotBefore="2005-01-31T12:00:00Z"
                         NotOnOrAfter="2005-01-31T13:00:00Z">
    </Conditions>
    <AuthzDecisionStatement Resource="http://www.CarRentalInc.com/employees/salaries"
                                                 Decision="Deny">
        <Action Namespace="urn:oasis:names:tc:SAML:1.0:action:rwedc-negation">Read</Action>
        <Evidence>
            <AssertionIDRef>faaf0443q</AssertionIDRef>
        </Evidence>
    </AuthzDecisionStatement>
</Assertion>
see example05