XACML Policy Atlas is a free, open-source browser-based tool for working with XACML (eXtensible Access Control Markup Language) policies. It is designed for Healthcare IT professionals, IHE implementers, and security architects who work with access control policies in FHIR, XUA, and ATNA contexts.
No server. No upload. No account. Everything runs locally in your browser.
- 📊 Visualizer — Render XACML policies as interactive diagrams. Understand policy structure at a glance instead of reading raw XML.
- ✏️ Editor — Edit XACML policies directly in the browser with syntax highlighting and live preview.
- ✅ Validator — Validate policies against the XACML 2.0 & 3.0 schema and catch structural errors before deployment.
- 📚 Knowledge Base — Built-in reference for XACML concepts, elements, and IHE-specific patterns.
- 🔒 100% local processing — Your policies never leave your machine. Critical for sensitive healthcare access control configurations.
Open the tool directly in your browser:
- Load a policy — paste XML directly, upload a
.xmlfile, or load one of the built-in examples - Visualize — switch to the Visualizer tab to see the policy structure as a diagram
- Edit — modify the policy in the editor; the visualizer updates live
- Validate — check for schema errors before exporting
- Export — download the finished policy as XML
- Healthcare IT developers implementing IHE XUA (Cross-Enterprise User Assertion)
- Engineers working with IHE ATNA (Audit Trail and Node Authentication)
- FHIR security implementers dealing with SMART on FHIR scopes and access control
- Security architects designing role-based or attribute-based access control (RBAC/ABAC) policies in healthcare environments
- Anyone who has spent too long reading XACML XML and wishing there was a better way
XACML is used in several IHE profiles as the policy language for access control decisions:
| IHE Profile | Role of XACML |
|---|---|
| XUA (ITI-40) | Carries user identity assertions; policy decisions based on XACML |
| ATNA (ITI-19/20) | Node authentication; access policies enforced via XACML PDP |
| SeR (Secure Retrieve) | XACML-based authorization decisions for document retrieval |
| APPC | Patient privacy consent mapped to XACML policies |
XACML Policy Atlas helps you understand, create, and validate these policies without requiring a full PDP/PAP setup.
⚠ Provided as-is, use at your own risk.
🔒 All uploaded files are processed locally in your browser and never transmitted to a server.
Avoid uploading sensitive policies on shared or untrusted devices.
See also: SECURITY.md | PRIVACY.md | DISCLAIMER.md
Contributions are welcome! Please open an issue first to discuss what you'd like to change.
1. Fork the repository
2. Create a feature branch (git checkout -b feature/your-feature)
3. Commit your changes (git commit -m 'Add your feature')
4. Push and open a Pull Request
