ATTRIBUTE-BASED ACCESS CONTROL AND AUTHORIZATION

摘要

The present subject matter relates to methods and systems for attribute-based access control and authorization (AACA) in an enterprise. In one implementation, the present subject matter provides an AACA system (102), for an application (202), that offers authentication, authorization, and access control based on user attributes. Further, the AACA system (102) maintains user identity, provides support for user and admin policies for access control and authorization. Yet further, the AACA system (102) separates authentication, authorization, and access control processes from the application (104).