Attribute-based access control: Difference between revisions

Revision as of 01:57, 21 June 2022

Revision as of 14:38, 22 October 2022

Line 22:

ABAC comes with a recommended architecture which is as follows:

# The PEP or Policy Enforcement Point: it is responsible for protecting the apps & data you want to apply ABAC to. The PEP inspects the request and generates an authorization request from it which it sends to the PDP.

# The PDP or Policy Decision Point is the brain of the architecture. This is the piece which evaluates incoming requests against policies it has been configured with. The PDP returns a Permit/ Deny decision. The PDP may also use PIPs to retrieve missing metadata

# The PIP or Policy Information Point bridges the PDP to external sources of attributes e.g. LDAP or databases.