Presentation AuthZForce
Download as PPTX, PDF•0 likes•196 views
The document proposes implementing the AuthzForce access control system on an electronic sales platform to demonstrate its suitability. It summarizes AuthzForce's Java and web APIs and provides an overview of XACML including its standardized language for fine-grained, attribute-based access control policies. The implementation would utilize AuthzForce's actors like PEP, PAP, PDP and PIP to handle access decisions according to the XACML standard and profile. Benefits of AuthzForce include its customizability, open source nature, and lightweight integration and management capabilities.
Presentation AuthZForce
- 1. Signposting ADAPT 360 API Authorisation Layer (XACML) Friday 11 November
- 2. Objective To demonstrate the suitability of the implementation of “AuthzForce” as an access control system on the Electronic Sales Platform Enterprise. AuthzForce Implementation Offering • Java API: AuthZForce offers an XACML PDP (Policy Decision Point) engine as a Java library so that applications can instantiate and use an embedded XACML PDP easily with Java. • Web API: AuthZForce provides a multi-tenant HTTP/REST API to PDPs and PAPs (Policy Administration Points) that web clients can call to manage policies, request authorization decisions
- 3. XACML 3.0 Overview •eXtensible Access Control Markup Language – standardized April 2001 •Fine grained, Attribute-based access control policies implemented by algorithmically combining: •Rules, policies, policysets and environment •Rules comprised of (Subject, Action, Resource, Environment) i.e: Jack may read his employee records when in the office between 9 and 5 •Policies combine rules to expand granularity, and are similarly combined into policysets •Decoupling of access decision from resource enables dynamic, simple policy modification •Standardized, mature language applied in enterprise solutions
- 4. The XACML profile specifies five main actors to handle access decisions: Policy Enforcement Point (PEP), Policy Administration Point (PAP), Policy Decision Point (PDP), Policy Information Point (PIP), and a context handler
- 5. How does XACML work?
- 6. Proposed Implementation of XACML
- 7. Conclusion AuthzForce Benefits • Highly Customisable • Open Source Package • Lightweight Integration and Management AuthzForce Features • Service/User Authentication • Access Control • Service discovery • Single sign on • Confidentiality, Availability and Integrity
- 8. Thank You