[Cloud Computing]Mechanisms: Attribute Authority

最新推荐文章于 2024-09-13 16:51:13 发布

破小孩儿

最新推荐文章于 2024-09-13 16:51:13 发布

阅读量362

点赞数

分类专栏： Cloud Computing 文章标签：云计算云计算机制

Cloud Computing 专栏收录该内容

94 篇文章 1 订阅

订阅专栏

Attribute Authority

The attribute authority, also known as an attribute store, is a directory or database in which systems can create, read, update and delete (CRUD) consumer attributes. It is a trusted source of consumer attributes to support making attribute-based access control (ABAC) decisions. The attribute authority is considered an identity provider (IdP) that provides user attributes to an attribute consumer. Attributes are encoded into signed tokens, such as Security Assertion Markup Language (SAML) tokens, for consumers to submit to providers to support determination of access privileges.

Figure 1 - An example of an attribute authority used by an attribute service to issue attribute tokens.

In Figure 1, the diagram assumes that the attribute authority has been provisioned with an organization’s cloud consumer attributes. The attribute service provides consumer attributes to the authentication gateway as a result of successful authentication of a consumer’s certificate.