Fine grained authorization externalization

Question

User1648493229 posted

Hi, we want to extract our authorization logic out of applications and put it outside.

We were using Azman earlier but want to move out. I have found references of XACML but does not seem to be very active.

Can someone please put some light in this space?

Answer 1

User614698185 posted

Hi ashishtechie,

Welcome to ASP.NET Forums!

I think you could use claims-based authorization to accomplish externalized authorization capabilities.

If you want to use XACML. In XACML, you have the notion of an authorization engine called the Policy Decision Point (PDP). That PDP links together all the information it needs to make decisions.

For more information, please see: http://stackoverflow.com/a/22977317

Best Regards,

Candice Zhou

Answer 2

User1648493229 posted

I would like to go claims-based but claims-based authorization i could not find any provider which can do the PDP thing. Or are you suggesting to use XCAML as PDP with claim-based.

Also, do you know good open-source XACML PDP implementations?

Answer 3

User614698185 posted

Hi ashishtechie,

You could refer to the below examples:

https://www.axiomatics.com/blog/entry/custom-claims-based-authorization-in-net-using-axiomatics-pep-sdk-for-net.html

http://stackoverflow.com/questions/7987887/fine-grained-authorization-for-web-applications

Best Regards,

Candice Zhou