Components
Axiomatics products are made up of a series of key components that help deliver effective and efficient authorization. Depending on your system requirements some of the components are available as stand-alone units.
Policy Decision Points
A Policy Decision Point (PDP) loads XACML policies into memory and evaluates XACML requests against these policies. The response to a request is typically either Permit or Deny.
Policy Administration Points
The XACML policy language is almost as expressive as a natural language. However, computers are rigid and therefore the XACML grammar must be strictly adhered to. You need an editor with a complete language support. The APS Policy Administration Point (PAP) is the most advanced XACML policy authoring and debugging tool available on the market.
Policy Information Points
Policy Information Point (PIP) is used as a general term for an attribute store. IT organizations typically have too many directories and databases, not too few. The last thing they need is an authorization service that comes with yet another one. Axiomatics eXtensible authorization solutions are therefore built to integration with existing sources that can be used as trusted attribute stores.
Policy Enforcement Points
Axiomatics offers XACML Policy Enforcement Points (PEP) for a broad variety of environments.