Introduction

Attribute Connectors act as Policy Information Points (PIP) that link to external data sources holding the required attribute values required by a Policy Decision Point (PDP) to evaluate policies. Axiomatics provides several standard Attribute Connectors such as LDAP, SQL, Table, HTTP, and Parsers (JWT, JSON, XML), while custom Attribute Connectors can be created to fetch attributes that are not supported by the default ones.

The attribute connector represents an attribute source. Some attribute values needed to evaluate a policy may need to be fetched from an external data source such as a SQL database or an LDAP directory. Where and how to get these values is defined by attribute connectors.

Some attribute values needed to evaluate a policy may need to be fetched from an external data source such as a SQL database or an LDAP directory. Where and how to get these values is defined by attribute connectors.

The Table Attribute Connector provides support for fetching attribute values from SQL data sources. In that sense it is similar to the SQL Attribute connector.

The main differences are that the Table Attribute Connector assumes attributes can be fetched directly from columns in the database and that it does not support arbitrary SQL queries. These differences make it more restrictive than the SQL Attribute Connector but also easier to configure.

The attribute connector configurations are included along with the policy in the authorization domain. The attribute connector itself is then used at runtime during policy evaluation.

Notices

AXIOMATICS® is a registered trademark of Axiomatics AB, corporate identification no. 556708-1012, Sweden. Other trademarks are the property of their respective owners.

Except as otherwise expressly agreed in writing by Axiomatics AB, information in this document does not constitute in any way a representation, warranty or commitment on the part of Axiomatics.

Copyright © 2018-2024 Axiomatics AB. All Rights Reserved.