Authorization Management Platform

This short bundle explains what the Axiomatics Authorization Management Platform is and how its parts fit together. Reading time is about 10 minutes.

The platform has three components:

• Authorization Hub: The control plane. Where you define and manage attributes, attribute connectors, policies and domains.
• Access Decision Service (ADS): The decision plane. A runtime engine (PDP) that evaluates access requests against a domain and returns a decision.
• Axiomatics Policy DevOps (APD): The development and delivery toolchain. Where you write, test and ship ALFA policies as code.

Follow the links below to learn about the Attribute-Based Access Control (ABAC) model implemented by these components, the individual components, and how they work together.

1. ABAC in five minutes

Attributes, PEP/PDP/PIP, ALFA, and the three planes (~3 min)

2. The platform components

Authorization Hub, Access Decision Service, and Policy DevOps (~4 min)

3. How the components work together

The build-and-deliver flow and the runtime decision flow (~3 min)