XACML for Authorization

standardized, attribute based, externalized, fine-grained and dynamic authorization for enterprise applications

Month – January 2012

PDP Cluster with Load balancer

In my previous blog post, I explained deploying of PDP cluster using WSO2 Identity Server. Each PDP in the cluster exposes their own authorization service (Entitlement service). Therefore we need to setup a load balancer to forward the incoming authorization queries among each PDPs. Then load balancer would expose only a one interface for PEP […]

PDP Clustering

One of the important thing that must be supported by the production XACML PDP is that horizontal scaling with  high availability and reliability.  WSO2 Identity server’s PDP achieves the horizontal scaling using clustering mechanism. In this post i am going to explain deploying of PDP cluster using WSO2 Identity Server. Here following three main points are very important […]

XACML PDP Performance Test Suit

These day, I am going to do a performance test on XACML PDP.  Actually with WSO2 Identity Server PDP implementation. But main problem me is to define a proper test suit for these testing. However as a start,  I just tried identify the factors that effect for the XACML decision query time. 1. Complexity of Polices, defined in […]

Improving XACML PDP Performance with Caching Techniques

One way of improving the performance of a XACML engine is by using caching techniques. But caching implementation must be designed carefully. Actually when remind the XACMLnetiq identity manager reference architecture, we could identify that, caching can be done in four places   1. XACML Policies can be cached. As policies usually be stored in […]

XACML for Authorization © 2015 Frontier Theme