Minimal vs Fully Qualified Access Requests
Phil Windley
APRIL 4, 2023
We can separate this work out into a separate service called a policy information point (PIP). To build an authorization context for this request, the PIP must retrieve the following information: The user’s job title, department, and approval limit. The PIP typically would not have access to the IP address or browser type.
Let's personalize your content