Analyzing Identity

In a previous post discussing XACML performance myth-busting, I described several areas in an XACML authorization system where performance issues can be addressed. Since then, my colleague David Brossard created the diagram below to illustrate potential performance bottlenecks.

To refresh your memory, here is the issue for each numbered item in the diagram (see the previous post for explanations):

1. Policy Retrieval
2. Policy Matching
3. Attribute Retrieval
4. Decision Caching
5. Multiple Requests
6. PDP – PEP Interaction

This entry was posted on July 14, 2010 at 7:55 pm and is filed under Authorization, Performance, XACML. You can subscribe via RSS 2.0 feed to this post's comments. You can comment below, or link to this permanent URL from your own site.