Authorization

Temenos Microservices adopted XACML implementation to provide provision for the client to define authorization policies for intended Microservices. The client will use Policy Editor Design time to author XAML policies for Microservices and deploy them on the policy store.

Policy Authoring will be carried out using Policy Editor and final reviewed policies will be uploaded into a centralized policy store.

XACML – Policy Attributes

The following attributes are used for the authorization policy

S. No.	XACML Attribute Type	Information Data available for policy enforcement
1	Resource	The resource element is a data, service or system component Data parameters available in HTTP Request Headers & Payload and Data Entity. For example, “Balance” and “Transaction”.
2	Subject	A subject element is an entity requesting access. User attributes are available in HTTP Header.
3	Action	Action ID of the API.
4	Environment	Environmental parameters existing in the business function context. AWS – Lambda, AZURE – Function, Docker – Web container Context(Tomcat).