Solution

When defining the authorization components, we used the XACML reference architecture. Conceptual components We have defined the following conceptual components/functional areas from the reference architecture. PDP - Policy Decision Point The policy decision point is responsible for deciding if an authorization request is authorized or not. It bases its decision on rules and information it has of the resource and the user/system trying to access and perform an operation on a resource. »

See solutions for details about the functionality provided by this component. Construction Components Altinn Access Control The diagram below shows where the different solution components are located The Authorization component is constructed as a asp.net MVC application exposing API. The API communicates with the different solution components The below diagram shows the data flow including PEP. Data flow authorization Decision API The decision API is the API that orchestrates the decision process. »

Construction Components Altinn Access Groups API Theare »

See solutions for details about the functionality provided by this component. Construction Components Altinn Resource Registry Frontend The frontend is created with REACT as a standalone REACT application. It uses the following frameworks Axios : For Redux : Redux Toolkit : Redux Query : Build & Deploy We use GitHub Actions and Azure DevOps to build Frontend applications. The code is located in altinn-access-mangement-frontend repo Github Action Azure DevOps Pipeline Hosting The backend hosts the compiled frontend application. »