An optimized approach to match XACML policy set.

GenericBreakGlass: XACML Reference Implementation

An extended version of Balana (provided by WSO2) which implements a XACML 3.0 conflict analyzer, based on set theory.

An example Authorization Manager using XACML

Testbed Security Service for Authorization (policy administration and decision, aka XACML PAP/PDP)

This project adds authorization functionality to the HAPI-FHIR-Server. It's based on the JPA server example provided by HAPI. The access control by authorization is added as an additional layer in form of an interceptor. It uses an external policy service built with Java Spark and a MongoDB as policy storage for evaluation.

Generic REST API model for Authorization PDPs

Apache Kafka Authorizer (KIP-11) supporting both Kafka ACL and XACML (ABAC) policy evaluation

AuthzForce RESTful XACML PDP service (compliant with XACML REST & JSON Profiles)

Implementation of OASIS XACML 2.0 & 3.0 specification in Java programming language

Even though spring security provides role-based access control it doesn’t allow users to perform policy-based authorization. The main goal of this project is to write an agent which can be used to perform attribute-based access control for Spring security.

This project provides a Policy Enforcement Point (PEP) SDK in Java that generates a XACML 3.0 authorization request and response in accordance with the JSON Profile of XACML 1.1.

AuthzForce Server (Multi-tenant XACML PDP/PAP - REST API)

AuthzForce ABAC/XACML PDP engine

An authorization library that supports access control models like ACL, RBAC, ABAC in Java