Core Components
Tivoli Access Manager (TAM) has two core components:
- A user registry.
- An authorization service consisting of an authorization database and an authorization engine that performs the decision-making action on the request.
A user registry and an authorization service are the fundamental building blocks upon which Access Manager provides its security service capabilities. All other Access Manager services and components are built upon this base foundation.
Another component that is very close to the base components is called a resource manager. It is responsible for applying security policy to resources. The policy enforcer component directs the request to the authorization service for evaluation. Based on the authorization service result (approval or denial) the resource manager allows or denies access to the protected resources. Access Manager authorization decisions are based upon the Privilege Attribute Certificate (PAC), which is created for each user authenticated in an Access Manager environment, regardless of the authentication mechanism used.
Read more about this topic: IBM Tivoli Access Manager
Famous quotes containing the words core and/or components:
“The ideal of men and women sharing equally in parenting and working is a vision still. What would it be like if women and men were less different from each other, if our worlds were not so foreign? A male friend who shares daily parenting told me that he knows at his very core what his wife’s loving for their daughter feels like, and that this knowing creates a stronger bond between them.”
—Anonymous Mother. Ourselves and Our Children, by Boston Women’s Health Book Collective, ch. 6 (1978)
“Hence, a generative grammar must be a system of rules that can iterate to generate an indefinitely large number of structures. This system of rules can be analyzed into the three major components of a generative grammar: the syntactic, phonological, and semantic components.”
—Noam Chomsky (b. 1928)