AARC-G027 Guidelines for expressing resource capabilities

This document provides a specification for expressing resource-specific capabilities using entitlements. A capability defines the resource or child-resource a user is allowed to access, optionally specifying certain actions the user is entitled to perform. Capabilities can be used to convey – in a compact form – authorisation information.

Document URLhttps://zenodo.org/record/1251671/files/AARC-G029_Guidelines-on-Step-Up-Authentication.pdf?download=1
Development informationAARC Project Wiki
Status: Final (10 Dec 2018), Endorsed AEGIS (10 Dec 2018)
Errata: none
Supersedes: none