On 27 Jul 2012, at 17:35, Pete Muir wrote:
Authorization doesn't plug straight into pure IDM, but instead
plugs into a permission resolver, which in turn uses the IDM in order to turn the rights
of a user into permissions to perform an action. This would come as part of PicketLink IDM
AIUI.
I need to do a bit more research here to complete the picture. I'll try to ping back
in a bit.
Actually, it might be better for Shane to take this up here.