Authentication Policy Contract

security

The normalized attribute set an authentication policy fulfills on every successful path: whatever adapter or IdP connection authenticated the user, downstream configuration consumes the same contract.

The APC is the boundary where 'how the user authenticated' stops mattering - SP connections and OAuth mappings bind to the contract, never to individual sources.

Also known as: APC, policy contract

← All glossary entries