Externalize Authorization and Enforcement

Policy enforcement points (PEPs) enforce policy decisions made by the policy decision points (PDPs). The PEPs plug into standard J2EE and .NET application servers and also integrate with packaged applications such as portal, e-mail, messaging, content management, and Web servers.

Enforcers supporting Extensible Access Control Markup Language (XACML) plug into standard J2EE and .NET servers while also supporting packaged applications.
Optional local cache of entitlement policy decisions delivers higher performance and availability.
Extensive logging capabilities facilitate audits.