How does Hurderos do authorization?
The authorization model used by the Hurderos project is unique in both the commercial and OSS world. It flows directly and naturally from the IDfusion identity model. It leverages the natural strengths of LDAP and Kerberos to provide an inherently secure system for very fine-grained authorization decisions. 8.) Can Hurderos do ‘role-based’ authorization> The Hurderos authorization system is a services based system which provides a clear super-set to role based systems. The Hurderos authorization strategy allows organizations to enjoy the simplicity of role based strategies while providing the ability to initiate very fine-grained modifications to the authorizations. 9.) How is this different from Active Directory. The authorization system in Active Directory is based on a Microsoft centric model of security. The Privilege Authentication Certificates (PAC) codes embedded in AD generated service tickets essentially map a user into a set of Windows Workgroups which ultimately establish pr