Axiomatics Implements XACML-Based Access Control for Windows Server 2012

Orlando, FL (PRWEB) June 13, 2012

Axiomatics is happy to announce general availability of its new authorization solution that provides automated translation of XACML (Extensible Access Control Markup Language) to Microsoft Corp.'s Security Descriptor Definition Language (SDDL). The upcoming version of Windows Server 2012 includes enhanced functionality that implements Dynamic Access Control, based on SDDL, for Windows file system resources. Axiomatics’ solution enables enterprises to extend the reach of their XACML authorization system to include the Windows Server 2012 environment. The XACML to SDDL translation functionality will be available in Axiomatics Policy Server version 5.

According to Babak Sadighi, Axiomatics CEO, “Modern enterprises have to enable fast and flexible information sharing, while at the same time ensuring compliance with various internal organizational policies and external regulatory regimes. To support this, business applications need elaborate access control solutions in which an authorization system shall not only answer to whom, but also for what, when, from where, why and how access is granted or denied. Furthermore, such an authorization system must implement the access controls across a broad spectrum of applications, data and resource platforms. ABAC is a powerful authorization model capable of handling the complexities involved to achieve this.”

Windows Server 2012 introduces Dynamic Access Control, which enhances the file system access authorization to include expressions that contain claims about the user, the device and the resources that the user is trying to access. This enables central access policies to control access based on business and regulatory requirements. Dynamic Access Control widely extends the expressiveness of access control lists (ACL), making it a powerful enhancement to Windows Server 2012.

Axiomatics has achieved integration between SDDL managed access control and the Axiomatics Policy Server (APS). Access policies are created and validated within APS and automatically transformed into SDDL using the new XACML-2-SDDL feature. Transformed policies are loaded into Active Directory and enforced by Windows Server 2012. This offers an enterprise-ready implementation of policy-based and dynamic XACML-based authorization. Through the SDDL integration, APS can be used to enforce policies on the operating system level, as well as on the application layer. Axiomatics will demonstrate the full lifecycle of authorization policies at Microsoft TechEd North America 2012.

“Windows Server 2012 includes notable innovations such as Dynamic Access Control. We’re excited to see companies such as Axiomatics, with its ABAC solution, build on Windows Server 2012 capabilities and demonstrate their products at the Microsoft Partner Pavilion at Microsoft TechEd in Orlando, FL this week,” said Andrew Conway, Director, Product Marketing, Microsoft.

For more information please visit Axiomatics at the TechExpo Partner Pavilion (Station #40) to see a demonstration or the Microsoft complex at Microsoft TechEd North America 2012. You can also find information from Axiomatics at http://www.axiomatics.com/dynamic-access-sddl-xacml-windows-server-2012

Note: Product and company names herein may be trademarks of their registered owners.

PDF Print