Abstract
Provisioning applications with identity-related data for the purpose of making authorization decisions usually takes one (or more) of three methodologies: preprovisioned (pushed) into the application, accessed (pulled) at runtime from a directory or other data repository, and released attributes through an additional infrastructure such as Shibboleth. This session will discuss these concepts and the integration points with the specific pieces of identity management and the applications requiring service.