Definitions

Definition 1

Related Terms

• Entitlement (Dictionary Entry)

• Entitlement-Based Access Control (Dictionary Entry)

• Entitlement Management (Dictionary Entry)

• Entitlement Management Solution (Dictionary Entry)

• XACML (Dictionary Entry)

Quotes

2 The Many Definitions of Entitlement Management

In talking with enterprises and vendors during research, Burton Group discovered many different understandings of the entitlement management term. This confusion has persisted in part because the marketplace and the business process both have the same name. Historically, this segment of the IdM market was referred to as "fine-grained authorization" because that was the focus of many early adopters. At this stage, fine-grained authorization is just one of a broader range of capabilities that current entitlement management products can offer. As such, entitlement management technologies and approaches resist a concise definition, but Burton Group uses the following definitions to distinguish between the business process and the market:

• Business Process : The process of (i) collection of information about individuals' job functions, authorities, and resource requirements, (ii) derivation of resource access entitlement information from that metadata, (iii) association of entitlement information to the appropriate people or roles, and (iv) periodic review of the association of entitlements to people or roles.

• Market: Products which implement fine-grained authorization using XACML (or proprietary interfaces) but do NOT implement the entitlement management business process.

Bibliography

• Gebel and Wang, 2010

See Also