Abbreviated Language for Authorization

In March 2014, Axiomatics announced it was donating ALFA to the OASIS XACML Technical Committee[4] in order to advance its standardization.

The words doctor, view, medical record, Singapore... are all examples of attribute values.

ALFA supports all the data types that are defined in the OASIS XACML Core Specification.

Some datatypes e.g. numerical (integer, double) and boolean map directly from ALFA to XACML.

See below for examples[5] String, integer, double, and boolean all map directly from ALFA to XACML.

The rule also has a condition which is used to compare 2 attributes together to implement a relationship check (user ID must be equal to owner).

Obligations and advice are statements in XACML that can be returned from the PDP to the PEP alongside the decision (Permit, Deny...).

It uses a XACML condition to compare the currentTime attribute to the value representing 5pm (expressed in 24-hour time).