Through authorization, researchers will have access to scientific resources and advanced networking features. It will allow us to convert our complex legal policies into automated systems in an easily scalable fashion. But while the steps to deploy identifiers, authentication, and directories are understood today, the approaches to authorization are much less clear. Typically, authorization indicates what operations an identifier, properly authenticated, is permitted to do with a networked object or resource. As the sophistication and variety of networked resources increases, so too must the authorization mechanisms.
Directories can store authorization information.
Within authentication processes, one can carry authorization information. Identifiers may be extended to contain authorization. Stand-alone databases can supply additional information. There will be much work done in the near future to build a greater understanding of which tools are best suited to address particular authorization requirements. The road ahead We are starting the next stage of building the national information superhighway.