Patent ID: 8370913

Claim:
An apparatus, comprising: a machine ( 135 ) operative as an identity provider; a receiver ( 705 ) to receive a request for a security token ( 160 ), said request for said security token ( 160 ) including a security policy ( 150 ) and identifying at least one datum ( 715 , 720 ) to be included in said security token ( 160 ); a transmitter ( 710 ) to transmit said security token ( 160 ) responsive to said request, said security token ( 160 ) responsive to said security policy ( 150 ); at least one audit policy ( 725 ) associated with said datum ( 715 , 720 ) including a trigger ( 730 ) based on said security token ( 160 ) and an audit action ( 735 ); and an audit operator ( 740 ) operative to perform said audit action ( 735 ) if said trigger ( 730 ) occurs.