nccoe.nist.gov
Volume C
In the submenu, navigate to Results > Authorization > Authorization Profiles. Click Add. In the name field, enter "IDIPRedirect." Set the access type to "ACCESS_ACCEPT." Under Common Tasks, put a check next to Web Redirection (CWA, MDM, NSP, CPP). In the revealed fields, choose Centralized Web Auth. Set the ACL field to "ACL-REDIRECT."
Attribute Based Access Control
Attribute based access control (ABAC) is an advanced method for managing access rights for people and systems connecting to networks and assets. Its dynamic capabilities offer greater efficiency, flexibility, scalability, and security than traditional access control methods, without burdening administrators or users.