Claims are the user data and they are issued by a trusted source. If we are working with token-based authentication, a claim may be added within a token by the server that generates the token. A claim can have any kind of data such as "DateOfJoining", "DateOfBirth", "email", etc. Based on a claim that a user has, a system provides the access to the page, which is called Claim based authorization. For example, the system will provide access to the page, if the user has a "DateOfBirth" claim. In short, claim based authorization checks the value of the claim and allows access to the system resource based on the value of a claim.
No comments:
Post a Comment