This layer checks the validity of digital signatures and certificates used for message authentication and sender identification, ensuring they are issued by a trusted and allowed certification authority.
It verifies the structure and content of the headers of incoming client messages, ensuring they meet defined security standards and protocols.
The authorization layer communicates with LDAP (Lightweight Directory Access Protocol) servers to verify whether the sender is active and whether the user account exists.
It analyzes which groups the sender belongs to, which can impact the level of access and rights assigned to them.
Based on policies and rules, the layer decides whether the sender has the necessary rights to access specific methods or resources of the web service.
Involves checking and enforcing security policies that define what requests are allowed or denied, ensuring compliance with internal and external regulations.
Records all authorization attempts and outcomes, providing logs that can be used for forensic analysis or security improvement.
For all messages that fail authorization checks, the authorization layer returns appropriate error notifications to senders, preventing further access to the system.
After successful authorization, requests are routed further to application servers or other destinations within the network.
Cooperates with other parts of the security infrastructure, such as firewalls, IDS/IPS systems, and gateways, to enhance overall security and resilience of the system.
