liveBook · Manning

Three-dimensional choice space

As explained in Authorization in Action

A three-dimensional choice space is a model that organizes authorization-context decisions by signal type, delivery method, and freshness requirement.

Authorization decisions need context beyond identity and requested action. A three-dimensional choice space organizes that context by the signals that matter, how they arrive, and how fresh they must be. section 12.0

Design each authorization context along three dimensions:

  • Signal type: employment status, device trust, multifactor authentication, geolocation, risk score, or account balance. section 12.0
  • Delivery method: embed signals in tokens, fetch them through APIs, receive them from event streams, or gather them with local agents. section 12.0
  • Freshness requirement: query live data, cache it briefly, or accept values until token expiry. section 12.0

Contrasting authorization contexts

A low-risk collaboration feature may use token-based context lasting an hour. A production deployment decision may require live operational data and short-lived device-posture signals. The choice reflects risk, latency, and assurance requirements. section 12.0

How Authorization in Action covers it

How deep it goes
Explains the three dimensions, signal collection by PIPs, policy assembly by PDPs, delivery models, freshness, and signal protection.
Examples
Contrasts hour-long token context for collaboration with live operational data and short-lived device-posture signals for production deployment.
What it assumes
Assumes authorization policies and decisions; teaches how surrounding trust signals make abstract rules concrete.
What you can do after
Build it from scratch by mapping each use case’s required signals, delivery model, freshness target, and assurance tradeoffs.
How it connects
Connects authorization context with policy evaluation, PIPs, PDPs, tokens, APIs, event streams, device posture, caching, revocation, provenance, and signatures.
Cover of Authorization in Action
liveBookmanning.com
Read Authorization in Action on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Authorization in Action. The section links point to the parts of the book it draws on.