Identity and Access Management (IdAM) for Aranya.

Design

Aranya's IdAM system is written in our proprietary language for policy code. The language syntax and logic is described in the policy lang spec, while an in-depth explanation of the policy that makes up Aranya's IdAM system can be found in the default policy.

Aranya's IdAM code makes use of several external functions belonging to other modules, which are callable by the policy via a foreign function interface (FFI) of the APIs made available by a particular module. For details on the cryptographic APIs used by IdAM, see IDAM crypto.