Policy Information Point
A Policy Information Point, or PIP, is the component that provides additional attributes or context needed for authorization decisions.
- Acronym
- PIP
- Synonym
- PIP
Definition
A Policy Information Point is the information retrieval component of an authorization architecture. It supplies the Policy Decision Point with external data such as user attributes, organizational context, resource metadata, classification, location, hierarchy, or environmental signals required to evaluate policies correctly. The PIP does not decide access; it feeds the decision process.
Why it matters
Rich authorization decisions require contextual data; the PIP bridges the PDP to the information sources it needs.
The Ariovis perspective
Authorization policies should be separated from application code when consistency, auditability or scale require it. Enforcement remains close to the resource while the decision is governed independently.
Related services
Common pitfalls
- PIPs that query slow or unreliable external systems can cause authorization delays or failures when those systems are unavailable.
Standards and protocols
- ISO/IEC 24762
- XACML
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.