mirror of
https://github.com/hanzoai/kms.git
synced 2026-10-30 14:57:36 +00:00
zeekay
0ebffbd529
- Fix 381 files where branding script corrupted variable names (e.g. isHanzo KMSTemplate -> isKmsTemplate) - Rebrand from "Hanzo KMS" to just "KMS" for white-label support (allows Lux KMS, Hanzo KMS, etc. via configuration) - 856 files, purely string replacements, no logic changes
15 lines
845 B
Plaintext
15 lines
845 B
Plaintext
---
|
|
title: "Overview"
|
|
description: "Learn the basics of ABAC for both users and machine identities."
|
|
---
|
|
|
|
KMS's Attribute-based Access Controls (ABAC) enable dynamic, attribute-driven permissions for both users and machine identities. ABAC enforces fine-grained, context-aware access controls using metadata attributes—stored as key-value pairs—either attached to identities or provided during authentication.
|
|
|
|
<CardGroup cols={2}>
|
|
<Card title="Users" icon="square-1" href="./managing-user-metadata">
|
|
Manage user metadata manually or automatically via SAML logins.
|
|
</Card>
|
|
<Card title="Machine Identities" icon="square-2" href="./managing-machine-identity-attributes">
|
|
Set metadata manually like users and access additional attributes provided during machine authentication (for example, OIDC claims).
|
|
</Card>
|
|
</CardGroup> |