A Procedure Model for Enterprise-Wide Authorization Architecture

A procedure model for the development of an authorization architecture, which spans different IT systems and organizational units, is presented. Based on a conceptual discussion of authorization and authorization architecture, existing approaches are discussed. As basic requirements for authorization architecture, a theoretical foundation and a transparent derivation of the procedure model and activities from successful industry practices are proposed. Actual industry practices are presented as case studies, and a procedure model is derived by consolidating these practices. Since the inductively derived procedure model claims reference model status, the paper concludes with a discussion of its genericity and recommendation character.