Skip to main content

Attribute

An attribute is a typed property described by an attribute definition and represented by zero or more owner-scoped values. Attributes can be inputs to authorization and explicitly governed token projection.

  • Definition ID (definitionId) — stable system identity of a definition.
  • Definition key (definitionKey) — semantic name used by people and policy/claim configuration.
  • Subject type — kind of entity described by the definition.
  • Governance owner — realm-bound scope that controls the definition.
  • Value owner — concrete scope/reference attached to a stored direct value.
  • Binding / applicability — rule that says where and how a definition can apply.
  • Direct value — stored value for one explicit owner; no inheritance implied.
  • Default — baseline resolution input, not an effective result by itself.
  • Effective value — server-resolved result for a verified context.
  • Provenance — ordered evidence of contributing values, defaults, rules, owners and versions.
  • Conflict — typed result for incompatible candidates; clients must not choose arbitrarily.
  • Token eligibility — permission to be considered for projection, not automatic emission.