https://confluence.simplprogramme.eu/display/SIMPL/Annex+6+-+Architecture+building+blocks For each type of resource, different policies will apply. Often, the providers will define the access policies by assigned security attributes to users. In general, security attribute providers can be third-parties. This building block federates the attribute providers.