The authorization service provides the following security functions to other Avaya Breeze® platform snap-ins:

• Authentication of end users through LDAP or SAML

• Authentication of client applications using PKI

• Fine-grained authorization of snap-in features through client application

Client applications might or might not be snap-ins. The authorization service enables a client application to authenticate client credentials. The client application can also authenticate with user credentials. The client is then provided with a token that can be used to securely access multiple Avaya Breeze® platform snap-ins without being challenged.

For example, Avaya Context Store Snap-in leverages the authorization service by acting as a resource server. Client applications using Avaya Context Store Snap-in first authenticate with the authorization service and then provide the token to Avaya Context Store Snap-in with a request for validation. The existing whitelist or certificate-based HTTP(S) security mechanisms are supported with Avaya Context Store Snap-in.