We may be confused by the concept of ABAC (Attribute Based Access Control) and OAuth2. We don’t know when ABAC or OAuth2 can be applied.

I think this question can be translated into ‘what kind of problems OAuth and ABAC can solve’. Now I would like to share my opinions.

Overview of Identity Management for the IoT

Cited from Overview: Identity Management for the Internet of Things by UnboundID

IoT IAM Requirements:

• Adaptive Authentication. 认证的手段会随着人的身份、context、设备、usecase等因素而变化。
• Privacy and Preference Management. IoT IAM可以将来自不同interaction point的用户偏好信息进行汇集，这样可以提高用户的忠诚度和保持用户在不同channel的体验一致性。
• Policy-Based Data Access Goverance. IoT IAM可以提供更细粒度的控制，以及基于环境因素以及上下文的控制。
• High Volume Scale.