Policy Decision Point (PDP)
Definition
A PDP evaluates access requests based on applicable policies and attributes.
A logical role in access control that evaluates an authorization request based on applicable policies and attributes and returns a decision.
Simply explained
A decision point checks the rules and responds whether a requested access is allowed.
Why it matters in practice
The term contributes to secure, maintainable, and high-performance web applications as well as resilient technical decisions.
Example from business
A PDP evaluates subject, action, resource, and context and delivers, for example, Permit or Deny to the enforcement point.
Limits and pitfalls
- Mixing decision and enforcement in the same uncontrolled component.
Origin & history
XACML standardized the role of the Policy Decision Point. A Policy Engine can implement a PDP, but the two terms are not identical in every system.
Use in mid-sized companies
- Possible application: A PDP evaluates subject, action, resource, and context and returns, for example, Permit or Deny to the enforcement point.
Frequently asked questions
What does Policy Decision Point mean?
A logical role in access control that evaluates an authorization request based on applicable policies and attributes and returns a decision. What mistakes should be avoided? Mixing decision and enforcement in the same uncontrolled component.
Sources
Source checked on 10.10.2026. Editorial application examples are hypothetical; no evidence of real customer results.
Editorially reviewed on: