Interrolle

Interrolle is a framework and protocol intended to enable cross-domain interoperability of access control policies across organizational boundaries. It provides a governance model and a technical mechanism to map roles and permissions so that a user’s rights can be recognized and enforced across diverse systems.

The architecture centers on a network of Interrolle Nodes, a policy registry, and a set of reference claim schemas. Members issue, store, and verify role claims in the form of Interrolle Claims, which are digitally signed by trusted Issuers. These claims carry identity attributes, a mapped role, scope of access, issuer information, and an expiration. Verifiers evaluate incoming claims against resource access policies in real time, while revocation and auditable logs ensure accountability.

Data model and operation focus on a role-to-permission mapping, where a user’s claim asserts a particular role that corresponds to a defined permission set. The system supports dynamic role resolution, policy-driven access decisions, and traceable authorization events, with an emphasis on minimizing repetitive credential presentation.

Standards and interoperability emphasize compatibility with existing identity and access standards such as SAML, OAuth 2.0, and OpenID Connect. Interrolle also contemplates decentralized identifiers and verifiable credentials to support privacy-preserving attribute sharing and flexible governance.

History and adoption notes point to a cross-industry consortium that introduced the framework in the late 2010s, with public specifications and pilot deployments explored in enterprise IT and public sector contexts. Ongoing discussions address governance, formal schemas, and practical integration strategies.

See also: access control, identity management, role-based access control, attribute-based access control, digital identity.