Interaction of XACML components
The following diagram shows the high level xacml interaction. [image http://community.jboss.org/servlet/JiveServlet/downloadImage/102-10840-28-2514/449-266/XACML.png] The Policy Enforcement Point (PEP) acts as an interceptor. In the component or container where an access decision is to be made, the PEP will create an XACML request based on various parameters of the call. It then asks the PDP for an access decision. The PDP will use one or more policies to make an access decision.