...
At a conceptual level there are many places where attributes can be obtained
- From a directory that provide provides attributes from well understood schemas via LDAP
- Derived from a SCIM or a SAML attribute assertion
- From a an XACML Policy Information point Point or as a result of a call to a XACML authorization API
...