1. A method comprising: receiving a first request; determining a first set of one or more attributes in a first protocol based on the first request; translating the first set of attributes from the first protocol to a canonical form; applying policy rules to the first set of attributes in the canonical form to determine whether to grant the first request; receiving a second request; determining a second set of one or more attributes in a second protocol based on the second request, the second protocol being different than the first protocol; translating the second set of attributes from the second protocol to the canonical form; applying policy rules to the second set of attributes in the canonical form to determine whether to grant the second request; wherein the method is performed using at least one device comprising a hardware processor.