1. An apparatus for associating and aggregating attributes in a token-based environment, comprising: a memory operable to store a plurality of tokens indicating a device has been identified and is capable of consuming a resource; and a processor operable to: receive a subject token indicating an attempt to authenticate a user that is attempting to access a resource, the subject token representing at least one attribute associated with the user; determine at least one token-based rule based at least in part upon a token in the plurality of tokens and the subject token, the at least one token-based rule indicating a plurality of attributes required to access the resource; determine, from the at least one token-based rule, the plurality of attributes required to access the resource; determine a second plurality of attributes represented by the plurality of tokens and the subject token; determine at least one missing attribute, the at least one missing attribute in the plurality of attributes but not in the second plurality of attributes; request the at least one missing attribute; and receive, in response to the request for the at least one missing attribute, at least one token representing the at least one missing attribute.