9. A method for associating and aggregating attributes in a token-based environment, comprising: storing a plurality of tokens indicating a device has been identified and is capable of consuming a resource; receiving a subject token indicating an attempt to authenticate a user that is attempting to access a resource, the subject token representing at least one attribute associated with the user; determining, by a hardware processor, at least one token-based rule based at least in part upon a token in the plurality of tokens and the subject token, the at least one token-based rule indicating a plurality of attributes required to access the resource; determining, by the hardware processor, from the at least one token-based rule, the plurality of attributes required to access the resource; determining, by the hardware processor, a second plurality of attributes represented by the plurality of tokens and the subject token; determining, by the hardware processor, at least one missing attribute, the at least one missing attribute in the plurality of attributes but not in the second plurality of attributes; requesting the at least one missing attribute; and receiving, in response to the request for the at least one missing attribute, a first token representing the at least one missing attribute.
9. A method for associating and aggregating attributes in a token-based environment, comprising: storing a plurality of tokens indicating a device has been identified and is capable of consuming a resource; receiving a subject token indicating an attempt to authenticate a user that is attempting to access a resource, the subject token representing at least one attribute associated with the user; determining, by a hardware processor, at least one token-based rule based at least in part upon a token in the plurality of tokens and the subject token, the at least one token-based rule indicating a plurality of attributes required to access the resource; determining, by the hardware processor, from the at least one token-based rule, the plurality of attributes required to access the resource; determining, by the hardware processor, a second plurality of attributes represented by the plurality of tokens and the subject token; determining, by the hardware processor, at least one missing attribute, the at least one missing attribute in the plurality of attributes but not in the second plurality of attributes; requesting the at least one missing attribute; and receiving, in response to the request for the at least one missing attribute, a first token representing the at least one missing attribute. 12. The method of claim 9 , further comprising: generating a session token representing a session, the session facilitating access by the device to the resource; correlating the plurality of tokens, the subject token, and the first token with the session token.