21. A method for providing access to a resource on a network, comprising the steps of: transmitting an identification of said resource, said identification includes an absolute portion and a query portion, said query portion is used by a remote server to identify a first access rule from a plurality of access rules stored at said remote server; and determining whether access to said resource is authorized based on said identification of said resource without granting authorization to said resource, said determining including accessing said first access rule for said resource and accessing an identity profile for a first user to determine whether at least a portion of said first access rule is satisfied based on information in said identity profile, wherein said first access rule is not part of said identity profile.
21. A method for providing access to a resource on a network, comprising the steps of: transmitting an identification of said resource, said identification includes an absolute portion and a query portion, said query portion is used by a remote server to identify a first access rule from a plurality of access rules stored at said remote server; and determining whether access to said resource is authorized based on said identification of said resource without granting authorization to said resource, said determining including accessing said first access rule for said resource and accessing an identity profile for a first user to determine whether at least a portion of said first access rule is satisfied based on information in said identity profile, wherein said first access rule is not part of said identity profile. 22. The method according to claim 21 , wherein: said first access rule is an authentication rule.