Is there an authorization system with REST interface to PAP and PDP?
===

I am looking for authorization system (ideally with authentication and IdP included) that has its services available through REST API, for use in-house (hosted in our own servers, not "as a service" somewhere else, like Persona etc.). Do you happen to know such a system?

Also, it would be beneficial if it would be more lightweight, XACMP as a XML seems a bit heavy.