An administrator may issue a credential to a user and may define a policy that authorizes its use based on a predefined location. The policy and the credential may be bound in a digital certificate signed by a trusted party. When the user operates a computing device to access a resource, the computing device may present the digital certificate to the resource. In turn, the resource may use the digital certificate to authenticate the user and to verify that the policy authorizes his or her access.