The Policy framework in Access Manager are the services where policy management and administration are implemented. The Policy framework includes the following:
The Policy Service is defined using the amPolicy.xml. It performs the following functions:
Provides a means for defining and managing access policies.
Provides a means for defining custom policy plug-ins by providing names and class locations.
Evaluates access policies.
Acts as a PDP to deliver the result of a policy evaluation.
In order to configure for custom policy plug-ins, modify amPolicy.xml and use amadmin to reload it. See Developing Custom Subjects, Conditions, Referrals, and Response Providers in Sun Java System Access Manager 7.1 Developer’s Guide.
The Policy Configuration Service provides a means to specify how policies are defined and evaluated. The Policy Configuration Service enables you to specify, for example:
Which directory to use for subject lookup
The directory password
Which search filters to use
Which subjects, conditions, and response providers to use
This configuration can be done within a realm or a subrealm and is accessible through the Access Manager console.