Policy Framework

The Policy framework in Access Manager are the services where policy management and administration are implemented. The Policy framework includes the following:

• Policy Service

• Policy Configuration Service

Policy Service

The Policy Service is defined using the amPolicy.xml. It performs the following functions:

• Provides a means for defining and managing access policies.

• Provides a means for defining custom policy plug-ins by providing names and class locations.

• Evaluates access policies.

• Acts as a PDP to deliver the result of a policy evaluation.

In order to configure for custom policy plug-ins, modify amPolicy.xml and use amadmin to reload it. See Developing Custom Subjects, Conditions, Referrals, and Response Providers in Sun Java System Access Manager 7.1 Developer’s Guide.

Policy Configuration Service

The Policy Configuration Service provides a means to specify how policies are defined and evaluated. The Policy Configuration Service enables you to specify, for example:

• Which directory to use for subject lookup

• The directory password

• Which search filters to use

• Which subjects, conditions, and response providers to use

This configuration can be done within a realm or a subrealm and is accessible through the Access Manager console.