Sun Java System Access Manager 7.1 Administration Guide

ProcedureTo Add or Modify a Rule to a Referral Policy

  1. If you have already created the policy, click the name of the policy for which you wish to add the rule. If not, see To Create a Referral Policy With the Access Manager Console.

  2. Under the Rules menu, click New.

  3. Select one of the following default service types for the rule. You may see a larger list if more services are enabled for the policy:

    Discovery Service

    Defines the authorization actions for Discovery service query and modify protocol invocations by web services clients for a specified resource.

    Liberty Personal Profile Service

    Defines the authorization actions for Liberty Personal Profile service query and modify protocol invocations by web services clients for a specified resource.

    URL Policy Agent

    Defines authorization actions for the URL Policy Agent service. This is used to define policies that protect HTTP and HTTPS URLs. This is the most common use case of Access Manager policies.

  4. Click Next.

  5. Enter a name and resource name for the rule.

    Currently, Access Manager Policy Agents only support http:// and https:// resources and do not support IP addresses in place of the hostname.

    Wildcards are supported for protocol, host, port and resource name. For example:


    http*://*:*/*.html

    For the URL Policy Agent service, if a port number is not entered, the default port number is 80 for http://, and 443 for https://.


    Note –

    Steps 6 and 7 are not applicable for a referral policy.


  6. Click Finish.