This image illustrates when an application acts as a Policy Enforcement Point to request an authorization decision from a Policy Decision Point. The flow when the Security Module acts as a PDP is as follows:

1. The Policy Enforcement Point receives the request for access.

2. The Policy Enforcement Point initiates the authorization call through communication with the Security Module (Policy Decision Point).

3. The Policy Decision Point returns the policy decision.

4. The Policy Enforcement Point enforces the decision returned by the Policy Decision Point.

Copyright © 2011, 2015, Oracle and/or its affiliates. All rights reserved.