Documentation
Home
Products
DirX Access DirX Audit DirX Directory DirX Identity
Get Support

DirX Access

    • Copyright
    • System Overview
    • Glossary
      • Industry Terms Glossary and Abbreviations
      • DirX Access Terms Glossary and Abbreviations
    • Installation And Deployment
      • Pre Installation
        • Planning Your Installation
        • Deploying Application Repository
      • Running the Installer
      • Initial Configuration
      • Direct Application of System Actions, Configuration and Shadow User Tree
      • Crypto Material Management
      • Sanity Check
      • PEP Deployment
      • User Repository-less Deployment
      • Migration
      • System Deployment
    • Cache Server
    • Bridge
      • Client TLS Authentication for Request Resolution
    • Server
      • Administration Guide
        • Administrative Tools
        • Administrative Tasks
          • Configuration
            • Authentication
              • AuthnApplication
              • AuthnMethods
                • AuthnMethodAuthnApplication
                • AuthnMethodBasic
                • AuthnMethodComposite
                • AuthnMethodFido
                • AuthnMethodForm
                • AuthnMethodOAuth
                • AuthnMethodOAuthClient
                • AuthnMethodOtpCallback
                • AuthnMethodOtpRfc4226
                • AuthnMethodOtpRfc6238
                • AuthnMethodPasswordChange
                • AuthnMethodSaml
                • AuthnMethodSelection
                • AuthnMethodThirdPartyToken
                • AuthnMethodTrusted
                • AuthnMethodWindows
                • AuthnMethodX509
              • FidoMetadataService
              • FidoMetadataStatement
              • KerberosSpnTable
            • Authorization
              • XacmlAttributeCategory
              • XacmlAttributeTemplate
              • XacmlAttributeValueMapping
              • XacmlAttributeValueTemplate
              • XacmlPolicyInterpretationTemplate
              • XacmlRequestConstructionTemplate
            • ExtensionModules
              • CalloutHandler
            • Federation
              • FederationOAuth
                • OAuthClientEndpoint
                • OAuthClientMetadata
                • OAuthProviderEndpoint
                • OAuthServerEndpoint
                • OAuthServerMetadata
              • FederationSaml
                • SamlIdPEndpoint
                • SamlMetadata
                • SamlSPEndpoint
              • FederationWsFederation
                • WsFederationEndpoint
                • WsFederationMetadata
            • KeyManagements
              • CryptoContainer
            • LdapDataService
            • Pdps
              • XacmlPdpFile
              • XacmlPdpService
            • Peps
              • CloudPep
              • DeployableWebPep
              • OtherPep
              • PlainWebPep
            • Policies
              • AbacPolicyContainer
              • PolicyAuthn
                • AuthnPolicy
                • PolicyAuthnConditions
                  • CalloutRiskCondition
                  • IpRangeRiskCondition
                  • LoginFailuresRiskCondition
                  • LoginIntervalRiskCondition
                  • ProtocolHeaderRiskCondition
                  • ResourceSensitivityRiskCondition
                  • TimeRangeRiskCondition
                  • UserAttributeRiskCondition
                  • UserContextAwareRiskCondition
              • RbacAuthz
                • Action
                • AuthzPolicy
                • AuthzRule
                • RbacAuthzConditions
                  • AssuranceLevelCondition
                  • AuthnMethodCondition
                  • IpRangeCondition
                  • OwnershipCondition
                  • ResourceParentCondition
                  • TimeRangeCondition
                • RbacAuthzObligatios
                  • ExpressionObligation
                  • SourceObligation
                • Role
              • Resource
            • RestServices
              • ConfigRestService
              • LegacyRestService
              • ScimRestService
              • SsoRestService
              • SysActionsRestService
            • Servers
              • Cluster
              • PortAssignment
              • Server
            • SoapServices
              • ProvisioningSoapService
            • Subjects
              • SubjectsExternal
                • OauthToken
                  • OAuthAttributeTemplate
                  • OAuthAttributeValueTemplate
                • RequestInjection
                  • RequestInjectionTemplate
                  • RequestInjectionValueTemplate
                • SamlAssertionExternal
                  • SamlAssertionConstructionTemplate
                  • SamlAttributeStatementConstructionTemplate
                  • SamlAttributeTemplate
                  • SamlAttributeValueTemplate
                  • SamlAuthnContextTemplate
                  • SamlAuthnStatementConstructionTemplate
                  • SamlSubjectConstructionTemplate
              • SubjectsInternal
                • PersistentData
                  • RbaDataCollector
                  • SubjectTemplate
                • SamlAssertionInternal
                  • SamlAssertionInterpretationTemplate
            • UserRepository
          • SystemActions
            • ConfigurationExport
            • ConfigurationImport
            • Deployment
              • BridgeDeploymentSysAction
              • PepDeploymentActions
                • ApachePepDeploymentSysAction
                • IisPepDeploymentSysAction
                • JettyHandlerPepDeploymentSysAction
                • ServletFilterPepDeploymentSysAction
                • TomcatValvePepDeploymentSysAction
              • ServicesDeploymentSysAction
              • WebAppDeployment
                • SpaPluginWebAppDeploymentSysAction
                • WebApplicationDeploymentSysAction
            • KeystoreManagement
              • GenerateKeystoreSysAction
              • ImportKeystoreSysAction
          • Scenario Wizards
        • Functional Topics
          • Authentication
            • Authentication Application
              • Composite Authentication Method
              • Password Change
            • Integrated Windows Authentication
            • FIDO Authentication Methods
            • Risk-based Authentication
            • Name Resolution
            • Enabling Authentication Methods
            • Sharing Credentials Across Multiple Authentication Methods
            • Anonymous Access
            • Just in Time Provisioning to Application Repository
          • Federation
            • SAML
              • SAML Keywords
            • WS-Federation and WS-Trust
            • OAuth
              • OAuth 2.0 Authorization Framework
              • Resource-Centric Authorization Service
              • Configuring SSL/TLS Client Truststore and HTTPS Proxy for OAuth Client FEP
          • Authorization
            • Role Enablement Authorities
            • DirX Access Authorization
          • User Data Management
            • User Data Management via SCIM 2.0 and the Application Repository Service
          • Auditing
        • Non-Functional Topics
          • Port Assignments
          • Cross-Origin Resource Sharing (CORS)
          • Session Management
          • System Monitoring
          • System Logging
          • Distributed Cache and Performance
          • Keystore Management
          • Password/Keys Obfuscation
          • Changing the Server Side JVM Restart Threshold
          • Resource Identification and URI Normalization
          • Servlet Filter Parameter Sanitization
          • LDAP
          • Custom System Properties
      • Integration Guide
        • Employing External Plug-in Modules
        • Web Services Communications
          • Federation SOAP Web Service
          • Provisioning SOAP Web Service
          • SSO REST Web Service
          • SysActions REST Web Service
          • Config REST Web Service
            • Configuration Export Config REST Web Service
            • Query Options Config REST Web Service
            • Fine-grained Patching of Resources
            • Configuration Object Metadata Config REST Web Service
          • SCIM 2.0 REST Web Service
            • Record Metadata SCIM 2.0 REST Web Service
            • Users and Groups SCIM 2.0 Endpoints
          • Legacy REST Web Services
            • Sessioning Legacy REST Web Services
            • User Credentials and Data Legacy REST Web Services
        • Audit Event Plug-ins
        • Credential Validation Plug-ins
        • Attribute Finder Plug-in for Authentication
        • Third Party Authentication Token Finder Plug-in
        • Name Mapping Plug-in
        • Attribute Finder Plug-ins for Authorization
        • CRL Finder Plug-ins
        • SSO Event Plug-ins
        • User Consent Plug-ins
        • Risk Condition Plug-ins
        • Authentication Application Success Plug-ins
        • OTP Callback Callout Plug-ins
        • Password Propagation Plug-ins
        • RBA Data Plug-ins
        • Customizing DirX Access Components
        • Deploying Custom Web Application
    • Performance
      • OAuth Authorization Code Flow
      • SAML Assertion with Implicit Login
      • Perform SSO
      • PEPs
        • PEP for Apache HTTP Server
        • PEP for Internet Information Services
    • Template Files
      • Configuration Template Files
        • dxaConfigCluster.json
        • dxaConfigServer.json
        • dxaConfigPortAssignmentSSL.json
        • dxaConfigReaAdministration.json
        • dxaConfigUserRepository.json
        • dxaConfigSubjectTemplate.json
        • dxaConfigRbacAdministration.json
        • dxaConfigAuthNBasic.json
        • dxaConfigAuthNAuthNApp.json
        • dxaConfigRestForConfig.json
        • dxaConfigSPA.json
        • dxaConfigManager.json
        • dxaConfigRestForSCIM.json
        • dxaConfigCredentialsManager.json
      • SUT Template Files
        • dxaUserDirXAccessAdministrator.json
      • System Actions Template Files
        • dxaCryptoGenerateKeystoreSecCommClient.json
        • dxaCryptoGenerateKeystoreSecCommServer.json
        • dxaDeployWebAppConfigRest.json
        • dxaDeployWebAppSysActionsRest.json
        • dxaDeployWebAppSPACore.json
        • dxaDeployWebAppPluginManager.json
        • dxaDeployWebAppDxaAa.json
        • dxaDeployBridge
    • Peps
      • Cloud Foundry PEP
      • PEP Communication Resolution
      • Request Logging at Java PEPs
      • PEP for Apache HTTP Server
      • PEP for Internet Information Services
    • Datasheets
DirX Access 9.1
  • DirX
  • DirX Access
    • 9.1
  • DirX Audit
    • 9.0
    • 7.2
  • DirX Directory
    • 9.1
  • DirX Identity
    • 8.10.13
    • 8.10.12
    • 8.10.11
    • 8.10.10
    • 8.10.9.a
Home
  • DirX Access
  • Server
  • Administration Guide
  • Administrative Tasks
  • Configuration
  • Policies

Policies

Policies allows to manage:

  • Roles

  • RBAC authorization and risk-based authentication policies

  • ABAC policies

PlainWebPep AbacPolicyContainer

DirX is a registered trademark © Copyright ${currentyear}, Eviden SAS – All rights reserved.

The UI for this site is derived from the Antora default UI and is licensed under the MPL-2.0 license. Several icons used are provided by Google and are licensed under the Apache License Version 2.0.