Overview of Creating a Policy

10-12 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager ■ Group Linking - Enables you to link a policy to a User ID group The number of rules, trigger combinations, and group links present in the policy is shown in parenthesis on the Policy Details page tabs. Disabled rules are also included in the count.

10.8 Creating Policies

A policy is a collection of rules and configured to evaluate and handle patterns or practices, or specific activities that you may run across in the day-to-day operation of your business. For a new policy to function, you must create the policy and then perform edits to the policy. To create a new policy:

1. In the Navigation tree, double-click Policies. The Policies Search page is

displayed.

2. From the Policies Search page, click the New Policy button.

The New Policy page is displayed where you can specify details to create a new policy. Alternatively, you can open a New Policy page by: ■ Right-clicking Policies in the Navigation tree and selecting New Policy from the context menu. ■ Selecting Policies in the Navigation tree and then choosing New Policy from the Actions menu. ■ Clicking the Create new Policy button in the Navigation tree toolbar. ■ Selecting the Create New Policy button from the Search Results toolbar. ■ Selecting New Policy from the Actions menu in Search Results. All fields in the Summary tab are pre-populated except Name and Description. When the New Policy page first appears, the default values for the new policy are as follows: ■ Policy Status : Active ■ Checkpoint : Pre-Authentication ■ Scoring Engine : Average ■ Weight : 100 After you create a new policy, you can add rules, trigger combinations, and user groups. Managing Policies, Rules, and Conditions 10-13 Figure 10–6 New Policy

3. In the Summary tab, in the Policy Name box, type the name of the new policy.

Enter between 1 and 255 characters for the policy name and for the description. 4. If you want the policy to be enabled as soon as it is created, keep the default, Active , for the Policy Status. If you want to policy to be disabled, select Disabled. A policy that is disabled is not enforced at the checkpoint. Disabling a policy does not remove it from the system. You are able to enable the policy at a later date.

5. From the Checkpoint list, select the point before and during the session when you

want the policy to be executed. For example, if you want to initiate an action after successful authentication select post-authentication as a checkpoint. For more information on checkpoints, see Section 10.1.4, Checkpoints.