Overview of Creating a Policy
10.8 Creating Policies
A policy is a collection of rules and configured to evaluate and handle patterns or practices, or specific activities that you may run across in the day-to-day operation of your business. For a new policy to function, you must create the policy and then perform edits to the policy. To create a new policy:1. In the Navigation tree, double-click Policies. The Policies Search page is
displayed.2. From the Policies Search page, click the New Policy button.
The New Policy page is displayed where you can specify details to create a new policy. Alternatively, you can open a New Policy page by: ■ Right-clicking Policies in the Navigation tree and selecting New Policy from the context menu. ■ Selecting Policies in the Navigation tree and then choosing New Policy from the Actions menu. ■ Clicking the Create new Policy button in the Navigation tree toolbar. ■ Selecting the Create New Policy button from the Search Results toolbar. ■ Selecting New Policy from the Actions menu in Search Results. All fields in the Summary tab are pre-populated except Name and Description. When the New Policy page first appears, the default values for the new policy are as follows: ■ Policy Status : Active ■ Checkpoint : Pre-Authentication ■ Scoring Engine : Average ■ Weight : 100 After you create a new policy, you can add rules, trigger combinations, and user groups. Managing Policies, Rules, and Conditions 10-13 Figure 10–6 New Policy3. In the Summary tab, in the Policy Name box, type the name of the new policy.
Enter between 1 and 255 characters for the policy name and for the description. 4. If you want the policy to be enabled as soon as it is created, keep the default, Active , for the Policy Status. If you want to policy to be disabled, select Disabled. A policy that is disabled is not enforced at the checkpoint. Disabling a policy does not remove it from the system. You are able to enable the policy at a later date.5. From the Checkpoint list, select the point before and during the session when you
want the policy to be executed. For example, if you want to initiate an action after successful authentication select post-authentication as a checkpoint. For more information on checkpoints, see Section 10.1.4, Checkpoints.Parts
» Oracle Fusion Middleware Online Documentation Library
» Benefits of Oracle Adaptive Access Manager
» Oracle Adaptive Access Manager Features
» Single Sign-On Integration Deployment Options
» Universal Installation Option Reverse Proxy Native Application Integration
» Web Services Application Integration
» Installation and Configuration 11g 11.1.1
» Setting Up the Oracle Adaptive Access Manager Base Environment
» 11g 11.1.1 Setting up Encryption
» Expand the WebLogic Domain icon in the Navigation tree in the left pane.
» Select OAAM domain and right-click and select the menu option Security, and
» Click oaam to select the map and then click Create Key.
» In the pop-up dialog make sure Select Map is oaam.
» Select the OAAM domain and right-click and select the menu option Security and
» Click OK to save the secret key to the Credential Store Framework.
» Expand the WebLogic Domain on the left pane, and select OAAM domain.
» From the OAAM Domain, select Security, and then Credentials.
» Expand oaam and select the symmetric key related entries associated with the
» Creating OAAM Users Configuring Database Credentials in the Credential Store Framework
» Open System Snapshot under Environment in the Navigation tree.
» Click the Load from File button.
» Deselect Back up current system now and click Continue.
» Browse for oaam_base_snapshot.zip and click the Load button to load the
» Enabling OTP Enabling Components and Features
» Values for the Common Timezones
» Signing In to Oracle Adaptive Access Manager 11g
» OAAM Admin Console and Controls
» Navigation Tree Structure Navigation Tree
» Navigation Tree Menu and Toolbar
» Navigation Panel Policy Tree
» Elements in the Search Form Search Results Table
» Search Results Menu and Toolbar Select All Create and Import
» Dashboard Online Help Close Multiple Tabs
» Export to Excel Close Multiple Tabs
» CSR Cases Oracle Fusion Middleware Online Documentation Library
» CSR and CSR Manager Role Permissions
» Getting Started Escalated Cases
» From the Cases Search page, specify criteria in the Search Filter.
» Viewing a List Cases You are Currently Working On
» From the Cases Search page, search by Case Status:
» From the Cases Search page, enter the description keyword to locate cases that
» Case Actions Case Details Page
» Viewing Case Details Viewing User Details
» Enter the search criteria and click Search.
» In the Cases Search page, search by the case status and by other filters to locate
» Enter search criteria and click Search.
» To search the sessions by Device ID, enter the ID of the device.
» Click Search. Searching for a Customers Sessions by Device ID or Date Range
» Click Search. Filtering the Session History by Authentication Status or Alert Level
» Click Search. Viewing Transactions in the Sessions History
» In the Cases Search page, click New Case. Select the Organization ID.
» From the Cases Search page, select a case by clicking in the checkbox next to case
» Enter a description in the Description field, or select a description from the
» From the Cases Search page, search for an existing case for resetting the image for
» In the User Item list, select Image. In the Notes list, select the note you want to add.
» Edit the note describing why you are taking the action, if necessary. Click Submit.
» From the Cases Search page, search for an existing case for resetting the virtual
» On the menu bar of the Case Details page, click Customer Resets.
» From the Cases Search page, search for an existing case for unlocking the OTP for
» On the menu bar of the Case Details page, click Customer Resets. Click Submit.
» From the Cases Search page, search for an existing case for resetting all
» On the menu bar of the Case Details page, select More Actions, and then click
» Open the Challenge Questions screen, as described in In the Item list, select Next Question.
» Open the Challenge Questions screen, as described in In the Item list, select Unlock Customer.
» Open the Challenge Questions screen, as described in In the Item list, select Ask Question.
» In the Notes list, select User Challenged. Click Submit. In the confirmation dialog, click OK.
» Enter the customers answer in the Answer field. Click Submit.
» Changing Case Status to Pending Closing a Case
» Access to Cases Multitenancy
» CSR Has Access to More Than One Organization ID Is Unable to Create Case
» CSR Has Access to More Than One Organization ID is able to Create Case Successfully
» CSR Who Cannot Access Any Organization Tries to Create Case
» CSR Searches Sessions Oracle Fusion Middleware Online Documentation Library
» Use Case: Customer Session Search and Case Creation
» In the Cases Search page, click the New Case button.
» For severity level, select Low from the Severity Level list
» Click OK to dismiss the confirmation message.
» To reset Henrys questions, in the Case Details page, select More Actions and
» In the Item list, select Reset Questions as the question-related action to
» In the Notes list, select Forgot QuestionAnswers.
» Click Submit to reset Henrys questions. Click OK to dismiss the dialog.
» Click Add Notes on the menu bar to add notes on the case. Click Submit. Click OK.
» In the Navigation tree, double-click Cases. The Cases Search page is displayed.
» Click Create. CSR Searches Cases
» Click OK in the Create Case confirmation dialog.
» In the menu bar of the Case Details page, select Customer Resets. The
» In the User Item list, select Image and Phrase.
» In the Notes list, select the type of note you want to add.
» In the Description field, modify the description to suit your needs.
» Click Submit. A confirmation dialog is displayed with the message that the
» In the confirmation dialog, click OK.
» In the menu bar, click More Actions, and then click Change Status.
» In the Expired field, select Show Only Expired.
» In the Case Type field, select CSR.
» Click Search Use Case: CSR Manager Bulk Case Edit
» Use Case: CSR - Ask Questions
» Best Practices and Recommendations
» Agent Cases Introduction and Concepts
» Fraud Investigation Role Permission
» Opening the Case Search Page Searching for Cases
» Linked Sessions Oracle Fusion Middleware Online Documentation Library
» Creating an Agent Case from an Escalation
» From the Cases Search page, select an Agent case by clicking in the checkbox next
» Click the Create Like button.
» Edit any of these fields if you want.
» Click Create. Creating a Case Like Another Agent Case
» In the Case Details page, click Add Notes. Click Submit.
» Click OK to dismiss the confirmation dialog.
» In the Case Details page, click More Actions and select Change Severity.
» Changing the Status of a Case Manually
» Configuring Auto Change for Case Status Closing a Case Manually
» On the Case Details page, click the Linked Sessions tab. Click the Link Sessions icon.
» From the results, select the sessions to link to this case and click Next.
» In the Case Details page, click the Linked Sessions tab.
» Select the linked sessions you want and click Export.
» Agent Case Feedback Closing Multiple Cases
» An Investigator, demoinvest1 logs in to the system.
» Investigation Workflow Scenario - Blocked Login Attempts
» Investigation Workflow for CSR Escalated Agent Cases
» Fraud Investigator opens the OAAM Admin Console and sees only the
» Fraud Investigator creates a case.
» Fraud Investigator links the session.
» Fraud Investigator repeats steps 2 and 3 as required
» Fraud Investigator changes the case status to attention required.
» Fraud Investigator adds notes.
» Investigation Workflow for Auto-Created Cases
» How Users Use Agent Cases for Investigation
» Associating Fraud Sessions with a Case for Investigation
» Listing the Cases that I Am Currently Working With Closing a Case
» Closing Multiple Cases Auto-Status Change Escalated Cases
» Configuring Agent Case Access Best Practices and Recommendations
» Details Pages Overview Details Page Structure
» View Transactions in Session Details
» Searching for Sessions Closing Multiple Cases
» Click the Add to Group button in the upper right corner.
» Export Sessions to Excel Session Details Page
» Policy Explorer Looking at Events from a Higher Level with Session Details
» Session Details Oracle Fusion Middleware Online Documentation Library
» Policies Oracle Fusion Middleware Online Documentation Library
» Investigation and the Importance of Details Pages
» User Details: Alerts Tab User Details: Fingerprint Data
» View statistics about the user
» Search and view the different user groups with which a user is associated
» Search and view all the alerts triggered and generated for the user
» View the rules run on the user
» Search and view the fingerprints created for the user
» Location Details: Summary Tab
» Location Details: Groups Tab
» Location Details: Devices Tab
» Location Details: Alerts Tab
» Location Details: Sessions Tab
» Location Details: Fingerprints Tab
» Location Country, State, City, or IP Details Tasks
» View general information about the location
» Search and view the different location groups to which a location is associated or belongs
» Add location to existing location group
» Create a location group and add location to it
» Device Details: Users Tab Device Details: Locations Tabs
» Device Details: Alerts Tab Device Details: Sessions Tab
» Device Details: Fingerprint Data Tab
» Device Details Tasks Device Details Page
» View flash and browser fingerprint information created for the device
» Search and view the different device groups to which a device is associated or belongs
» AddRemove Device from a Device Group Create a device group and add device to it
» Fingerprint Details: Devices Tab Fingerprint Details: Locations Tab
» Fingerprint Details: Sessions Tab
» Fingerprint Details: Alerts Tab
» Search and view the different devices for which the fingerprint was used
» Search and view the different locations for which the fingerprint was used
» Alert Details: Locations Tab
» Alerts Details: Fingerprint Data
» Alert Details Tasks Alert Details Page
» View general information about the alert
» View alert groups with which an alert is associated
» Create an alert group and add an alert to it
» Search and view the different users for which the alert was generated
» Search and view the different devices for which the alert was generated
» Search and view the different locations for which the alert was generated
» In the Navigation tree, double-click Sessions.
» For Authentication Status, select Blocked and Locked.
» For Login Time, select the date and time, 24 hours ago, and the current date
» For Alert Level, select High.
» In the Sessions Search page, view the Search Results table.
» In the Navigation tree, double-click Cases. The Cases Search page is
» Enter Phillips user name into User Name field.
» In Search Results table, look for Temporary Allow in the Last Action Type
» Click the Case ID for the case that has Temporary Allow in the Last Action
» Use Case: Checking for Fraudulent Devices and Adding Them to a Group
» From Actions menu, select Export to Excel.
» Click Save File or Open with and click OK.
» Tom opens the user details for jsmith by clicking the link in the Session page. He
» Tom finds only two devices used by jsmith in the last six months in device page
» Tom searches for all of jsmiths sessions in the last three months. He finds almost
» Tom navigates to fingerprint details and finds that jsmith has logged in from the
» Use Case: Device and Location Details
» Use Case: IP Details and Adding to Group
» Double-click Sessions in the Navigation tree.
» Enter the IP range in the IP range fields and click Search.
» Use Case: Export Search Sessions Results - Export Page to Excel
» Knowledge Based Authentication Introduction and Concepts
» Challenge Response Process Introduction and Concepts
» Challenge Response Configuration Introduction and Concepts
» Registration Introduction and Concepts
» Challenge Questions Introduction and Concepts
» Question Set Introduction and Concepts
» Registration Logic Introduction and Concepts
» Answer Logic Introduction and Concepts
» Validations Failure Counters Introduction and Concepts
» KBA Resets Introduction and Concepts
» Reset Challenge Questions Oracle Fusion Middleware Online Documentation Library
» Reset Challenge Questions and the Set of Questions to Choose From
» Increment User to the Next Question
» Unlock a User Oracle Fusion Middleware Online Documentation Library
» Loading Challenge Questions Setting Up KBA Overview
» Setting Up KBA Setting Up KBA Overview
» Setting Up Challenge Setting Up KBA Overview
» Ensure Policies are Available
» Ensuring that KBA PropertiesDefault Properties are Set
» Ensure Challenge Questions are Available
» Navigate to the Questions Search page, as described in
» Specify criteria in the Search Filter to locate the questions and click Search.
» From the Questions Search page, click the question of interest in the Search
» In the Navigation tree, double-click Questions under KBA. The Questions Search
» From the Questions Search page, click the New Questions button.
» Type the new question in the Question field.
» From the Category list, select the category of question you want.
» In the Locale list, select the language you want.
» Click the Create Like icon. Type the new question in the Question field.
» In the Questions Search page, search for the questions you are interested in.
» Select the Export icon or Export from the Actions menu.
» In the Export dialog, click the Export button.
» Select the rows corresponding to the questions of interest and click Delete or select
» In the Questions Search page, search for the question you want to disable.
» Press the Deactivate button or select Deactivate from the Actions menu.
» Press the Activate button or select Activate from the Actions menu.
» In the Name field, enter the name you want for this instance of the validation
» Click Add. Adding a New Validation
» Navigate to the Validations page, as described in
» From the Validations page, select the hyperlinked configured validation you want
» In the Validation Parameter Details section, make the necessary changes. See
» Click Save Editing an Existing Validation
» Importing Validations Setting Up Validations for Answer Registration
» In the Validations page, search for the validations you are interested in.
» Select Export Selected from the Actions menu.
» When the Export dialog appears, select Save File, and then Save.
» Navigate to the Categories Search page, as described in
» Click Apply to save the changes or Revert to discard them.
» In the Categories Search page, search for the categories you want to delete.
» Select the rows corresponding to the categories you want and click Delete.
» Click OK to dismiss the dialog.
» In the Categories Search page, search for the categories you want to activate.
» In the Categories Search page, search for the categories you are interested in.
» Press the Deactivate button.
» Accessing Configurations in KBA Administration Configuring the Registration Logic
» About Answer Logic Adjusting Answer Logic
» Abbreviations Oracle Fusion Middleware Online Documentation Library
» Phonetics Keyboard Fat Fingering
» Abbreviation Fat Fingering Oracle Fusion Middleware Online Documentation Library
» Phonetics Oracle Fusion Middleware Online Documentation Library
» Customizing English Abbreviations and Equivalences
» Customizing Abbreviations and Equivalences for Locales
» KBA Question Edits KBA Answer Logic Edits
» Best Practices for Managing Questions
» Guidelines for Designing Challenge Questions
» Other Recommended Requirements KBA Guidelines and Recommended Requirements
» What is KBA? Multiple Word Answers
» Enabling Policies Multiple Word Answers
» Configuring Rules for Policies
» Configuring the Challenge Question Answer Validation
» Configuring the Answer Logic
» About Out-of-Band OTP Delivery How Does OTP Work?
» Challenge Type Multiple Word Answers
» KBA vs. OTP Multiple Word Answers
» Quick Start Multiple Word Answers
» Setup Overview Setting Up OTP Anywhere
» Install SOA Suite Oracle Fusion Middleware Online Documentation Library
» Log in to OAAM Admin with environment administrator privileges.
» Use Case 8: Register High Risk Lockout Use Case 9: High Risk Exclusion
» Use Case 10: OTP Challenge with Multi-Bucket Patterns
» Policies Introduction to Policies, Rules, and Conditions
» Rules Introduction to Policies, Rules, and Conditions
» Conditions Introduction to Policies, Rules, and Conditions
» Checkpoints Introduction to Policies, Rules, and Conditions
» Alerts and Alert Groups User Group Linking
» Evaluating a Policy within a Rule Scores and Weight
» Scoring Engine Introduction to Policies, Rules, and Conditions
» Import Policies Introduction to Policies, Rules, and Conditions
» Policy Type Introduction to Policies, Rules, and Conditions
» Failure Counters Introduction to Policies, Rules, and Conditions
» Planning Policies Configure the UMS Driver
» Overview of Creating a Policy
» Navigating to the Policies Search Page
» Viewing a Policy or a List of Policies Viewing Policy Details
» Creating Policies Configure the UMS Driver
» Navigate to the Policy Details page.
» In the Navigation tree, select Policies. The Policies Search page is displayed.
» Click the policy name to open its Policy Details page.
» Editing a Policys General Information
» Specifying General Rule Information
» Specifying Preconditions Starting the Rule Creation Process
» ActivateDisable Policies Reorder conditions
» Configuring Preconditions Adding Conditions
» Specifying Results for the Rule
» Deleting Policies Configure the UMS Driver
» Copying a Policy to Another Checkpoint
» Navigating to the Rules Search Page Searching for Rules
» Viewing Rule Details Configure the UMS Driver
» Modifying the Rules General Information
» Working with Scores and Weights ActivateDisable Rule
» Deleting Rules Configure the UMS Driver
» Searching Conditions Configure the UMS Driver
» Importing Conditions Configure the UMS Driver
» In the Search Results table, click the name of the rule. The Rule Details page
» Viewing the Condition Details of a Rule
» In the Navigation tree, select Rules. The Rules Search page is displayed.
» Exporting a Condition Configure the UMS Driver
» Editing Conditions Configure the UMS Driver
» Changing the Order of Conditions in a Rule
» Deleting Conditions Configure the UMS Driver
» Deleting Conditions from a Rule
» Create a new user group named BLC: exception users.
» Select existing User IDs to add to the BLC: exception users group.
» Click Import Policy in the Policies Search page. The Import Policy screen is
» Click Browse and search for PreAuth_Block_policy.zip.
» Click OK to upload PreAuth_Block_policy.zip.
» In the Policy Search page, verify that the policy appears in the Search Results
» In the Navigation tree, double-click Policies.
» In the Policies Search page, click the New Policy button.
» For Policy Name, enter KBA Challenge.
» For Description, enter a description for the KBA Challenge policy.
» For Checkpoint, select Post-Authentication.
» Click Apply. Configure the UMS Driver
» Click the Group Linking tab.
» For Run Mode, select All Users.
» In the Navigation tree, double-click Policies. The Policies Search page is
» In the Rules tab, click Add to add a new rule. Enter User Velocity as the rule name.
» In the Navigation tree, double-click Rules. The Rules Search page is displayed.
» Search for the Blacklisted countries rule.
» In the Search Results table, click Blacklisted countries. The Rule Details page for
» In the Search Results table, click System - Questions check. The Policy Details
» In the trigger combination, enter a description in the Description field.
» Click Apply. A confirmation dialog is displayed, saying that the policy details
» In the Navigation tree, select Patterns. The Patterns Search page is displayed.
» Click the New Pattern button.
» In the Navigation tree, double-click Groups. The Groups Search page is
» Click Add. Navigate to the Policies Search page.
» In the Results table, click the Post-Authentication policy. Click OK.
» In the parameters area, for Country in country group, select the Blacklisted Click Apply.
» Select Maximum from the Scoring Engine list. Click Apply. Click OK.
» Look through the policy descriptions in the Search Results table for ones that do
» Open the Fraud Cant Challenge policy to view its rules.
» In the Policy Details page, click Copy Policy.
» In the Copy Policy dialog, select Pre-Authentication as the checkpoint.
» Select Active or Disabled as the policy status.
» Click Copy. Use Case: Copy Policy
» In the Navigation tree, double-click Groups.
» In the Groups Search page, click the New Group button.
» In the Monitor IPs group page, click the IP tab.
» In the IP tab, click the Add button.
» In the Add IPs screen, select the Search and select from the existing IPs
» Forgot Password Flow Reset Password KBA-Challenge Flow
» OAAM Pre-Authentication OAAM AuthenticationPad
» OAAM Post-Authentication Security Oracle Fusion Middleware Online Documentation Library
» OAAM Predictive Analysis Oracle Fusion Middleware Online Documentation Library
» Auto-learning Pattern-Based Policy: OAAM Does User Have Profile
» Auto-learning Pattern-Based Policy: OAAM Users vs. Themselves
» Autolearning Pattern-Based Policy: OAAM Users vs. All Users
» OAAM Registration Oracle Fusion Middleware Online Documentation Library
» OAAM Challenge Oracle Fusion Middleware Online Documentation Library
» The administrator sees that Rule: WEBZIP used was triggered.
» OTP is set up for SMS and Email.
» The auto-learning policy OAAM does user have profile is disabled.
» The user is registered as testuser.
» His IP is in the Risky IP group.
» testuser tries to log in to the application.
» testuser is challenged via SMS.
» testuser answers incorrectly 3 times.
» testuser is challenged via KBA.
» testuser answers challenge question incorrectly 3 times.
» CSR must create a case and then unlock challenge questions for the user.
» testuser is able to log in to the application successfully.
» Use Case: Anonymizer IP - From the Group
» Group Usage OAAM Customer Care Ask Question
» User Flows OAAM Customer Care Ask Question
» Navigating to the Groups Search Page
Show more