Step 7.2. Define XACML policy set to use a workflow

Step-by-step

1. To define policies, you must access the XACML Policy Management page in hethe following path:

Main Menu > Administration > Configure Soffid > Security settings > XACML Policy Management

2. Once you have accessed the XACML Policy Management page, you can click the add button (+) to create a new policy set, or you can click on an existing policy set the record to add new policies.

2.1. Update a policy set: If you want to update an existing policy you must check if the proper PEP was configured with that policy set.

2.2. Create a new policy set: fistfirst of all you must click the add button (+). Then Soffid will display an empty window to fill in the required fields.

• • • The Identifier Identifier should be an identificative and unique name. You will need the name to configure the PEP
    • The The Version  should be a number to identify the current policy version. You will need the version to configure the PEP.
    • The Description should be a brief description of the agent.
    • The Policy Combining Algorithm allows you to select the procedure for arriving aatat an authorization decision.

2.3. You need to click on the "Apply changes" button to save the new policy set or tuto update an existing policy set.

3. Once you have created or updated the policy set, you could add new policy sets, policies, policiypolicy referencesreferences, and/or policy set references.

For more information, you can visit the XACML Book where you could find information about how to useruse XACML and some examples.

4. Finally, you must check and configure the XACML PEP configuration.

Screen overview