Using Plug-ins to Pass Attributes for Policy Evaluation – OES

We can use the oracle.iam.platform.authopss.plugin.AttributeResolver plug-in point to pass the attributes to OES for policy evaluation.

To add a new attribute to be used in policies (condition), you must add the attributes in a Map by using the following methods:

To resolve the attributes of the target entity on which the logged-in user is working:

public Map<String, Object> resolveResourceAttributes(String subjectId, PolicyConstants.Resources resourceType, String resourceId) throws Exception;

To resolve the attributes related to logged-in user:

public Map<String, Object> resolveSubjectAttributes(String subjectId, Policy Constants.Resources resourceType) throws Exception;

Leave a Reply

Your email address will not be published. Required fields are marked *