Agent Guide › Configuring Policies for the SiteMinder Agent › Configure Rules for the JACC Provider

Configure Rules for the JACC Provider

A rule identifies specific resources within a realm and whether to allow or deny access to those resources. Rules are the parts of policies that determine precisely which resources are protected, and which types of actions should cause the rule to fire.

A rule is required to allow resource requests to be passed to protected WebSphere resources.

Configure one or more rules for the SiteMinder JACC Provider that identify the following:

• A specific resource to protect. (Using SiteMinder resource mapping for WebSphere resources to map a WebSphere resource to a SiteMinder representation.)
• The Agent action that will cause the rule to fire (Any appropriate action, such as Post or Get for URL resources; the Get action for all other resource types).
• Whether to allow or deny access to the specified resource when the rule is fired.

For example, a rule can specify that all EJB resources in a realm are protected for Get Agent actions. When a client attempts to access these resources, the rule fires and the policy containing the rule determines whether the consumer application can access the protected EJB application.

For more information about creating rules, see the SiteMinder Policy Server Configuration Guide.