Implementation Guide › Architectural Considerations › Implementation Considerations › Access Management Models › SiteMinder Policy

SiteMinder Policy

Before the release of SiteMinder r12.0, managing SiteMinder policies was the only way to protect resources. A SiteMinder policy is a SiteMinder–centric access management model. A SiteMinder policy is comprised of individual SiteMinder core objects, which include the following:

• A domain
• At least one realm in the domain
• At least one rule or rule groups in the domain
• (Optional) One or more responses or response groups in the domain

A SiteMinder policy object binds these core objects to identify resources, user populations, and the required actions when SiteMinder grants or denies access to the resource. As such, configuring a SiteMinder policy requires an understanding of each object.

Note: For more information about each of these objects and their individual SiteMinder policy roles, see the Policy Server Configuration Guide.