Policy Server Guides › Policy Server Configuration Guide › Policies › Policy Processing › Authentication Processing for Hierarchical Policies › Successful Authentications

Successful Authentications

OnAuthAccept rules fire when all of the following are satisfied:

• A user enters credentials that satisfy the requirements of the longest matching realm.
• The Policy Server finds the user in a user directory.
• The Policy Server verifies the user's credentials.

At this point, the Policy Server collects OnAuthAccept entitlements from the longest matching realm, and any realms above it in the hierarchy of nested realms. In the example in the previous figure, if a user is successfully authenticated for the resource /home/employees/managers/manager.html, the Policy Server collects any OnAuthAccept entitlements for the /managers realm, then the /employees realm, and finally the /home realm.