Policy Server Guides › Policy Server Configuration Guide › Domains › Certificate Validity Checking (optional) › Assign User Directories › Configure a Realm with a 4.x Affiliate Agent

Configure a Realm with a 4.x Affiliate Agent

When you create a domain, you can create one or more realms in the domain and associate them with an Affiliate Agent or Agent group. Realms group resources that have similar security requirements and share a common authentication scheme.

Note: An Affiliate Agent must be created using the Federation Security Services Administrative User Interface. More information on Affiliate Agents exists in the Federation Security Services Guide.

Note: Do not confuse 4.x Affiliate Agents with SAML Affiliate Agents. SAML Affiliate Agents pass user information to a Web server so that Web applications can personalize the user's experience as part of Federation Security Services. 4.x Affiliate Agents protect resources.

Note: The following procedure assumes that you are creating an object. You can also copy the properties of an existing object to create an object. For more information, see Duplicate Policy Server Objects.

To create a realm in a domain and associate it with an Affiliate Agent or Agent group

1. Click Policies, Domains, Realm, Create Realm.

   The Create Realm: Select Domain pane opens.

2. Select a domain, and click Next.

   The Create Realm: Define Realm opens.

3. Type the name and a description of the realm in the fields on the General group box.
4. Click the ellipsis button on the Resource group box.

   The Select an Agent group box opens.

5. Select an Affiliate Agent or Agent group, and click OK.

   Note: The remaining properties on the Resource group box are specified when the Affiliate Agent is configured on the Web server. See the Web Agent Configuration Guide for more information.

6. Create new rules or delete existing rules on the Rules group box.
7. Click Finish.

   The Create Realm Task is submitted for processing.

Disable Global Policy Processing for a Domain

Global policies let you associate responses with particular resources and events across all domains. By default, global policies apply to all of the resources in a policy domain.

To disable global policies for a specific domain

1. Open the domain.
2. Clear the Global Policies Apply check box, and then click Submit.

   Global policies no longer apply to the resources in this domain.

More information:

Global Policies, Rules, and Responses