Policy Server Guides › Policy Design Guide › Rules › Configure a Rule for Impersonation Event Actions

Configure a Rule for Impersonation Event Actions

Impersonation events are used to start impersonation sessions when resources are accessed.

Note: When you create or modify a Policy Server object in the Policy Server User Interface, use ASCII characters. Object creation or modification with non-ASCII characters is not supported.

To create a rule for impersonation events

1. Using the Policy Server User Interface, create a rule object.

   The Rule Dialog opens.

2. Provide a Name and, optionally, a Description of the new rule.
3. In the Realm and Resources group box, select the name of the realm from the Realm drop-down list box that includes the resources to which this rule will apply.
4. In the Resource field, enter the resource that this rule will protect.

   Note: When you look at rules associated with a realm in the SiteMinder Administration window, the Resource column displays the resource specified in each rule. Green text indicates a resource filter inherited from a realm or group of nested realms.

5. Mark the Perform Regular Expression Matching check box if you want the rule’s resource to use regular expressions.
6. In the Action group box, select the Authorization Events radio button.

   Note: The Allow Access and Deny Access options are disabled as they are not applicable for these events.

7. In the Action group box, select one or more of the following impersonation events from the drop-down list:
   • ImpersonationStart
   • ImpersonationStartUser
8. If you do not want the rule to be active, unset the Enabled check box.
9. If required, set time restrictions and or active rule settings in the Advanced group box.
10. Click Apply to save the rule, or click OK to save the rule and return to the SiteMinder Administration window.

More information:

Impersonation

Rule Dialog

Regular Expressions for Resource Matching

Impersonation Realms and Events

Enable and Disable Rules

Advanced Rule Options