Policy Information Point (PIP)
It is possible to add a Policy Information Point (PIP) implementation to the TESB
PDP. A PIP can be used to supply information to the PDP runtime which may not be in a
request.
For example, a policy may only be valid in a particular time interval, which may not be supplied in the request. In this scenario, a PIP implementation could be used to supply the missing attribute. To configure a PIP in the PDP, you must implement the HerasAF "org.herasaf.xacml.core.api.PIP" interface. This must then be registered as an OSGi service in the registry, where it will get automatically picked up the PDP. In addition to this, you must edit the PDP configuration file (as described in the next section), and set the "usePIP" value to "true".
Did this page help you?
If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!