---
title: Testing policies
description: Test PingAuthorize policies from end-to-end with visualization tools that show the complete decision flow.
component: pingauthorize
version: 11.0
page_id: pingauthorize:pingauthorize_policy_administration_guide:paz_policy_testing
canonical_url: https://docs.pingidentity.com/pingauthorize/11.0/pingauthorize_policy_administration_guide/paz_policy_testing.html
revdate: December 15, 2025
section_ids:
  steps: Steps
  result: Result:
---

# Testing policies

Test PingAuthorize policies from end-to-end with visualization tools that show the complete decision flow.

## Steps

1. Go to **Policies**.

2. Select the policy you want to test and then click the **Test** tab.

3. Define the test scenario:

   1. In the **Domain** list, select any domains you want to include as request parameters.

   2. In the **Service** list, select any services you want to include as request parameters.

   3. In the **Identity Provider** list, select any identity providers you want to include as request parameters.

   4. In the **Action** list, select any actions you want to include as request parameters.

   5. In the **Attributes** list, select any attributes you want to include as request parameters and provide sample values.

   6. In the **Overrides** section, configure attribute and service values to override those elements' default behavior.

      For example, if an attribute is defined with a request parameter resolver and no value is specified in the test request, the decision service resolves that attribute from the **Overrides** configuration.

      |   |                                                                                             |
      | - | ------------------------------------------------------------------------------------------- |
      |   | You can override any attribute's value, regardless of its resolution or processing details. |

4. Click **Execute**.

   |   |                                                                                                                                   |
   | - | --------------------------------------------------------------------------------------------------------------------------------- |
   |   | If the test scenario exceeds 50 kB in size, sample values will not be stored in the local cache after executing the test request. |

   ### Result:

   The **Visualization** tab shows test results.

   ![Screen capture of the Test Results Visualization Tab showing a deny result](_images/token-subject-test-result.png)

5. Examine the decision flow to make sure decisions are evaluated according to your expectations.

   You can click any box in the flow to show more details.

6. Click the other tabs for additional details.

   * **Request** tab: Shows the JSON request sent to the decision engine, allowing you to confirm that the expected information was sent.

   * **Response** tab: Shows the complete, high-verbosity response for the decision.

     |   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
     | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
     |   | If the same comparison condition is attached to more than one rule in the policy subtree, the decision response only includes the evaluation of the first occurrence of this condition. Although the condition is only included once in the response, the decision engine evaluates this condition wherever it is needed to make a decision.If the parent policy of the first instance of this condition is not applicable to the request, the decision response does not include evaluation of any rule containing this condition. This behavior is the same regardless of the rule's outcome (`Permit`, `Deny`, `Not Applicable`). |

   * **Output** tab: Shows details about the decision, including the time it took to evaluate policies and rules.

   * **Attributes** tab: Shows details about the attributes used in the decision.

   * **Services** tab: Shows details about the services used in the decision.

7. To repeat the test using a different scenario, click the **Testing Scenario** tab, change the parameters and then click **Execute**.