PingAuthorize

Changing the active policy branch

The PingAuthorize Policy Editor can manage multiple sets of Trust Framework attributes and policies by storing data sets in different branches.

About this task

In a development environment, you might need to quickly reconfigure PingAuthorize Server between policy branches.

Steps

  1. To set up branch changes, you must first define a Policy External Server configuration for each branch.

  2. Change the Policy Decision Service’s policy-server property as needed.

    Example:

    Assume that you have two policy branches in the Policy Editor: Stable Policies and Experimental Policies. Each branch is represented in the PingAuthorize Server configuration as a Policy External Server. During testing, you can switch back and forth between branches by updating the Policy Decision Service’s policy-server property. To change to the Experimental Policies branch, run this command:

    dsconfig set-policy-decision-service-prop \
  --set "policy-server:Experimental Policies"

    To change back to the Stable Policies branch, run this command:

    dsconfig set-policy-decision-service-prop \
   --set "policy-server:Stable Policies"