PingAuthorize

Configuring embedded PDP mode

Configure PingAuthorize Server in embedded PDP mode to use either:

  • A deployment package store using the Deployment Manager functionality

  • An exported deployment package

Deployment package store

About this task

Follow these steps to assign a deployment package store to the Policy Decision Service and set the policy decision point (PDP) mode to embedded.

Learn more about the deployment package store option and the requirements for the Deployment Manager feature in Using the Deployment Manager.

Steps

  • Use dsconfig or the administrative console:

    Choose from:

    • Run dsconfig with the set-policy-decision-service-prop option.

      dsconfig set-policy-decision-service-prop \
      --set pdp-mode:embedded \
      --set deployment-package-source-type:store \
      --set deployment-package-store:<name of the store>
    • Use the administrative console.

      1. In the administrative console, go to Configuration > Authorization and Policies > Policy Decision Service.

      2. On the Edit Policy Decision Service page, complete the General Configuration fields.

        Screen capture of the General Configuration section of the Edit Policy Decision Service page, showing PDP Mode set to embedded and Deployment Package Source Type to store
      3. In the Deployment Package Store Configuration section, in the Deployment Package Store list, select your deployment package store.

      4. In the Policy Request Configuration section, select a Trust Framework Version.

      5. Click Save To PingAuthorize Server Cluster.

Exported deployment package

About this task

To assign an exported deployment package to the Policy Decision Service and set the PDP mode:

Steps

  • Run dsconfig with the set-policy-decision-service-prop option.

    Example:

    In this example, the deployment-package value is the full path to a deployment package file. To create a deployment package for export, see Exporting a policy deployment package.

    dsconfig set-policy-decision-service-prop \
      --set pdp-mode:embedded \
      --set "deployment-package</path to deployment-package.deploymentpackage"