Configuring embedded PDP mode

Configure PingAuthorize Server in embedded policy decision point (PDP) mode to use either:

A deployment package store using the Deployment Manager functionality
An exported deployment package

Deployment package store

Follow these steps to assign a deployment package store to the Policy Decision Service and set the PDP mode to embedded.

Learn more about the deployment package store option and the requirements for the Deployment Manager feature in Using the Deployment Manager.

Steps

Use dsconfig or the admin console:

Choose from:
- Run dsconfig with the set-policy-decision-service-prop option:
  dsconfig set-policy-decision-service-prop \ --set pdp-mode:embedded \ --set deployment-package-source-type:store \ --set deployment-package-store:<name of the store>
- Use the admin console:
  1. Go to Configuration > Authorization and Policies > Policy Decision Service.
  2. Under General Configuration, in the PDP Mode list, select Embedded.
  3. In the Deployment Package Source Type list, select Store.
  4. Under Deployment Package Store Configuration, in the Deployment Package Store list, select your deployment package store.
  5. Under Policy Request Configuration, select a Trust Framework Version.
  6. Click Save.

Exported deployment package

To assign an exported deployment package to the Policy Decision Service and set the PDP mode:

Steps

Run dsconfig with the set-policy-decision-service-prop option.

Example:

In this example, deployment-package-path is the full path to a deployment package file. You can find information about creating a deployment package in Exporting a policy deployment package.
```
dsconfig set-policy-decision-service-prop \
  --set pdp-mode:embedded \
  --set "deployment-package<deployment-package-path.deploymentpackage"
```

The Policy Decision Service accepts .sdp and .deploymentpackage files.