---
title: Enforce policy decisions from Advanced Identity Cloud
description: This example sets up Advanced Identity Cloud as a policy decision point for requests processed by Web Agent. For more information about Web Agent, refer to the User guide.
component: web-agents
version: 2025.11
page_id: web-agents:identity-cloud-guide:pep
canonical_url: https://docs.pingidentity.com/web-agents/2025.11/identity-cloud-guide/pep.html
---

# Enforce policy decisions from Advanced Identity Cloud

This example sets up Advanced Identity Cloud as a policy decision point for requests processed by Web Agent. For more information about Web Agent, refer to the [User guide](../user-guide/preface.html).

1. Using the [Advanced Identity Cloud documentation](https://docs.pingidentity.com/pingoneaic/home.html), log in to Advanced Identity Cloud as an administrator.

2. Make sure you are managing the `alpha` realm. If not, [switch realms](https://docs.pingidentity.com/pingoneaic/realms/realm-settings.html#switch_realms).

3. [Create a policy set and policy](installation.html#create-policy).

4. [Create an agent profile](installation.html#create-agent-profile).

   When a policy set is assigned to the agent profile during creation, the agent uses that policy set. If a suitable policy set isn't available during creation, select Edit advanced settings to edit or create one and assign it to the agent profile.

5. Test the setup:

   1. Go to `https://agent.example.com:443`. The Advanced Identity Cloud login page is displayed.

   2. Log in to Advanced Identity Cloud as user `bjensen`, password `Ch4ng3!t`, to access the web page protected by the Web Agent.