AM uses a policy to determine whether to grant a principal access to a resource.
Policies belong to policy sets. Policy sets define a template for policies that apply to one or more resource types. A policy set groups policies with similar characteristics that protect websites, web applications, or other resources. It eliminates the need to configure the same basic settings repeatedly for each policy.
Application types are templates for policy sets.
The AM admin UI does not show application types.
When you define a policy or policy set over REST, the application type appears in the JSON resource.
In Identity Cloud, the only application type you use is
When creating and editing policy sets, consider the following points:
You can specify the realm and policy set in an AM web or Java agent profile.
AM directs requests from the agent to the specified realm and policy set, providing compatibility with older web and Java agents.
For details, refer to the agent documentation:
In Identity Cloud, AM has a default policy set for OAuth 2.0 policies in each realm, the Default OAuth2 Scopes Policy Set for
OAuth2 Scoperesource types.
Create your own policy sets for policies that control access to