Use policies to validate data
IDM provides an extensible policy service that lets you apply specific validation requirements to various components and properties. This chapter describes the policy service, and provides instructions on configuring policies for managed objects.
The policy service provides a REST interface for reading policy requirements and validating the properties of components against configured policies. Objects and properties are validated automatically when they are created, updated, or patched. Policies are generally applied to user passwords, but can also be applied to any managed or system object, and to internal user objects.
The policy service lets you accomplish the following tasks:
-
Read the configured policy requirements of a specific component.
-
Read the configured policy requirements of all components.
-
Validate a component object against the configured policies.
-
Validate the properties of a component against the configured policies.
The router service limits policy application to managed and internal user objects. To apply policies to additional objects, such as the audit service, modify your project’s router configuration. For more information about the router service, see Script triggers defined in the router configuration.
A configurable default policy applies to all managed objects.
You can extend the policy service by supplying your own scripted policies.
|
For DS repositories, objects are subject to a combination of IDM password policies and any configured DS password policies, when they are created or updated. |