Layer7 Access Management

Expand all | Collapse all

Setting Up Authorization Policy Based upon SQL server and AD

Jump to Best Answer
  • 1.  Setting Up Authorization Policy Based upon SQL server and AD

    Posted 06-14-2017 02:16 AM

    Hi ,

     

    I've a POC, we need to disable access for one particular application out of the lot whole through Single Sign On policy, if the person hasn't accessed the application for 180 days. This access detail for the application will be maintained in the SQL database.

    So, what is the way to have 2 authorization policies one based on AD OU and another based data in SQL(for application access) and disable access for associates who haven't accessed the application for 180 days.

    We cannot govern this through the Active Directory as  if we disable access for the person who hasn't accessed the application for 180 days then access will be lost for all the applications.

     

    How can this be achieved?



  • 2.  Re: Setting Up Authorization Policy Based upon SQL server and AD
    Best Answer

    Posted 06-14-2017 02:34 AM

    For this case, you will need to create an active policy ( custom policy written in java or c using ca sso sdk) which can be invoked to check the access details from the sql database. If this policy returns false, the user will NOT be authorized.

     

    You can find some sample when you install the sdk.



  • 3.  Re: Setting Up Authorization Policy Based upon SQL server and AD

    Posted 06-14-2017 08:06 AM

    So that means 2 authorization policies can run simultaneously ? One policy needs to determine the access based upon AD attributes and the second one the status in SQL database ?