Can we make use of PEP & PDP plugins available in API-Gateway?

[Arun Addepalli]

Our current implementation of api-gateway has below two plugins included. These plugins are carried forwarded from api-gateway v9.x to our current implementation of 10.1 (container based). We also have some dummy XACML policy to authorize users. Now, we want to leverage this implementation to write actual working XACML policies and authorize users based on those XACML policies.

Xacml3PepAssertion-sdk82-1.0-2460.sjar

XacmlPolicyDecisionPointAssertion-9.3.00-20190131.aar

Questions:

Does Broadcom's API-Gateway team supports these plugins / local PDP implementation?

Are there newer versions of these plugins available for API-Gateway v10.1?

Can Broadcom's API-Gateway team help with XACML policy verifications (current ABAC policies on Oracle Entitlement Server to XACML conversion)?

Thanks!

-arun

[Ben Urbanski]

Hello Arun,

In most cases, older versions of Tactical assertions continue to work on newer versions of Gateways, and with a few exceptions, we don't rebuild newer versions of those Tactical assertions for newer versions of Gateways unless a customer identifies a specific need.

You can open a support case to check if there already newer versions. Also, you can open a support case if you have a specific problem with the version of assertion you have on a later gateway version. The latter may lead to a new version of the assertion provided to you and other customers with a similar need.

Regards,

------------------------------
Ben Urbanski
Product Manager, API Gateway
Layer7 API Management
------------------------------