You can create, edit, and delete the authorization policies on an applications or appmark.
Single Sign-on uses the open standard Open Policy Agent (OPA) as the authorization policy engine to create, delete, and apply the authorization policies. Single Sign-on allows you to define attributes and values for users to provide authorizations to applications and appmarks. OPA allows you to do much more than our current use case. However, Single Sign-on does allow you to create OPA policies using Rego through code editors. Rego is the policy authoring language that OPA developed to create policies.
Single Sign-on allows you to create authorization policies using two different methods. The two different methods are:
Applications > Appmark or Application > Actions > Edit
Single Sign-on allows you to edit the authorizations policies that you have created. You edit the authorization policies when you edit an application or appmark.
To edit an authorization policy:
On the Applications page, select the appropriate application or appmark that contains the authorization policies that you want to edit.
Select Actions > Edit.
Select Authorization Policies, then select Edit.
Make the appropriate changes to the authorization policies, rule sets, and rules.
After editing the rule sets, select Done.
On the Authorization Policies panel, select Done to save your changes.
Applications > Appmark or Application > Actions > Authorization Policies > Delete
Single Sign-on allows you to delete authorization policies. However, an authorization policy must be disabled before you can delete it.
To delete an authorization policy:
On the Applications page, select the application or appmark that contains the authorization policy that you want to delete.
Select Actions > Edit.
Select Authorization Policies, then select Edit.
On the appropriate authorization policy, select the check to disable the authorization policy.
Select Delete, then select Done to save the changes.