Integration Architecture
Policy Federation uses the Fully Policy Federated Web Service Adaptor configured within the Enterprise Application.
The integrating application exposes HTTP(S) endpoints:
- Ping: Connectivity validation
- Get Access Rights: Returns effective user permissions on a file
- Get File Information: Returns file metadata details
Policy Server communicates with these endpoints via structured XML over HTTPS.
High level Integration Approach
-
Create Enterprise Application (EA) in Seclore Policy Server
- Configure EA in Policy Server
- Configure Hot Folder inside the EA
-
Implement Federation Endpoints
Application implements:
- Ping service
- Get Access Rights service
- Get File Information service
The application must:
- Parse XML request
- Compute effective permissions
- Return structured XML response
-
Configure Adaptor in Policy Server
- Register base URL
- Configure authentication mechanism
-
Test Dynamic Permission Flow
- Protect file via SDK or API using the same Enterprise Application and Hot Folder
- Open file and check permission inherited as per application's permission
- Modify permissions in application
- Verify permission change reflects immediately during file open