The process of implementing an external authorization service

This process requires us to write a plug-in module for the external resource manager. You then register the external authorization service with the resource manager.

  1. Write an external resource manager service plug-in module with an authorization interface that can be referenced during authorization decisions.

  2. Register the external authorization service with the resource manager so the resource manager can load the plug-in service at initialization time.

    Registering the service sets a trigger condition for the invocation of the external authorization service. When the trigger condition is encountered during an authorization check, the external authorization service interface is called to make an additional authorization decision.

Parent topic: External authorization capability