[aznapi-entitlement-services] stanza

An entitlement services plug-in enables authorization API applications to retrieve the entitlements for a user from an entitlements repository.

Each entitlement services plug-in is a stand-alone module that is dynamically loaded into the authorization service.

The stanza entries for configuring Security Verify Access entitlement services plug-ins are declared in the [aznapi-entitlement-services] stanza of each of these configuration files provided by ISAM:

• The ivmgrd.conf configuration file for the policy server
• The [instance-]ivacld.conf configuration file for the authorization server
• The configuration file for configured entitlement services plug-ins for your resource managers

  The aznAPI.conf configuration file is provided with ISAM as a sample file for creating our own resource manager configuration file. Developers of service plug-ins typically provide the standard functions. Before implementing service plug-ins, read and thoroughly understand the concepts in the Authorization C API Developer Reference.

• service-id
  This stanza entry defines the authorization API service for the entitlement services of the protected objects.

Parent topic: Configuration file stanza reference