7.10. OCRA PoliciesΒΆ

You may define, which administrator or system account is allowed to access the ocra methods.

Define a policy like this:

  • Policy name: This is the unique name of the policy.
  • Scope: You need to set this to ocra.
  • Action: This is something of:
    • request to access ocra/request
    • status to access ocra/status
    • activationcode to access ocra/activationcode
    • calcOTP to access ocra/calculateOtp.

Note

If no ocra policy is defined, no administrator or system account is allowed to access the above methods!