7.10. OCRA Policies

You may define, which administrator or system account is allowed to access the ocra methods.

Define a policy like this:

• Policy name: This is the unique name of the policy.
• Scope: You need to set this to ocra.
• Action: This is something of:
  • request to access ocra/request
  • status to access ocra/status
  • activationcode to access ocra/activationcode
  • calcOTP to access ocra/calculateOtp.

Note

If no ocra policy is defined, no administrator or system account is allowed to access the above methods!