6.8. OCRA PoliciesΒΆ

You may define, which administrator or system account is allowed to access the OCRA methods.

Define a policy like this:

  • Policy name: This is the unique name of the policy.

  • Scope: You need to set this to ocra.

  • Action: This is something of:

    • request to access ocra/request

    • status to access ocra/status

    • activationcode to access ocra/activationcode

    • calcOTP to access ocra/calculateOtp.

Note

If no OCRA policy is defined, no administrator or system account is allowed to access the above methods!