Enabling REST Notifications For XACML Policy Updates

This topic provides instructions on how to enable notifications for XACML policy changes.

1. Register EntitlementNotificationListener in order to get notifications on XACML policy changes. To do this, add the following entries to the <PRODUCT_HOME>/repository/conf/identity/entitlement.properties file.

   PAP.Status.Data.Handler.2=org.wso2.carbon.identity.entitlement.EntitlementNotificationExtension org.wso2.carbon.identity.entitlement.EntitlementNotificationExtension.1=pdpNotificationAction,ENABLE;DISABLE;UPDATE;DELETE org.wso2.carbon.identity.entitlement.EntitlementNotificationExtension.2=papNotification,true org.wso2.carbon.identity.entitlement.EntitlementNotificationExtension.3=pdpNotification,true

2. Configure the <PRODUCT_HOME>/repository/conf/identity/msg-mgt.properties file with your desired destination configurations and template configurations. The following is a sample configuration for sending JSON content to an endpoint when there is a XACML policy change.

   module.name.1=json json.subscription.1=policyUpdate json.subscription.policyUpdate.jsonContentTemplate=/media/user/notification/templates/entitlement json.subscription.policyUpdate.endpoint.1=pepEndpoint1 json.subscription.policyUpdate.endpoint.pepEndpoint1.address=https://localhost:9443/restEndpoint json.subscription.policyUpdate.endpoint.pepEndpoint1.AuthenticationRequired=true json.subscription.policyUpdate.endpoint.pepEndpoint1.username=admin json.subscription.policyUpdate.endpoint.pepEndpoint1.password=admin json.subscription.policyUpdate.jsonId=3232 json.subscription.policyUpdate.endpoint.pepEndpoint1.address=https\://localhost\:9443/wso2/scim/Users

   The following table lists out the properties and their description (click on the table to scroll through the description).