9.5 Simulating a Policy

After the XDS input document has been created, you can use it to simulate the behavior of a policy.

  1. In the Policy Simulator, after the XDS input document is complete, click Next.

    Completed XDS input document
  2. If the policy you are simulating generates a query, review the query in the Query tab, and model the query response in the Response tab, then click Next.

    NOTE:As with Input Documents, you can browse the Identity Vault for objects that you want to use as templates for the simulator query or response.

    Field

    Description

    Parameter Table

    Displays the query parameters generated during the policy simulation. This matches the XML displayed in the Source tab. For information on using the Parameter table, see Section 9.2.10, Parameter and Value.

    You can adjust the query parameters to vary the response generated when you send the query to the Application or ID Vault.

    Attributes Field

    Allows you to refine your query by searching for objects that contain particular values. For information on the Attributes field, see Section 9.2.11, Attributes.

    Submit to Vault

    Sends the specified query to the Identity Vault to generate a Response instance document. The Simulator determines the query destination automatically and displays the appropriate button.

    Submit to Vault requires valid associations in the Association parameter. This is typically possible only when the ID Vault is deployed.

    Similarly, you can model the Response instance page from the Response tab, which displays a list of objects that satisfy the query. The policy uses this response data to determine what it should do.

    Field

    Description

    Parameter Table

    Displays the parameters of the response instance document. This matches the XML displayed in the Source tab. For information on using the Parameter table, see Section 9.2.10, Parameter and Value.

    Attributes Field

    Allows you to modify the response by adding or modifying the attributes in the instance document. For information on the Attributes field, see Section 9.2.11, Attributes.

  3. Click Next.

  4. In the View Transform Results page, examine the results of the transformation based on your defined XDS input document.

    Trace: The Trace tab displays the events that occur when the policy processes the defined input document. This is similar to what you would see in DS Trace if the policy processed the same input in a live IDM environment. You can configure the level of trace detail. For more information, see Section 9.2.6, Configuration Options.

    Output: The Output tab displays the output document generated when the policy processes the defined input document.

    You can edit the output document in the XDS Builder or through the Source tab. If the operation was vetoed, the operation listed in the Output tab is indicated.

    Output document

    Compare: The Compare tab displays the input document and the output document side-by-side so you can examine the changes resulting from the policy processing of the input document.

    Compare the input document to the output document
  5. After examining the policy effects on the input document, click one of the buttons at the bottom of the View Transform Results page:

    Back: Re-opens the Input Document page so you can repeat the simulation with a different settings.

    Next: Uses the current output document as the input document for the next policy set in the driver. This lets you examine how the policies work together as data flows from one policy to another.

    Close: Closes the Policy Simulator.