When you are setting up the Access Gateway to protect Web resources, you create and configure reverse proxies, proxy services, and protected resources. The authentication contract, authentication procedure, Authorization policy, Identity Injection policy, and Form Fill policy are configured at the resource level so that you can enable exactly what the resource requires.
For more information on configuring the Access Gateway, see NetIQ Access Manager 3.1 SP5 Access Gateway Guide.