# Oracle Entitlements Server Authorization

## Contents
Overview General Settings Application Context

## Overview
This filter enables you to authorize an authenticated user for a particular resource against Oracle Entitlements Server (OES). The user must first have been authenticated to OES (for example, using the HTTP Basic or HTTP Digest filter). This filter enables you to configure the Enterprise Gateway to delegate authorization to Oracle Entitlements Server. You can configure the Enterprise Gateway to authorize an authenticated user for a particular resource against the Oracle Entitlements Server. Credentials used for authentication can be extracted from the HTTP Basic header, WS-Security username token, or the message payload. After successful authentication, the Enterprise Gateway can authorize the user to access a resource using the Oracle Entitlements Server.
## General
Configure the following general field: Name: Enter an appropriate descriptive name for this filter.
## Settings
Configure the following fields on the Settings tab: Resource: Enter the URL for the target resource (for example, Web Service). Alternatively, if this policy is reused for multiple services, enter a URL using message attribute properties, which are expanded at runtime to the value of the specified attribute. For example:
    ${http.destination.protocol}://${http.destination.host}:${http.destination.port}${http.request.uri}
Resource Naming Authority: Enter `gatewayResource` to match the Naming Authority Definition loaded in the Oracle Entitlements Server settings. For more details, see Oracle Security Service Module Settings. Action: Enter the HTTP verb (for example, `POST`, `GET`, `DELETE`, and so on). Alternatively, if this policy is reused for multiple services, enter a message attribute property, which is expanded at runtime to the value of the specified attribute (for example, `${http.request.verb`}). Action Naming Authority: Enter `gatewayAction` to match the Naming Authority Definition loaded in the Oracle Entitlements Server settings. For more details, see Oracle Security Service Module Settings. How access request is processed: Select one of the following options:
`ONCE` | Specifies that the authorization query is only asked once for a resource and action.
`POST` | Specifies that the authorization query is asked after a resource is acquired, but before it has been processed or presented.
`PRIOR` | Specifies that the authorization query is asked before a resource is acquired.
## Application Context
Configure the following field on the Application Context tab: Application's Current Context: Click Add to specify optional Application Contexts as name-value pairs. Enter a Name and Value in the Properties dialog. Repeat to specify multiple properties.