Follow these steps to create a policy that allows all authenticated users to perform an HTTP GET

1. In OpenAM Console, click the Access Control tab, then in the Realms table click the link to / (TOP Level Realm).
2. We should click the Policies tab, click iPlanetAMWebAgentService, and then click Add New Policy.
3. Allocate a new name to the policy of Authenticated users can get Apache HTTP home page, and then click Next.
4. In the Specify Resources step, click *://*:*/* to move the pattern to the Create your resources section. Then, replace the asterisks so that the pattern reads: http://www.example.com:8000/*, and then click the Add ICON.
5. OpenAM Policy Rule and Next to proceed.
6. In the Select Actions step, select the GET and POST actions, ensure their value is set to Allow, and then click Next.
7. In the Define Subject CONDITIONS step, click Subject Condition; from the type, drop-down CHOOSE Authenticated Users and then drag the grey block into the green AND logical block above.
8. OpenAM Policy Subjects and Next to proceed.
9. In the Define Environment Conditions and Specify Response Attributes steps, click Next.
10. Review your configuration. It should resemble the following:

• Review OpenAM Policy
• To make changes to the configuration, either click the relevant step or click the item to JUMP to the relevant step and make amendments to the configuration.
• When the configuration is completed, click Finish.

Follow these steps to create a policy that allows all authenticated users to perform an HTTP GET