CA eTrust SiteMinder Developer's Guide for Java

User Access to Resources5. Audit cached authorization information.Both the authentication and authorization steps log the relevantinformation about the user, the protected resource, and the agent.However, if the agent performs authorizations out of its cache, thetransaction can still be logged through the audit() method.6. Allow access to resource.Now that the user’s identity is known, authorization has been verified, andthe required entitlements obtained, give the authorized user access tothe resource.7. Issue a management request.This is an optional step that is used to poll the Policy Server for updatecommands. In response to a command, agents update encryption keys orflush caches or both.When the agent is no longer needed, issue the unInit() method for each APIinstance. This closes TCP connections to all policy servers.Note: The Agent API does not provide a facility for caching in a manner thatenforces session validity. By choosing to cache user sessions and/or resourcespecificprivileges, the agent becomes obligated to perform its own sessionmanagement during each user request. This is required, since caching on theagent removes the need to contact the SiteMinder Policy Server to performsession validation and/or resource authorizations.38 Developer's Guide for Java