diff --git a/topics/enforcer/entitlement-bearer-enforcement-filter.adoc b/topics/enforcer/entitlement-bearer-enforcement-filter.adoc index b04f392d53..6335ce6031 100755 --- a/topics/enforcer/entitlement-bearer-enforcement-filter.adoc +++ b/topics/enforcer/entitlement-bearer-enforcement-filter.adoc @@ -123,6 +123,10 @@ Specify the configuration options to define how policies are actually enforced a for all resources associated with the resource server being protected. In this case, you need to make sure the resources are properly configured with a *uri* property that matches the paths you want to protect. + +** *online-introspection* ++ +If true, the enforcer is going to validate RPTs by calling the token introspection endpoint. Thus, performing an additional round-trip to the server. Otherwise, the RPT is validated locally. ++ ** *paths* + Specify the paths to protect. diff --git a/topics/enforcer/uma-bearer-enforcement-filter.adoc b/topics/enforcer/uma-bearer-enforcement-filter.adoc index 394fcc8193..050c2b0062 100755 --- a/topics/enforcer/uma-bearer-enforcement-filter.adoc +++ b/topics/enforcer/uma-bearer-enforcement-filter.adoc @@ -125,6 +125,10 @@ Specify the configuration options to define how policies are actually enforced a for all resources associated with the resource server being protected. In this case, you need to make sure the resources are properly configured with a *uri* property that matches the paths you want to protect. + +** *online-introspection* ++ +If true, the enforcer is going to validate RPTs by calling the token introspection endpoint. Thus, performing an additional round-trip to the server. Otherwise, the RPT is validated locally. ++ ** *paths* + Specify the paths to protect.