Which of the following components is used to return data to PingGateway or the agent to be included with the policy decision?

Response attributes are key-value pairs returned by the policy engine (PingAM) to the policy enforcement point (PEP), such as PingGateway or a PingAccess Agent. This allows the PEP to receive contextual information along with the Permit or Deny decision. For example, a response attribute could be used to inject a specific HTTP header into the request forwarded to the backend application after a successful authorization check. This mechanism is central to attribute-based access control (ABAC) for conveying dynamic data.

A. Subjects: Subjects define the entity (e.g., user, device) requesting access and are used as conditions within a policy, not as data returned with the decision.

B. Resources: Resources are the protected objects (e.g., URLs, API endpoints) and are a core component of the policy's scope, not part of the policy outcome.

D. Actions: Actions specify the operation being performed (e.g., GET, POST) on a resource and are evaluated as part of the policy conditions.

PingAM Documentation, "Authorization Guide" -> "Policies" -> "Response attributes". This section explicitly states, "Response attributes are attributes that are returned to the policy enforcement point (PEP) along with the policy decision. The PEP can then use these attributes for its own purposes, such as passing them to the protected application."