In OpenSSO, a policy that defines access permissions is referred to as a normal policy. A normal policy consists of rules, subjects, conditions, and Response Providers.