sip u201d support and web services based application support the hub of the idm system is the authentication session manager u201c asm u201d 200 the asm tracks the user state and the associated network state the asm is a rule based transaction event system the data access api used in the idm is meta data driven further the idm enables both dynamic and static network policy management static policies are updated due to a calendar event for example first day of each month or a network administrative event for example installation of new equipment capacity and are applied to the pep associated with entity user role network service relationship as part of a provisioning process dynamic policies are updated due to a behavioral and temporal state change event that occurs in the network and are applied to the pep associated with the entity user role network service relationship e g a user starts a denial of service attack the steps of an exemplary rso call flow will now be described in the case of a user login the user establishes communication between the ue and l 2 switch the ue is then assigned a temporary ip address from dhcp and the ue is put on a guest i e restrictive vlan the l 2 switch then sends the following to the network service edge u201c se u201d a the temporary ip address b the l 2 switch address and c the physical switch port the ua checks scans the ue for end point compliance and if the device has met end point compliance then the ua prompts the.