---
title: "Managing POPs"
slug: "managing-pops"
description: "Managing Policy Orchestration Points (POPs)"
updated: 2025-11-16T16:23:08Z
published: 2025-11-16T16:23:08Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plainid.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing POPs

Policy Orchestration Points (POPs) define the connection between the Authorization Platform Tenant to the SaaS Application.

To manage Policy Orchestration Points, you can

- Create a POP
- Edit a POP
- Change the mode
- Delete a POP

---

### Creating a POP

**To create a Policy Orchestration Point**:

1. In the Environment side panel, click on the Orchestration Workspace, click **Add Policy Orchestration Point**.  The Select Vendor side panel opens.
2. Select the third-party vendor. A form opens, enabling you to configure the new POP.
3. In the **General** section, enter a:
  - Display Name (required)
  - POP ID (required)
  - Description (optional)
4. In the **Associated Workspaces**, select the targeted Authorization or Identity Workspace.
5. In the **Connection Settings** section, enter the relevant values for each parameter. Refer to the [SaaS Authorization Management](/v1/docs/saas-policy-management-authorizers) article and refer to the third-party vendor you use for connection details.
6. Click **Test Connection** to verify that the new POP can connect to the third-party vendor app and that the user has the appropriate permissions. For more information about the permissions, refer to the third-party vendor documentation in [SaaS Authorization Management](/v1/docs/saas-policy-management-authorizers)
  - If the Connection Test fails, an error appears below the Test Connection button indicating what needs to be fixed.
7. When the **Test Connection** is successful, click **Create**. The new POP is added to the list of currently defined POPs and an initial discovery takes place.

---

### Editing a POP

**To edit a POP:**

1. Click the three vertical dots on the POP you wish to edit, and select **Settings**. The POP side panel opens with the current configuration in Edit mode. All of the fields except the Authentication Method can be changed.
2. After you make any changes, click the **Test Connection** button to verify that the POP is still configured properly and can connect to the third-party vendor.
3. When the **Test Connection** is successful, click **Save**.

---

### Changing the POP Mode

In the Orchestration Workspace, you can switch between two modes:

- **Learn Mode**: PlainID observes the vendor’s Policies without enforcing changes. Use this mode to see how Policies are defined by the vendor.
- **Manage Mode**: PlainID takes control of Policies. You can make changes, and differences from the vendor are tracked for visibility and reconciliation.

You can switch between these modes at any time, depending on your governance needs.

---

#### Switching from Learn to Manage Mode

Switching to **Manage Mode** lets you govern Policies in PlainID. From this point, any changes made in PlainID are tracked and shown as differences from the vendor. No Policies are changed during the switch — only tracking is activated.

---

#### Switching from Manage to Learn Mode

Switching back to **Learn Mode** resets any undeployed changes made in PlainID and re-syncs with the vendor’s latest Policies. A confirmation popup ensures you’re aware before making the switch. For details on how Policy differences are shown and resolved in Manage Mode, see [Orchestration Side Panels](/v1/docs/orchestration-side-panel).

---

### Deleting a POP

When you delete a Policy Orchestration Point, all associated objects generated by the POP are also permanently deleted from the Platform. This includes the following:

- POP
- Scope
- Application
- Policies discovered or created within the POP.
- Building Blocks including Dynamic Groups, Actions, Rulesets, and Conditions.
- Asset Types (including Attributes)
- Identity Sources
- Identity Attributes

          Third Party Applications/Vendors

          

Deleting a POP and associated objects in the Platform **does not delete** objects or Policies in the third-party application from which they were discovered.

**To delete a POP:**

1. In the Orchestration Workspace, locate the POP you wish to delete in the list of Policy Orchestration Points.
2. Click on the three vertical dots on the POP to access the drop-down menu.
3. Click **Delete POP**. A warning message appears, asking you to confirm that you want to delete the POP.
4. Click **Delete** to confirm. The POP is deleted, as well as all associated objects and Policies within the POP.