What will happen if rule and realm are defined for an application but no policy has been defined/created. What will happen on accessing this page?
User may get authenticated against the User Directory but not authorized to view the content.
In the policy you define which users are allowed to access, so without the policy the application would not be accessible.
You can quickly test this creating a test realm and then creating a rule without a policy.
I hope this helps
You might get a login page, but you will not be allowed to access the app, unless you add the policy,
Retrieving data ...