A method for establishing a policy group to aggregate access configurations to control a user's access to an identified resource, the method comprising: a) establishing, via a policy manager executing on a device intermediary to a plurality of clients and one or more servers, a policy group representing an aggregate of a plurality of access configurations for a user to access via the device one or more identified resources of the one or more servers, the policy group comprising a login point component representing an entry point to access the one or more identified resources; b) configuring, via the policy manager, the login point component to specify a uniform resource locator for the entry point; c) selecting, via the policy manager, one or more authentication methods for the login point component; and d) identifying, via the policy manager, one or more authorization methods for the login point component based on the one or more authentication methods; characterised in that: the policy group implements an "OR" logical combination for access configurations of a same type and an "AND" logical combination for access configurations of a different type, for an access control decision, the plurality of access configurations comprising the login point component representing the entry point to access the one or more identified resources the plurality of types of access configurations being combined comprising a login point type; the one or more authentication methods for the login point component are selected, via the policy manager from a plurality of authentication methods, the plurality of authentication methods comprising a first authentication method to which a first set of at least one authorization method is assigned, different from a second set of at least one authorization method assigned to a second authentication method of the plurality of authentication methods; and the one or more authorization methods for the login point component are selected, via the policy manager from a plurality of authorization methods, based on the one or more selected authentication methods each of the selected authentication methods assigned with at least one authorization method. a) establishing, via a policy manager executing on a device intermediary to a plurality of clients and one or more servers, a policy group representing an aggregate of a plurality of access configurations for a user to access via the device one or more identified resources of the one or more servers, the policy group comprising a login point component representing an entry point to access the one or more identified resources; b) configuring, via the policy manager, the login point component to specify a uniform resource locator for the entry point; c) selecting, via the policy manager, one or more authentication methods for the login point component; and d) identifying, via the policy manager, one or more authorization methods for the login point component based on the one or more authentication methods; characterised in that: the policy group implements an "OR" logical combination for access configurations of a same type and an "AND" logical combination for access configurations of a different type, for an access control decision, the plurality of access configurations comprising the login point component representing the entry point to access the one or more identified resources the plurality of types of access configurations being combined comprising a login point type; the one or more authentication methods for the login point component are selected, via the policy manager from a plurality of authentication methods, the plurality of authentication methods comprising a first authentication method to which a first set of at least one authorization method is assigned, different from a second set of at least one authorization method assigned to a second authentication method of the plurality of authentication methods; and the one or more authorization methods for the login point component are selected, via the policy manager from a plurality of authorization methods, based on the one or more selected authentication methods each of the selected authentication methods assigned with at least one authorization method. the policy group implements an "OR" logical combination for access configurations of a same type and an "AND" logical combination for access configurations of a different type, for an access control decision, the plurality of access configurations comprising the login point component representing the entry point to access the one or more identified resources the plurality of types of access configurations being combined comprising a login point type; the one or more authentication methods for the login point component are selected, via the policy manager from a plurality of authentication methods, the plurality of authentication methods comprising a first authentication method to which a first set of at least one authorization method is assigned, different from a second set of at least one authorization method assigned to a second authentication method of the plurality of authentication methods; and the one or more authorization methods for the login point component are selected, via the policy manager from a plurality of authorization methods, based on the one or more selected authentication methods each of the selected authentication methods assigned with at least one authorization method.