The policy store and credential store can be file-based or LDAP-based.

The pre-requisites for using an LDAP-based store are the same as for both the policy store and credential store. See Securing Applications with Oracle Platform Security Services.