You can attach policies to a deployed SOA composite application during runtime in Oracle Enterprise Manager Fusion Middleware Control. For more information, see Administering Oracle SOA Suite and Oracle Business Process Management Suite.