1. A method comprising: determining, by an upgrade management system on a computing system, a configuration of an access manager that executes on the computing system, the configuration defining a first version of the access manager that protects access to one or more resources, wherein the configuration includes one or more settings defining functionality of the first version of the access manager, and wherein the first version of the access manager executes based on a policy configuration that defines access to the one or more resources for a plurality of users; extracting, by the upgrade management system, a set of policy parameters of the policy configuration for the first version of the access manager, wherein the set of policy parameters indicates an authentication scheme for authenticating a client operated by a user and indicates an authorization policy for determining authentication of each of the plurality of users; extracting, by the upgrade management system, the one or more settings indicated by the configuration of the first version of the access manager; adjusting, by the upgrade management system, the extracted set of policy parameters to an updated set of policy parameters for an updated policy configuration, the updated policy configuration defining access to the one or more resources by a second version of the access manager for execution on the computing system, wherein adjusting the extracted set of policy parameters includes converting the extracted set of policy parameters for adjustment into the updated set of policy parameters to change from the first version to the second version of the access manager; adjusting, by the upgrade management system, the one or more extracted settings to one or more updated settings in an updated configuration for a second version of the access manager, the updated configuration defining functionality for the second version to protect access to the one or more resources; storing, by the upgrade management system, the updated set of policy parameters and the one or more updated settings to an import file for migration from the first version of the access manager to the second version of the access manager; configuring, by the upgrade management system using the import file, the second version of the access manager for execution on the computing system based on the updated configuration; and configuring, by the upgrade management system using the import file, the second version of the access manager to protect access to the one or more resources for a plurality of users based on the updated set of policy parameters in the updated policy configuration; changing execution of the access manager on the computing system from the first version to the second version based on configuring the second version of the access manager according to the updated configuration and the updated policy configuration.