---
title: Using ForgeRock Intelligent Access Journey
description: To use a ForgeRock Intelligent Access Journey, you must install ForgeRock Access Management and perform the additional configuration steps described in this document.
component: forgerock-intelligent-access
page_id: forgerock-intelligent-access:setup:pf_forgerock_intelligent_access_ik_using_forgerock_intelligent_access_journey
canonical_url: https://docs.pingidentity.com/integrations/forgerock-intelligent-access/setup/pf_forgerock_intelligent_access_ik_using_forgerock_intelligent_access_journey.html
llms_txt: https://docs.pingidentity.com/integrations/forgerock-intelligent-access/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: June 10, 2024
section_ids:
  before-you-begin: Before you begin
  about-this-task: About this task
  steps: Steps
  example: Example:
---

# Using ForgeRock Intelligent Access Journey

To use a ForgeRock Intelligent Access Journey, you must install ForgeRock Access Management and perform the additional configuration steps described in this document.

## Before you begin

Complete the steps in the ForgeRock Access Management (ForgeRock AM) installation [guide](https://backstage.forgerock.com/docs/am/7.4/install-guide/preface.html).

## About this task

Perform the following configuration steps in the ForgeRock Access Management admin console:

## Steps

1. If you do not have an alpha realm in your environment yet:

   1. Go to **Realms** and click **New Realm**.

   2. In the **Name** field, enter `alpha`.

   3. Click **Use Client-Side Sessions**.

   4. Click **Create** to save your configuration.

      |   |                                                                                                                                                                                                                                                                                       |
      | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      |   | You should have an alpha realm because it's best practice to reserve the root realm for administrative operations. Learn more about configuring a realm in [Create a new realm](https://docs.pingidentity.com/pingam/7.5/setup-guide/configure-realms-console.html#create-new-realm). |

2. Enable goto and redirects for the validation service.

   By default, ForgeRock AM denies all goto and redirects after the sign on flow is complete.

   1. In the alpha realm, go to **Services**.

   2. If the **Validation Service** is not in the list of services, click **Add a Service** and in the **Choose a service type** drop-down list, select **Validation Service.**

   3. In the **Valid goto URL Resources** field, enter one or more valid URL patterns to allow.

      ### Example:

      * https\://*\<my-ping_url>*:\*/\*

      * https\://*\<my-ping_url>*:\*/**?**

3. Configure push authentication journeys by completing the steps in the [push authentication journeys guide](https://backstage.forgerock.com/docs/am/7.4/authentication-guide/authn-mfa-trees-push.html).

4. **Optional:** To adjust authentication session lifetimes:

   1. In the alpha realm, go to **Services**, click **Session**, then click **Create**.

   2. On the **Dynamic Attributes** tab, enter the desired values in the **Maximum Session Time** and **Maximum Idle Time** fields.

   3. Click **Save Changes**.