--- title: Properties reference description: This reference describes agent configuration properties. component: java-agents version: 2025.11 page_id: java-agents:properties-reference:preface canonical_url: https://docs.pingidentity.com/java-agents/2025.11/properties-reference/preface.html page_aliases: ["index.adoc"] section_ids: property_aliases: Property aliases list-properties: List properties list_of_bootstrap_properties: List of bootstrap properties list_of_all_properties: List of all properties --- # Properties reference This reference describes agent configuration properties. When you create an agent profile, you choose whether to store the agent configuration in AM's configuration store or locally to the agent installation. The local configuration file syntax is the same as that of a standard Java properties file. ## Property aliases A property alias specifies a path for a property. A property can have multiple aliases but each alias is unique to that property. When you assign multiple values to the same property through different aliases, the agent assigns the values as follows: * For list properties, it appends each assignment to the list. * For simple string properties, it overwrites the current value with each new value. The final value is the last value to be assigned. The following example assigns different values to a string property with three aliases: ```properties com.sun.identity.agents.app.username=one com.sun.identity.agents.config.profilename=two org.forgerock.agents.profile.name=three ``` The final value of the property is `three`, the last value to be assigned. ## List properties List properties can be configured with or without an index location. The following formats are allowed and equivalent: ```bash property[0]=one property[1]=two property[2]=three ``` ```bash property=one property=two property=three ``` When the agent assigns values to a list property, it adds to the list in the order the assignments are made, ignoring any index specified, and appending to the end of the list. The following formats are equivalent: ```bash property[]=one property[]=two property[]=three ``` ```bash property[10]=one property[1]=two property[42]=three ``` The agent uses the index location only in the following cases: * When the index location is set to `@` and the value is comma-separated: The agent sets multiple properties according to the number of comma-separated values specified. In the following example, there are three comma-separated values: ```bash property[@]=one,two,three ``` The agent sets three individual properties. The final assignment is as follows: ```bash property[]=one property[]=two property[]=three ``` * When the value for an index location is empty: The agent deletes that location in the list. In the following example, the last value for index location `[1]` is empty: ```bash property[0]=one property[1]=two property[2]=three property[1]= ``` The agent deletes index location `[1]` from the list and then moves index location `[2]` to `[1]`. The final assignment is as follows: ```bash property[0]=one property[1]=three ``` * When the index location is empty and the value is empty: The agent deletes all values from the list; the list exists, but is empty. In the following example, the second value for index location `[]` is empty: ```bash property[]=one property[]= property[]=two property[]=three ``` The agent does the following: * Adds the text "one" to the list * Deletes all values from the list * Adds the text "two" into index location `[0]` * Adds the text "three" into index location `[1]` The final assignment is as follows: ```bash property[0]=two property[1]=three ``` ## List of bootstrap properties | Property | Description | Function | | ----------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------- | | [org.forgerock.agents.filter.mode.map](org.forgerock.agents.filter.mode.map.html) | [Agent Filter Mode Map](org.forgerock.agents.filter.mode.map.html) | Agent | | [org.forgerock.agents.profile.name](org.forgerock.agents.profile.name.html) | [Agent Profile Name](org.forgerock.agents.profile.name.html) | Profile, Required | | [org.forgerock.agents.agent.profile.realm](org.forgerock.agents.agent.profile.realm.html) | [Agent Profile Realm](org.forgerock.agents.agent.profile.realm.html) | Profile, Required | | [org.forgerock.agents.am.hostname](org.forgerock.agents.am.hostname.html) | [AM Authentication Service Host Name](org.forgerock.agents.am.hostname.html) | Authentication service, Required | | [org.forgerock.agents.am.path](org.forgerock.agents.am.path.html) | [AM Authentication Service Path](org.forgerock.agents.am.path.html) | Authentication service, Required | | [org.forgerock.agents.am.port](org.forgerock.agents.am.port.html) | [AM Authentication Service Port](org.forgerock.agents.am.port.html) | Authentication service, Required | | [org.forgerock.agents.am.protocol](org.forgerock.agents.am.protocol.html) | [AM Authentication Service Protocol](org.forgerock.agents.am.protocol.html) | Authentication service, Required | | [org.forgerock.agents.local.audit.dir.path](org.forgerock.agents.local.audit.dir.path.html) | [Audit Log Directory](org.forgerock.agents.local.audit.dir.path.html) | Audit | | [org.forgerock.agents.audit.exclude.path.list](org.forgerock.agents.audit.exclude.path.list.html) | [Audit Log Exclude Paths](org.forgerock.agents.audit.exclude.path.list.html) | Audit | | [org.forgerock.agents.local.audit.file.path](org.forgerock.agents.local.audit.file.path.html) | [Audit Log Filename (deprecated)](org.forgerock.agents.local.audit.file.path.html) | Deprecated | | [org.forgerock.agents.local.audit.log.retention.count](org.forgerock.agents.local.audit.log.retention.count.html) | [Audit Logfile Retention Count](org.forgerock.agents.local.audit.log.retention.count.html) | Audit | | [org.forgerock.agents.audit.include.path.list](org.forgerock.agents.audit.include.path.list.html) | [Audit Log Include Paths](org.forgerock.agents.audit.include.path.list.html) | Audit | | [org.forgerock.agents.fallback.mode.enabled](org.forgerock.agents.fallback.mode.enabled.html) | [Autonomous mode](org.forgerock.agents.fallback.mode.enabled.html) | Agent, Required | | [org.forgerock.agents.csv.monitoring.directory](org.forgerock.agents.csv.monitoring.directory.html) | [CSV Monitoring Directory](org.forgerock.agents.csv.monitoring.directory.html) | Monitoring | | [org.forgerock.agents.lock.config.enabled](org.forgerock.agents.lock.config.enabled.html) | [Enable Configuration Lock](org.forgerock.agents.lock.config.enabled.html) | Profile | | [org.forgerock.agents.http.client.reuse.connections.enabled](org.forgerock.agents.http.client.reuse.connections.enabled.html) | [Enable HTTP Connection Reuse](org.forgerock.agents.http.client.reuse.connections.enabled.html) | Connection pooling | | [org.forgerock.agents.http.client.connection.state.enabled](org.forgerock.agents.http.client.connection.state.enabled.html) | [Enable HTTP Connection State](org.forgerock.agents.http.client.connection.state.enabled.html) | Connection pooling | | [org.forgerock.agents.http.client.retry.requests.enabled](org.forgerock.agents.http.client.retry.requests.enabled.html) | [Enable HTTP Retry](org.forgerock.agents.http.client.retry.requests.enabled.html) | Connection pooling | | [org.forgerock.agents.internal.check.jwt.signature.enabled](org.forgerock.agents.internal.check.jwt.signature.enabled.html) | [Enable internal checking of JWT signature](org.forgerock.agents.internal.check.jwt.signature.enabled.html) | Authentication service | | [org.forgerock.agents.local.audit.log.rotation.enabled](org.forgerock.agents.local.audit.log.rotation.enabled.html) | [Enable Local Audit Log Rotation](org.forgerock.agents.local.audit.log.rotation.enabled.html) | Audit | | [org.forgerock.agents.policy.change.notifications.enabled](org.forgerock.agents.policy.change.notifications.enabled.html) | [Enable Notification of Policy Changes](org.forgerock.agents.policy.change.notifications.enabled.html) | Notifications | | [org.forgerock.agents.config.change.notifications.enabled](org.forgerock.agents.config.change.notifications.enabled.html) | [Enable Notifications of Agent Configuration Change](org.forgerock.agents.config.change.notifications.enabled.html) | Notifications | | [org.forgerock.agents.prometheus.monitoring.enabled](org.forgerock.agents.prometheus.monitoring.enabled.html) | [Enable Prometheus Monitoring](org.forgerock.agents.prometheus.monitoring.enabled.html) | Global | | [org.forgerock.agents.encryptor.classname](org.forgerock.agents.encryptor.classname.html) | [Encryption Class](org.forgerock.agents.encryptor.classname.html) | Encryption, Required | | [org.forgerock.agents.sso.exchange.cache.ttl.minutes](org.forgerock.agents.sso.exchange.cache.ttl.minutes.html) | [Exchanged SSO Token Cache TTL](org.forgerock.agents.sso.exchange.cache.ttl.minutes.html) | Profile | | [org.forgerock.agents.sso.expired.session.cache.ttl.minutes](org.forgerock.agents.sso.expired.session.cache.ttl.minutes.html) | [Expired Session Cache Timeout](org.forgerock.agents.sso.expired.session.cache.ttl.minutes.html) | Session | | [org.forgerock.agents.http.client.connection.timeout.seconds](org.forgerock.agents.http.client.connection.timeout.seconds.html) | [HTTP Connection Timeout](org.forgerock.agents.http.client.connection.timeout.seconds.html) | Connection pooling | | [org.forgerock.agents.http.client.socket.timeout.seconds](org.forgerock.agents.http.client.socket.timeout.seconds.html) | [HTTP Socket Timeout](org.forgerock.agents.http.client.socket.timeout.seconds.html) | Connection pooling | | [org.forgerock.agents.not.enforced.rule.pattern.matcher.classname](org.forgerock.agents.not.enforced.rule.pattern.matcher.classname.html) | [Java Class for Matching Not Enforced Rules](org.forgerock.agents.not.enforced.rule.pattern.matcher.classname.html) | Not-enforced | | [org.forgerock.agents.jwt.cache.ttl.minutes](org.forgerock.agents.jwt.cache.ttl.minutes.html) | [JWT Cache TTL](org.forgerock.agents.jwt.cache.ttl.minutes.html) | Profile | | [org.forgerock.agents.jwt.cookie.name](org.forgerock.agents.jwt.cookie.name.html) | [JWT Cookie Name](org.forgerock.agents.jwt.cookie.name.html) | Profile | | [org.forgerock.agents.local.audit.log.rotation.bytes](org.forgerock.agents.local.audit.log.rotation.bytes.html) | [Local Audit Log Rotation Size](org.forgerock.agents.local.audit.log.rotation.bytes.html) | Audit | | [org.forgerock.agents.config.location](org.forgerock.agents.config.location.html) | [Location of Agent Configuration Repository](org.forgerock.agents.config.location.html) | Profile, Required | | [org.forgerock.agents.expired.session.cache.size](org.forgerock.agents.expired.session.cache.size.html) | [Max Entries in Expired Session Cache](org.forgerock.agents.expired.session.cache.size.html) | Session | | [org.forgerock.agents.jwt.cache.size](org.forgerock.agents.jwt.cache.size.html) | [Max Entries in JWT Cache](org.forgerock.agents.jwt.cache.size.html) | Profile | | [org.forgerock.agents.policy.cache.per.session.size](org.forgerock.agents.policy.cache.per.session.size.html) | [Max Entries in Policy Cache per Session](org.forgerock.agents.policy.cache.per.session.size.html) | Policy enforcement | | [org.forgerock.agents.pdp.cache.size](org.forgerock.agents.pdp.cache.size.html) | [Max Entries in POST Data Preservation Storage](org.forgerock.agents.pdp.cache.size.html) | POST data preservation | | [org.forgerock.agents.sso.exchange.cache.size](org.forgerock.agents.sso.exchange.cache.size.html) | [Max Entries in SSO Exchange Cache](org.forgerock.agents.sso.exchange.cache.size.html) | Profile | | [org.forgerock.agents.http.client.max.connections](org.forgerock.agents.http.client.max.connections.html) | [Max HTTP Connection Count](org.forgerock.agents.http.client.max.connections.html) | Connection pooling | | [org.forgerock.agents.policy.cache.session.size](org.forgerock.agents.policy.cache.session.size.html) | [Max Sessions in Policy Cache](org.forgerock.agents.policy.cache.session.size.html) | Policy enforcement | | [org.forgerock.agents.auto.not.enforce.favicon](org.forgerock.agents.auto.not.enforce.favicon.html) | [Not-Enforced Favicon](org.forgerock.agents.auto.not.enforce.favicon.html) | Not-enforced | | [org.forgerock.agents.policy.cache.ttl.minutes](org.forgerock.agents.policy.cache.ttl.minutes.html) | [Policy Cache TTL](org.forgerock.agents.policy.cache.ttl.minutes.html) | Policy enforcement | | [org.forgerock.agents.pdp.cache.ttl.minutes](org.forgerock.agents.pdp.cache.ttl.minutes.html) | [POST Data Preservation Cache TTL](org.forgerock.agents.pdp.cache.ttl.minutes.html) | POST data preservation | | [com.sun.identity.agents.config.postdata.preserve.cache.entry.ttl](com.sun.identity.agents.config.postdata.preserve.cache.entry.ttl.html) | [POST Data Preservation Cache TTL in Milliseconds (deprecated)](com.sun.identity.agents.config.postdata.preserve.cache.entry.ttl.html) | POST data preservation | | [org.forgerock.agents.pdp.directory.sweep.seconds](org.forgerock.agents.pdp.directory.sweep.seconds.html) | [POST Data Preservation Directory Sweep Interval](org.forgerock.agents.pdp.directory.sweep.seconds.html) | POST data preservation | | [org.forgerock.agents.pdp.cache.total.size.mb](org.forgerock.agents.pdp.cache.total.size.mb.html) | [POST Data Preservation Storage Size](org.forgerock.agents.pdp.cache.total.size.mb.html) | POST data preservation | | [org.forgerock.agents.public.am.url](org.forgerock.agents.public.am.url.html) | [Public AM URL](org.forgerock.agents.public.am.url.html) | Miscellaneous, Required | | [org.forgerock.agents.service.resolver.class.name](org.forgerock.agents.service.resolver.class.name.html) | [Service Resolver Class Name](org.forgerock.agents.service.resolver.class.name.html) | Miscellaneous | | [org.forgerock.agents.session.cache.ttl.minutes](org.forgerock.agents.session.cache.ttl.minutes.html) | [Session Cache TTL](org.forgerock.agents.session.cache.ttl.minutes.html) | Session | | [org.forgerock.agents.strategy.when.am.unavailable](org.forgerock.agents.strategy.when.am.unavailable.html) | [Strategy when AM unavailable](org.forgerock.agents.strategy.when.am.unavailable.html) | Agent | ## List of all properties | Property | Description (UI name) | Function | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | | [org.forgerock.agents.access.denied.uri.map](org.forgerock.agents.access.denied.uri.map.html) | [Access Denied URI Map](org.forgerock.agents.access.denied.uri.map.html) | Access denied | | [org.forgerock.agents.debug.level](org.forgerock.agents.debug.level.html) | [Agent Debug Level](org.forgerock.agents.debug.level.html) | Logs | | [org.forgerock.agents.filter.mode.map](org.forgerock.agents.filter.mode.map.html) | [Agent Filter Mode Map](org.forgerock.agents.filter.mode.map.html) | Agent | | [org.forgerock.agents.profile.name](org.forgerock.agents.profile.name.html) | [Agent Profile Name](org.forgerock.agents.profile.name.html) | Profile, Required | | [org.forgerock.agents.agent.profile.realm](org.forgerock.agents.agent.profile.realm.html) | [Agent Profile Realm](org.forgerock.agents.agent.profile.realm.html) | Profile, Required | | [org.forgerock.agents.agent.hostname](org.forgerock.agents.agent.hostname.html) | [Alternative Agent Host Name](org.forgerock.agents.agent.hostname.html) | Agent | | [org.forgerock.agents.agent.port](org.forgerock.agents.agent.port.html) | [Alternative Agent Port Number](org.forgerock.agents.agent.port.html) | Agent | | [org.forgerock.agents.agent.protocol](org.forgerock.agents.agent.protocol.html) | [Alternative Agent Protocol](org.forgerock.agents.agent.protocol.html) | Agent | | [org.forgerock.agents.config.logout.session.invalidate.enabled](org.forgerock.agents.config.logout.session.invalidate.enabled.html) | [Always invalidate sessions](org.forgerock.agents.config.logout.session.invalidate.enabled.html) | Logout | | [org.forgerock.agents.am.hostname](org.forgerock.agents.am.hostname.html) | [AM Authentication Service Host Name](org.forgerock.agents.am.hostname.html) | Authentication service, Required | | [org.forgerock.agents.am.path](org.forgerock.agents.am.path.html) | [AM Authentication Service Path](org.forgerock.agents.am.path.html) | Authentication service, Required | | [org.forgerock.agents.am.port](org.forgerock.agents.am.port.html) | [AM Authentication Service Port](org.forgerock.agents.am.port.html) | Authentication service, Required | | [org.forgerock.agents.am.protocol](org.forgerock.agents.am.protocol.html) | [AM Authentication Service Protocol](org.forgerock.agents.am.protocol.html) | Authentication service, Required | | [com.sun.identity.agents.config.login.url](com.sun.identity.agents.config.login.url.html) | [AM Login URL List](com.sun.identity.agents.config.login.url.html) | Custom login redirect, Default Login Redirect, Login redirect, Login Redirect (Default) | | [org.forgerock.agents.audit.what](org.forgerock.agents.audit.what.html) | [Audit Access Types](org.forgerock.agents.audit.what.html) | Audit | | [org.forgerock.agents.local.audit.dir.path](org.forgerock.agents.local.audit.dir.path.html) | [Audit Log Directory](org.forgerock.agents.local.audit.dir.path.html) | Audit | | [org.forgerock.agents.audit.exclude.path.list](org.forgerock.agents.audit.exclude.path.list.html) | [Audit Log Exclude Paths](org.forgerock.agents.audit.exclude.path.list.html) | Audit | | [org.forgerock.agents.local.audit.file.path](org.forgerock.agents.local.audit.file.path.html) | [Audit Log Filename (deprecated)](org.forgerock.agents.local.audit.file.path.html) | Deprecated | | [org.forgerock.agents.local.audit.log.retention.count](org.forgerock.agents.local.audit.log.retention.count.html) | [Audit Logfile Retention Count](org.forgerock.agents.local.audit.log.retention.count.html) | Audit | | [org.forgerock.agents.audit.include.path.list](org.forgerock.agents.audit.include.path.list.html) | [Audit Log Include Paths](org.forgerock.agents.audit.include.path.list.html) | Audit | | [org.forgerock.agents.audit.where](org.forgerock.agents.audit.where.html) | [Audit Log Location](org.forgerock.agents.audit.where.html) | Audit | | [org.forgerock.agents.authn.exchange.cookie.name](org.forgerock.agents.authn.exchange.cookie.name.html) | [Authentication Exchange Cookie Name](org.forgerock.agents.authn.exchange.cookie.name.html) | Login | | [org.forgerock.agents.authn.exchange.uri](org.forgerock.agents.authn.exchange.uri.html) | [Authentication Exchange URI](org.forgerock.agents.authn.exchange.uri.html) | Login | | [org.forgerock.agents.authn.fail.reason.parameter.name](org.forgerock.agents.authn.fail.reason.parameter.name.html) | [Authentication Fail Reason Parameter Name](org.forgerock.agents.authn.fail.reason.parameter.name.html) | Authentication failure | | [org.forgerock.agents.authn.fail.reason.remapper](org.forgerock.agents.authn.fail.reason.remapper.html) | [Authentication Fail Reason Parameter Value Map](org.forgerock.agents.authn.fail.reason.remapper.html) | Authentication failure | | [org.forgerock.agents.authn.fail.url](org.forgerock.agents.authn.fail.url.html) | [Authentication Fail URL](org.forgerock.agents.authn.fail.url.html) | Authentication failure | | [org.forgerock.agents.authn.redirect.uri](org.forgerock.agents.authn.redirect.uri.html) | [Authentication Redirect URI](org.forgerock.agents.authn.redirect.uri.html) | Cross-domain single sign-on, Required | | [org.forgerock.agents.fallback.mode.enabled](org.forgerock.agents.fallback.mode.enabled.html) | [Autonomous mode](org.forgerock.agents.fallback.mode.enabled.html) | Agent, Required | | [org.forgerock.agents.bad.advice.loop.termination.counter](org.forgerock.agents.bad.advice.loop.termination.counter.html) | [Bad advice loop termination counter](org.forgerock.agents.bad.advice.loop.termination.counter.html) | Bad configuration detection | | [org.forgerock.agents.bad.advice.loop.termination.http.code](org.forgerock.agents.bad.advice.loop.termination.http.code.html) | [Bad advice loop termination HTTP status](org.forgerock.agents.bad.advice.loop.termination.http.code.html) | Bad configuration detection | | [org.forgerock.agents.bad.advice.loop.termination.url](org.forgerock.agents.bad.advice.loop.termination.url.html) | [Bad advice loop termination URL](org.forgerock.agents.bad.advice.loop.termination.url.html) | Bad configuration detection | | [org.forgerock.agents.http.header.containing.remote.hostname](org.forgerock.agents.http.header.containing.remote.hostname.html) | [Client Hostname Header](org.forgerock.agents.http.header.containing.remote.hostname.html) | Client identification, Continuous security | | [org.forgerock.agents.http.header.containing.ip.address](org.forgerock.agents.http.header.containing.ip.address.html) | [Client IP Address Header](org.forgerock.agents.http.header.containing.ip.address.html) | Client identification, Continuous security | | [org.forgerock.agents.acceptable.ip.address.map](org.forgerock.agents.acceptable.ip.address.map.html) | [Client IP Validation Address Map](org.forgerock.agents.acceptable.ip.address.map.html) | Client identification | | [org.forgerock.agents.original.ip.check.mode.map](org.forgerock.agents.original.ip.check.mode.map.html) | [Client IP Validation Mode](org.forgerock.agents.original.ip.check.mode.map.html) | Client identification | | [org.forgerock.agents.conditional.logout.url.list](org.forgerock.agents.conditional.logout.url.list.html) | [Conditional Logout URL List](org.forgerock.agents.conditional.logout.url.list.html) | Logout | | [org.forgerock.agents.config.reload.seconds](org.forgerock.agents.config.reload.seconds.html) | [Configuration Reload Interval](org.forgerock.agents.config.reload.seconds.html) | Profile | | [org.forgerock.agents.container.encoding](org.forgerock.agents.container.encoding.html) | [Container Character Encoding](org.forgerock.agents.container.encoding.html) | Container, Not-enforced | | [org.forgerock.agents.container.param.encoding](org.forgerock.agents.container.param.encoding.html) | [Container Parameter Encoding](org.forgerock.agents.container.param.encoding.html) | Container, Not-enforced | | [org.forgerock.agents.continuous.security.cookies.map](org.forgerock.agents.continuous.security.cookies.map.html) | [Continuous Security Cookie Map](org.forgerock.agents.continuous.security.cookies.map.html) | Continuous security | | [org.forgerock.agents.continuous.security.headers.map](org.forgerock.agents.continuous.security.headers.map.html) | [Continuous Security Header Map](org.forgerock.agents.continuous.security.headers.map.html) | Continuous security | | [org.forgerock.agents.reject.path.traversal.attempts.enabled](org.forgerock.agents.reject.path.traversal.attempts.enabled.html) | [Control Handling of Path Traversal Attempts](org.forgerock.agents.reject.path.traversal.attempts.enabled.html) | Configure behaviour | | [org.forgerock.agents.backslash.handling.strategy](org.forgerock.agents.backslash.handling.strategy.html) | [Control Handling of the Backslash Character](org.forgerock.agents.backslash.handling.strategy.html) | Configure behaviour | | [org.forgerock.agents.percent.2e.handling.strategy](org.forgerock.agents.percent.2e.handling.strategy.html) | [Control Handling of the URL Encoded Sequence %2e](org.forgerock.agents.percent.2e.handling.strategy.html) | Configure behaviour | | [org.forgerock.agents.percent.2f.handling.strategy](org.forgerock.agents.percent.2f.handling.strategy.html) | [Control Handling of the URL Encoded Sequence %2f](org.forgerock.agents.percent.2f.handling.strategy.html) | Configure behaviour | | [org.forgerock.agents.percent.3b.handling.strategy](org.forgerock.agents.percent.3b.handling.strategy.html) | [Control Handling of the URL Encoded Sequence %3b](org.forgerock.agents.percent.3b.handling.strategy.html) | Configure behaviour | | [org.forgerock.agents.percent.5c.handling.strategy](org.forgerock.agents.percent.5c.handling.strategy.html) | [Control Handling of the URL Encoded Sequence %5c](org.forgerock.agents.percent.5c.handling.strategy.html) | Configure behaviour | | [org.forgerock.agents.accept.ipdp.cookie](org.forgerock.agents.accept.ipdp.cookie.html) | [Convert SSO Tokens Into OIDC JWTs](org.forgerock.agents.accept.ipdp.cookie.html) | SSO cookie handling | | [org.forgerock.agents.cookie.reset.enabled](org.forgerock.agents.cookie.reset.enabled.html) | [Cookie Reset](org.forgerock.agents.cookie.reset.enabled.html) | Cookie reset | | [org.forgerock.agents.attribute.cookie.separator](org.forgerock.agents.attribute.cookie.separator.html) | [Cookie Separator Character](org.forgerock.agents.attribute.cookie.separator.html) | Attributes | | [org.forgerock.agents.csv.monitoring.directory](org.forgerock.agents.csv.monitoring.directory.html) | [CSV Monitoring Directory](org.forgerock.agents.csv.monitoring.directory.html) | Monitoring | | [org.forgerock.agents.response.header.map](org.forgerock.agents.response.header.map.html) | [Custom Response Header Map](org.forgerock.agents.response.header.map.html) | Miscellaneous | | [org.forgerock.agents.fqdn.default](org.forgerock.agents.fqdn.default.html) | [Default FQDN](org.forgerock.agents.fqdn.default.html) | Fully qualified domain name | | [org.forgerock.agents.attribute.cookie.encode.enabled](org.forgerock.agents.attribute.cookie.encode.enabled.html) | [Enable Attribute Encoding](org.forgerock.agents.attribute.cookie.encode.enabled.html) | Attributes | | [org.forgerock.agents.advice.b64.url.encode.enabled](org.forgerock.agents.advice.b64.url.encode.enabled.html) | [Enable Composite Advice Encoding](org.forgerock.agents.advice.b64.url.encode.enabled.html) | Policy enforcement | | [org.forgerock.agents.lock.config.enabled](org.forgerock.agents.lock.config.enabled.html) | [Enable Configuration Lock](org.forgerock.agents.lock.config.enabled.html) | Profile | | [org.forgerock.agents.use.connection.pooling.enabled](org.forgerock.agents.use.connection.pooling.enabled.html) | [Enable Connection Pooling](org.forgerock.agents.use.connection.pooling.enabled.html) | Connection pooling | | [org.forgerock.agents.legacy.login.enabled](org.forgerock.agents.legacy.login.enabled.html) | [Enable Custom Login Mode](org.forgerock.agents.legacy.login.enabled.html) | Custom login redirect, Default Login Redirect, Login redirect, Login Redirect (Default) | | [com.iplanet.am.cookie.encode](com.iplanet.am.cookie.encode.html) | [Enable Encoded Cookies](com.iplanet.am.cookie.encode.html) | Cookie | | [org.forgerock.agents.fqdn.check.enabled](org.forgerock.agents.fqdn.check.enabled.html) | [Enable FQDN Checking](org.forgerock.agents.fqdn.check.enabled.html) | Fully qualified domain name | | [org.forgerock.agents.302.redirects.enabled](org.forgerock.agents.302.redirects.enabled.html) | [Enable HTTP 302 Redirects](org.forgerock.agents.302.redirects.enabled.html) | Global | | [org.forgerock.agents.http.client.reuse.connections.enabled](org.forgerock.agents.http.client.reuse.connections.enabled.html) | [Enable HTTP Connection Reuse](org.forgerock.agents.http.client.reuse.connections.enabled.html) | Connection pooling | | [org.forgerock.agents.http.client.connection.state.enabled](org.forgerock.agents.http.client.connection.state.enabled.html) | [Enable HTTP Connection State](org.forgerock.agents.http.client.connection.state.enabled.html) | Connection pooling | | [com.sun.identity.cookie.httponly](com.sun.identity.cookie.httponly.html) | [Enable HTTP Only Cookies](com.sun.identity.cookie.httponly.html) | Cookie | | [org.forgerock.agents.http.client.retry.requests.enabled](org.forgerock.agents.http.client.retry.requests.enabled.html) | [Enable HTTP Retry](org.forgerock.agents.http.client.retry.requests.enabled.html) | Connection pooling | | [org.forgerock.agents.ignore.path.info.enabled](org.forgerock.agents.ignore.path.info.enabled.html) | [Enable Ignore Path Info](org.forgerock.agents.ignore.path.info.enabled.html) | Miscellaneous | | [org.forgerock.agents.internal.check.jwt.signature.enabled](org.forgerock.agents.internal.check.jwt.signature.enabled.html) | [Enable internal checking of JWT signature](org.forgerock.agents.internal.check.jwt.signature.enabled.html) | Authentication service | | [org.forgerock.agents.load.balancer.cookies.enabled](org.forgerock.agents.load.balancer.cookies.enabled.html) | [Enable Load Balancer Cookies](org.forgerock.agents.load.balancer.cookies.enabled.html) | Cookie | | [org.forgerock.agents.local.audit.log.rotation.enabled](org.forgerock.agents.local.audit.log.rotation.enabled.html) | [Enable Local Audit Log Rotation](org.forgerock.agents.local.audit.log.rotation.enabled.html) | Audit | | [org.forgerock.agents.logout.introspection.enabled](org.forgerock.agents.logout.introspection.enabled.html) | [Enable Logout Introspection](org.forgerock.agents.logout.introspection.enabled.html) | Logout | | [org.forgerock.agents.notenforced.ip.cache.enabled](org.forgerock.agents.notenforced.ip.cache.enabled.html) | [Enable Not-Enforced IP Cache](org.forgerock.agents.notenforced.ip.cache.enabled.html) | Not-enforced | | [org.forgerock.agents.notenforced.uri.cache.enabled](org.forgerock.agents.notenforced.uri.cache.enabled.html) | [Enable Not-Enforced URIs Cache](org.forgerock.agents.notenforced.uri.cache.enabled.html) | Not-enforced | | [org.forgerock.agents.policy.change.notifications.enabled](org.forgerock.agents.policy.change.notifications.enabled.html) | [Enable Notification of Policy Changes](org.forgerock.agents.policy.change.notifications.enabled.html) | Notifications | | [com.iplanet.am.session.client.polling.enabled](com.iplanet.am.session.client.polling.enabled.html) | [Enable Notification of Session Logout (deprecated)](com.iplanet.am.session.client.polling.enabled.html) | Notifications | | [org.forgerock.agents.session.change.notifications.enabled](org.forgerock.agents.session.change.notifications.enabled.html) | [Enable Notification of Session Logout](org.forgerock.agents.session.change.notifications.enabled.html) | Notifications | | [org.forgerock.agents.config.change.notifications.enabled](org.forgerock.agents.config.change.notifications.enabled.html) | [Enable Notifications of Agent Configuration Change](org.forgerock.agents.config.change.notifications.enabled.html) | Notifications | | [org.forgerock.agents.user.realm.overrides.policy.evaluation.realm.enabled](org.forgerock.agents.user.realm.overrides.policy.evaluation.realm.enabled.html) | [Enable Policy Evaluation in User Authentication Realm](org.forgerock.agents.user.realm.overrides.policy.evaluation.realm.enabled.html) | Policy enforcement | | [org.forgerock.agents.post.data.preservation.enabled](org.forgerock.agents.post.data.preservation.enabled.html) | [Enable POST Data Preservation](org.forgerock.agents.post.data.preservation.enabled.html) | POST data preservation | | [org.forgerock.agents.prometheus.monitoring.enabled](org.forgerock.agents.prometheus.monitoring.enabled.html) | [Enable Prometheus Monitoring](org.forgerock.agents.prometheus.monitoring.enabled.html) | Global | | [org.forgerock.agents.authn.success.redirect.session.url.enabled](org.forgerock.agents.authn.success.redirect.session.url.enabled.html) | [Enable Redirect to AM Success URL](org.forgerock.agents.authn.success.redirect.session.url.enabled.html) | Login | | [org.forgerock.agents.accept.sso.tokens.enabled](org.forgerock.agents.accept.sso.tokens.enabled.html) | [Enable SSO Token Acceptance](org.forgerock.agents.accept.sso.tokens.enabled.html) | Custom login redirect, Login redirect, SSO cookie handling | | [org.forgerock.agents.userid.mapping.mode.use.dn.enabled](org.forgerock.agents.userid.mapping.mode.use.dn.enabled.html) | [Enable User Principal Flag](org.forgerock.agents.userid.mapping.mode.use.dn.enabled.html) | User mapping | | [org.forgerock.agents.encrypted.password](org.forgerock.agents.encrypted.password.html) | [Encrypted Agent Password](org.forgerock.agents.encrypted.password.html) | Miscellaneous, Required | | [org.forgerock.agents.encryptor.classname](org.forgerock.agents.encryptor.classname.html) | [Encryption Class](org.forgerock.agents.encryptor.classname.html) | Encryption, Required | | [org.forgerock.agents.encryption.key](org.forgerock.agents.encryption.key.html) | [Encryption Key/Salt](org.forgerock.agents.encryption.key.html) | Authentication service, Encryption | | [org.forgerock.agents.sso.exchange.cache.ttl.minutes](org.forgerock.agents.sso.exchange.cache.ttl.minutes.html) | [Exchanged SSO Token Cache TTL](org.forgerock.agents.sso.exchange.cache.ttl.minutes.html) | Profile | | [org.forgerock.agents.samesite.excluded.user.agents.list](org.forgerock.agents.samesite.excluded.user.agents.list.html) | [Exclude Agents From Samesite Cookie Attributes](org.forgerock.agents.samesite.excluded.user.agents.list.html) | SameSite | | [org.forgerock.agents.sso.expired.session.cache.ttl.minutes](org.forgerock.agents.sso.expired.session.cache.ttl.minutes.html) | [Expired Session Cache Timeout](org.forgerock.agents.sso.expired.session.cache.ttl.minutes.html) | Session | | [org.forgerock.agents.config.monitoring.to.csv](org.forgerock.agents.config.monitoring.to.csv.html) | [Export Monitoring Metrics to CSV](org.forgerock.agents.config.monitoring.to.csv.html) | Monitoring | | [org.forgerock.agents.attribute.date.format](org.forgerock.agents.attribute.date.format.html) | [Fetch Attribute Date Format](org.forgerock.agents.attribute.date.format.html) | Attributes | | [org.forgerock.agents.fqdn.map](org.forgerock.agents.fqdn.map.html) | [FQDN Map](org.forgerock.agents.fqdn.map.html) | Fully qualified domain name | | [org.forgerock.agents.authn.fragment.relay.uri](org.forgerock.agents.authn.fragment.relay.uri.html) | [Fragment Relay URI](org.forgerock.agents.authn.fragment.relay.uri.html) | Fragment | | [org.forgerock.agents.continuous.security.get.list](org.forgerock.agents.continuous.security.get.list.html) | [GET Parameter List for URL Policy Env](org.forgerock.agents.continuous.security.get.list.html) | Policy enforcement | | [com.sun.identity.agents.config.redirect.param](com.sun.identity.agents.config.redirect.param.html) | [Goto Parameter Name](com.sun.identity.agents.config.redirect.param.html) | Global | | [org.forgerock.agents.default.goto.url](org.forgerock.agents.default.goto.url.html) | [Goto URL](org.forgerock.agents.default.goto.url.html) | Authentication failure | | [org.forgerock.agents.reject.invalid.escape.sequences.enabled](org.forgerock.agents.reject.invalid.escape.sequences.enabled.html) | [Handle Invalid Escape Sequences](org.forgerock.agents.reject.invalid.escape.sequences.enabled.html) | Configure behaviour | | [org.forgerock.agents.302.redirect.http.content.type](org.forgerock.agents.302.redirect.http.content.type.html) | [HTTP 302 Redirect Content Type](org.forgerock.agents.302.redirect.http.content.type.html) | Global | | [org.forgerock.agents.302.redirect.http.data](org.forgerock.agents.302.redirect.http.data.html) | [HTTP 302 Redirect Data](org.forgerock.agents.302.redirect.http.data.html) | Global | | [org.forgerock.agents.config.json.url.invert](org.forgerock.agents.config.json.url.invert.html) | [HTTP 302 Redirect Invert Not-Enforced List](org.forgerock.agents.config.json.url.invert.html) | Global | | [org.forgerock.agents.config.json.url](org.forgerock.agents.config.json.url.html) | [HTTP 302 Redirect Not-Enforced List](org.forgerock.agents.config.json.url.html) | Global | | [org.forgerock.agents.302.redirect.http.status.code](org.forgerock.agents.302.redirect.http.status.code.html) | [HTTP 302 Redirect Replacement HTTP Status Code](org.forgerock.agents.302.redirect.http.status.code.html) | Global | | [org.forgerock.agents.http.client.connection.timeout.seconds](org.forgerock.agents.http.client.connection.timeout.seconds.html) | [HTTP Connection Timeout](org.forgerock.agents.http.client.connection.timeout.seconds.html) | Connection pooling | | [org.forgerock.agents.http.session.binding.enabled](org.forgerock.agents.http.session.binding.enabled.html) | [HTTP Session Binding](org.forgerock.agents.http.session.binding.enabled.html) | Miscellaneous | | [org.forgerock.agents.http.client.socket.timeout.seconds](org.forgerock.agents.http.client.socket.timeout.seconds.html) | [HTTP Socket Timeout](org.forgerock.agents.http.client.socket.timeout.seconds.html) | Connection pooling | | [org.forgerock.agents.idle.time.window.minutes](org.forgerock.agents.idle.time.window.minutes.html) | [Idle Time Refresh Window](org.forgerock.agents.idle.time.window.minutes.html) | Miscellaneous | | [org.forgerock.agents.notenforced.ip.invert.enabled](org.forgerock.agents.notenforced.ip.invert.enabled.html) | [Invert Not-Enforced IPs](org.forgerock.agents.notenforced.ip.invert.enabled.html) | Not-enforced | | [org.forgerock.agents.notenforced.uri.invert.enabled](org.forgerock.agents.notenforced.uri.invert.enabled.html) | [Invert Not-Enforced URIs](org.forgerock.agents.notenforced.uri.invert.enabled.html) | Not-enforced | | [org.forgerock.agents.not.enforced.rule.pattern.matcher.classname](org.forgerock.agents.not.enforced.rule.pattern.matcher.classname.html) | [Java Class for Matching Not Enforced Rules](org.forgerock.agents.not.enforced.rule.pattern.matcher.classname.html) | Not-enforced | | [org.forgerock.agents.continuous.security.http.session.list](org.forgerock.agents.continuous.security.http.session.list.html) | [JSession Parameter List for URL Policy Env](org.forgerock.agents.continuous.security.http.session.list.html) | Policy enforcement | | [org.forgerock.agents.jwt.cache.ttl.minutes](org.forgerock.agents.jwt.cache.ttl.minutes.html) | [JWT Cache TTL](org.forgerock.agents.jwt.cache.ttl.minutes.html) | Profile | | [org.forgerock.agents.jwt.cookie.domain.list](org.forgerock.agents.jwt.cookie.domain.list.html) | [JWT Cookie Domain List](org.forgerock.agents.jwt.cookie.domain.list.html) | Profile | | [org.forgerock.agents.jwt.cookie.name](org.forgerock.agents.jwt.cookie.name.html) | [JWT Cookie Name](org.forgerock.agents.jwt.cookie.name.html) | Profile | | [org.forgerock.agents.legacy.login.url.list](org.forgerock.agents.legacy.login.url.list.html) | [Legacy Login URL List](org.forgerock.agents.legacy.login.url.list.html) | Custom login redirect, Default Login Redirect, Login redirect, Login Redirect (Default) | | [org.forgerock.agents.load.balancer.cookie.name](org.forgerock.agents.load.balancer.cookie.name.html) | [Load Balancer Cookie Name](org.forgerock.agents.load.balancer.cookie.name.html) | Cookie | | [org.forgerock.agents.local.audit.log.rotation.bytes](org.forgerock.agents.local.audit.log.rotation.bytes.html) | [Local Audit Log Rotation Size](org.forgerock.agents.local.audit.log.rotation.bytes.html) | Audit | | [org.forgerock.agents.locale.country](org.forgerock.agents.locale.country.html) | [Locale Country](org.forgerock.agents.locale.country.html) | Locale | | [org.forgerock.agents.locale.language](org.forgerock.agents.locale.language.html) | [Locale Language](org.forgerock.agents.locale.language.html) | Locale | | [org.forgerock.agents.config.location](org.forgerock.agents.config.location.html) | [Location of Agent Configuration Repository](org.forgerock.agents.config.location.html) | Profile, Required | | [org.forgerock.agents.login.attempt.limit.count](org.forgerock.agents.login.attempt.limit.count.html) | [Login Attempt Limit (deprecated)](org.forgerock.agents.login.attempt.limit.count.html) | Deprecated | | [org.forgerock.agents.login.counter.cookie.name](org.forgerock.agents.login.counter.cookie.name.html) | [Login Attempt Limit Cookie Name (deprecated)](org.forgerock.agents.login.counter.cookie.name.html) | Deprecated | | [org.forgerock.agents.login.reason.parameter.name](org.forgerock.agents.login.reason.parameter.name.html) | [Login Reason Parameter Name](org.forgerock.agents.login.reason.parameter.name.html) | Custom login redirect, Login redirect | | [org.forgerock.agents.login.reason.remapper](org.forgerock.agents.login.reason.remapper.html) | [Login Reason Value Map](org.forgerock.agents.login.reason.remapper.html) | Login | | [org.forgerock.agents.logout.goto.map](org.forgerock.agents.logout.goto.map.html) | [Logout Entry URI Map](org.forgerock.agents.logout.goto.map.html) | Logout | | [org.forgerock.agents.logout.request.param.map](org.forgerock.agents.logout.request.param.map.html) | [Logout Request Parameter Map](org.forgerock.agents.logout.request.param.map.html) | Logout | | [org.forgerock.agents.logout.endpoint.map](org.forgerock.agents.logout.endpoint.map.html) | [Logout URI Map](org.forgerock.agents.logout.endpoint.map.html) | Logout | | [org.forgerock.agents.authn.cookie.max.age.seconds](org.forgerock.agents.authn.cookie.max.age.seconds.html) | [Max Age of Pre-Authentication Cookie](org.forgerock.agents.authn.cookie.max.age.seconds.html) | Cookie, Pre-authentication | | [org.forgerock.agents.expired.session.cache.size](org.forgerock.agents.expired.session.cache.size.html) | [Max Entries in Expired Session Cache](org.forgerock.agents.expired.session.cache.size.html) | Session | | [org.forgerock.agents.jwt.cache.size](org.forgerock.agents.jwt.cache.size.html) | [Max Entries in JWT Cache](org.forgerock.agents.jwt.cache.size.html) | Profile | | [org.forgerock.agents.notenforced.ip.cache.size](org.forgerock.agents.notenforced.ip.cache.size.html) | [Max Entries in Not-Enforced IP Cache](org.forgerock.agents.notenforced.ip.cache.size.html) | Not-enforced | | [org.forgerock.agents.notenforced.uri.cache.size](org.forgerock.agents.notenforced.uri.cache.size.html) | [Max Entries in Not-Enforced URI Cache](org.forgerock.agents.notenforced.uri.cache.size.html) | Not-enforced | | [org.forgerock.agents.policy.cache.per.session.size](org.forgerock.agents.policy.cache.per.session.size.html) | [Max Entries in Policy Cache per Session](org.forgerock.agents.policy.cache.per.session.size.html) | Policy enforcement | | [org.forgerock.agents.pdp.cache.size](org.forgerock.agents.pdp.cache.size.html) | [Max Entries in POST Data Preservation Storage](org.forgerock.agents.pdp.cache.size.html) | POST data preservation | | [org.forgerock.agents.sso.exchange.cache.size](org.forgerock.agents.sso.exchange.cache.size.html) | [Max Entries in SSO Exchange Cache](org.forgerock.agents.sso.exchange.cache.size.html) | Profile | | [org.forgerock.agents.http.client.max.connections](org.forgerock.agents.http.client.max.connections.html) | [Max HTTP Connection Count](org.forgerock.agents.http.client.max.connections.html) | Connection pooling | | [org.forgerock.agents.max.decompression.size.bytes](org.forgerock.agents.max.decompression.size.bytes.html) | [Maximum Decompression Size](org.forgerock.agents.max.decompression.size.bytes.html) | Cookie | | [org.forgerock.agents.policy.cache.session.size](org.forgerock.agents.policy.cache.session.size.html) | [Max Sessions in Policy Cache](org.forgerock.agents.policy.cache.session.size.html) | Policy enforcement | | [org.forgerock.agents.pdp.noentry.url.map](org.forgerock.agents.pdp.noentry.url.map.html) | [Missing POST Data Preservation Entry URI Map](org.forgerock.agents.pdp.noentry.url.map.html) | POST data preservation | | [org.forgerock.agents.notenforced.ip.list](org.forgerock.agents.notenforced.ip.list.html) | [Not-Enforced Client IP List](org.forgerock.agents.notenforced.ip.list.html) | Not-enforced | | [org.forgerock.agents.notenforced.compound.separator](org.forgerock.agents.notenforced.compound.separator.html) | [Not-Enforced Compound Rule Separator](org.forgerock.agents.notenforced.compound.separator.html) | Not-enforced | | [org.forgerock.agents.auto.not.enforce.favicon](org.forgerock.agents.auto.not.enforce.favicon.html) | [Not-Enforced Favicon](org.forgerock.agents.auto.not.enforce.favicon.html) | Not-enforced | | [org.forgerock.agents.notenforced.uri.list](org.forgerock.agents.notenforced.uri.list.html) | [Not-Enforced URIs](org.forgerock.agents.notenforced.uri.list.html) | Not-enforced | | [org.forgerock.agents.oauth.login.url.list](org.forgerock.agents.oauth.login.url.list.html) | [OAuth Login URL List](org.forgerock.agents.oauth.login.url.list.html) | Custom login redirect, Default Login Redirect, Login redirect, Login Redirect (Default) | | [org.forgerock.agents.policy.cache.ttl.minutes](org.forgerock.agents.policy.cache.ttl.minutes.html) | [Policy Cache TTL](org.forgerock.agents.policy.cache.ttl.minutes.html) | Policy enforcement | | [org.forgerock.agents.policy.evaluation.realm.map](org.forgerock.agents.policy.evaluation.realm.map.html) | [Policy Evaluation Realm Map](org.forgerock.agents.policy.evaluation.realm.map.html) | Policy enforcement | | [org.forgerock.agents.policy.set.map](org.forgerock.agents.policy.set.map.html) | [Policy Set Map](org.forgerock.agents.policy.set.map.html) | Policy enforcement | | [org.forgerock.agents.pdp.cache.ttl.minutes](org.forgerock.agents.pdp.cache.ttl.minutes.html) | [POST Data Preservation Cache TTL](org.forgerock.agents.pdp.cache.ttl.minutes.html) | POST data preservation | | [com.sun.identity.agents.config.postdata.preserve.cache.entry.ttl](com.sun.identity.agents.config.postdata.preserve.cache.entry.ttl.html) | [POST Data Preservation Cache TTL in Milliseconds (deprecated)](com.sun.identity.agents.config.postdata.preserve.cache.entry.ttl.html) | POST data preservation | | [org.forgerock.agents.pdp.cookie.name](org.forgerock.agents.pdp.cookie.name.html) | [Post Data Preservation Cookie Name](org.forgerock.agents.pdp.cookie.name.html) | Cookie, POST data preservation | | [org.forgerock.agents.pdp.directory.sweep.seconds](org.forgerock.agents.pdp.directory.sweep.seconds.html) | [POST Data Preservation Directory Sweep Interval](org.forgerock.agents.pdp.directory.sweep.seconds.html) | POST data preservation | | [org.forgerock.agents.pdp.directory](org.forgerock.agents.pdp.directory.html) | [POST Data Preservation File Directory](org.forgerock.agents.pdp.directory.html) | POST data preservation | | [org.forgerock.agents.pdp.use.filesystem.enabled](org.forgerock.agents.pdp.use.filesystem.enabled.html) | [POST Data Preservation in Files or Cache](org.forgerock.agents.pdp.use.filesystem.enabled.html) | POST data preservation | | [org.forgerock.agents.pdp.parameter.limit.bytes](org.forgerock.agents.pdp.parameter.limit.bytes.html) | [POST Data Preservation Max HTML Form Size](org.forgerock.agents.pdp.parameter.limit.bytes.html) | POST data preservation | | [org.forgerock.agents.pdp.sticky.session.value](org.forgerock.agents.pdp.sticky.session.value.html) | [POST Data Preservation Sticky Session Key Value](org.forgerock.agents.pdp.sticky.session.value.html) | POST data preservation | | [org.forgerock.agents.pdp.sticky.session.mode](org.forgerock.agents.pdp.sticky.session.mode.html) | [POST Data Preservation Sticky Session Mode](org.forgerock.agents.pdp.sticky.session.mode.html) | POST data preservation | | [org.forgerock.agents.pdp.cache.total.size.mb](org.forgerock.agents.pdp.cache.total.size.mb.html) | [POST Data Preservation Storage Size](org.forgerock.agents.pdp.cache.total.size.mb.html) | POST data preservation | | [org.forgerock.agents.continuous.security.post.list](org.forgerock.agents.continuous.security.post.list.html) | [POST Parameter List for URL Policy Env](org.forgerock.agents.continuous.security.post.list.html) | Policy enforcement | | [org.forgerock.agents.authn.cookie.name](org.forgerock.agents.authn.cookie.name.html) | [Pre-Authentication Cookie Name](org.forgerock.agents.authn.cookie.name.html) | Cookie, Pre-authentication | | [org.forgerock.agents.cookie.signing.value](org.forgerock.agents.cookie.signing.value.html) | [Pre-Authn and Post Data Preservation Cookie Signing Value](org.forgerock.agents.cookie.signing.value.html) | Cookie, POST data preservation, Pre-authentication | | [org.forgerock.agents.profile.attribute.fetch.mode](org.forgerock.agents.profile.attribute.fetch.mode.html) | [Profile Attribute Fetch Mode](org.forgerock.agents.profile.attribute.fetch.mode.html) | Attributes, Cookie reset, Profile | | [org.forgerock.agents.profile.attribute.map](org.forgerock.agents.profile.attribute.map.html) | [Profile Attribute Map](org.forgerock.agents.profile.attribute.map.html) | Profile | | [org.forgerock.agents.public.am.url](org.forgerock.agents.public.am.url.html) | [Public AM URL](org.forgerock.agents.public.am.url.html) | Miscellaneous, Required | | [org.forgerock.agents.public.key.non.refresh.interval.seconds](org.forgerock.agents.public.key.non.refresh.interval.seconds.html) | [Public Key Cache Non-Refresh Interval in seconds](org.forgerock.agents.public.key.non.refresh.interval.seconds.html) | Authentication service | | [org.forgerock.agents.wanted.http.url.param.list](org.forgerock.agents.wanted.http.url.param.list.html) | [Query Parameter List for Policy Evaluation](org.forgerock.agents.wanted.http.url.param.list.html) | Query parameter | | [org.forgerock.agents.raw.url.path.invalidation.regex.list](org.forgerock.agents.raw.url.path.invalidation.regex.list.html) | [Raw URL path invalidation regex list](org.forgerock.agents.raw.url.path.invalidation.regex.list.html) | Configure behaviour | | [org.forgerock.agents.am.unavailability.recheck.window.in.seconds](org.forgerock.agents.am.unavailability.recheck.window.in.seconds.html) | [Recheck availability of AM](org.forgerock.agents.am.unavailability.recheck.window.in.seconds.html) | Agent | | [org.forgerock.agents.redirect.cookie.name](org.forgerock.agents.redirect.cookie.name.html) | [Redirect Attempt Cookie Name](org.forgerock.agents.redirect.cookie.name.html) | Miscellaneous | | [org.forgerock.agents.redirect.attempt.limit](org.forgerock.agents.redirect.attempt.limit.html) | [Redirect Attempt Limit](org.forgerock.agents.redirect.attempt.limit.html) | Login | | [org.forgerock.agents.wanted.http.url.params.regexp.list](org.forgerock.agents.wanted.http.url.params.regexp.list.html) | [Regex Query Parameters List for Policy Evaluation](org.forgerock.agents.wanted.http.url.params.regexp.list.html) | Query parameter | | [org.forgerock.agents.unwanted.http.url.params.regex.list](org.forgerock.agents.unwanted.http.url.params.regex.list.html) | [Regex Remove Query Parameters List for Policy Evaluation](org.forgerock.agents.unwanted.http.url.params.regex.list.html) | Query parameter | | [org.forgerock.agents.unwanted.http.url.param.list](org.forgerock.agents.unwanted.http.url.param.list.html) | [Remove Query Parameters List for Policy Evaluation](org.forgerock.agents.unwanted.http.url.param.list.html) | Query parameter | | [org.forgerock.agents.cookie.reset.domain.map](org.forgerock.agents.cookie.reset.domain.map.html) | [Reset Cookie Domain Map](org.forgerock.agents.cookie.reset.domain.map.html) | Cookie reset | | [org.forgerock.agents.cookie.reset.name.list](org.forgerock.agents.cookie.reset.name.list.html) | [Reset Cookie List](org.forgerock.agents.cookie.reset.name.list.html) | Cookie reset | | [org.forgerock.agents.cookie.reset.path.map](org.forgerock.agents.cookie.reset.path.map.html) | [Reset Cookie Path Map](org.forgerock.agents.cookie.reset.path.map.html) | Cookie reset | | [org.forgerock.agents.response.attribute.fetch.mode](org.forgerock.agents.response.attribute.fetch.mode.html) | [Response Attribute Fetch Mode](org.forgerock.agents.response.attribute.fetch.mode.html) | Attributes, Response | | [org.forgerock.agents.response.attribute.map](org.forgerock.agents.response.attribute.map.html) | [Response Attribute Map](org.forgerock.agents.response.attribute.map.html) | Response | | [org.forgerock.agents.restrict.to.realm.map](org.forgerock.agents.restrict.to.realm.map.html) | [Restrict to Realm Map](org.forgerock.agents.restrict.to.realm.map.html) | Policy enforcement | | [org.forgerock.agents.retain.previous.override.behaviour.enabled](org.forgerock.agents.retain.previous.override.behaviour.enabled.html) | [Retain previous override behaviour](org.forgerock.agents.retain.previous.override.behaviour.enabled.html) | Configure behaviour | | [org.forgerock.agents.service.resolver.class.name](org.forgerock.agents.service.resolver.class.name.html) | [Service Resolver Class Name](org.forgerock.agents.service.resolver.class.name.html) | Miscellaneous | | [org.forgerock.agents.session.attribute.fetch.mode](org.forgerock.agents.session.attribute.fetch.mode.html) | [Session Attribute Fetch Mode](org.forgerock.agents.session.attribute.fetch.mode.html) | Attributes, Cookie reset, Session | | [org.forgerock.agents.session.attribute.map](org.forgerock.agents.session.attribute.map.html) | [Session Attribute Map](org.forgerock.agents.session.attribute.map.html) | Session | | [org.forgerock.agents.session.cache.ttl.minutes](org.forgerock.agents.session.cache.ttl.minutes.html) | [Session Cache TTL](org.forgerock.agents.session.cache.ttl.minutes.html) | Session | | [org.forgerock.agents.set.cookie.attribute.map](org.forgerock.agents.set.cookie.attribute.map.html) | [Set-Cookie Attribute Map](org.forgerock.agents.set.cookie.attribute.map.html) | SameSite | | [org.forgerock.agents.set.cookie.internal.map](org.forgerock.agents.set.cookie.internal.map.html) | [Set-Cookie Internal Map](org.forgerock.agents.set.cookie.internal.map.html) | SameSite | | [org.forgerock.agents.ipdp.cookie.domain.list](org.forgerock.agents.ipdp.cookie.domain.list.html) | [SSO Cookie Domain List](org.forgerock.agents.ipdp.cookie.domain.list.html) | SSO cookie handling | | [org.forgerock.agents.strategy.when.am.unavailable](org.forgerock.agents.strategy.when.am.unavailable.html) | [Strategy when AM unavailable](org.forgerock.agents.strategy.when.am.unavailable.html) | Agent | | [org.forgerock.agents.rigourously.enforce.jakarta.servlet.specification.enabled](org.forgerock.agents.rigourously.enforce.jakarta.servlet.specification.enabled.html) | [Strictly enforce the Java Servlet Specification](org.forgerock.agents.rigourously.enforce.jakarta.servlet.specification.enabled.html) | Configure behaviour | | [org.forgerock.agents.secure.cookies.enabled](org.forgerock.agents.secure.cookies.enabled.html) | [Transmit Cookies Securely](org.forgerock.agents.secure.cookies.enabled.html) | Cross-domain single sign-on | | [org.forgerock.agents.public.key.cache.ttl.seconds](org.forgerock.agents.public.key.cache.ttl.seconds.html) | [TTL for the entire public key cache in seconds](org.forgerock.agents.public.key.cache.ttl.seconds.html) | Authentication service | | [org.forgerock.agents.user.mapping.mode.attribute.name](org.forgerock.agents.user.mapping.mode.attribute.name.html) | [User Attribute Name](org.forgerock.agents.user.mapping.mode.attribute.name.html) | User mapping | | [org.forgerock.agents.user.mapping.mode](org.forgerock.agents.user.mapping.mode.html) | [User Mapping Mode](org.forgerock.agents.user.mapping.mode.html) | User mapping | | [org.forgerock.agents.userid.mapping.mode.use.session.property.name](org.forgerock.agents.userid.mapping.mode.use.session.property.name.html) | [User Session Name](org.forgerock.agents.userid.mapping.mode.use.session.property.name.html) | User mapping | | [org.forgerock.agents.balance.websocket.interval.minutes](org.forgerock.agents.balance.websocket.interval.minutes.html) | [WebSocket Connection Interval](org.forgerock.agents.balance.websocket.interval.minutes.html) | Profile | | [org.forgerock.agents.declare.websocket.dead.after.milliseconds](org.forgerock.agents.declare.websocket.dead.after.milliseconds.html) | [Websocket Expired Timeout](org.forgerock.agents.declare.websocket.dead.after.milliseconds.html) | Timeout | | [org.forgerock.agents.ping.websocket.after.inactive.milliseconds](org.forgerock.agents.ping.websocket.after.inactive.milliseconds.html) | [Websocket Idle Timeout](org.forgerock.agents.ping.websocket.after.inactive.milliseconds.html) | Timeout | | [org.forgerock.agents.xss.code.element.list](org.forgerock.agents.xss.code.element.list.html) | [XSS Code Element List](org.forgerock.agents.xss.code.element.list.html) | Cross-site scripting | | [org.forgerock.agents.xss.redirect.uri.map](org.forgerock.agents.xss.redirect.uri.map.html) | [XSS Redirect URI Map](org.forgerock.agents.xss.redirect.uri.map.html) | Cross-site scripting |