---
title: Agent Profile ID Allow List
description: A comma-separated list of profile IDs that the agent considers as valid values for the aud claim. This claim is represented in the ID token containing the end user's session.
component: web-agents
version: 2025.11
page_id: web-agents:properties-reference:com.forgerock.agents.jwt.aud.whitelist
canonical_url: https://docs.pingidentity.com/web-agents/2025.11/properties-reference/com.forgerock.agents.jwt.aud.whitelist.html
---

# Agent Profile ID Allow List

A comma-separated list of profile IDs that the agent considers as valid values for the `aud` claim. This claim is represented in the ID token containing the end user's session.

When several agents are configured with different agent profiles to protect the same application, set this property to a list of the agent profiles that are protecting the same application.

With the following setting, the agent considers `agentprofile1` and `agentprofile2` to be valid, and does not validate them: `com.forgerock.agents.jwt.aud.whitelist=agentprofile1,agentprofile2`

Default: Empty

|                    |                                                                        |
| ------------------ | ---------------------------------------------------------------------- |
| Property name      | `com.forgerock.agents.jwt.aud.whitelist`   Introduced in Web Agent 5.7 |
| Function           | Profile                                                                |
| Type               | String                                                                 |
| Bootstrap property | No                                                                     |
| Required property  | No                                                                     |
| Restart required   | No                                                                     |
| AM console         | Tab: `Global`Title: `Agent Profile ID Allow List`                      |