---
title: Enable HTTP Only Mode
description: When true, mark cookies as HttpOnly to prevent scripts and third-party software from accessing them.
component: web-agents
version: 2025.11
page_id: web-agents:properties-reference:com.sun.identity.cookie.httponly
canonical_url: https://docs.pingidentity.com/web-agents/2025.11/properties-reference/com.sun.identity.cookie.httponly.html
---

# Enable HTTP Only Mode

When `true`, mark cookies as `HttpOnly` to prevent scripts and third-party software from accessing them.

Default: `true`

|                    |                                                                  |
| ------------------ | ---------------------------------------------------------------- |
| Property name      | `com.sun.identity.cookie.httponly`   Introduced in Web Agent 4.x |
| Function           | Cookies                                                          |
| Type               | Boolean: `true` returns true; all other strings return `false`.  |
| Bootstrap property | No                                                               |
| Required property  | No                                                               |
| Restart required   | No                                                               |
| AM console         | Tab: `SSO (From AM 7)`Title: `Enable HTTP Only Mode`             |