--- title: Properties reference description: This reference describes agent configuration properties. component: web-agents version: 2025.11 page_id: web-agents:properties-reference:preface canonical_url: https://docs.pingidentity.com/web-agents/2025.11/properties-reference/preface.html page_aliases: ["index.adoc"] section_ids: property_files: Property files list_of_bootstrap_properties: List of bootstrap properties list_of_all_properties: List of all properties --- # Properties reference This reference describes agent configuration properties. When you create an agent profile, you choose whether to store the agent configuration in AM's configuration store or locally to the agent installation. The local configuration file syntax is the same as that of a standard Java properties file. ## Property files The agent stores agent bootstrap and configuration properties in the file `agent.conf`. For IIS Web Agent, the file is located by default at `C:\web_agents\iis_agent\instances\agent_1\config\agent.conf` ## List of bootstrap properties | Property | Description | Function | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | ----------------------- | | [com.forgerock.agents.config.plain.channels.insecure](com.forgerock.agents.config.plain.channels.insecure.html) | [Accept Secure Cookies From AM Over HTTP](com.forgerock.agents.config.plain.channels.insecure.html) | Encryption | | [com.forgerock.agents.config.agent.auth.mode](com.forgerock.agents.config.agent.auth.mode.html) | [Agent Authentication Mode](com.forgerock.agents.config.agent.auth.mode.html) | Miscellaneous | | [com.sun.identity.agents.config.debug.file.size](com.sun.identity.agents.config.debug.file.size.html) | [Agent Debug File Size](com.sun.identity.agents.config.debug.file.size.html) | Debug | | [com.sun.identity.agents.config.debug.level](com.sun.identity.agents.config.debug.level.html) | [Agent Debug Level](com.sun.identity.agents.config.debug.level.html) | Debug | | [com.sun.identity.agents.config.username](com.sun.identity.agents.config.username.html) | [Agent Profile Name](com.sun.identity.agents.config.username.html) | Agent profile | | [com.sun.identity.agents.config.password](com.sun.identity.agents.config.password.html) | [Agent Profile Password](com.sun.identity.agents.config.password.html) | Agent profile | | [com.sun.identity.agents.config.key](com.sun.identity.agents.config.key.html) | [Agent Profile Password Encryption Key](com.sun.identity.agents.config.key.html) | Agent profile | | [com.sun.identity.agents.config.organization.name](com.sun.identity.agents.config.organization.name.html) | [Agent Profile Realm](com.sun.identity.agents.config.organization.name.html) | Agent profile | | [com.sun.identity.agents.config.naming.url](com.sun.identity.agents.config.naming.url.html) | [AM Connection URL](com.sun.identity.agents.config.naming.url.html) | Miscellaneous | | [com.forgerock.agents.config.cert.ca.file](com.forgerock.agents.config.cert.ca.file.html) | [CA Certificate File Name](com.forgerock.agents.config.cert.ca.file.html) | Encryption | | [com.sun.identity.agents.config.connect.timeout](com.sun.identity.agents.config.connect.timeout.html) | [Connection Timeout](com.sun.identity.agents.config.connect.timeout.html) | Miscellaneous | | [com.sun.identity.agents.config.key.cache.disable](com.sun.identity.agents.config.key.cache.disable.html) | [Disable Caching of Agent Profile Password Encryption Key](com.sun.identity.agents.config.key.cache.disable.html) | Encryption | | [org.forgerock.agents.config.connection.pool.enable](org.forgerock.agents.config.connection.pool.enable.html) | [Enable Connection Pooling](org.forgerock.agents.config.connection.pool.enable.html) | Connection pooling | | [org.forgerock.agents.config.fragment.redirect.enable](org.forgerock.agents.config.fragment.redirect.enable.html) | [Enable Fragment Redirect](org.forgerock.agents.config.fragment.redirect.enable.html) | Fragment redirect | | [org.forgerock.openam.agents.config.multivalue.pre.authn.cookies](org.forgerock.openam.agents.config.multivalue.pre.authn.cookies.html) | [Enable Multivalue for Pre-Authn Cookie](org.forgerock.openam.agents.config.multivalue.pre.authn.cookies.html) | Cookies | | [com.sun.identity.agents.config.notification.enable](com.sun.identity.agents.config.notification.enable.html) | [Enable Notifications](com.sun.identity.agents.config.notification.enable.html) | Profile | | [org.forgerock.agents.config.secure.channel.disable](org.forgerock.agents.config.secure.channel.disable.html) | [Enable OpenSSL to Secure Internal Communications](org.forgerock.agents.config.secure.channel.disable.html) | Encryption | | [com.forgerock.agents.csp.frame.ancestors.none](com.forgerock.agents.csp.frame.ancestors.none.html) | [Frame Ancestors None](com.forgerock.agents.csp.frame.ancestors.none.html) | Content Security Policy | | [com.forgerock.agents.csp.frame.ancestors.sources](com.forgerock.agents.csp.frame.ancestors.sources.html) | [Frame Ancestors Sources](com.forgerock.agents.csp.frame.ancestors.sources.html) | Content Security Policy | | [com.forgerock.agents.config.hostmap](com.forgerock.agents.config.hostmap.html) | [Hostname to IP Address Map](com.forgerock.agents.config.hostmap.html) | General | | [org.forgerock.openam.agents.config.jwt.name](org.forgerock.openam.agents.config.jwt.name.html) | [JWT Cookie Name](org.forgerock.openam.agents.config.jwt.name.html) | Profile | | [com.sun.identity.agents.config.local.audit.logfile](com.sun.identity.agents.config.local.audit.logfile.html) | [Local Agent Audit File Name](com.sun.identity.agents.config.local.audit.logfile.html) | Audit | | [com.sun.identity.agents.config.local.logfile](com.sun.identity.agents.config.local.logfile.html) | [Local Agent Debug File Name](com.sun.identity.agents.config.local.logfile.html) | Logs | | [com.sun.identity.agents.config.local.log.size](com.sun.identity.agents.config.local.log.size.html) | [Local Audit Log Rotation Size](com.sun.identity.agents.config.local.log.size.html) | Logs | | [com.sun.identity.agents.config.repository.location](com.sun.identity.agents.config.repository.location.html) | [Location of Agent Configuration Repository](com.sun.identity.agents.config.repository.location.html) | Profile | | [com.forgerock.agents.config.max.num.log.files](com.forgerock.agents.config.max.num.log.files.html) | [Maximum Number of Debug Log Files](com.forgerock.agents.config.max.num.log.files.html) | Logs | | [com.forgerock.agents.config.fallback.mode](com.forgerock.agents.config.fallback.mode.html) | [Not-Enforced Fallback Mode](com.forgerock.agents.config.fallback.mode.html) | Not-enforced | | [org.forgerock.agents.config.cert.verify.depth](org.forgerock.agents.config.cert.verify.depth.html) | [OpenSSL Certificate Verification Depth](org.forgerock.agents.config.cert.verify.depth.html) | Encryption | | [org.forgerock.openam.agents.config.policy.evaluation.realm](org.forgerock.openam.agents.config.policy.evaluation.realm.html) | [Policy Evaluation Realm](org.forgerock.openam.agents.config.policy.evaluation.realm.html) | Policy client service | | [org.forgerock.openam.agents.config.policy.evaluation.application](org.forgerock.openam.agents.config.policy.evaluation.application.html) | [Policy Set](org.forgerock.openam.agents.config.policy.evaluation.application.html) | Policy client service | | [org.forgerock.agents.config.postdata.preserve.dir](org.forgerock.agents.config.postdata.preserve.dir.html) | [POST Data Storage Directory](org.forgerock.agents.config.postdata.preserve.dir.html) | POST data preservation | | [com.forgerock.agents.config.cert.key](com.forgerock.agents.config.cert.key.html) | [Private Client Certificate File Name](com.forgerock.agents.config.cert.key.html) | Encryption | | [com.forgerock.agents.config.cert.key.password](com.forgerock.agents.config.cert.key.password.html) | [Private Key Password](com.forgerock.agents.config.cert.key.password.html) | Encryption | | [com.sun.identity.agents.config.forward.proxy.host](com.sun.identity.agents.config.forward.proxy.host.html) | [Proxy Server Host Name](com.sun.identity.agents.config.forward.proxy.host.html) | Forward proxy | | [com.sun.identity.agents.config.forward.proxy.password](com.sun.identity.agents.config.forward.proxy.password.html) | [Proxy Server Password](com.sun.identity.agents.config.forward.proxy.password.html) | Forward proxy | | [com.sun.identity.agents.config.forward.proxy.port](com.sun.identity.agents.config.forward.proxy.port.html) | [Proxy Server Port](com.sun.identity.agents.config.forward.proxy.port.html) | Forward proxy | | [com.sun.identity.agents.config.forward.proxy.user](com.sun.identity.agents.config.forward.proxy.user.html) | [Proxy Server User](com.sun.identity.agents.config.forward.proxy.user.html) | Forward proxy | | [com.forgerock.agents.config.cert.file](com.forgerock.agents.config.cert.file.html) | [Public Client Certificate File Name](com.forgerock.agents.config.cert.file.html) | Encryption | | [com.forgerock.agents.config.win.clientcert.friendly.name](com.forgerock.agents.config.win.clientcert.friendly.name.html) | [Public Client Certificate Friendly Name](com.forgerock.agents.config.win.clientcert.friendly.name.html) | Encryption | | [org.forgerock.agents.config.iis.headers.server.disable](org.forgerock.agents.config.iis.headers.server.disable.html) | [Remove IIS HTTP Server Header](org.forgerock.agents.config.iis.headers.server.disable.html) | Microsoft IIS server | | [org.forgerock.agents.config.tls](org.forgerock.agents.config.tls.html) | [Security Protocol List](org.forgerock.agents.config.tls.html) | Miscellaneous | | [com.sun.identity.agents.config.trust.server.certs](com.sun.identity.agents.config.trust.server.certs.html) | [Server Certificate Trust](com.sun.identity.agents.config.trust.server.certs.html) | Encryption | | [com.forgerock.agents.config.ciphers](com.forgerock.agents.config.ciphers.html) | [Supported Cipher List](com.forgerock.agents.config.ciphers.html) | Encryption | | [com.sun.identity.agents.config.receive.timeout](com.sun.identity.agents.config.receive.timeout.html) | [TCP Receive Timeout](com.sun.identity.agents.config.receive.timeout.html) | Miscellaneous | | [com.forgerock.agents.config.use.during.update](com.forgerock.agents.config.use.during.update.html) | [Use Cached Configuration After Update](com.forgerock.agents.config.use.during.update.html) | Profile | | [com.forgerock.agents.jwt.validate.signature.locally](com.forgerock.agents.jwt.validate.signature.locally.html) | [Validate JWT Signature Locally](com.forgerock.agents.jwt.validate.signature.locally.html) | - | | [org.forgerock.openam.agents.config.balance.websocket.connection.interval.in.minutes](org.forgerock.openam.agents.config.balance.websocket.connection.interval.in.minutes.html) | [Web Socket Connection Interval](org.forgerock.openam.agents.config.balance.websocket.connection.interval.in.minutes.html) | Profile | ## List of all properties | Property | Description (UI name) | Function | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | --------------------------- | | [com.forgerock.agents.config.plain.channels.insecure](com.forgerock.agents.config.plain.channels.insecure.html) | [Accept Secure Cookies From AM Over HTTP](com.forgerock.agents.config.plain.channels.insecure.html) | Encryption | | [com.forgerock.agents.accept.sso.token](com.forgerock.agents.accept.sso.token.html) | [Accept SSO Token](com.forgerock.agents.accept.sso.token.html) | Cookies | | [com.forgerock.agents.accept.ipdp.cookie](com.forgerock.agents.accept.ipdp.cookie.html) | [Accept SSO token cookie (deprecated)](com.forgerock.agents.accept.ipdp.cookie.html) | Profile | | [com.forgerock.agents.cache\_control\_header.enable](com.forgerock.agents.cache_control_header.enable.html) | [Add Cache-Control Headers](com.forgerock.agents.cache_control_header.enable.html) | Headers | | [com.forgerock.agents.config.agent.auth.mode](com.forgerock.agents.config.agent.auth.mode.html) | [Agent Authentication Mode](com.forgerock.agents.config.agent.auth.mode.html) | Miscellaneous | | [com.sun.identity.agents.config.debug.file.size](com.sun.identity.agents.config.debug.file.size.html) | [Agent Debug File Size](com.sun.identity.agents.config.debug.file.size.html) | Debug | | [com.sun.identity.agents.config.debug.level](com.sun.identity.agents.config.debug.level.html) | [Agent Debug Level](com.sun.identity.agents.config.debug.level.html) | Debug | | [com.sun.identity.agents.config.agenturi.prefix](com.sun.identity.agents.config.agenturi.prefix.html) | [Agent Deployment URI Prefix](com.sun.identity.agents.config.agenturi.prefix.html) | Profile | | [com.forgerock.agents.agent.logout.url.regex](com.forgerock.agents.agent.logout.url.regex.html) | [Agent Logout URL Regular Expression (deprecated)](com.forgerock.agents.agent.logout.url.regex.html) | Logout redirect | | [com.forgerock.agents.jwt.aud.whitelist](com.forgerock.agents.jwt.aud.whitelist.html) | [Agent Profile ID Allow List](com.forgerock.agents.jwt.aud.whitelist.html) | Profile | | [com.sun.identity.agents.config.username](com.sun.identity.agents.config.username.html) | [Agent Profile Name](com.sun.identity.agents.config.username.html) | Agent profile | | [com.sun.identity.agents.config.password](com.sun.identity.agents.config.password.html) | [Agent Profile Password](com.sun.identity.agents.config.password.html) | Agent profile | | [com.sun.identity.agents.config.key](com.sun.identity.agents.config.key.html) | [Agent Profile Password Encryption Key](com.sun.identity.agents.config.key.html) | Agent profile | | [com.sun.identity.agents.config.organization.name](com.sun.identity.agents.config.organization.name.html) | [Agent Profile Realm](com.sun.identity.agents.config.organization.name.html) | Agent profile | | [sunIdentityServerDeviceKeyValue](sunIdentityServerDeviceKeyValue.html) | [Agent Root URL for CDSSO](sunIdentityServerDeviceKeyValue.html) | Profile | | [com.forgerock.agents.conditional.login.url](com.forgerock.agents.conditional.login.url.html) | [AM Conditional Login URL](com.forgerock.agents.conditional.login.url.html) | Login redirect | | [com.sun.identity.agents.config.naming.url](com.sun.identity.agents.config.naming.url.html) | [AM Connection URL](com.sun.identity.agents.config.naming.url.html) | Miscellaneous | | [com.sun.identity.agents.config.login.url](com.sun.identity.agents.config.login.url.html) | [AM Login URL](com.sun.identity.agents.config.login.url.html) | Login redirect | | [com.sun.identity.agents.config.logout.url](com.sun.identity.agents.config.logout.url.html) | [AM Logout URL](com.sun.identity.agents.config.logout.url.html) | Logout redirect | | [com.sun.identity.agents.config.anonymous.user.enable](com.sun.identity.agents.config.anonymous.user.enable.html) | [Anonymous User](com.sun.identity.agents.config.anonymous.user.enable.html) | Client identification | | [com.sun.identity.agents.config.attribute.multi.value.separator](com.sun.identity.agents.config.attribute.multi.value.separator.html) | [Attribute Multi-Value Separator](com.sun.identity.agents.config.attribute.multi.value.separator.html) | Attribute processing | | [com.sun.identity.agents.config.audit.accesstype](com.sun.identity.agents.config.audit.accesstype.html) | [Audit Access Types](com.sun.identity.agents.config.audit.accesstype.html) | Audit | | [com.sun.identity.agents.config.log.disposition](com.sun.identity.agents.config.log.disposition.html) | [Audit Log Location](com.sun.identity.agents.config.log.disposition.html) | Audit | | [com.sun.identity.agents.config.audit.path.fullurl](com.sun.identity.agents.config.audit.path.fullurl.html) | [Audit Path as Full URL](com.sun.identity.agents.config.audit.path.fullurl.html) | Audit | | [com.forgerock.agents.config.auth.flow.callback](com.forgerock.agents.config.auth.flow.callback.html) | [Authorization flow for applications using Javascript](com.forgerock.agents.config.auth.flow.callback.html) | Login redirect | | [com.forgerock.agents.config.cert.ca.file](com.forgerock.agents.config.cert.ca.file.html) | [CA Certificate File Name](com.forgerock.agents.config.cert.ca.file.html) | Encryption | | [com.sun.identity.agents.config.cdsso.redirect.uri](com.sun.identity.agents.config.cdsso.redirect.uri.html) | [CDSSO Redirect URI](com.sun.identity.agents.config.cdsso.redirect.uri.html) | Cross-domain single sign-on | | [com.sun.identity.agents.config.client.hostname.header](com.sun.identity.agents.config.client.hostname.header.html) | [Client Hostname Header](com.sun.identity.agents.config.client.hostname.header.html) | Client identification | | [com.sun.identity.agents.config.client.ip.header](com.sun.identity.agents.config.client.ip.header.html) | [Client IP Address Header](com.sun.identity.agents.config.client.ip.header.html) | Client identification | | [com.sun.identity.agents.config.client.ip.validation.enable](com.sun.identity.agents.config.client.ip.validation.enable.html) | [Client IP Validation](com.sun.identity.agents.config.client.ip.validation.enable.html) | Not-enforced | | [com.sun.identity.agents.config.client.ip.validation.reauth](com.sun.identity.agents.config.client.ip.validation.reauth.html) | [Client IP Validation Failure Response](com.sun.identity.agents.config.client.ip.validation.reauth.html) | Not-enforced | | [com.forgerock.agents.advice.b64.url.encode](com.forgerock.agents.advice.b64.url.encode.html) | [Composite Advice Encode](com.forgerock.agents.advice.b64.url.encode.html) | Advice handling | | [com.sun.am.use\_redirect\_for\_advice](com.sun.am.use_redirect_for_advice.html) | [Composite Advice Handling](com.sun.am.use_redirect_for_advice.html) | Advice handling | | [com.sun.identity.agents.config.polling.interval](com.sun.identity.agents.config.polling.interval.html) | [Configuration Reload Interval](com.sun.identity.agents.config.polling.interval.html) | Profile | | [com.sun.identity.agents.config.connect.timeout](com.sun.identity.agents.config.connect.timeout.html) | [Connection Timeout](com.sun.identity.agents.config.connect.timeout.html) | Miscellaneous | | [org.forgerock.openam.agents.config.continuous.security.cookies](org.forgerock.openam.agents.config.continuous.security.cookies.html) | [Continuous Security Cookie Map](org.forgerock.openam.agents.config.continuous.security.cookies.html) | Continuous Security | | [org.forgerock.openam.agents.config.continuous.security.headers](org.forgerock.openam.agents.config.continuous.security.headers.html) | [Continuous Security Header Map](org.forgerock.openam.agents.config.continuous.security.headers.html) | Continuous Security | | [com.sun.identity.agents.config.cdsso.cookie.domain](com.sun.identity.agents.config.cdsso.cookie.domain.html) | [Cookie Domain List](com.sun.identity.agents.config.cdsso.cookie.domain.html) | Cross-domain single sign-on | | [com.sun.identity.agents.config.cookie.name](com.sun.identity.agents.config.cookie.name.html) | [Cookie Name](com.sun.identity.agents.config.cookie.name.html) | Cookies | | [com.sun.identity.agents.config.cookie.reset](com.sun.identity.agents.config.cookie.reset.html) | [Cookie Reset List](com.sun.identity.agents.config.cookie.reset.html) | Cookies | | [org.forgerock.openam.agents.config.allow.custom.login](org.forgerock.openam.agents.config.allow.custom.login.html) | [Custom Login Mode](org.forgerock.openam.agents.config.allow.custom.login.html) | Login redirect | | [com.sun.identity.agents.config.freeformproperties](com.sun.identity.agents.config.freeformproperties.html) | [Custom Properties](com.sun.identity.agents.config.freeformproperties.html) | Custom | | [com.forgerock.agents.jwt.aud.disable](com.forgerock.agents.jwt.aud.disable.html) | [Disable Audience Claim Validation](com.forgerock.agents.jwt.aud.disable.html) | Profile | | [com.sun.identity.agents.config.key.cache.disable](com.sun.identity.agents.config.key.cache.disable.html) | [Disable Caching of Agent Profile Password Encryption Key](com.sun.identity.agents.config.key.cache.disable.html) | Encryption | | [com.forgerock.agents.config.logout.redirect.disable](com.forgerock.agents.config.logout.redirect.disable.html) | [Disable Logout Redirection](com.forgerock.agents.config.logout.redirect.disable.html) | Logout redirect | | [com.sun.identity.agents.config.override.disable.hostmap](com.sun.identity.agents.config.override.disable.hostmap.html) | [Disable Override Request URL Port, Host, or Protocol](com.sun.identity.agents.config.override.disable.hostmap.html) | Load balancing | | [com.forgerock.agents.config.add.amlbcookie](com.forgerock.agents.config.add.amlbcookie.html) | [Enable AM Load Balancer Cookie](com.forgerock.agents.config.add.amlbcookie.html) | Load balancing | | [org.forgerock.agents.config.connection.pool.enable](org.forgerock.agents.config.connection.pool.enable.html) | [Enable Connection Pooling](org.forgerock.agents.config.connection.pool.enable.html) | Connection pooling | | [com.sun.identity.agents.config.cookie.reset.enable](com.sun.identity.agents.config.cookie.reset.enable.html) | [Enable Cookie Reset](com.sun.identity.agents.config.cookie.reset.enable.html) | Cookies | | [com.sun.identity.agents.config.cookie.secure](com.sun.identity.agents.config.cookie.secure.html) | [Enable Cookie Security](com.sun.identity.agents.config.cookie.secure.html) | Cookies | | [com.sun.identity.agents.config.fqdn.check.enable](com.sun.identity.agents.config.fqdn.check.enable.html) | [Enable FQDN Check](com.sun.identity.agents.config.fqdn.check.enable.html) | FQDN check | | [org.forgerock.agents.config.fragment.redirect.enable](org.forgerock.agents.config.fragment.redirect.enable.html) | [Enable Fragment Redirect](org.forgerock.agents.config.fragment.redirect.enable.html) | Fragment redirect | | [com.sun.identity.cookie.httponly](com.sun.identity.cookie.httponly.html) | [Enable HTTP Only Mode](com.sun.identity.cookie.httponly.html) | Cookies | | [org.forgerock.agents.config.logout.session.invalidate](org.forgerock.agents.config.logout.session.invalidate.html) | [Enable Invalidate Logout Session](org.forgerock.agents.config.logout.session.invalidate.html) | Logout redirect | | [org.forgerock.openam.agents.config.multivalue.pre.authn.cookies](org.forgerock.openam.agents.config.multivalue.pre.authn.cookies.html) | [Enable Multivalue for Pre-Authn Cookie](org.forgerock.openam.agents.config.multivalue.pre.authn.cookies.html) | Cookies | | [com.sun.identity.agents.config.notification.enable](com.sun.identity.agents.config.notification.enable.html) | [Enable Notifications](com.sun.identity.agents.config.notification.enable.html) | Profile | | [com.sun.identity.agents.config.change.notification.enable](com.sun.identity.agents.config.change.notification.enable.html) | [Enable Notifications of Agent Configuration Change](com.sun.identity.agents.config.change.notification.enable.html) | Profile | | [org.forgerock.agents.config.secure.channel.disable](org.forgerock.agents.config.secure.channel.disable.html) | [Enable OpenSSL to Secure Internal Communications](org.forgerock.agents.config.secure.channel.disable.html) | Encryption | | [com.sun.identity.agents.config.override.host](com.sun.identity.agents.config.override.host.html) | [Enable Override Request URL Host](com.sun.identity.agents.config.override.host.html) | Load balancing | | [com.sun.identity.agents.config.override.port](com.sun.identity.agents.config.override.port.html) | [Enable Override Request URL Port](com.sun.identity.agents.config.override.port.html) | Load balancing | | [com.sun.identity.agents.config.override.protocol](com.sun.identity.agents.config.override.protocol.html) | [Enable Override Request URL Protocol](com.sun.identity.agents.config.override.protocol.html) | Load balancing | | [com.sun.identity.agents.config.postdata.preserve.enable](com.sun.identity.agents.config.postdata.preserve.enable.html) | [Enable POST Data Preservation](com.sun.identity.agents.config.postdata.preserve.enable.html) | POST data preservation | | [org.forgerock.agents.config.logout.regex.enable](org.forgerock.agents.config.logout.regex.enable.html) | [Enable Regex for Logout URL List](org.forgerock.agents.config.logout.regex.enable.html) | Logout redirect | | [org.forgerock.agents.config.notenforced.ext.regex.enable](org.forgerock.agents.config.notenforced.ext.regex.enable.html) | [Enable Regular Expressions for Not-Enforced IPs](org.forgerock.agents.config.notenforced.ext.regex.enable.html) | Not-enforced | | [com.sun.identity.agents.config.get.client.host.name](com.sun.identity.agents.config.get.client.host.name.html) | [Enable Retrieve Client Hostname](com.sun.identity.agents.config.get.client.host.name.html) | Policy client service | | [org.forgerock.agents.config.cdsso.advice.cleanup.disable](org.forgerock.agents.config.cdsso.advice.cleanup.disable.html) | [Enable Session Cookie Reset After Authentication Redirect](org.forgerock.agents.config.cdsso.advice.cleanup.disable.html) | Cross-domain single sign-on | | [com.sun.identity.agents.config.sso.only](com.sun.identity.agents.config.sso.only.html) | [Enable SSO Only Mode](com.sun.identity.agents.config.sso.only.html) | General | | [org.forgerock.agents.config.tls.keylog.enable](org.forgerock.agents.config.tls.keylog.enable.html) | [Enable TLS key logging](org.forgerock.agents.config.tls.keylog.enable.html) | Debug | | [com.sun.identity.agents.config.url.comparison.case.ignore](com.sun.identity.agents.config.url.comparison.case.ignore.html) | [Enable URL Comparison Case Sensitivity Check](com.sun.identity.agents.config.url.comparison.case.ignore.html) | URL handling | | [com.sun.identity.agents.config.encode.cookie.special.chars.enable](com.sun.identity.agents.config.encode.cookie.special.chars.enable.html) | [Encode Special Characters in Cookies](com.sun.identity.agents.config.encode.cookie.special.chars.enable.html) | Cookies | | [com.sun.identity.agents.config.encode.url.special.chars.enable](com.sun.identity.agents.config.encode.url.special.chars.enable.html) | [Encode Special Characters in URLs](com.sun.identity.agents.config.encode.url.special.chars.enable.html) | URL handling | | [com.sun.identity.agents.config.notenforced.url.attributes.enable](com.sun.identity.agents.config.notenforced.url.attributes.enable.html) | [Fetch Attributes for Not-Enforced URLs](com.sun.identity.agents.config.notenforced.url.attributes.enable.html) | Not-enforced | | [com.sun.identity.agents.config.fqdn.default](com.sun.identity.agents.config.fqdn.default.html) | [FQDN Default](com.sun.identity.agents.config.fqdn.default.html) | FQDN check | | [com.sun.identity.agents.config.fqdn.mapping](com.sun.identity.agents.config.fqdn.mapping.html) | [FQDN Virtual Host Map](com.sun.identity.agents.config.fqdn.mapping.html) | FQDN check | | [com.forgerock.agents.csp.frame.ancestors.none](com.forgerock.agents.csp.frame.ancestors.none.html) | [Frame Ancestors None](com.forgerock.agents.csp.frame.ancestors.none.html) | Content Security Policy | | [com.forgerock.agents.csp.frame.ancestors.sources](com.forgerock.agents.csp.frame.ancestors.sources.html) | [Frame Ancestors Sources](com.forgerock.agents.csp.frame.ancestors.sources.html) | Content Security Policy | | [com.sun.identity.agents.config.redirect.param](com.sun.identity.agents.config.redirect.param.html) | [Goto Parameter Name](com.sun.identity.agents.config.redirect.param.html) | Goto parameter | | [group](group.html) | [Group](group.html) | Profile | | [group](group.html) | [Group](group.html) | Profile | | [org.forgerock.agents.config.json.header](org.forgerock.agents.config.json.header.html) | [Headers and Values to Receive JSON-Formatted Responses](org.forgerock.agents.config.json.header.html) | JSON-formatted response | | [com.forgerock.agents.config.hostmap](com.forgerock.agents.config.hostmap.html) | [Hostname to IP Address Map](com.forgerock.agents.config.hostmap.html) | General | | [org.forgerock.agents.config.json.response.code](org.forgerock.agents.config.json.response.code.html) | [HTTP Return Code for JSON-Formatted Responses](org.forgerock.agents.config.json.response.code.html) | JSON-formatted response | | [com.sun.identity.agents.config.ignore.path.info.for.not.enforced.list](com.sun.identity.agents.config.ignore.path.info.for.not.enforced.list.html) | [Ignore Path Info in Not-Enforced URLs](com.sun.identity.agents.config.ignore.path.info.for.not.enforced.list.html) | Not-enforced | | [com.sun.identity.agents.config.ignore.path.info](com.sun.identity.agents.config.ignore.path.info.html) | [Ignore Path Info in Request URLs](com.sun.identity.agents.config.ignore.path.info.html) | Ignore path info | | [com.forgerock.agents.agent.invalid.url.regex](com.forgerock.agents.agent.invalid.url.regex.html) | [Invalid URL Regular Expression](com.forgerock.agents.agent.invalid.url.regex.html) | URL handling | | [com.sun.identity.agents.config.notenforced.url.invert](com.sun.identity.agents.config.notenforced.url.invert.html) | [Invert Not-Enforced URLs](com.sun.identity.agents.config.notenforced.url.invert.html) | Not-enforced | | [org.forgerock.agents.config.json.url.invert](org.forgerock.agents.config.json.url.invert.html) | [Invert Properties That Receive JSON-Formatted Responses](org.forgerock.agents.config.json.url.invert.html) | JSON-formatted response | | [org.forgerock.openam.agents.config.jwt.name](org.forgerock.openam.agents.config.jwt.name.html) | [JWT Cookie Name](org.forgerock.openam.agents.config.jwt.name.html) | Profile | | [org.forgerock.agents.config.json.url](org.forgerock.agents.config.json.url.html) | [List of URLs to Receive JSON-Formatted Responses](org.forgerock.agents.config.json.url.html) | JSON-formatted response | | [com.sun.identity.agents.config.local.audit.logfile](com.sun.identity.agents.config.local.audit.logfile.html) | [Local Agent Audit File Name](com.sun.identity.agents.config.local.audit.logfile.html) | Audit | | [com.sun.identity.agents.config.local.logfile](com.sun.identity.agents.config.local.logfile.html) | [Local Agent Debug File Name](com.sun.identity.agents.config.local.logfile.html) | Logs | | [com.sun.identity.agents.config.local.log.size](com.sun.identity.agents.config.local.log.size.html) | [Local Audit Log Rotation Size](com.sun.identity.agents.config.local.log.size.html) | Logs | | [com.sun.identity.agents.config.repository.location](com.sun.identity.agents.config.repository.location.html) | [Location of Agent Configuration Repository](com.sun.identity.agents.config.repository.location.html) | Profile | | [com.sun.identity.agents.config.iis.logonuser](com.sun.identity.agents.config.iis.logonuser.html) | [Logon and Impersonation](com.sun.identity.agents.config.iis.logonuser.html) | Microsoft IIS server | | [com.sun.identity.agents.config.logout.redirect.url](com.sun.identity.agents.config.logout.redirect.url.html) | [Logout Redirect URL](com.sun.identity.agents.config.logout.redirect.url.html) | Logout redirect | | [com.sun.identity.agents.config.agent.logout.url](com.sun.identity.agents.config.agent.logout.url.html) | [Logout URL List](com.sun.identity.agents.config.agent.logout.url.html) | Logout redirect | | [com.forgerock.agents.config.max.num.log.files](com.forgerock.agents.config.max.num.log.files.html) | [Maximum Number of Debug Log Files](com.forgerock.agents.config.max.num.log.files.html) | Logs | | [com.forgerock.agents.header.mime.encode](com.forgerock.agents.header.mime.encode.html) | [MIME-Encode HTTP Header Values](com.forgerock.agents.header.mime.encode.html) | Headers | | [com.forgerock.agents.config.fallback.mode](com.forgerock.agents.config.fallback.mode.html) | [Not-Enforced Fallback Mode](com.forgerock.agents.config.fallback.mode.html) | Not-enforced | | [com.sun.identity.agents.config.notenforced.ip](com.sun.identity.agents.config.notenforced.ip.html) | [Not-Enforced IP List](com.sun.identity.agents.config.notenforced.ip.html) | Not-enforced | | [org.forgerock.agents.config.notenforced.ipurl](org.forgerock.agents.config.notenforced.ipurl.html) | [Not-Enforced URL from IP Processing List](org.forgerock.agents.config.notenforced.ipurl.html) | Not-enforced | | [com.sun.identity.agents.config.notenforced.url](com.sun.identity.agents.config.notenforced.url.html) | [Not-Enforced URL List](com.sun.identity.agents.config.notenforced.url.html) | Not-enforced | | [org.forgerock.agents.config.cert.verify.depth](org.forgerock.agents.config.cert.verify.depth.html) | [OpenSSL Certificate Verification Depth](org.forgerock.agents.config.cert.verify.depth.html) | Encryption | | [password](password.html) | [Password](password.html) | Profile | | [org.forgerock.agents.config.cdsso.persistent.cookie.enable](org.forgerock.agents.config.cdsso.persistent.cookie.enable.html) | [Persist JWT Cookie](org.forgerock.agents.config.cdsso.persistent.cookie.enable.html) | Cookies | | [com.sun.identity.agents.config.policy.cache.polling.interval](com.sun.identity.agents.config.policy.cache.polling.interval.html) | [Policy Cache Polling Period](com.sun.identity.agents.config.policy.cache.polling.interval.html) | Policy client service | | [com.sun.identity.agents.config.policy.clock.skew](com.sun.identity.agents.config.policy.clock.skew.html) | [Policy Clock Skew](com.sun.identity.agents.config.policy.clock.skew.html) | Policy client service | | [org.forgerock.openam.agents.config.policy.evaluation.realm](org.forgerock.openam.agents.config.policy.evaluation.realm.html) | [Policy Evaluation Realm](org.forgerock.openam.agents.config.policy.evaluation.realm.html) | Policy client service | | [org.forgerock.openam.agents.config.policy.evaluation.application](org.forgerock.openam.agents.config.policy.evaluation.application.html) | [Policy Set](org.forgerock.openam.agents.config.policy.evaluation.application.html) | Policy client service | | [com.sun.identity.agents.config.postcache.entry.lifetime](com.sun.identity.agents.config.postcache.entry.lifetime.html) | [POST Data Entries Cache Period](com.sun.identity.agents.config.postcache.entry.lifetime.html) | POST data preservation | | [com.sun.identity.agents.config.postdata.preserve.stickysession.mode](com.sun.identity.agents.config.postdata.preserve.stickysession.mode.html) | [POST Data Sticky Load Balancing Mode](com.sun.identity.agents.config.postdata.preserve.stickysession.mode.html) | Load balancing | | [com.sun.identity.agents.config.postdata.preserve.stickysession.value](com.sun.identity.agents.config.postdata.preserve.stickysession.value.html) | [POST Data Sticky Load Balancing Value](com.sun.identity.agents.config.postdata.preserve.stickysession.value.html) | Load balancing | | [org.forgerock.agents.config.postdata.preserve.dir](org.forgerock.agents.config.postdata.preserve.dir.html) | [POST Data Storage Directory](org.forgerock.agents.config.postdata.preserve.dir.html) | POST data preservation | | [com.forgerock.agents.config.cert.key](com.forgerock.agents.config.cert.key.html) | [Private Client Certificate File Name](com.forgerock.agents.config.cert.key.html) | Encryption | | [com.forgerock.agents.config.cert.key.password](com.forgerock.agents.config.cert.key.password.html) | [Private Key Password](com.forgerock.agents.config.cert.key.password.html) | Encryption | | [com.sun.identity.agents.config.profile.attribute.cookie.prefix](com.sun.identity.agents.config.profile.attribute.cookie.prefix.html) | [Profile Attribute Cookie Prefix](com.sun.identity.agents.config.profile.attribute.cookie.prefix.html) | Cookies | | [com.sun.identity.agents.config.profile.attribute.fetch.mode](com.sun.identity.agents.config.profile.attribute.fetch.mode.html) | [Profile Attribute Fetch Mode](com.sun.identity.agents.config.profile.attribute.fetch.mode.html) | Attribute processing | | [com.sun.identity.agents.config.profile.attribute.mapping](com.sun.identity.agents.config.profile.attribute.mapping.html) | [Profile Attribute Map](com.sun.identity.agents.config.profile.attribute.mapping.html) | Attribute processing | | [com.sun.identity.agents.config.profile.attribute.cookie.maxage](com.sun.identity.agents.config.profile.attribute.cookie.maxage.html) | [Profile Attributes Cookie Maxage](com.sun.identity.agents.config.profile.attribute.cookie.maxage.html) | Cookies | | [com.sun.identity.agents.config.forward.proxy.host](com.sun.identity.agents.config.forward.proxy.host.html) | [Proxy Server Host Name](com.sun.identity.agents.config.forward.proxy.host.html) | Forward proxy | | [com.sun.identity.agents.config.forward.proxy.password](com.sun.identity.agents.config.forward.proxy.password.html) | [Proxy Server Password](com.sun.identity.agents.config.forward.proxy.password.html) | Forward proxy | | [com.sun.identity.agents.config.forward.proxy.port](com.sun.identity.agents.config.forward.proxy.port.html) | [Proxy Server Port](com.sun.identity.agents.config.forward.proxy.port.html) | Forward proxy | | [com.sun.identity.agents.config.forward.proxy.user](com.sun.identity.agents.config.forward.proxy.user.html) | [Proxy Server User](com.sun.identity.agents.config.forward.proxy.user.html) | Forward proxy | | [com.forgerock.agents.public.am.url](com.forgerock.agents.public.am.url.html) | [Public AM URL](com.forgerock.agents.public.am.url.html) | Login URL | | [com.forgerock.agents.config.cert.file](com.forgerock.agents.config.cert.file.html) | [Public Client Certificate File Name](com.forgerock.agents.config.cert.file.html) | Encryption | | [com.forgerock.agents.config.win.clientcert.friendly.name](com.forgerock.agents.config.win.clientcert.friendly.name.html) | [Public Client Certificate Friendly Name](com.forgerock.agents.config.win.clientcert.friendly.name.html) | Encryption | | [org.forgerock.agents.config.conditional.login.pattern](org.forgerock.agents.config.conditional.login.pattern.html) | [Regular Expression Conditional Login Pattern](org.forgerock.agents.config.conditional.login.pattern.html) | Login redirect | | [org.forgerock.agents.config.conditional.login.url](org.forgerock.agents.config.conditional.login.url.html) | [Regular Expression Conditional Login URL](org.forgerock.agents.config.conditional.login.url.html) | Login redirect | | [com.forgerock.agents.notenforced.url.regex.enable](com.forgerock.agents.notenforced.url.regex.enable.html) | [Regular Expressions for Not-Enforced URLs](com.forgerock.agents.notenforced.url.regex.enable.html) | Not-enforced | | [org.forgerock.agents.config.iis.headers.server.disable](org.forgerock.agents.config.iis.headers.server.disable.html) | [Remove IIS HTTP Server Header](org.forgerock.agents.config.iis.headers.server.disable.html) | Microsoft IIS server | | [com.sun.identity.agents.config.replaypasswd.key](com.sun.identity.agents.config.replaypasswd.key.html) | [Replay Password Key](com.sun.identity.agents.config.replaypasswd.key.html) | Microsoft IIS server | | [com.sun.identity.agents.config.logout.cookie.reset](com.sun.identity.agents.config.logout.cookie.reset.html) | [Reset Cookies on Logout List](com.sun.identity.agents.config.logout.cookie.reset.html) | Logout redirect | | [com.forgerock.agents.call.session.refresh](com.forgerock.agents.call.session.refresh.html) | [Reset Idle Timeout](com.forgerock.agents.call.session.refresh.html) | General | | [com.sun.identity.agents.config.access.denied.url](com.sun.identity.agents.config.access.denied.url.html) | [Resources Access Denied URL](com.sun.identity.agents.config.access.denied.url.html) | General | | [com.sun.identity.agents.config.response.attribute.fetch.mode](com.sun.identity.agents.config.response.attribute.fetch.mode.html) | [Response Attribute Fetch Mode](com.sun.identity.agents.config.response.attribute.fetch.mode.html) | Attribute processing | | [com.sun.identity.agents.config.response.attribute.mapping](com.sun.identity.agents.config.response.attribute.mapping.html) | [Response Attribute Map](com.sun.identity.agents.config.response.attribute.mapping.html) | Attribute processing | | [com.forgerock.agents.session.cache.eventually.consistent](com.forgerock.agents.session.cache.eventually.consistent.html) | [Retain Session Cache After Configuration Change](com.forgerock.agents.session.cache.eventually.consistent.html) | Profile | | [com.forgerock.agents.cdsso.cookie.samesite](com.forgerock.agents.cdsso.cookie.samesite.html) | [SameSite Cookie Attribute](com.forgerock.agents.cdsso.cookie.samesite.html) | Cookies | | [org.forgerock.agents.config.tls](org.forgerock.agents.config.tls.html) | [Security Protocol List](org.forgerock.agents.config.tls.html) | Miscellaneous | | [com.sun.identity.agents.config.trust.server.certs](com.sun.identity.agents.config.trust.server.certs.html) | [Server Certificate Trust](com.sun.identity.agents.config.trust.server.certs.html) | Encryption | | [com.sun.identity.agents.config.session.attribute.fetch.mode](com.sun.identity.agents.config.session.attribute.fetch.mode.html) | [Session Attribute Fetch Mode](com.sun.identity.agents.config.session.attribute.fetch.mode.html) | Attribute processing | | [com.sun.identity.agents.config.session.attribute.mapping](com.sun.identity.agents.config.session.attribute.mapping.html) | [Session Attribute Map](com.sun.identity.agents.config.session.attribute.mapping.html) | Attribute processing | | [com.sun.identity.agents.config.iis.password.header](com.sun.identity.agents.config.iis.password.header.html) | [Show Password in HTTP Header](com.sun.identity.agents.config.iis.password.header.html) | Microsoft IIS server | | [com.sun.identity.agents.config.sso.cache.polling.interval](com.sun.identity.agents.config.sso.cache.polling.interval.html) | [SSO Cache Polling Period](com.sun.identity.agents.config.sso.cache.polling.interval.html) | Policy client service | | [org.forgerock.agents.pdp.javascript.repost](org.forgerock.agents.pdp.javascript.repost.html) | [Submit POST Data using JavaScript](org.forgerock.agents.pdp.javascript.repost.html) | POST data preservation | | [com.forgerock.agents.config.ciphers](com.forgerock.agents.config.ciphers.html) | [Supported Cipher List](com.forgerock.agents.config.ciphers.html) | Encryption | | [com.sun.identity.agents.config.receive.timeout](com.sun.identity.agents.config.receive.timeout.html) | [TCP Receive Timeout](com.sun.identity.agents.config.receive.timeout.html) | Miscellaneous | | [com.sun.identity.agents.config.universal.id.param](com.sun.identity.agents.config.universal.id.param.html) | [Universal ID Parameter](com.sun.identity.agents.config.universal.id.param.html) | Audit | | [com.sun.identity.agents.config.universal.id.param.type](com.sun.identity.agents.config.universal.id.param.type.html) | [Universal ID Parameter Type](com.sun.identity.agents.config.universal.id.param.type.html) | Audit | | [org.forgerock.agents.config.skip.post.url](org.forgerock.agents.config.skip.post.url.html) | [URLs Ignored by the POST Data Inspector](org.forgerock.agents.config.skip.post.url.html) | POST data preservation | | [com.forgerock.agents.no.remoteuser.module.compatibility](com.forgerock.agents.no.remoteuser.module.compatibility.html) | [Use Built-in Apache HTTPD Authentication Directives](com.forgerock.agents.no.remoteuser.module.compatibility.html) | Miscellaneous | | [com.forgerock.agents.config.use.during.update](com.forgerock.agents.config.use.during.update.html) | [Use Cached Configuration After Update](com.forgerock.agents.config.use.during.update.html) | Profile | | [com.sun.identity.agents.config.userid.param](com.sun.identity.agents.config.userid.param.html) | [User ID Parameter](com.sun.identity.agents.config.userid.param.html) | Policy client service | | [com.sun.identity.agents.config.userid.param.type](com.sun.identity.agents.config.userid.param.type.html) | [User ID Parameter Type](com.sun.identity.agents.config.userid.param.type.html) | Policy client service | | [org.forgerock.openam.agents.config.balance.websocket.connection.interval.in.minutes](org.forgerock.openam.agents.config.balance.websocket.connection.interval.in.minutes.html) | [Web Socket Connection Interval](org.forgerock.openam.agents.config.balance.websocket.connection.interval.in.minutes.html) | Profile |