Java Policy Agents 5.9.1

AM Login URL List

AM Login URL

The URL of a custom login page to which the agent redirects users for authentication.

During the redirect, the agent appends the goto parameter configured in Goto Parameter Name, and a nonce parameter, to the agent’s CDSSO endpoint.




Custom login page to which the agent redirects an unauthenticated user.


Optional parameters that the agent passes to the custom login page, for example, the AM realm where the user is authenticated. You do not need to specify the realm if any of the following conditions are true:

  • The custom login page sets the realm parameter, for example, because it lets the user choose the realm. In this case, ensure the custom login page always returns a realm parameter to the agent.

  • The realm into which the agent is logs the user has DNS aliases configured in AM. AM logs the user into the realm whose DNS alias matches the incoming request URL. For example, an inbound request from the URL logs in the marketplace realm if the realm alias is set to

  • The user authenticates to the top-level realm.

This parameter can be overwritten by the custom login page if, for example, the user chooses the authentication realm.

Specify as many parameters your custom login pages require.


In some versions of AM you can configure more than one value for this property, but only the first value is honored.

Property name


Property aliases

com.sun.identity.agents.config.login.url (since 5.0)



Bootstrap property


Required property


Restart required


Local configuration file

AM console tab

AM Services

Copyright © 2010-2023 ForgeRock, all rights reserved.