Web Policy Agents 2023.3

Enable SSO Only Mode

A flag to enable SSO only mode:

  • true: The agent manages only user authentication. The filter invokes the AM Authentication Service to verify the identity of the user. If the user’s identity is verified, the user is issued a session token through AM’s Session Service.

  • false: The agent manages user authorization, by using the policy engine in AM.

In SSO-only mode, consider configuring Reset Idle Timeout.

Default: false

Property name

  Introduced in Web Agent 4.x


Boolean: true returns true; all other strings return false.

Bootstrap property


Required property


Restart required


AM console

Tab: Global (From AM 7)

Title: Enable SSO Only Mode

Copyright © 2010-2023 ForgeRock, all rights reserved.