Web Policy Agents 2024.3

Public AM URL

The full URL of AM when it is behind a proxy during the custom login flow. For example, protocol://public_am_fqdn:port/am.

Use this property when both of the following points are true:

  • Your environment uses custom login pages (non-OIDC-compliant flows), and the custom login pages are in a different domain than the agent.

  • Your custom login pages are in a network that can only access AM using a proxy, a firewall, or any other technology that remaps the AM URL to one accessible by the custom login pages.

Consider an example where the traffic between AM and the agent happens through the example-internal.com domain, but the custom login pages are on the example-external.com domain. The traffic between the custom pages and AM translates am.example-internal.com into am.example-external.com. You would configure https://am.example-external.com:8443/am as the public AM URL.

Default: Empty

Property name

  Introduced in Web Agent 5.7


Login URL



Bootstrap property


Required property


Restart required


AM console

Tab: AM Services (From AM 7)

Title: Public AM URL

Copyright © 2010-2024 ForgeRock, all rights reserved.