Enable HTTP Only Mode

When true, mark cookies as HttpOnly to prevent scripts and third-party software from accessing them.

Default: true

Property name

com.sun.identity.cookie.httponly
Introduced in Web Agent 4.x

Function

Type

Boolean: true returns true; all other strings return false.

Bootstrap property

Required property

Restart required

AM console

Tab: SSO (From AM 7)

Title: Enable HTTP Only Mode