Policy Clock Skew

Number of seconds to allow for time difference between agent system and AM. Clock skew in seconds = AgentTime - AMServerTime.

Use this property to adjust for small time differences encountered despite use of a time-synchronization service. When this property is not set and agent time is greater than AM server time, the agent can make policy calls to the AM server before the policy subject cache has expired, or you can see infinite redirection occur.

Default: 0

Property name

com.sun.identity.agents.config.policy.clock.skew

Property aliases

com.sun.identity.agents.config.policy.clock.skew (since 4.x)

Type

Integer

Bootstrap property

No

Required property

No

Restart required

No

AM console tab

AM Services