Policy Evaluation Realm

The realm where AM evaluates polices for policy decision requests from the agent. This property is recognized by AM, not the agent.

The policy set configured by Policy Set must exist in the realm configured by this property. Otherwise, policy evaluation produces DENY results without writing warnings to the logs.

The default policy set exists only in the top-level realm. If you are using a different realm for policy evaluation, do one of the following:

  • Create the iPlanetAMWebAgentService policy set in that realm.

  • Create a different policy set in that realm, and configure Policy Set to use it.

Default: (/) top-level realm

Property name


Property aliases

org.forgerock.openam.agents.config.policy.evaluation.realm (since 4.x)



Bootstrap property


Required property


Restart required


AM console tab

AM Services