Policy Evaluation Realm

The realm where AM evaluates polices for policy decision requests from the agent. This property is recognized by AM, not the agent.

The policy set configured by Policy Set must exist in the realm configured by this property. Otherwise, policy evaluation produces DENY results without writing warnings to the logs.

The default policy set exists only in the top-level realm. If you are using a different realm for policy evaluation, do one of the following:

  • Create the iPlanetAMWebAgentService policy set in that realm.

  • Create a different policy set in that realm, and configure Policy Set to use it.

Default: (/) top-level realm

Property name

org.forgerock.openam.agents.config.policy.evaluation.realm

Property aliases

org.forgerock.openam.agents.config.policy.evaluation.realm (since 4.x)

Type

String

Bootstrap property

Yes

Required property

No

Restart required

No

AM console tab

AM Services