Policy Logging and Caching Properties

• com.sun.identity.agents.server.log.file.name specifies the name of the Client SDK policy log file; by default, amRemotePolicyLog.

• com.sun.identity.agents.logging.level specifies the granularity of the information logged to the Client SDK policy log file. Values can be:

  • NONE is the default value. Nothing is logged.

  • ALLOW logs allowed access decisions.

  • DENY logs denied access decisions.

  • BOTH logs allowed and denied access decisions.

  • DECISION

  • com.sun.identity.agents.notification.enabled enables or disables notifications from OpenSSO Enterprise to update the Client SDK cache. Takes a value of true or false respectively.

  • com.sun.identity.agents.server.log.file.name specifies the URL to which policy, session, and agent notifications from OpenSSO Enterprise are sent.

  • com.sun.identity.agents.polling.interval specifies the number of minutes after which an entry is dropped from the Client SDK cache.

  • com.sun.identity.policy.client.cacheMode specifies the cache mode for the client policy evaluator. Values are:

    • subtree specifies that the policy evaluator obtains policy decisions from the server for all the resources from the root of resource actually requested.

    • self specifies that the policy evaluator obtains policy decisions from the server only for the resource actually requested.

  • com.sun.identity.policy.client.usePre22BooleanValues specifies whether to use boolean values; by default, true.