Sun OpenSSO Enterprise Policy Agent 3.0 User's Guide for Web Agents

Enforcing Authentication Only

The property labeled SSO Only (Tab: Global, Name com.sun.identity.agents.config.sso.only) is used to specify if only authentication is enforced for URLs protected by the web agent. If this property is enabled (by default it is not enabled), it indicates that the web agent enforces authentication only, without enforcing policies. After a user logs into OpenSSO Enterprise server successfully, the web agent will not check for policies related to the user and the accessed URLs.