Sun Java System Access Manager Policy Agent 2.2 Guide for SAP Enterprise Portal 7.0 and Web Application Server 7.0

Policy Client Properties

com.sun.identity.agents.server.log.file.name

com.sun.identity.agents.logging.level

com.sun.identity.agents.notification.enabled

com.sun.identity.agents.notification.url

com.sun.identity.agents.polling.interval

com.sun.identity.policy.client.cacheMode

com.sun.identity.policy.client.booleanActionValues

com.sun.identity.policy.client.resourceComparators

com.sun.identity.policy.client.clockSkew

· com.sun.identity.agents.server.log.file.name

Hot-swap enabled: No

This property specifies the name of the log file for logging messages to Access Manager.

· com.sun.identity.agents.logging.level

Hot-swap enabled: No

This property specifies the level of remote policy logging. The following are valid values for this property:

ALLOW

DENY

BOTH

NONE

· com.sun.identity.agents.notification.enabled

Hot-swap enabled: No

This property is a flag that specifies whether notifications are enabled or disabled for the remote policy client.

· com.sun.identity.agents.notification.url

Hot-swap enabled: No

This property specifies the notification URL for the remote policy client.

Key Properties Affecting This Property

This property is used if notification is enabled for a remote policy client property, which occurs when the following property is set as shown:

com.sun.identity.agents.notification.enabled = true

· com.sun.identity.agents.polling.interval

Hot-swap enabled: No

This property specifies the duration in minutes after which the cached entries are refreshed by the remote policy client.

· com.sun.identity.policy.client.cacheMode

Hot-swap enabled: No

This property specifies the mode of caching to be used by the remote policy client. The following are valid values for this property:

subtree

self

The subtree value is preferable for a small number of policy rules. In all other cases, the self value is preferable.

· com.sun.identity.policy.client.booleanActionValues

Hot-swap enabled: No

This property specifies boolean action values for policy action names. Assign values to this property using the following format:

serviceName|actionName|trueValue|falseValue

· com.sun.identity.policy.client.resourceComparators

Hot-swap enabled: No

This property specifies resource comparators to be used for different service names.

· com.sun.identity.policy.client.clockSkew

Hot-swap enabled: No

This property specifies the time in seconds which is allowed to accommodate the time difference between the Access Manager machine and the remote policy client machine.