If the Tomcat 6.0 version 3.0 agent is configured to operate in the URL_POLICY or ALL filter mode, you must create the appropriate URL policies. For instance, if the agent is available on port 8080 using the HTTP protocol, you must create at minimum, a policy to allow access to the following resource:
where agentsample is the context URI for the sample application.
If no policies are defined and the agent is configured to operate in the URL_POLICY or ALL filter mode, then no user is allowed access to the resources protected by the Tomcat 6.0 version 3.0 agent.
For more information, see:
Agent sample application readme.txt file in the /sampleapp directory
Sun OpenSSO Enterprise 8.0 Administration Guide to create these policies using the OpenSSO Enterprise Console or command-line utilities