If you restart Access Manager but not the J2EE agent, future attempts to access an agent protected page from a browser result in a 403 Forbidden message (6636155)

This problem was fixed in Access Manager 7.0 patch 7 (CR 6496155), but the problem still exists in Access Manager 7.1.

Workaround: Two workarounds exist:

• Add the following new property to the J2EE agent AMAgent.properites configuration:

  com.sun.identity.enableUniqueSSOTokenCookie=false

  For more about setting the value for the preceding property, see Property Made Available: com.sun.identity.enableUniqueSSOTokenCookie.

  or

• Always restart agent after restarting Access Manager.