Policy agents use the POST method to communicate with the Session Service. For information, see Session Validation in Sun OpenSSO Enterprise 8.0 Technical Overview.