Patch 8 includes this new property:
com.iplanet.am.session.agentsessionidletime sets the maximum idle timeout in minutes for policy agent sessions. The minimum value is 30 minutes.
By default, policy agent sessions never expire unless you set this property. To use this new property, add it with the maximum idle timeout value to the AMConfig.properties file and restart the Access Manager web container.