com.sun.identity.policy.client.booleanActionValues
iPlanetAMWebAgentService|POST|allow|deny
Default value is iPlanetAMWebAgentService|GET|allow|deny:.
Specifies Boolean action values for policy action names. Uses the form serviceName|actionName|trueValue|falseValue. Values for action names are delimited by a colon (:).
com.sun.identity.policy.client.cacheMode
Default value is self. Specifies cache mode for the client policy evaluator. Valid values are subtree and self. If set to subtree, the policy evaluator obtains policy decisions from the server for all the resources from the root of resource actually requested. If set to self, the policy evaluator gets the policy decision from the server only for the resource actually requested.
com.sun.identity.policy.client.clockSkew
Adjusts for time difference between the policy client machine and the policy server. If this property does not exist, and if the policy agent time differs from the policy server time, you occasionally see and incorrect policy decision. You must run a time-syncing service to keep the time on the policy server and on the policy client as close as possible. Use this property to adjust for the small time difference regardless of running time syncing service. Clock skew in seconds = agentTime - serverTime . Comment the property out on the policy server. Uncomment the line and set the appropriate value on the policy client machine or the machine running the policy agent agent-server clock skew (in seconds).
com.sun.identity.policy.client.resourceComparators=
serviceType=iPlanetAMWebAgentService|class=
Specifies ResourceComparators to be used for different service names. Copy the value from the Access Manager console. Go to Service Configuration > PolicyConfiguration > Global:ResourceComparator. Concatenate multiple values from Access Manager using a colon (: ) as the delimiter.
com.sun.identity.policy.plugins.URLResourceName|wildcard
Default value is *|delimiter=/|caseSensitive=trueDescription