Deployment Example 2: Federation Using SAML v2

ProcedureTo Enable the J2EE Policy Agent 4 to Run in SSO-Only Mode

  1. Go to the following directory:


    /export/j2ee_agents/am_as81_agent/agent_001/config

    Make a backup copy of AMagent.properties, and then modify the original AMagent.properties file.

  2. Set the following property as in the example:


    com.sun.identity.agents.config.filter.mode = SSO_ONLY

    Federation Manager can run only in SSO-Only mode. In order to communicate with Federation Manager, the policy agent must also run in SSO-Only mode.

  3. Add the following property


    com.iplanet.am.naming.ignoreNamingService=true

    When set to true, the policy agent ignores the Federation Manager naming service for session validation purposes. Instead, the policy agent uses the local naming service URL defined in the com.iplanet.am.naming.url property elsewhere in this file.

    Save the file.