In the URL_POLICY mode, the agent filter enforces the URL policies that are defined in OpenSSO Enterprise.
When the agent filter is in the URL_POLICY mode, the agent does not enforce any applicable J2EE declarative security policies. Such policies along with any calls to J2EE programmatic security API return negative results.