# OpenAM Administration Guide
6.6. Configuring J2EE Policy Agents

Sidebar | Prev | Up | Next

### 6.6.6. Configuring J2EE Policy Agent Advanced Properties

This section covers advanced web agent properties. After creating the agent profile, you access these properties in the OpenAM console under Access Control > `Realm Name` > Agents > J2EE > `Agent Name` > Advanced.

Client Identification properties

If the agent is behind a proxy or load balancer, then the agent can get client IP and host name values from the proxy or load balancer. For proxies and load balancer that support providing the client IP and host name in HTTP headers, you can use the following properties.

When multiple proxies are load balancers sit in the request path, the header values can include a comma-separated list of values with the first value representing the client, as in `client,next-proxy,first-proxy`.

Client IP Address Header

  HTTP header name that holds the IP address of the client.

  Property: `com.sun.identity.agents.config.client.ip.header`

Client Hostname Header

  HTTP header name that holds the hostname of the client.

  Property: `com.sun.identity.agents.config.client.hostname.header`

Web Service Processing properties

Web Service Enable

  Enable web service processing.

  Property: `com.sun.identity.agents.config.webservice.enable`

Web Service End Points

  Specifies a list of web application end points that represent web services.

  Property: `com.sun.identity.agents.config.webservice.endpoint`

Web Service Process GET Enable

  When enabled, the agent processes HTTP GET requests for web service endpoints.

  Property: `com.sun.identity.agents.config.webservice.process.get.enable`

Web Service Authenticator

  Specifies a class implementing `com.sun.identity.agents.filter.IWebServiceAuthenticator`, used to authenticate web service requests.

  Property: `com.sun.identity.agents.config.webservice.responseprocessor`

Web Service Response Processor

  Specifies a class implementing `com.sun.identity.agents.filter.IWebServiceResponseProcessor`, used to process web service reponses.

  Property: `com.sun.identity.agents.config.webservice.responseprocessor`

Web Service Internal Error Content File

  Specifies a file the agent uses to generate an internal error fault for the client application.

  Property: `com.sun.identity.agents.config.webservice.internalerror.content`

Web Service Authorization Error Content File

  Specifies a file the agent uses to generate an authorization error fault for the client application.

  Property: `com.sun.identity.agents.config.webservice.autherror.content`

Alternate Agent URL properties

Alternative Agent Host Name

  Specifies the host name of the agent protected server to show to client browsers, rather than the actual host name.

  Property: `com.sun.identity.agents.config.agent.host`

Alternative Agent Port Name

  Specifies the port number of the agent protected server to show to client browsers, rather than the actual port number.

  Property: `com.sun.identity.agents.config.agent.port`

Alternative Agent Protocol

  Specifies the protocol used to contact the agent from the browser client browsers, rather than the actual protocol used by the server. Either `http` or `https`.

  Property: `com.sun.identity.agents.config.agent.protocol`

JBoss Application Server properties

WebAuthentication Available

  When enabled, allow programmatic authentication with the JBoss container using the WebAuthentication feature. This feature works only with JBoss 4.2.2 to 7 when the `J2EE_POLICY` or `ALL` filter mode is in use.

  Property: `com.sun.identity.agents.config.jboss.webauth.available`

Cross Site Scripting Detection properties

Possible XSS code elements

  Specifies strings that, when found in the request, cause the agent to redirect the client to an error page.

  Property: `com.sun.identity.agents.config.xss.code.elements`

XSS detection redirect URI

  Maps applications to URIs of customized pages to which to redirect clients upon detection of XSS code elements.

  For example, to redirect clients of MyApp to `/myapp/error.html`, enter MyApp as the Map Key and `/myapp/error.html` as the Corresponding Map Value.

  Property: `com.sun.identity.agents.config.xss.redirect.uri`

Post Data Preservation properties

POST Data Preservation

  Enables HTTP POST data preservation, storing POST data before redirecting the browser to the login screen, and then autosubmitting the same POST after successful authentication to the original URL.

  Property: `com.sun.identity.agents.config.postdata.preserve.enable`

Missing PDP entry URI

  Specifies a list of application-specific URIs if the referenced Post Data Preservation entry cannot be found in the local cache because it has exceeded its POST entry TTL. Either the agent redirects to a URI in this list, or it shows an HTTP 403 Forbidden error.

  Property: `com.sun.identity.agents.config.postdata.preserve.cache.noentry.url`

POST entry TTL

  POST data storage lifetime in milliseconds. Default: 300000.

  Property: `com.sun.identity.agents.config.postdata.preserve.cache.entry.ttl`

PDP Stickysession mode

  Specifies whether to create a cookie, or to append a query string to the URL to assist with sticky load balancing.

  Property: `com.sun.identity.agents.config.postdata.preserve.stickysession.mode`

PDP Stickysession key-value

  Specifies the key-value pair for stickysession mode. For example, a setting of `lb=myserver` either sets an `lb` cookie with `myserver` value, or adds `lb=myserver` to the URL query string.

  Property: `com.sun.identity.agents.config.postdata.preserve.stickysession.value`

Custom properties

Custom Properties

  Additional properties to augment the set of properties supported by agent. Such properties take the following forms.

  - `customproperty=custom-value1`

  - `customlist[0]=customlist-value-0`

  - `customlist[1]=customlist-value-1`

  - `custommap[key1]=custommap-value-1`

  - `custommap[key2]=custommap-value-2`

  Property: `com.sun.identity.agents.config.freeformproperties`