# OpenAM Administration Guide
Chapter 6. Configuring Policy Agent Profiles

Sidebar | Prev | Up | Next

## 6.12. Configuring Agent Authenticators

An agent authenticator has read-only access to multiple agent profiles defined in the same realm, typically allowing an agent to read web service agent profiles.

After creating the agent profile, you access agent properties in the OpenAM console under Access Control > `Realm Name` > Agents > Agent Authenticator > `Agent Name`.

Password

  Specifies the password the agent uses to connect to OpenAM.

Status

  Specifies whether the agent profile is active, and so can be used.

Agent Profiles allow to Read

  Specifies which agent profiles in the realm the agent authenticator can read.

Agent Root URL for CDSSO

  Specifies the list of agent root URLs for CDSSO. The valid value is in the format ``protocol`://`hostname`:`port`/` where `protocol` represents the protocol used, such as `http` or `https`, `hostname` represents the host name of the system where the agent resides, and `port` represents the port number on which the agent is installed. The slash following the port number is required.

  If your agent system also has virtual host names, add URLs with the virtual host names to this list as well. OpenAM checks that `goto` URLs match one of the agent root URLs for CDSSO.