# OpenAM Administration Guide
6.6. Configuring J2EE Policy Agents

Sidebar | Prev | Up | Next

### 6.6.3. Configuring J2EE Policy Agent SSO Properties

This section covers SSO web agent properties. After creating the agent profile, you access these properties in the OpenAM console under Access Control > `Realm Name` > Agents > J2EE > `Agent Name` > SSO

Cookie properties

Cookie Name

  Name of the SSO Token cookie used between the OpenAM server and the agent. Default: `iPlanetDirectoryPro`.

  Property: `com.iplanet.am.cookie.name`

  Hot swap: no

Caching properties

SSO Cache Enable

  When enabled, the agent exposes SSO Cache through the agent SDK APIs.

  Property: `com.sun.identity.agents.config.amsso.cache.enable`

Cross Domain SSO properties

Cross Domain SSO

  Enables Cross Domain Single Sign On.

  Property: `com.sun.identity.agents.config.cdsso.enable`

CDSSO Redirect URI

  Specifies a URI the agent uses to process CDSSO requests.

  Property: `com.sun.identity.agents.config.cdsso.redirect.uri`

CDSSO Servlet URL

  List of URLs of the available CDSSO controllers that the agent can use for CDSSO processing. For example, `http://openam.example.com:8080/openam/cdcservlet`.

  Property: `com.sun.identity.agents.config.cdsso.cdcservlet.url`

CDSSO Clock Skew

  When set to a value other than zero, specifies the clock skew in seconds that the agent accepts when determining the validity of the CDSSO authentication response assertion.

  Property: `com.sun.identity.agents.config.cdsso.clock.skew`

CDSSO Trusted ID Provider

  Specifies the list of OpenAM servers or identity providers the agent trusts when evaluating CDC Liberty Responses.

  Property: `com.sun.identity.agents.config.cdsso.trusted.id.provider`

CDSSO Secure Enable

  When enabled, the agent marks the SSO Token cookie as secure, thus the cookie is only transmitted over secure connections.

  Property: `com.sun.identity.agents.config.cdsso.secure.enable`

CDSSO Domain List

  List of domains, such as `.example.com`, in which cookies have to be set in CDSSO.

  Property: `com.sun.identity.agents.config.cdsso.domain`

Cookie Reset properties

Cookie Reset

  When enabled, agent resets cookies in the response before redirecting to authentication.

  Property: `com.sun.identity.agents.config.cookie.reset.enable`

Cookie Reset Name List

  List of cookies to reset if Cookie Reset is enabled.

  Property: `com.sun.identity.agents.config.cookie.reset.name`

Cookie Reset Domain Map

  Specifies how names from the Cookie Reset Name List correspond to cookie domain values when the cookie is reset.

  Property: `com.sun.identity.agents.config.cookie.reset.domain`

Cookie Reset Path Map

  Specifies how names from the Cookie Reset Name List correspond to cookie paths when the cookie is reset.

  Property: `com.sun.identity.agents.config.cookie.reset.path`