Installation guide
Before You Begin Installation
Chapter 1 Read This First 21
Here are a few examples:
Scenario 1:
com.sun.am.policy.agents.reverse_the_meaning_of_notenforcedList=
false
com.sun.am.policy.agents.notenforcedList =
http://mycomputer.example.com:80/welcome.html
http://mycomputer.example.com:80/banner.html
In this case, authentication andpolicies willnot be enforced on the two URLslisted
in the notenforcedList. All other resources will be protected by the agent.
Scenario 2:
com.sun.am.policy.agents.reverse_the_meaning_of_notenforcedList=
true
com.sun.am.policy.agents.notenforcedList =
http://mycomputer.example.com:80/welcome.html
http://mycomputer.example.com:80/banner.html
In this case, authentication and policies will be enforced by the agent on the two
URLs mentioned in the notenforcedList. Allother resources will be accessible to
any user.
Not-Enforced IP Address List
The com.sun.am.policy.agents.notenforced_client_IP_address_list
property is used to specify a list of IP addresses. No authentication is required for
the requests coming from these client IP addresses.
In other words, the agentwill not enforce policies for the requests originating from
the IP addresses in the Not-Enforced IP Address list.
Enforcing Authentication Only
The property com.sun.am.policy.agents.do_sso_only is used to specify if
only authentication is enforced for URLs protected by the agent. If this property is
set to true (by default it is set to false), it indicates that the agent enforces
authentication only, without enforcing policies. After a user logs onto Identity
Server successfully, the agent will not check for policies related to the user and the
accessed URLs.