#### 2.2 Policy Agent

OpenSSO is backward compatible with Policy Agent 2.2. Policy Agent 2.2 must be configured locally from the deployment container on which it is installed. Therefore, from the OpenSSO Console, a very limited number of Policy Agent 2.2 options can be configured.

##### Password

The password was set when you created the agent profile. However, you can change the password at any time in the future.

##### Password Confirm

The confirmation of the password was performed when you created the agent profile. If you change the password, you must confirm the change.

##### Status

The `Active` option is selected when the agent is created. Choose `Inactive` only if you want to remove the protection the agent provides.

##### Description

A description of the agent, which you can add if desired.

##### Agent Key Value

A required setting when enabling CDSSO and when configuring the deployment to prevent cookie hijacking.

This attribute serves as a key in a pairing of a key and a value. This attribute is used by OpenSSO to receive agent requests for credential assertions about users. Only one attribute is valid in this key-value pairing. All other attributes are ignored. Use the following format:

    agentRootURL=protocol://hostname:port/

The entry must be precise. For example, the string representing the key, `agentRootURL`, is case sensitive.