You will need to disable XUI because of
- Install OpenAM 12.0.0
- Disable XUI (Configuration > Authentication > Core > XUI interface > uncheck box)
- Install agent
- Configure OpenAM Login URL for the agent: http://openam.example.com:8080/openam/UI/Login?resource=true
- Create a policy with ConditionToService set to a chain that is not the default for the realm
When accessing the protected resource, the user is redirected first to the default chain, then to the chain defined in the policy (which means the resource based is not taken into account at all).
Correct behaviour (working in 11.0.x): user is immediately redirected to the chain defined in the policy.