The documentation at https://backstage.forgerock.com/docs/ig/6.5/reference/#PolicyEnforcementFilter mentions the "application" property (of the PolicyEnforcementFilter) default value is "Default Policy Set". However, the right value is actually a policy Id, not a policy name, hence the default value is actually "iPlanetAMWebAgentService".