Authenticate Internal Service URL
Summary
Authenticate Internal Service URL is only required for split-service mode deployments where Pomerium can’t access the public Authenticate Service URL.
If included, Authenticate Internal Service URL will override Authenticate Service URL.
Pomerium uses the Hosted Authenticate Service by default.
If you want to run Pomerium with a self-hosted authenticate service, you must include an identity provider and authenticate service URL in your configuration.
See Self-Hosted Authenticate Service for more information.
How to configure
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type | Usage |
|---|---|---|---|
authenticate_internal_service_url | AUTHENTICATE_INTERNAL_SERVICE_URL | URL | required (In split-service mode only) |
authenticate_internal_service_url is a bootstrap configuration setting and is not configurable in the Console.
Kubernetes does not support authenticate_internal_service_url
Examples
# config file key
authenticate_internal_service_url: https://authenticate.internal
# environment variable
AUTHENTICATE_INTERNAL_SERVICE_URL=https://authenticate.internal