Authenticate Service URL
Summary
Authenticate Service URL is the externally accessible URL for the Authenticate Service. In split-service mode, this key is required by all services other than Databroker.
Pomerium uses the Hosted Authenticate Service by default.
If you want to run Pomerium with a self-hosted authenticate service, you must include an identity provider and authenticate service URL in your configuration.
See Self-Hosted Authenticate Service for more information.
How to configure
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type | Usage |
|---|---|---|---|
authenticate_service_url | AUTHENTICATE_SERVICE_URL | URL | required |
authenticate_service_url is a bootstrap configuration setting and is not configurable in the Console.
| Name | Type | Usage |
|---|---|---|
AuthenticateUrl | URL | required |
See Kubernetes authenticate.url reference for more information.
Examples
# config file key
authenticate_service_url: https://authenticate.corp.example.com
# environment variable
AUTHENTICATE_SERVICE_URL=https://authenticate.corp.example.com
# ingress
authenticate.url: https://authenticate.corp.example.com