Authenticate Internal Service URL
Summary
Authenticate Internal Service URL is only required for split-service mode deployments where Pomerium can’t access the public Authenticate Service URL.
If included, Authenticate Internal Service URL will override Authenticate Service URL.
Note:
Pomerium uses the Hosted Authenticate Service by default.
If you want to run Pomerium with a self-hosted authenticate service, you must include an identity provider and authenticate service URL in your configuration.
See Self-Hosted Authenticate Service for more information.
How to configure
- Core
- Enterprise
- Kubernetes
Config file keys | Environment variables | Type | Usage |
---|---|---|---|
authenticate_internal_service_url | AUTHENTICATE_INTERNAL_SERVICE_URL | URL | required (In split-service mode only) |
Examples
authenticate_internal_service_url: https://authenticate.internal
AUTHENTICATE_INTERNAL_SERVICE_URL=https://authenticate.internal
authenticate_internal_service_url
is a bootstrap configuration setting and is not configurable in the Console.
Kubernetes does not support authenticate_internal_service_url