Skip to main content

Authenticate Internal Service URL

Summary

Authenticate Internal Service URL is only required for split-service mode deployments where Pomerium can’t access the public Authenticate Service URL.

If included, Authenticate Internal Service URL will override Authenticate Service URL.

Note:

Pomerium uses the Hosted Authenticate Service by default.

If you want to run Pomerium with a self-hosted authenticate service, you must include an identity provider and authenticate service URL in your configuration.

See Self-Hosted Authenticate Service for more information.

How to configure

Config file keysEnvironment variablesTypeUsage
authenticate_internal_service_urlAUTHENTICATE_INTERNAL_SERVICE_URLURLrequired (In split-service mode only)

Examples

# config file key
authenticate_internal_service_url: https://authenticate.internal

# environment variable
AUTHENTICATE_INTERNAL_SERVICE_URL=https://authenticate.internal