Skip to main content

Base Settings

System Preferences → Base settings covers core, system-wide settings, organised across several tabs.

Core​

  • Service public address (URL) — the canonical address of the service, used to build links and URLs. In most cases this is the same address where the Management UI resides.
  • Secondary service addresses — alternative or secondary URLs that can also be used to access this Trivore ID instance, one per line.
  • Supported locales — which languages are available across the platform.
  • REST service enabled — enables or disables the REST API for the platform as a whole.
  • LDAP server — the platform-wide LDAP master switch; see LDAP Server.

Sign-in config​

  • Sign-in dialogue background image — a custom background image for the sign-in interface.
  • Persistent login enabled — enables the "Remember me" option sign-in-wide. This is system-wide and affects all users; to enable it only for certain users, use Group Policies instead. It also overrides the equivalent OpenID Connect client setting.
  • Root redirect — controls what happens when a user arrives at the service's root path (https://{your-id-server}/). Normally they're redirected to the sign-in view; Always redirect user to sign-in can be disabled in favor of a custom Redirect URI, optionally restricted to requests whose IP address matches configured Allowed/Disallowed rules (in CIDR notation) — if any Allowed rules exist, the IP must match at least one; if any Disallowed rules exist, it must not match any.

Sign-out config​

  • Allowed post logout redirect URLs — the URLs a browser may be redirected to once OpenID Connect logout completes, i.e. the allowed values for the post_logout_redirect_uri query parameter.

Password reset​

Configures the default, system-wide behavior of the self-service password reset form — see Password Reset.

Change password​

Configures the default appearance and behavior of the standalone Change Password interface: its logo, whether the namespace field is shown, custom text shown after a successful change, and a Return link back to the calling application (whether it's shown, which return URLs are allowed, and a root/default return URL).

Passkey authentication​

Configures passkey (WebAuthn) support platform-wide — see Passkey Configuration.

Native app associations​

Configures the Digital Asset Links and Apple App Site Association files needed for passkeys used through a native mobile app — see Native App Associations.

CORS​

Configures Cross-Origin Resource Sharing (CORS) settings, separately for two endpoint groups:

  • /openid/auth and /openid/auth-ui — allowed origin values and extra allowed headers for the sign-in views.
  • /openid/token — allowed origins and extra allowed headers for the token endpoint.

Strong ID Endpoint​

Configures allowed automatic redirects for the /openid/strongidentification endpoint — either Allow all origins, or a specific list of Allowed origins for auto-redirect.

Configures allowed automatic redirects for the /openid/link-account endpoint, the same way as the Strong ID Endpoint above.

Last updated on