| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102 |
- ############################################################################
- # ConnSec Identity and Access Management
- # MaxKey Version 3.0 GA
- # Copyright (c) 2002-2017 ConnSec SoftWare, Inc.
- # We're focus on Cloud Identity and Security
- # http://www.connsec.com
- ############################################################################
- # domain name configuration
- config.domain.name=login.connsec.com
- config.server.name=http://${config.domain.name}
- config.server.prefix=${config.server.name}/maxkey
- ############################################################################
- # Login configuration
- #enable captcha
- config.login.captcha=true
- #enable two factor,use one time password
- config.login.onetimepwd=true
- #enable social sign on
- config.login.socialsignon=true
- #Enable kerberos/SPNEGO
- config.login.kerberos=true
- #wsFederation
- config.login.wsfederation=false
- #remeberme
- config.login.remeberme=true
- #validity
- config.login.remeberme.validity=
- #default.uri
- #to appList page
- config.login.default.uri=appList
- #to default application web site
- #config.login.default.uri=http://www.connsec.com
- config.manage.uri=http://login.connsec.com:9500/manage/login
- config.ipaddress.whitelist=false
- ############################################################################
- # Kerberos Login configuration
- ############################################################################
- #short name of user domain must be in upper case,eg:CONNSEC
- config.support.kerberos.default.userdomain=CONNSEC
- #short name of user domain must be in upper case,eg:CONNSEC.COM
- config.support.kerberos.default.fulluserdomain=CONNSEC.COM
- #last 8Bit crypto for Kerberos web Authentication
- config.support.kerberos.default.crypto=846KZSzYq56M6d5o
- #Kerberos Authentication server RUL
- config.support.kerberos.default.redirecturi=http://login.connsec.com/kerberos/authn/
- ############################################################################
- # CAS Login configuration
- ############################################################################
- config.support.cas.login.url=http://login.connsec.com/cas/login
- #
- config.support.cas.login.service=http://login.connsec.com/maxkey/cas
- #
- config.support.cas.login.validation.url=http://login.connsec.com/cas
- ############################################################################
- # HTTPHEADER Login configuration
- ############################################################################
- config.support.httpheader.enable=false
- config.support.httpheader.headername=header-user
- # iv-user is for IBM Security Access Manager
- #config.httpheader.headername=iv-user
- ############################################################################
- # BASIC Login support configuration
- ############################################################################
- config.support.basic.enable=false
- #############################################################################
- # WsFederation Login support configuration
- #identifier: the identifer for the ADFS server
- #url: the login url for ADFS
- #principal: the name of the attribute/assertion returned by ADFS that contains the principal's username.
- #relyingParty: the identifier of the CAS Server as it has been configured in ADFS.
- #tolerance: (optional) the amount of drift to allow when validating the timestamp on the token. Default: 10000 (ms)
- #attributeMutator: (optional) a class (defined by you) that can modify the attributes/assertions returned by the ADFS server
- #signingCertificate: ADFS's signing certificate used to validate the token/assertions issued by ADFS.
- ############################################################################
- config.support.wsfederation.identifier=http://adfs.connsec.com/adfs/services/trust
- config.support.wsfederation.url=https://adfs.connsec.com/adfs/ls/
- config.support.wsfederation.principal=upn
- config.support.wsfederation.relyingParty=urn:federation:connsec
- config.support.wsfederation.signingCertificate=adfs-signing.crt
- config.support.wsfederation.tolerance=10000
- config.support.wsfederation.upn.suffix=connsec.com
- config.support.wsfederation.logoutUrl=https://adfs.connsec.com/adfs/ls/?wa=wsignout1.0
- #############################################################################
- #############################################################################
- config.oidc.metadata.issuer=http://login.connsec.com
- config.oidc.metadata.authorizationEndpoint=http://login.connsec.com/maxkey/oauth/v20/authorize
- config.oidc.metadata.tokenEndpoint=http://login.connsec.com/maxkey/oauth/v20/token
- config.oidc.metadata.userinfoEndpoint=http://login.connsec.com/maxkey/api/connect/userinfo
- #############################################################################
|
