Parameter list¶

Main parameters¶

ADPwdExpireWarning

Location:	General Parameters » Authentication parameters » Active Directory parameters » Password expire warning
Description:	AD password expire warning
Used by portal:	yes

ADPwdMaxAge

Location:	General Parameters » Authentication parameters » Active Directory parameters » Password max age
Description:	AD password max age
Used by portal:	yes

AuthLDAPFilter

Location:	General Parameters » Authentication parameters » LDAP parameters » Filters » Authentication filter
Description:	LDAP filter for auth search
Used by portal:	yes

LDAPFilter

Location:	General Parameters » Authentication parameters » LDAP parameters » Filters » Default filter
Description:	Default LDAP filter
Used by portal:	yes

SMTPAuthPass

Location:	General Parameters » Advanced parameters » SMTP » Password
Description:	Password to use to send mails
Used by portal:	yes

SMTPAuthUser

Location:	General Parameters » Advanced parameters » SMTP » User
Description:	Login to use to send mails
Used by portal:	yes

SMTPPort

Location:	General Parameters » Advanced parameters » SMTP » Port
Description:	Fix SMTP port
Used by portal:	yes

SMTPServer

Location:	General Parameters » Advanced parameters » SMTP » Server
Description:	SMTP Server
Used by portal:	yes

SMTPTLS

Location:	General Parameters » Advanced parameters » SMTP » SSL/TLS protocol
Description:	TLS protocol to use with SMTP
Used by portal:	yes

SMTPTLSOpts

Location:	General Parameters » Advanced parameters » SMTP » SSL/TLS options
Description:	TLS/SSL options for SMTP
Used by portal:	yes

SSLAuthnLevel

Location:	General Parameters » Authentication parameters » mTLS parameters » Authentication level
Description:	Mutual TLS authentication level
Used by portal:	yes

SSLIssuerVar

Location:	General Parameters » Authentication parameters » mTLS parameters » Issuer environment variable
Used by portal:	yes

SSLVar

Location:	General Parameters » Authentication parameters » mTLS parameters » Extracted certificate field
Used by portal:	yes

SSLVarIf

Location:	General Parameters » Authentication parameters » mTLS parameters » Conditional extracted certificate field
Used by portal:	yes

activeTimer

Location:	General Parameters » Advanced parameters » Forms » Auto accept time
Description:	Enable timers on portal pages
Used by portal:	yes

adaptativeAuthenticationLevelRules

Location:	General Parameters » Plugins » Adaptative authentication rules
Description:	Adaptative authentication level rules
Used by portal:	yes

adminLogoutServerSecret

Location:	General Parameters » Plugins » Admin logout server » Secret
Description:	REST OIDC token revocation secret
Used by portal:	yes

apacheAuthnLevel

Location:	General Parameters » Authentication parameters » Apache parameters » Authentication level
Description:	Apache authentication level
Used by portal:	yes

appAccessHistoryEnabled

Location:	General Parameters » Sessions » Log application access
Description:	Shall OIDC/SAML/CAS protected apps access be recorded to session?
Used by portal:	yes

applicationList

Location:	General Parameters » Portal » Menu » Categories and applications
Description:	Applications list
Used by portal:	yes

authChoiceAuthBasic

Location:	General Parameters » Authentication parameters » Choice parameters » Choice used for password authentication
Description:	Auth module used by AuthBasic handler
Used by portal:	yes

authChoiceFindUser

Location:	General Parameters » Authentication parameters » Choice parameters » Choice used for searching user account
Description:	Auth module used by FindUser plugin
Used by portal:	yes

authChoiceModules

Location:	General Parameters » Authentication parameters » Choice parameters » Allowed modules
Description:	Hash list of Choice strings
Used by portal:	yes

authChoiceParam

Location:	General Parameters » Authentication parameters » Choice parameters » URL parameter
Description:	Applications list
Used by portal:	yes

authChoiceSelectOnly

Location:	General Parameters » Authentication parameters » Choice parameters » Auto-select only method
Description:	Automatically select only available choice
Used by portal:	yes

authentication

Location:	General Parameters » Authentication parameters » Authentication module
Description:	Authentication module
Used by portal:	yes

autoSigninRules

Location:	General Parameters » Plugins » Auto signin rules
Description:	List of auto signin rules
Used by portal:	yes

available2F

Description:	Available second factor modules
Used by portal:	yes
Ini only:	yes

available2FSelfRegistration

Description:	Available self-registration modules for second factor
Used by portal:	yes
Ini only:	yes

avoidAssignment

Used by handler:
Location:	General Parameters » Advanced parameters » Security » Avoid assignment in expressions
Description:	Avoid assignment in expressions
Used by portal:	yes
	yes

browsersDontStorePassword

Location:	General Parameters » Advanced parameters » Security » Avoid browsers to store users password
Description:	Avoid browsers to store users password
Used by portal:	yes

bruteForceProtection

Location:	General Parameters » Advanced parameters » Security » Brute-force attack protection » Activation
Description:	Enable brute force attack protection
Used by portal:	yes

bruteForceProtectionIncrementalTempo

Location:	General Parameters » Advanced parameters » Security » Brute-force attack protection » Incremental lock
Description:	Enable incremental lock time for brute force attack protection
Used by portal:	yes

bruteForceProtectionLockTimes

Location:	General Parameters » Advanced parameters » Security » Brute-force attack protection » Incremental lock times
Description:	Incremental lock time values for brute force attack protection
Used by portal:	yes

bruteForceProtectionMaxAge

Location:	General Parameters » Advanced parameters » Security » Brute-force attack protection » Maximum age
Description:	Max age between current and first failed login
Used by portal:	yes

bruteForceProtectionMaxFailed

Location:	General Parameters » Advanced parameters » Security » Brute-force attack protection » Number of failed attempts triggering lockout
Description:	Max allowed failed login
Used by portal:	yes

bruteForceProtectionMaxLockTime

Location:	General Parameters » Advanced parameters » Security » Brute-force attack protection » Maximum lock time
Description:	Max lock time
Used by portal:	yes

bruteForceProtectionTempo

Location:	General Parameters » Advanced parameters » Security » Brute-force attack protection » Lock time
Description:	Lock time
Used by portal:	yes

cacheTagSalt

Location:	General Parameters » Portal » Customization » Other » Cache-busting salt
Description:	Salt value for cache busting tag
Used by portal:	yes

captcha

Used by handler:
Location:	General Parameters » Portal » Captcha » Custom Captcha module » Captcha module
Description:	Captcha backend module
Used by portal:	yes
	yes

captchaOptions

Used by handler:
Location:	General Parameters » Portal » Captcha » Custom Captcha module » Captcha module options
Description:	Captcha module options
Used by portal:	yes
	yes

captcha_login_enabled

Location:	General Parameters » Portal » Captcha » Activation in login form
Description:	Captcha on login page
Used by portal:	yes

captcha_mail_enabled

Location:	General Parameters » Portal » Captcha » Activation in password reset by mail form
Description:	Captcha on password reset page
Used by portal:	yes

captcha_register_enabled

Location:	General Parameters » Portal » Captcha » Activation in register form
Description:	Captcha on account creation page
Used by portal:	yes

captcha_size

Location:	General Parameters » Portal » Captcha » Size
Description:	Captcha size
Used by portal:	yes

casAccessControlPolicy

Location:	CAS Service » Access control policy
Description:	CAS access control policy
Used by portal:	yes

casAppMetaDataExportedVars

Location:	CAS Applications » configuration key » Exported attributes
Description:	CAS exported variables
Used by portal:	yes

casAppMetaDataMacros

Location:	CAS Applications » configuration key » Macros
Description:	Macros
Used by portal:	yes

casAppMetaDataNodes

Used by portal:	yes
Ini only:	yes

casAppMetaDataOptions

Location:	Options
Description:	Root of CAS app options
Used by portal:	yes

casAppMetaDataOptionsActivation

Location:	CAS Applications » configuration key » Options » Activation
Description:	Activate CAS application
Used by portal:	yes

casAppMetaDataOptionsAllowProxy

Location:	CAS Applications » configuration key » Options » Allow proxy
Description:	Allow CAS proxy
Used by portal:	yes

casAppMetaDataOptionsAuthnLevel

Location:	CAS Applications » configuration key » Options » Required authentication level
Description:	Authentication level requires to access to this CAS application
Used by portal:	yes

casAppMetaDataOptionsComment

Location:	CAS Applications » configuration key » Options » Comment
Description:	Comment for this CAS application
Used by portal:	yes

casAppMetaDataOptionsDisplayName

Location:	CAS Applications » configuration key » Display » Name
Used by portal:	yes

casAppMetaDataOptionsLogout

Location:	CAS Applications » configuration key » Options » Logout
Used by portal:	yes

casAppMetaDataOptionsRule

Location:	CAS Applications » configuration key » Options » Access rule
Description:	CAS application rule
Used by portal:	yes

casAppMetaDataOptionsService

Location:	CAS Applications » configuration key » Options » Service URL
Description:	CAS application service
Used by portal:	yes

casAppMetaDataOptionsUserAttribute

Location:	CAS Applications » configuration key » Options » User attribute
Description:	CAS User attribute
Used by portal:	yes

casAttr

Location:	CAS Service » CAS login
Description:	Pivot attribute for CAS
Used by portal:	yes

casAttributes

Location:	CAS Service » CAS exported attributes
Description:	CAS exported attributes
Used by portal:	yes

casAuthnLevel

Location:	General Parameters » Authentication parameters » CAS parameters » Authentication level
Description:	CAS authentication level
Used by portal:	yes

casBackChannelSingleLogout

Location:	CAS Service » Back-channel logout
Description:	Enable CAS (Back-Channel) Single Logout
Used by portal:	yes

casSrvMetaDataExportedVars

Location:	CAS Servers » configuration key » Exported attributes
Description:	CAS exported variables
Used by portal:	yes

casSrvMetaDataNodes

Used by portal:	yes
Ini only:	yes

casSrvMetaDataOptions

Location:	Options
Description:	Root of CAS server options
Used by portal:	yes

casSrvMetaDataOptionsComment

Location:	CAS Servers » configuration key » Options » Comment
Description:	Comment for this CAS server
Used by portal:	yes

casSrvMetaDataOptionsDisplayName

Location:	CAS Servers » configuration key » Display » Name
Description:	Name to display for this CAS server
Used by portal:	yes

casSrvMetaDataOptionsGateway

Location:	CAS Servers » configuration key » Options » Gateway authentication
Used by portal:	yes

casSrvMetaDataOptionsIcon

Location:	CAS Servers » configuration key » Display » Logo
Description:	Path of CAS server icon
Used by portal:	yes

casSrvMetaDataOptionsProxiedServices

Location:	CAS Servers » configuration key » Proxied services
Used by portal:	yes

casSrvMetaDataOptionsRenew

Location:	CAS Servers » configuration key » Options » Renew authentication
Used by portal:	yes

casSrvMetaDataOptionsResolutionRule

Location:	CAS Servers » configuration key » Display » Resolution rule
Used by portal:	yes

casSrvMetaDataOptionsSamlValidate

Location:	CAS Servers » configuration key » Options » Use SAML 1.1 validation
Description:	use SAML validateion
Used by portal:	yes

casSrvMetaDataOptionsSortNumber

Location:	CAS Servers » configuration key » Display » Order
Description:	Number to sort buttons
Used by portal:	yes

casSrvMetaDataOptionsTooltip

Location:	CAS Servers » configuration key » Display » Tooltip
Description:	Tooltip for this CAS Server
Used by portal:	yes

casSrvMetaDataOptionsUrl

Location:	CAS Servers » configuration key » Options » Server URL
Used by portal:	yes

casStorage

Location:	CAS Service » Sessions » CAS sessions module name
Description:	Apache::Session module to store CAS user data
Used by portal:	yes

casStorageOptions

Location:	CAS Service » Sessions » CAS sessions module options
Description:	Apache::Session module parameters
Used by portal:	yes

casStrictMatching

Location:	CAS Service » Use strict URL matching
Description:	Disable host-based matching of CAS services
Used by portal:	yes

casTicketExpiration

Location:	CAS Service » Temporary ticket lifetime
Description:	Expiration time of Service and Proxy tickets
Used by portal:	yes

cda

Used by handler:
Location:	General Parameters » Cookies » Multiple domains
Description:	Enable Cross Domain Authentication
Used by portal:	yes
	yes

certificateResetByMailCeaAttribute

Location:	General Parameters » Plugins » Reset certificate by mail » Other » Certificate Exact Assertion attribute name
Used by portal:	yes

certificateResetByMailCertificateAttribute

Location:	General Parameters » Plugins » Reset certificate by mail » Other » Certificate binary content attribute name
Used by portal:	yes

certificateResetByMailStep1Body

Location:	General Parameters » Plugins » Reset certificate by mail » Mail content » Reset mail content
Description:	Custom Certificate reset mail body
Used by portal:	yes

certificateResetByMailStep1Subject

Location:	General Parameters » Plugins » Reset certificate by mail » Mail content » Reset mail subject
Description:	Mail subject for certificate reset email
Used by portal:	yes

certificateResetByMailStep2Body

Location:	General Parameters » Plugins » Reset certificate by mail » Mail content » Confirmation mail content
Description:	Custom confirm Certificate reset mail body
Used by portal:	yes

certificateResetByMailStep2Subject

Location:	General Parameters » Plugins » Reset certificate by mail » Mail content » Confirmation mail subject
Description:	Mail subject for reset confirmation
Used by portal:	yes

certificateResetByMailURL

Location:	General Parameters » Plugins » Reset certificate by mail » Other » Reset page URL
Description:	URL of certificate reset page
Used by portal:	yes

certificateResetByMailValidityDelay

Location:	General Parameters » Plugins » Reset certificate by mail » Other » Minimum duration before expiration
Used by portal:	yes

checkDevOps

Location:	General Parameters » Plugins » Check DevOps handler file » Activation
Description:	Enable check DevOps
Used by portal:	yes

checkDevOpsCheckSessionAttributes

Location:	General Parameters » Plugins » Check DevOps handler file » Check session attributes
Description:	Check if session attributes exist
Used by portal:	yes

checkDevOpsDisplayNormalizedHeaders

Location:	General Parameters » Plugins » Check DevOps handler file » Display normalized headers
Description:	Display normalized headers
Used by portal:	yes

checkDevOpsDownload

Location:	General Parameters » Plugins » Check DevOps handler file » Download file
Description:	Enable check DevOps download field
Used by portal:	yes

checkEntropy

Location:	General Parameters » Advanced parameters » Security » Check password entropy » Activation
Description:	Enable entropy check of password
Used by portal:	yes

checkEntropyRequired

Location:	General Parameters » Advanced parameters » Security » Check password entropy » Require entropy check to pass
Description:	Require entropy check to pass
Used by portal:	yes

checkEntropyRequiredLevel

Location:	General Parameters » Advanced parameters » Security » Check password entropy » Minimal entropy level for password to be accepted
Description:	Minimal entropy required for the password to be accepted
Used by portal:	yes

checkHIBP

Location:	General Parameters » Advanced parameters » Security » Check HIBP API » Activation
Description:	Enable check HIBP
Used by portal:	yes

checkHIBPRequired

Location:	General Parameters » Advanced parameters » Security » Check HIBP API » Require HIBP check to pass
Description:	Require HIBP check to pass
Used by portal:	yes

checkHIBPURL

Location:	General Parameters » Advanced parameters » Security » Check HIBP API » HIBP URL
Description:	URL of Have I Been Pwned API
Used by portal:	yes

checkMsg

Used by handler:
Description:	Timeout to check new evant
Used by portal:	yes
	yes
Ini only:	yes

checkState

Location:	General Parameters » Plugins » Check state » Activation
Description:	Enable CheckState plugin
Used by portal:	yes

checkStateSecret

Location:	General Parameters » Plugins » Check state » Shared secret
Description:	Secret token for CheckState plugin
Used by portal:	yes

checkTime

Used by handler:
Description:	Timeout to check new configuration in local cache
Used by portal:	yes
	yes
Ini only:	yes

checkUser

Location:	General Parameters » Plugins » Check user SSO profile » Activation
Description:	Enable check user
Used by portal:	yes

checkUserDisplayComputedSession

Location:	General Parameters » Plugins » Check user SSO profile » Display » Computed sessions
Description:	Display empty headers rule
Used by portal:	yes

checkUserDisplayEmptyHeaders

Location:	General Parameters » Plugins » Check user SSO profile » Display » Empty headers
Description:	Display empty headers rule
Used by portal:	yes

checkUserDisplayEmptyValues

Location:	General Parameters » Plugins » Check user SSO profile » Display » Empty values
Description:	Display session empty values rule
Used by portal:	yes

checkUserDisplayHiddenAttributes

Location:	General Parameters » Plugins » Check user SSO profile » Display » Hidden attributes
Description:	Display hidden attributes rule
Used by portal:	yes

checkUserDisplayHistory

Location:	General Parameters » Plugins » Check user SSO profile » Display » History
Description:	Display history rule
Used by portal:	yes

checkUserDisplayNormalizedHeaders

Location:	General Parameters » Plugins » Check user SSO profile » Display » Normalized headers
Description:	Display normalized headers rule
Used by portal:	yes

checkUserDisplayPersistentInfo

Location:	General Parameters » Plugins » Check user SSO profile » Display » Persistent session data
Description:	Display persistent session info rule
Used by portal:	yes

checkUserHiddenAttributes

Location:	General Parameters » Plugins » Check user SSO profile » Hidden attributes
Description:	Attributes to hide in CheckUser plugin
Used by portal:	yes

checkUserHiddenHeaders

Location:	General Parameters » Plugins » Check user SSO profile » Hidden headers
Description:	Header values to hide if not empty
Used by portal:	yes

checkUserIdRule

Location:	General Parameters » Plugins » Check user SSO profile » Identities use rule
Description:	checkUser identities rule
Used by portal:	yes

checkUserSearchAttributes

Location:	General Parameters » Plugins » Check user SSO profile » Attributes used for searching sessions
Description:	Attributes used for retrieving sessions in user DataBase
Used by portal:	yes

checkUserUnrestrictedUsersRule

Location:	General Parameters » Plugins » Check user SSO profile » Unrestricted users rule
Description:	checkUser unrestricted users rule
Used by portal:	yes

checkXSS

Location:	General Parameters » Advanced parameters » Security » Check XSS attacks
Description:	Check XSS
Used by portal:	yes

combModules

Location:	General Parameters » Authentication parameters » Combination parameters » Module list
Description:	Combination module description
Used by portal:	yes

combination

Location:	General Parameters » Authentication parameters » Combination parameters » Combination
Description:	Combination rule
Used by portal:	yes

compactConf

Location:	General Parameters » Advanced parameters » Events management » Compact configuration file
Description:	Compact configuration
Used by portal:	yes

configStorage

Used by manager:
Description:	Configuration storage
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

confirmFormMethod

Location:	General Parameters » Advanced parameters » Forms » Method for confirm form
Description:	HTTP method for confirm page form
Used by portal:	yes

contextSwitchingAllowed2fModifications

Location:	General Parameters » Plugins » Switch context another user » Allow 2FA modifications
Description:	Allowed SFA modifications
Used by portal:	yes

contextSwitchingIdRule

Location:	General Parameters » Plugins » Switch context another user » Identities use rule
Description:	Context switching identities rule
Used by portal:	yes

contextSwitchingPrefix

Description:	Prefix to store real session Id
Used by portal:	yes
Ini only:	yes

contextSwitchingRule

Location:	General Parameters » Plugins » Switch context another user » Use rule
Description:	Context switching activation rule
Used by portal:	yes

contextSwitchingStopWithLogout

Location:	General Parameters » Plugins » Switch context another user » Stop by logout
Description:	Stop context switching by logout
Used by portal:	yes

contextSwitchingUnrestrictedUsersRule

Location:	General Parameters » Plugins » Switch context another user » Unrestricted users rule
Description:	Context switching unrestricted users rule
Used by portal:	yes

cookieExpiration

Used by handler:
Location:	General Parameters » Cookies » SSO cookie expiration time
Description:	SSO cookie expiration
Used by portal:	yes
	yes

cookieName

Used by handler:
Location:	General Parameters » Cookies » Cookie name
Description:	Name of the SSO cookie
Used by portal:	yes
	yes

corsAllow_Credentials

Location:	General Parameters » Advanced parameters » Security » Cross-Origin Resource Sharing » Access-Control-Allow-Credentials
Description:	Allow credentials for Cross-Origin Resource Sharing
Used by portal:	yes

corsAllow_Headers

Location:	General Parameters » Advanced parameters » Security » Cross-Origin Resource Sharing » Access-Control-Allow-Headers
Description:	Allowed headers for Cross-Origin Resource Sharing
Used by portal:	yes

corsAllow_Methods

Location:	General Parameters » Advanced parameters » Security » Cross-Origin Resource Sharing » Access-Control-Allow-Methods
Description:	Allowed methods for Cross-Origin Resource Sharing
Used by portal:	yes

corsAllow_Origin

Location:	General Parameters » Advanced parameters » Security » Cross-Origin Resource Sharing » Access-Control-Allow-Origin
Description:	Allowed origine for Cross-Origin Resource Sharing
Used by portal:	yes

corsEnabled

Location:	General Parameters » Advanced parameters » Security » Cross-Origin Resource Sharing » Activation
Description:	Enable Cross-Origin Resource Sharing
Used by portal:	yes

corsExpose_Headers

Location:	General Parameters » Advanced parameters » Security » Cross-Origin Resource Sharing » Access-Control-Expose-Headers
Description:	Exposed headers for Cross-Origin Resource Sharing
Used by portal:	yes

corsMax_Age

Location:	General Parameters » Advanced parameters » Security » Cross-Origin Resource Sharing » Access-Control-Max-Age
Description:	Max-age for Cross-Origin Resource Sharing
Used by portal:	yes

crowdSecAgentResponseCode

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Ban response code
Description:	Crowdsec ban response code
Used by portal:	yes

crowdSecAgentResponseValue

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Ban response content,
Description:	Crowdsec ban response text
Used by portal:	yes

crowdsec

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Bouncer » Activation
Description:	CrowdSec bouncer activation
Used by portal:	yes

crowdsecAction

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Bouncer » Action
Description:	CrowdSec action
Used by portal:	yes

crowdsecAgent

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Activation
Description:	Enable plugin to report auth failures to Crowdsec (simple alert)
Used by portal:	yes

crowdsecBanDuration

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Ban duration
Description:	Crowdsec-Agent ban duration (e.g. 4h, 1d)
Used by portal:	yes

crowdsecBlockDelay

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Check delay
Description:	Crowdsec-Agent check delay
Used by portal:	yes

crowdsecFilters

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Filters directory
Description:	Crowdsec filters directory
Used by portal:	yes

crowdsecIgnoreFailures

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Bouncer » Ignore Crowdsec failures
Description:	Ignore Crowdsec errors
Used by portal:	yes

crowdsecKey

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Bouncer » API key
Description:	CrowdSec API key
Used by portal:	yes

crowdsecMachineId

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Crowdsec agent ID
Description:	Crowdsec machine ID to send alerts
Used by portal:	yes

crowdsecMaxFailures

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Max failures allowed during delay
Description:	Crowdesc-Agent maximum failures allowed during delay
Used by portal:	yes

crowdsecPassword

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Agent » Password
Description:	Crowdsec password to send alerts
Used by portal:	yes

crowdsecUrl

Location:	General Parameters » Advanced parameters » Security » Crowdsec » Bouncer » Base URL of local API
Description:	Base URL of CrowdSec local API
Used by portal:	yes

cspConnect

Location:	General Parameters » Advanced parameters » Security » Content Security Policy » Ajax destinations
Description:	Authorized Ajax destination for Content-Security-Policy
Used by portal:	yes

cspDefault

Location:	General Parameters » Advanced parameters » Security » Content Security Policy » Default value
Description:	Default value for Content-Security-Policy
Used by portal:	yes

cspFont

Location:	General Parameters » Advanced parameters » Security » Content Security Policy » Font source
Description:	Font source for Content-Security-Policy
Used by portal:	yes

cspFormAction

Location:	General Parameters » Advanced parameters » Security » Content Security Policy » Form destinations
Description:	Form action destination for Content-Security-Policy
Used by portal:	yes

cspFrameAncestors

Location:	General Parameters » Advanced parameters » Security » Content Security Policy » Frame ancestors URL
Description:	Frame-Ancestors for Content-Security-Policy
Used by portal:	yes

cspImg

Location:	General Parameters » Advanced parameters » Security » Content Security Policy » Image source
Description:	Image source for Content-Security-Policy
Used by portal:	yes

cspScript

Location:	General Parameters » Advanced parameters » Security » Content Security Policy » Script source
Description:	Javascript source for Content-Security-Policy
Used by portal:	yes

cspStyle

Location:	General Parameters » Advanced parameters » Security » Content Security Policy » Style source
Description:	Style source for Content-Security-Policy
Used by portal:	yes

customAddParams

Location:	General Parameters » Authentication parameters » Custom module names » Additional parameters
Description:	Custom additional parameters
Used by portal:	yes

customAuth

Location:	General Parameters » Authentication parameters » Custom module names » Custom authentication module
Description:	Custom auth module
Used by portal:	yes

customFunctions

Used by manager:
Location:	General Parameters » Advanced parameters » Custom functions
Description:	List of custom functions
Used by portal:	yes
	yes
Used by handler:
	yes

customPassword

Location:	General Parameters » Authentication parameters » Custom module names » Custom password module
Description:	Custom password module
Used by portal:	yes

customPlugins

Location:	General Parameters » Plugins » Custom plugins » Modules list
Description:	Custom plugins
Used by portal:	yes

customPluginsParams

Location:	General Parameters » Plugins » Custom plugins » Additional parameters
Description:	Custom plugins parameters
Used by portal:	yes

customRegister

Location:	General Parameters » Authentication parameters » Custom module names » Custom register module
Description:	Custom register module
Used by portal:	yes

customResetCertByMail

Location:	General Parameters » Authentication parameters » Custom module names » Custom certificateResetByMail module
Description:	Custom certificateResetByMail module
Used by portal:	yes

customToTrace

Used by handler:
Location:	General Parameters » Logs » REMOTE_CUSTOM
Description:	Session parameter used to fill REMOTE_CUSTOM
Used by portal:	yes
	yes

customUserDB

Location:	General Parameters » Authentication parameters » Custom module names » Custom users module
Description:	Custom user DB module
Used by portal:	yes

dbiAuthChain

Location:	General Parameters » Authentication parameters » DBI parameters » Connection » Chain
Used by portal:	yes

dbiAuthLoginCol

Location:	General Parameters » Authentication parameters » DBI parameters » Schema » Login field name
Used by portal:	yes

dbiAuthPassword

Location:	General Parameters » Authentication parameters » DBI parameters » Connection » Password
Used by portal:	yes

dbiAuthPasswordCol

Location:	General Parameters » Authentication parameters » DBI parameters » Schema » Password field name
Used by portal:	yes

dbiAuthPasswordHash

Location:	General Parameters » Authentication parameters » DBI parameters » Password » Hash scheme
Used by portal:	yes

dbiAuthTable

Location:	General Parameters » Authentication parameters » DBI parameters » Schema » Authentication table
Used by portal:	yes

dbiAuthUser

Location:	General Parameters » Authentication parameters » DBI parameters » Connection » User
Used by portal:	yes

dbiAuthnLevel

Location:	General Parameters » Authentication parameters » DBI parameters » Authentication level
Description:	DBI authentication level
Used by portal:	yes

dbiDynamicHashEnabled

Location:	General Parameters » Authentication parameters » DBI parameters » Password » dynamic hashing » dynamic hash activation
Used by portal:	yes

dbiDynamicHashNewPasswordScheme

Location:	General Parameters » Authentication parameters » DBI parameters » Password » dynamic hashing » Dynamic hash scheme for new passwords
Used by portal:	yes

dbiDynamicHashValidSaltedSchemes

Location:	General Parameters » Authentication parameters » DBI parameters » Password » dynamic hashing » Supported salted schemes
Used by portal:	yes

dbiDynamicHashValidSchemes

Location:	General Parameters » Authentication parameters » DBI parameters » Password » dynamic hashing » Supported non-salted schemes
Used by portal:	yes

dbiExportedVars

Location:	General Parameters » Authentication parameters » DBI parameters » Exported variables
Description:	DBI exported variables
Used by portal:	yes

dbiPasswordMailCol

Location:	General Parameters » Authentication parameters » DBI parameters » Schema » Mail field name
Used by portal:	yes

dbiUserTable

Location:	General Parameters » Authentication parameters » DBI parameters » Schema » User table
Used by portal:	yes

decryptValueFunctions

Location:	General Parameters » Plugins » Decrypt value » Decrypt functions
Description:	Custom function used for decrypting values
Used by portal:	yes

decryptValueRule

Location:	General Parameters » Plugins » Decrypt value » Use rule
Description:	Decrypt value activation rule
Used by portal:	yes

defaultAuthnLevel

Location:	General Parameters » Advanced parameters » Security » Default required authentication level
Used by portal:	yes

defaultNewKeySize

Used by manager:
Description:	Default size for new RSA key helper
	yes
Ini only:	yes

demoExportedVars

Location:	General Parameters » Authentication parameters » Demonstration parameters » Exported variables
Description:	Demo exported variables
Used by portal:	yes

disablePersistentStorage

Location:	General Parameters » Sessions » Persistent sessions » Disable storage
Description:	Enabled persistent storage
Used by portal:	yes

disabledPlugins

Location:	General Parameters » Plugins » Custom plugins » Disabled plugins
Description:	Disabled plugins
Used by portal:	yes

displaySessionId

Location:	General Parameters » Sessions » Display session identifier
Description:	Display _session_id with sessions explorer
Used by portal:	yes

domain

Used by handler:
Location:	General Parameters » Cookies » Domain
Description:	DNS domain
Used by portal:	yes
	yes

eventQueueName

Location:	General Parameters » Advanced parameters » Events management » Event channel name
Description:	Event channel name
Used by portal:	yes

eventStatus

Used by handler:
Description:	Push status into message broker
	yes
Ini only:	yes

exportedAttr

Location:	General Parameters » Plugins » Portal servers » SOAP/REST exported attributes
Description:	List of attributes to export by SOAP or REST servers
Used by portal:	yes

exportedHeaders

Used by handler:
Location:	Virtual Hosts » configuration key » Exported headers
Description:	Virtualhost headers
	yes

exportedVars

Location:	Variables » Exported Variables
Description:	Main exported variables
Used by portal:	yes

ext2FSendCommand

Location:	General Parameters » Second factors » External second factor » Send command
Description:	Send command of External second factor
Used by portal:	yes

ext2FValidateCommand

Location:	General Parameters » Second factors » External second factor » Validation command
Description:	Validation command of External second factor
Used by portal:	yes

ext2fActivation

Location:	General Parameters » Second factors » External second factor » Activation
Description:	External second factor activation
Used by portal:	yes

ext2fAuthnLevel

Location:	General Parameters » Second factors » External second factor » Authentication level
Description:	Authentication level for users authentified by External second factor
Used by portal:	yes

ext2fCodeActivation

Location:	General Parameters » Second factors » External second factor » Code regex
Description:	OTP generated by Portal
Used by portal:	yes

ext2fLabel

Location:	General Parameters » Second factors » External second factor » Label
Description:	Portal label for External second factor
Used by portal:	yes

ext2fLogo

Location:	General Parameters » Second factors » External second factor » Logo
Description:	Custom logo for External 2F
Used by portal:	yes

ext2fResendInterval

Location:	General Parameters » Second factors » External second factor » Re-send interval
Description:	Delay before user is allowed to resend code
Used by portal:	yes

externalMenu

Location:	General Parameters » Advanced parameters » Portal redirections » External menu URL
Description:	URL to redirect authenticated users to instead of showing menu. Supports session variables like $uid, $mail, etc.
Used by portal:	yes

facebookAppId

Location:	General Parameters » Authentication parameters » Facebook parameters » Facebook application ID
Used by portal:	yes

facebookAppSecret

Location:	General Parameters » Authentication parameters » Facebook parameters » Facebook application secret
Used by portal:	yes

facebookAuthnLevel

Location:	General Parameters » Authentication parameters » Facebook parameters » Authentication level
Description:	Facebook authentication level
Used by portal:	yes

facebookExportedVars

Location:	General Parameters » Authentication parameters » Facebook parameters » Exported variables
Description:	Facebook exported variables
Used by portal:	yes

facebookUserField

Location:	General Parameters » Authentication parameters » Facebook parameters » Field containing user identifier
Used by portal:	yes

failedLoginNumber

Location:	General Parameters » Plugins » Login history » Max failed logins count
Description:	Number of failures stored in login history
Used by portal:	yes

findUser

Location:	General Parameters » Plugins » Search for user account » Activation
Description:	Enable find user
Used by portal:	yes

findUserControl

Location:	General Parameters » Plugins » Search for user account » Parameters control
Description:	Regular expression to validate parameters
Used by portal:	yes

findUserExcludingAttributes

Location:	General Parameters » Plugins » Search for user account » Excluding attributes
Description:	Attributes used for excluding accounts
Used by portal:	yes

findUserSearchingAttributes

Location:	General Parameters » Plugins » Search for user account » Searching attributes
Description:	Attributes used for searching accounts
Used by portal:	yes

findUserWildcard

Location:	General Parameters » Plugins » Search for user account » Character used as wildcard
Description:	Character used as wildcard
Used by portal:	yes

floatingCategoryName

Location:	General Parameters » Portal » Customization » Floating category name
Description:	Name of the category displayed as floating menu
Used by portal:	yes

forceGlobalStorageIssuerOTT

Description:	Force Issuer tokens to be stored into Global Storage
Used by portal:	yes
Ini only:	yes

forceGlobalStorageUpgradeOTT

Description:	Force Upgrade tokens be stored into Global Storage
Used by portal:	yes
Ini only:	yes

formTimeout

Location:	General Parameters » Advanced parameters » Security » Form timeout
Description:	Token timeout for forms
Used by portal:	yes

githubAuthnLevel

Location:	General Parameters » Authentication parameters » GitHub Parameters » Authentication level
Description:	GitHub authentication level
Used by portal:	yes

githubClientID

Location:	General Parameters » Authentication parameters » GitHub Parameters » Client ID
Used by portal:	yes

githubClientSecret

Location:	General Parameters » Authentication parameters » GitHub Parameters » Client secret
Used by portal:	yes

githubScope

Location:	General Parameters » Authentication parameters » GitHub Parameters » Scope
Used by portal:	yes

githubUserField

Location:	General Parameters » Authentication parameters » GitHub Parameters » Field containing user identifier
Used by portal:	yes

globalLogoutCustomParam

Location:	General Parameters » Plugins » Global logout » Custom parameter
Description:	Custom session parameter to display
Used by portal:	yes

globalLogoutRule

Location:	General Parameters » Plugins » Global logout » Activation
Description:	Global logout activation rule
Used by portal:	yes

globalLogoutTimer

Location:	General Parameters » Plugins » Global logout » Auto accept time
Description:	Global logout auto accept time
Used by portal:	yes

globalStorage

Used by handler:
Location:	General Parameters » Sessions » Sessions storage » Apache::Session module
Description:	Session backend module
Used by portal:	yes
	yes

globalStorageOptions

Used by handler:
Location:	General Parameters » Sessions » Sessions storage » Apache::Session module parameters
Description:	Session backend module options
Used by portal:	yes
	yes

gpgAuthnLevel

Location:	General Parameters » Authentication parameters » GPG parameters » Authentication level
Description:	GPG authentication level
Used by portal:	yes

gpgDb

Location:	General Parameters » Authentication parameters » GPG parameters » GPG database
Description:	GPG keys database
Used by portal:	yes

grantSessionRules

Location:	General Parameters » Sessions » Opening conditions
Description:	Rules to grant sessions
Used by portal:	yes

groupLDAPFilter

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » Group Filter
Description:	LDAP filter for group search
Used by portal:	yes

groups

Location:	Variables » Groups
Description:	Groups
Used by portal:	yes

groupsBeforeMacros

Location:	General Parameters » Advanced parameters » Compute groups before macros
Description:	Compute groups before macros
Used by portal:	yes

handlerInternalCache

Used by handler:
Description:	Handler internal cache timeout
Used by portal:	yes
	yes
Ini only:	yes

handlerServiceTokenTTL

Used by handler:
Description:	Handler ServiceToken timeout
Used by portal:	yes
	yes
Ini only:	yes

hashedSessionStore

Location:	General Parameters » Advanced parameters » Security » Hashed session storage
Description:	Securize storage of sensible sessions
Used by portal:	yes

hiddenAttributes

Location:	General Parameters » Logs » Hidden attributes
Description:	Name of attributes to hide in logs
Used by portal:	yes

hideOldPassword

Location:	General Parameters » Portal » Customization » Password management » Hide old password
Description:	Hide old password in portal
Used by portal:	yes

httpOnly

Used by handler:
Location:	General Parameters » Cookies » Javascript protection
Description:	Enable httpOnly flag in cookie
Used by portal:	yes
	yes

https

Used by handler:
Location:	General Parameters » Advanced parameters » Handler redirections » HTTPS
Description:	Use HTTPS for redirection from portal
	yes

impersonationHiddenAttributes

Location:	General Parameters » Plugins » Impersonation » Hidden attributes
Description:	Attributes to skip
Used by portal:	yes

impersonationIdRule

Location:	General Parameters » Plugins » Impersonation » Identities use rule
Description:	Impersonation identities rule
Used by portal:	yes

impersonationMergeSSOgroups

Location:	General Parameters » Plugins » Impersonation » Merge spoofed and real SSO groups
Description:	Merge spoofed and real SSO groups
Used by portal:	yes

impersonationPrefix

Description:	Prefix to rename real session attributes
Used by portal:	yes
Ini only:	yes

impersonationRule

Location:	General Parameters » Plugins » Impersonation » Use rule
Description:	Impersonation activation rule
Used by portal:	yes

impersonationSkipEmptyValues

Location:	General Parameters » Plugins » Impersonation » Skip empty values
Description:	Skip session empty values
Used by portal:	yes

impersonationUnrestrictedUsersRule

Location:	General Parameters » Plugins » Impersonation » Unrestricted users rule
Description:	Impersonation unrestricted users rule
Used by portal:	yes

infoFormMethod

Location:	General Parameters » Advanced parameters » Forms » Method for info form
Description:	HTTP method for info page form
Used by portal:	yes

initializePasswordReset

Location:	General Parameters » Plugins » Initialize Password Reset API plugin » Activation
Description:	Enable Password Reset API plugin
Used by portal:	yes

initializePasswordResetSecret

Location:	General Parameters » Plugins » Initialize Password Reset API plugin » Secret key
Description:	Secret key for the Initialize Password Reset API
Used by portal:	yes

issuerDBCASActivation

Location:	General Parameters » Issuer modules » CAS » Activation
Description:	CAS server activation
Used by portal:	yes

issuerDBCASPath

Location:	General Parameters » Issuer modules » CAS » Path
Description:	CAS server request path
Used by portal:	yes

issuerDBCASRule

Location:	General Parameters » Issuer modules » CAS » Use rule
Description:	CAS server rule
Used by portal:	yes

issuerDBGetActivation

Location:	General Parameters » Issuer modules » GET » Activation
Description:	Get issuer activation
Used by portal:	yes

issuerDBGetParameters

Location:	General Parameters » Issuer modules » GET » GET parameters
Description:	List of virtualHosts with their get parameters
Used by portal:	yes

issuerDBGetPath

Location:	General Parameters » Issuer modules » GET » Path
Description:	Get issuer request path
Used by portal:	yes

issuerDBGetRule

Location:	General Parameters » Issuer modules » GET » Use rule
Description:	Get issuer rule
Used by portal:	yes

issuerDBJitsiMeetTokensActivation

Location:	General Parameters » Issuer modules » Jitsi » Activation
Description:	Jitsi issuer activation
Used by portal:	yes

issuerDBJitsiMeetTokensPath

Location:	General Parameters » Issuer modules » Jitsi » Path
Description:	Jitsi issuer request path
Used by portal:	yes

issuerDBJitsiMeetTokensRule

Location:	General Parameters » Issuer modules » Jitsi » Use rule
Description:	Jitsi issuer rule
Used by portal:	yes

issuerDBOpenIDActivation

Location:	General Parameters » Issuer modules » OpenID » Activation
Description:	OpenID server activation
Used by portal:	yes

issuerDBOpenIDConnectActivation

Location:	General Parameters » Issuer modules » OpenID Connect » Activation
Description:	OpenID Connect server activation
Used by portal:	yes

issuerDBOpenIDConnectPath

Location:	General Parameters » Issuer modules » OpenID Connect » Path
Description:	OpenID Connect server request path
Used by portal:	yes

issuerDBOpenIDConnectRule

Location:	General Parameters » Issuer modules » OpenID Connect » Use rule
Description:	OpenID Connect server rule
Used by portal:	yes

issuerDBOpenIDPath

Location:	General Parameters » Issuer modules » OpenID » Path
Description:	OpenID server request path
Used by portal:	yes

issuerDBOpenIDRule

Location:	General Parameters » Issuer modules » OpenID » Use rule
Description:	OpenID server rule
Used by portal:	yes

issuerDBSAMLActivation

Location:	General Parameters » Issuer modules » SAML » Activation
Description:	SAML IDP activation
Used by portal:	yes

issuerDBSAMLPath

Location:	General Parameters » Issuer modules » SAML » Path
Description:	SAML IDP request path
Used by portal:	yes

issuerDBSAMLRule

Location:	General Parameters » Issuer modules » SAML » Use rule
Description:	SAML IDP rule
Used by portal:	yes

issuersTimeout

Location:	General Parameters » Issuer modules » Options » Issuers timeout
Description:	Token timeout for issuers
Used by portal:	yes

jitsiAppId

Location:	General Parameters » Issuer modules » Jitsi » Options » Application ID
Description:	Jitsi application ID
Used by portal:	yes

jitsiAppSecret

Location:	General Parameters » Issuer modules » Jitsi » Options » Shared secret
Description:	Jitsi application secret
Used by portal:	yes

jitsiDefaultServer

Location:	General Parameters » Issuer modules » Jitsi » Options » Jitsi server URL
Description:	Jitsi server URL
Used by portal:	yes

jitsiExpiration

Location:	General Parameters » Issuer modules » Jitsi » Options » Jitsi JWT expiration
Description:	Jitsi JWT expiration
Used by portal:	yes

jitsiIdAttribute

Location:	General Parameters » Issuer modules » Jitsi » Options » Exported attributes » Identifier attribute
Description:	Jitsi attribute for ID
Used by portal:	yes

jitsiMailAttribute

Location:	General Parameters » Issuer modules » Jitsi » Options » Exported attributes » Email attribute
Description:	Jitsi attribute for email
Used by portal:	yes

jitsiNameAttribute

Location:	General Parameters » Issuer modules » Jitsi » Options » Exported attributes » Name attribute
Description:	Jitsi attribute for name
Used by portal:	yes

jitsiSigningAlg

Location:	General Parameters » Issuer modules » Jitsi » Options » Signature algorithm
Description:	Jitsi JWT signature method
Used by portal:	yes

jitsiSigningKey

Location:	General Parameters » Issuer modules » Jitsi » Options » Signing key name
Description:	Jitsi JWT signature key
Used by portal:	yes

jsRedirect

Location:	General Parameters » Advanced parameters » Portal redirections » Redirection message
Description:	Use javascript for redirections
Used by portal:	yes

key

Location:	General Parameters » Advanced parameters » Security » Encryption key
Description:	Secret key
Used by portal:	yes

keyComment

Location:	General Parameters » Keys » configuration key » Options » Comment
Used by portal:	yes

keyId

Location:	General Parameters » Keys » configuration key » Options » External key identifier
Used by portal:	yes

keyNodes

Used by portal:	yes
Ini only:	yes

keyPrivate

Location:	General Parameters » Keys » configuration key » Key material » Private key
Used by portal:	yes

keyPrivatePwd

Location:	General Parameters » Keys » configuration key » Key material » Private key password
Used by portal:	yes

keyPublic

Location:	General Parameters » Keys » configuration key » Key material » Public key
Used by portal:	yes

keys

Description:	Root of keys
Used by portal:	yes
Ini only:	yes

krbAllowedDomains

Location:	General Parameters » Authentication parameters » Kerberos parameters » Allowed domains
Description:	Allowed domains
Used by portal:	yes

krbAuthnLevel

Location:	General Parameters » Authentication parameters » Kerberos parameters » Kerberos authn level
Description:	Null authentication level
Used by portal:	yes

krbByJs

Location:	General Parameters » Authentication parameters » Kerberos parameters » Use Ajax request
Description:	Launch Kerberos authentication by Ajax
Used by portal:	yes

krbKeytab

Location:	General Parameters » Authentication parameters » Kerberos parameters » Keytab file
Description:	Kerberos keytab
Used by portal:	yes

krbRemoveDomain

Location:	General Parameters » Authentication parameters » Kerberos parameters » Remove domain from Kerberos username
Description:	Remove domain in Kerberos username
Used by portal:	yes

ldapAllowResetExpiredPassword

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Allow to reset an expired password
Description:	Allow a user to reset his expired password
Used by portal:	yes

ldapAuthnLevel

Location:	General Parameters » Authentication parameters » LDAP parameters » Authentication level
Description:	LDAP authentication level
Used by portal:	yes

ldapBase

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Users search base
Description:	LDAP search base
Used by portal:	yes

ldapCAFile

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » CA file path
Description:	Location of the certificate file for LDAP connections
Used by portal:	yes

ldapCAPath

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » CA directory path
Description:	Location of the CA directory for LDAP connections
Used by portal:	yes

ldapChangePasswordAsUser

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Change as user
Used by portal:	yes

ldapExportedVars

Location:	General Parameters » Authentication parameters » LDAP parameters » Exported variables
Description:	LDAP exported variables
Used by portal:	yes

ldapForcePasswordChangeExpirationWarning

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Delay to force password change before expiration
Description:	Delay to force password change if password is about to expire
Used by portal:	yes

ldapGetUserBeforePasswordChange

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Search for user before password change
Used by portal:	yes

ldapGroupAttributeName

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » Target attribute
Description:	LDAP attribute name for member in groups
Used by portal:	yes

ldapGroupAttributeNameGroup

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » Group source attribute
Description:	LDAP attribute name in group entry referenced as member in groups
Used by portal:	yes

ldapGroupAttributeNameSearch

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » Searched attributes
Description:	LDAP attributes to search in groups
Used by portal:	yes

ldapGroupAttributeNameUser

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » User source attribute
Description:	LDAP attribute name in user entry referenced as member in groups
Used by portal:	yes

ldapGroupBase

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » Search base
Used by portal:	yes

ldapGroupDecodeSearchedValue

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » Decode searched value
Description:	Decode value before searching it in LDAP groups
Used by portal:	yes

ldapGroupObjectClass

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » Object class
Description:	LDAP object class of groups
Used by portal:	yes

ldapGroupRecursive

Location:	General Parameters » Authentication parameters » LDAP parameters » Groups » Recursive
Description:	LDAP recursive search in groups
Used by portal:	yes

ldapIOTimeout

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Operation timeout
Description:	LDAP operation timeout
Used by portal:	yes

ldapITDS

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » IBM Tivoli DS support
Description:	Support for IBM Tivoli Directory Server
Used by portal:	yes

ldapPasswordResetAttribute

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Reset attribute
Description:	LDAP password reset attribute
Used by portal:	yes

ldapPasswordResetAttributeValue

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Reset value
Description:	LDAP password reset value
Used by portal:	yes

ldapPort

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Server port
Description:	LDAP port
Used by portal:	yes

ldapPpolicyControl

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Password policy control
Used by portal:	yes

ldapPwdEnc

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » LDAP password encoding
Description:	LDAP password encoding
Used by portal:	yes

ldapRaw

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Binary attributes
Used by portal:	yes

ldapSearchDeref

Location:	General Parameters » Authentication parameters » LDAP parameters » Filters » Alias dereference
Description:	“deref” param of Net::LDAP::search()
Used by portal:	yes

ldapServer

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Server host
Description:	LDAP server (host or URI)
Used by portal:	yes

ldapSetPassword

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Password modify extended operation
Used by portal:	yes

ldapTimeout

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Connection timeout
Description:	LDAP connection timeout
Used by portal:	yes

ldapUsePasswordResetAttribute

Location:	General Parameters » Authentication parameters » LDAP parameters » Password » Use reset attribute
Description:	LDAP store reset flag in an attribute
Used by portal:	yes

ldapVerify

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Verify LDAP server certificate
Description:	Whether to validate LDAP certificates
Used by portal:	yes

ldapVersion

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Version
Description:	LDAP protocol version
Used by portal:	yes

linkedInAuthnLevel

Location:	General Parameters » Authentication parameters » LinkedIn Parameters » Authentication level
Description:	LinkedIn authentication level
Used by portal:	yes

linkedInClientID

Location:	General Parameters » Authentication parameters » LinkedIn Parameters » Client ID
Used by portal:	yes

linkedInClientSecret

Location:	General Parameters » Authentication parameters » LinkedIn Parameters » Client secret
Used by portal:	yes

linkedInFields

Location:	General Parameters » Authentication parameters » LinkedIn Parameters » Searched fields
Used by portal:	yes

linkedInScope

Location:	General Parameters » Authentication parameters » LinkedIn Parameters » Scope
Used by portal:	yes

linkedInUserField

Location:	General Parameters » Authentication parameters » LinkedIn Parameters » Field containing user identifier
Used by portal:	yes

localSessionStorage

Location:	General Parameters » Sessions » Sessions storage » Cache module
Description:	Local sessions cache module
Used by portal:	yes

localSessionStorageOptions

Location:	General Parameters » Sessions » Sessions storage » Cache module options
Description:	Sessions cache module options
Used by portal:	yes

localStorage

Used by manager:
Description:	Local cache
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

localStorageOptions

Used by manager:
Description:	Local cache parameters
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

locationDetect

Location:	General Parameters » Plugins » Location detection » Activation
Description:	Enable LocationDetect plugin
Used by portal:	yes

locationDetectGeoIpDatabase

Location:	General Parameters » Plugins » Location detection » Path to GeoIP database
Description:	Path to GeoIP database
Used by portal:	yes

locationDetectGeoIpLanguages

Location:	General Parameters » Plugins » Location detection » Languages for GeoIP database
Description:	Languages for GeoIP database
Used by portal:	yes

locationDetectIpDetail

Location:	General Parameters » Plugins » Location detection » Information requested for IP
Description:	Information requested for IP
Used by portal:	yes

locationDetectUaDetail

Location:	General Parameters » Plugins » Location detection » Information requested for User Agent
Description:	Information requested for User Agent
Used by portal:	yes

locationRules

Used by handler:
Location:	Virtual Hosts » configuration key » Access rules
Description:	Virtualhost rules
	yes

log4perlConfFile

Used by manager:
Description:	Log4Perl logger configuration file
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

logLevel

Used by manager:
Description:	Log level, must be set in .ini
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

logger

Used by manager:
Description:	technical logger
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

loginHistoryEnabled

Location:	General Parameters » Plugins » Login history » Activation
Description:	Enable login history
Used by portal:	yes

logoutServices

Location:	General Parameters » Advanced parameters » Logout forward
Description:	Send logout trough GET request to these services
Used by portal:	yes

lokiAuthorization

Used by manager:
Description:	Loki Authorization header value
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lokiEnv

Used by manager:
Description:	Loki env, default “prod”
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lokiInstance

Used by manager:
Description:	Loki instance, default hostname output
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lokiLabel

Used by manager:
Description:	Loki label, default llng
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lokiService

Used by manager:
Description:	Loki Service (technical context)
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lokiTenant

Used by manager:
Description:	Loki Tenant
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lokiTenantHeader

Used by manager:
Description:	Loki Tenant Header name
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lokiUrl

Used by manager:
Description:	Loki API
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lokiUserService

Used by manager:
Description:	Loki (userLogger context)
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

lwpOpts

Location:	General Parameters » Advanced parameters » Security » Options for server requests
Description:	Options passed to LWP::UserAgent
Used by portal:	yes

lwpSslOpts

Location:	General Parameters » Advanced parameters » Security » TLS/SSL options for server requests
Description:	TLS/SSL options passed to LWP::UserAgent
Used by portal:	yes

macros

Location:	Variables » Macros
Description:	Macros
Used by portal:	yes

mail2fActivation

Location:	General Parameters » Second factors » Mail second factor » Activation
Description:	Mail second factor activation
Used by portal:	yes

mail2fAuthnLevel

Location:	General Parameters » Second factors » Mail second factor » Authentication level
Description:	Authentication level for users authenticated by Mail second factor
Used by portal:	yes

mail2fBody

Location:	General Parameters » Second factors » Mail second factor » Mail body
Description:	Mail body for second factor authentication
Used by portal:	yes

mail2fCodeRegex

Location:	General Parameters » Second factors » Mail second factor » Code regex
Description:	Regular expression to create a mail OTP code
Used by portal:	yes

mail2fLabel

Location:	General Parameters » Second factors » Mail second factor » Label
Description:	Portal label for Mail second factor
Used by portal:	yes

mail2fLogo

Location:	General Parameters » Second factors » Mail second factor » Logo
Description:	Custom logo for Mail 2F
Used by portal:	yes

mail2fResendInterval

Location:	General Parameters » Second factors » Mail second factor » Re-send interval
Description:	Delay before user is allowed to resend code
Used by portal:	yes

mail2fSessionKey

Location:	General Parameters » Second factors » Mail second factor » Session key containing mail address
Description:	Session parameter where mail is stored
Used by portal:	yes

mail2fSubject

Location:	General Parameters » Second factors » Mail second factor » Mail subject
Description:	Mail subject for second factor authentication
Used by portal:	yes

mail2fTimeout

Location:	General Parameters » Second factors » Mail second factor » Code timeout
Description:	Second factor code timeout
Used by portal:	yes

mailBody

Location:	General Parameters » Plugins » Reset password by mail » Mail content » Success mail content
Description:	Custom password reset mail body
Used by portal:	yes

mailCharset

Location:	General Parameters » Advanced parameters » SMTP » Mail headers » Charset
Description:	Mail charset
Used by portal:	yes

mailConfirmBody

Location:	General Parameters » Plugins » Reset password by mail » Mail content » Confirmation mail content
Description:	Custom confirm password reset mail body
Used by portal:	yes

mailConfirmSubject

Location:	General Parameters » Plugins » Reset password by mail » Mail content » Confirmation mail subject
Description:	Mail subject for reset confirmation
Used by portal:	yes

mailFrom

Location:	General Parameters » Advanced parameters » SMTP » Mail headers » Mail sender
Description:	Sender email
Used by portal:	yes

mailLDAPFilter

Location:	General Parameters » Authentication parameters » LDAP parameters » Filters » Mail filter
Description:	LDAP filter for mail search
Used by portal:	yes

mailOnPasswordChange

Location:	General Parameters » Portal » Customization » Password management » Send a mail when password is changed
Description:	Send a mail when password is changed
Used by portal:	yes

mailReplyTo

Location:	General Parameters » Advanced parameters » SMTP » Mail headers » Reply address
Description:	Reply-To address
Used by portal:	yes

mailSessionKey

Location:	General Parameters » Advanced parameters » SMTP » Session key containing mail address
Description:	Session parameter where mail is stored
Used by portal:	yes

mailSubject

Location:	General Parameters » Plugins » Reset password by mail » Mail content » Success mail subject
Description:	Mail subject for new password email
Used by portal:	yes

mailTimeout

Location:	General Parameters » Plugins » Reset password by mail » Other » Validity time of a password reset request
Description:	Mail password reset session timeout
Used by portal:	yes

mailUrl

Location:	General Parameters » Plugins » Reset password by mail » Other » Reset page URL
Description:	URL of password reset page
Used by portal:	yes

maintenance

Used by handler:
Location:	General Parameters » Advanced parameters » Handler redirections » Maintenance mode
Description:	Maintenance mode for all virtual hosts
	yes

managerDn

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Account
Description:	LDAP manager DN
Used by portal:	yes

managerPassword

Location:	General Parameters » Authentication parameters » LDAP parameters » Connection » Password
Description:	LDAP manager Password
Used by portal:	yes

max2FDevices

Description:	Maximum registered 2F devices
Used by portal:	yes
Ini only:	yes

max2FDevicesNameLength

Description:	Maximum 2F devices name length
Used by portal:	yes
Ini only:	yes

messageBroker

Used by handler:
Location:	General Parameters » Advanced parameters » Events management » Pub/Sub system
Description:	Messages broker module
Used by portal:	yes
	yes

messageBrokerOptions

Used by handler:
Location:	General Parameters » Advanced parameters » Events management » Pub/Sub system options
Description:	Options of messages broker module
Used by portal:	yes
	yes

multiValuesSeparator

Used by manager:
Location:	General Parameters » Advanced parameters » Separator
Description:	Separator for multiple values
Used by portal:	yes
	yes
Used by handler:
	yes

mySessionAuthorizedRWKeys

Description:	Alterable session keys by user itself
Used by portal:	yes
Ini only:	yes

newLocationWarning

Location:	General Parameters » Advanced parameters » Security » New location warning » Activation
Description:	Enable New Location Warning
Used by portal:	yes

newLocationWarningLocationAttribute

Location:	General Parameters » Advanced parameters » Security » New location warning » Session attribute containing location
Description:	New location session attribute
Used by portal:	yes

newLocationWarningLocationDisplayAttribute

Location:	General Parameters » Advanced parameters » Security » New location warning » Session attribute to display
Description:	New location session attribute for user display
Used by portal:	yes

newLocationWarningMailAttribute

Location:	General Parameters » Advanced parameters » Security » New location warning » Session mail attribute
Description:	New location warning mail session attribute
Used by portal:	yes

newLocationWarningMailBody

Location:	General Parameters » Advanced parameters » Security » New location warning » Warning mail content
Description:	Mail body for new location warning
Used by portal:	yes

newLocationWarningMailSubject

Location:	General Parameters » Advanced parameters » Security » New location warning » Warning mail subject
Description:	Mail subject for new location warning
Used by portal:	yes

newLocationWarningMaxValues

Location:	General Parameters » Advanced parameters » Security » New location warning » Maximum number of locations to consider
Description:	How many previous locations should be compared
Used by portal:	yes

nginxCustomHandlers

Location:	General Parameters » Advanced parameters » Custom Nginx handlers
Description:	Custom Nginx handler (deprecated)
Used by portal:	yes

noAjaxHook

Location:	General Parameters » Advanced parameters » Portal redirections » Keep redirections for Ajax
Description:	Avoid replacing 302 by 401 for Ajax responses
Used by portal:	yes

notification

Location:	General Parameters » Plugins » Notifications » Activation
Description:	Notification activation
Used by portal:	yes

notificationDefaultCond

Location:	General Parameters » Plugins » Notifications » Server » Default condition
Description:	Notification default condition
Used by portal:	yes

notificationServer

Location:	General Parameters » Plugins » Notifications » Server » Notification server
Description:	Notification server activation
Used by portal:	yes

notificationServerDELETE

Location:	General Parameters » Plugins » Notifications » Server » HTTP methods » DELETE method
Description:	Notification server activation
Used by portal:	yes

notificationServerGET

Location:	General Parameters » Plugins » Notifications » Server » HTTP methods » GET method
Description:	Notification server activation
Used by portal:	yes

notificationServerPOST

Location:	General Parameters » Plugins » Notifications » Server » HTTP methods » POST method
Description:	Notification server activation
Used by portal:	yes

notificationServerSentAttributes

Location:	General Parameters » Plugins » Notifications » Server » Notification parameters to send
Description:	Prameters to send with notification server GET method
Used by portal:	yes

notificationStorage

Location:	General Parameters » Plugins » Notifications » Storage module
Description:	Notification backend
Used by portal:	yes

notificationStorageOptions

Location:	General Parameters » Plugins » Notifications » Storage module parameters
Description:	Notification backend options
Used by portal:	yes

notificationWildcard

Location:	General Parameters » Plugins » Notifications » Wildcard for all users
Description:	Notification string to match all users
Used by portal:	yes

notificationXSLTfile

Location:	General Parameters » Plugins » Notifications » Custom XSLT file
Description:	Custom XSLT document for notifications
Used by portal:	yes

notificationsExplorer

Location:	General Parameters » Plugins » Notifications » Explorer
Description:	Notifications explorer activation
Used by portal:	yes

notificationsMaxRetrieve

Description:	Max number of displayed notifications
Used by portal:	yes
Ini only:	yes

notifyDeleted

Location:	General Parameters » Sessions » Multiple sessions » Display deleted sessions
Description:	Show deleted sessions in portal
Used by portal:	yes

notifyOther

Location:	General Parameters » Sessions » Multiple sessions » Display other sessions
Description:	Show other sessions in portal
Used by portal:	yes

nullAuthnLevel

Location:	General Parameters » Authentication parameters » Null parameters » Authentication level
Description:	Null authentication level
Used by portal:	yes

oidcAuthnLevel

Location:	General Parameters » Authentication parameters » OpenID Connect parameters » Authentication level
Description:	OpenID Connect authentication level
Used by portal:	yes

oidcDropCspHeaders

Location:	OpenID Connect Service » Security » Drop CSP headers from OIDC responses
Description:	Drop CORS headers from OIDC issuer responses
Used by portal:	yes

oidcOPMetaDataExportedVars

Location:	OpenID Connect Providers » configuration key » Exported attributes
Used by portal:	yes

oidcOPMetaDataJSON

Location:	OpenID Connect Providers » configuration key » Metadata
Used by portal:	yes

oidcOPMetaDataJWKS

Location:	OpenID Connect Providers » configuration key » JWKS data
Used by portal:	yes

oidcOPMetaDataNodes

Used by portal:	yes
Ini only:	yes

oidcOPMetaDataOptions

Location:	Options
Used by portal:	yes

oidcOPMetaDataOptionsAcrValues

Location:	OpenID Connect Providers » configuration key » Options » Protocol » ACR values
Used by portal:	yes

oidcOPMetaDataOptionsAuthEndpointExtraParams

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Extra parameters for authorization code request
Description:	Additional parameters for OpenID Connect Authorization endpoint
Used by portal:	yes

oidcOPMetaDataOptionsAuthnEndpointAuthMethod

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Authentication method for authorization code request
Used by portal:	yes

oidcOPMetaDataOptionsAuthnEndpointAuthSigAlg

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Signature algorithm for authorization code authentication
Used by portal:	yes

oidcOPMetaDataOptionsCheckJWTSignature

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Check JWT signature
Used by portal:	yes

oidcOPMetaDataOptionsClientID

Location:	OpenID Connect Providers » configuration key » Options » Configuration » Client ID
Used by portal:	yes

oidcOPMetaDataOptionsClientSecret

Location:	OpenID Connect Providers » configuration key » Options » Configuration » Client secret
Used by portal:	yes

oidcOPMetaDataOptionsComment

Location:	OpenID Connect Providers » configuration key » Options » Comment
Used by portal:	yes

oidcOPMetaDataOptionsConfigurationURI

Location:	OpenID Connect Providers » configuration key » Options » Configuration » Configuration endpoint
Used by portal:	yes

oidcOPMetaDataOptionsDisplay

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Display
Used by portal:	yes

oidcOPMetaDataOptionsDisplayName

Location:	OpenID Connect Providers » configuration key » Display » Name
Used by portal:	yes

oidcOPMetaDataOptionsIDTokenMaxAge

Location:	OpenID Connect Providers » configuration key » Options » Protocol » ID Token max age
Used by portal:	yes

oidcOPMetaDataOptionsIcon

Location:	OpenID Connect Providers » configuration key » Display » Logo
Used by portal:	yes

oidcOPMetaDataOptionsJWKSTimeout

Location:	OpenID Connect Providers » configuration key » Options » Configuration » JWKS data timeout
Used by portal:	yes

oidcOPMetaDataOptionsMaxAge

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Max age
Used by portal:	yes

oidcOPMetaDataOptionsNoJwtHeader

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Do not add JWT typ header
Description:	Don’t insert typ header
Used by portal:	yes

oidcOPMetaDataOptionsPrompt

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Prompt
Used by portal:	yes

oidcOPMetaDataOptionsRequireIss

Location:	OpenID Connect Providers » configuration key » Options » Configuration » Issuer required
Description:	Require iss parameter in authorization response (RFC 9207)
Used by portal:	yes

oidcOPMetaDataOptionsRequirePkce

Location:	OpenID Connect Providers » configuration key » Options » Configuration » PKCE required
Description:	Use PKCE with this OP
Used by portal:	yes

oidcOPMetaDataOptionsResolutionRule

Location:	OpenID Connect Providers » configuration key » Display » Resolution rule
Used by portal:	yes

oidcOPMetaDataOptionsScope

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Scope
Used by portal:	yes

oidcOPMetaDataOptionsSigningKey

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Signing key name
Used by portal:	yes

oidcOPMetaDataOptionsSortNumber

Location:	OpenID Connect Providers » configuration key » Display » Order
Used by portal:	yes

oidcOPMetaDataOptionsStoreIDToken

Location:	OpenID Connect Providers » configuration key » Options » Configuration » Store ID Token
Used by portal:	yes

oidcOPMetaDataOptionsTokenEndpointAuthMethod

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Token endpoint authentication method
Used by portal:	yes

oidcOPMetaDataOptionsTokenEndpointAuthSigAlg

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Signature algorithm for token endpoint authentication
Used by portal:	yes

oidcOPMetaDataOptionsTooltip

Location:	OpenID Connect Providers » configuration key » Display » Tooltip
Used by portal:	yes

oidcOPMetaDataOptionsUiLocales

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Locales UI
Used by portal:	yes

oidcOPMetaDataOptionsUseNonce

Location:	OpenID Connect Providers » configuration key » Options » Protocol » Use nonce
Used by portal:	yes

oidcOPMetaDataOptionsUserAttribute

Location:	OpenID Connect Providers » configuration key » Options » Configuration » Attribute containing user identifier
Used by portal:	yes

oidcOPMetaDataOptionsUserinfoSource

Location:	OpenID Connect Providers » configuration key » Options » Protocol » User Info source
Description:	Source of userinfo
Used by portal:	yes

oidcOfflineTokens

Location:	General Parameters » Plugins » Offline session tab
Description:	OIDC personnal offline token removal
Used by portal:	yes

oidcRPCallbackGetParam

Location:	General Parameters » Authentication parameters » OpenID Connect parameters » Callback GET parameter
Description:	OpenID Connect Callback GET URLparameter
Used by portal:	yes

oidcRPMetaDataExportedVars

Location:	OpenID Connect Relying Parties » configuration key » Exported attributes (claims)
Used by portal:	yes

oidcRPMetaDataMacros

Location:	OpenID Connect Relying Parties » configuration key » Macros
Description:	Macros
Used by portal:	yes

oidcRPMetaDataNodes

Used by portal:	yes
Ini only:	yes

oidcRPMetaDataOptions

Location:	Options
Used by portal:	yes

oidcRPMetaDataOptionsAccessTokenClaims

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » Release claims in Access Token
Used by portal:	yes

oidcRPMetaDataOptionsAccessTokenEncContentEncAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Access Token Encryption content encryption algorithm
Description:	“enc” algorithm for access_token encryption
Used by portal:	yes

oidcRPMetaDataOptionsAccessTokenEncKeyMgtAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Access Token Encryption key management alg
Description:	“alg” algorithm for access_token encryption
Used by portal:	yes

oidcRPMetaDataOptionsAccessTokenExpiration

Location:	OpenID Connect Relying Parties » configuration key » Options » Timeouts » Access Tokens
Used by portal:	yes

oidcRPMetaDataOptionsAccessTokenJWT

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » Use JWT format for Access Token
Used by portal:	yes

oidcRPMetaDataOptionsAccessTokenSignAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Access Token signature algorithm
Used by portal:	yes

oidcRPMetaDataOptionsActivation

Location:	OpenID Connect Relying Parties » configuration key » Options » Activation
Used by portal:	yes

oidcRPMetaDataOptionsAdditionalAudiences

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » Additional audiences
Used by portal:	yes

oidcRPMetaDataOptionsAllowClientCredentialsGrant

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Allow OAuth2.0 Client Credentials Grant
Description:	Allow OAuth2 Client Credentials Grant
Used by portal:	yes

oidcRPMetaDataOptionsAllowNativeSso

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Allow Native SSO for Mobile App
Description:	Allow Native SSO for Mobile Apps
Used by portal:	yes

oidcRPMetaDataOptionsAllowOffline

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Allow offline access
Description:	Allow offline access
Used by portal:	yes

oidcRPMetaDataOptionsAllowPasswordGrant

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Allow OAuth2.0 Password Grant
Description:	Allow OAuth2 Resource Owner Password Credentials Grant
Used by portal:	yes

oidcRPMetaDataOptionsAuthMethod

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Token endpoint authentication method
Used by portal:	yes

oidcRPMetaDataOptionsAuthRequiredForAuthorize

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Require JWS for authorization requests
Used by portal:	yes

oidcRPMetaDataOptionsAuthnLevel

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Required authentication level
Description:	Authentication level requires to access to this RP
Used by portal:	yes

oidcRPMetaDataOptionsAuthnRequireNonce

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Require “nonce” in authorization request
Used by portal:	yes

oidcRPMetaDataOptionsAuthnRequireState

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Require “state” in authorization request
Used by portal:	yes

oidcRPMetaDataOptionsAuthorizationCodeExpiration

Location:	OpenID Connect Relying Parties » configuration key » Options » Timeouts » Authorization Codes
Used by portal:	yes

oidcRPMetaDataOptionsBypassConsent

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » Bypass consent
Used by portal:	yes

oidcRPMetaDataOptionsClientID

Location:	OpenID Connect Relying Parties » configuration key » Basic » Client ID
Used by portal:	yes

oidcRPMetaDataOptionsClientSecret

Location:	OpenID Connect Relying Parties » configuration key » Basic » Client secret
Used by portal:	yes

oidcRPMetaDataOptionsComment

Location:	OpenID Connect Relying Parties » configuration key » Options » Comment
Used by portal:	yes

oidcRPMetaDataOptionsDisplayName

Location:	OpenID Connect Relying Parties » configuration key » Display » Name
Used by portal:	yes

oidcRPMetaDataOptionsExtraClaims

Location:	OpenID Connect Relying Parties » configuration key » Options » Scope » Scope values content
Used by portal:	yes

oidcRPMetaDataOptionsIDTokenExpiration

Location:	OpenID Connect Relying Parties » configuration key » Options » Timeouts » ID Tokens
Used by portal:	yes

oidcRPMetaDataOptionsIDTokenForceClaims

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » Force claims to be returned in ID Token
Used by portal:	yes

oidcRPMetaDataOptionsIDTokenSignAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » ID Token signature algorithm
Used by portal:	yes

oidcRPMetaDataOptionsIcon

Location:	OpenID Connect Relying Parties » configuration key » Display » Logo
Used by portal:	yes

oidcRPMetaDataOptionsIdTokenEncContentEncAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » ID Token Encryption content encryption algorithm
Description:	“enc” algorithm for id_token encryption
Used by portal:	yes

oidcRPMetaDataOptionsIdTokenEncKeyMgtAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » ID Token Encryption key management alg
Description:	“alg” algorithm for id_token encryption
Used by portal:	yes

oidcRPMetaDataOptionsIntrospectionEncContentEncAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Introspection encryption content encryption algorithm
Description:	“enc” for introspection response encryption (RFC 9701)
Used by portal:	yes

oidcRPMetaDataOptionsIntrospectionEncKeyMgtAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Introspection encryption key management algorithm
Description:	“alg” for introspection response encryption (RFC 9701)
Used by portal:	yes

oidcRPMetaDataOptionsIntrospectionSignAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Introspection response format
Description:	Introspection response signature algorithm (RFC 9701)
Used by portal:	yes

oidcRPMetaDataOptionsJwks

Location:	OpenID Connect Relying Parties » configuration key » Options » Keys » JWKS data
Description:	Relying party JWKS document
Used by portal:	yes

oidcRPMetaDataOptionsJwksUri

Location:	OpenID Connect Relying Parties » configuration key » Options » Keys » JWKS URL
Description:	Relying party JWKS endpoint (to get encryption keys)
Used by portal:	yes

oidcRPMetaDataOptionsLogoutBypassConfirm

Location:	OpenID Connect Relying Parties » configuration key » Options » Logout » Bypass confirm
Description:	Bypass logout confirmation
Used by portal:	yes

oidcRPMetaDataOptionsLogoutEncContentEncAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Logout Encryption content encryption algorithm
Description:	“enc” algorithm for logout encryption
Used by portal:	yes

oidcRPMetaDataOptionsLogoutEncKeyMgtAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Logout Encryption key management alg
Description:	“alg” algorithm for logout token encryption
Used by portal:	yes

oidcRPMetaDataOptionsLogoutSessionRequired

Location:	OpenID Connect Relying Parties » configuration key » Options » Logout » Session required
Description:	Session required for back/front channel logout
Used by portal:	yes

oidcRPMetaDataOptionsLogoutType

Location:	OpenID Connect Relying Parties » configuration key » Options » Logout » Type
Description:	Logout type
Used by portal:	yes

oidcRPMetaDataOptionsLogoutUrl

Location:	OpenID Connect Relying Parties » configuration key » Options » Logout » URL
Description:	Logout URL
Used by portal:	yes

oidcRPMetaDataOptionsNoJwtHeader

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » Do not add JWT typ header
Description:	Don’t insert typ header
Used by portal:	yes

oidcRPMetaDataOptionsOfflineSessionExpiration

Location:	OpenID Connect Relying Parties » configuration key » Options » Timeouts » Offline sessions
Used by portal:	yes

oidcRPMetaDataOptionsPostLogoutRedirectUris

Location:	OpenID Connect Relying Parties » configuration key » Options » Logout » Allowed redirection addresses for logout
Used by portal:	yes

oidcRPMetaDataOptionsPublic

Location:	OpenID Connect Relying Parties » configuration key » Basic » Public client
Description:	Declare this RP as public client
Used by portal:	yes

oidcRPMetaDataOptionsRedirectUris

Location:	OpenID Connect Relying Parties » configuration key » Basic » Allowed redirection addresses for login
Used by portal:	yes

oidcRPMetaDataOptionsRefreshToken

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » Use refresh tokens
Description:	Issue refresh tokens
Used by portal:	yes

oidcRPMetaDataOptionsRefreshTokenRotation

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Invalidate refresh tokens after use
Description:	Invalidate refresh token after use
Used by portal:	yes

oidcRPMetaDataOptionsRequestUris

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Allowed URLs for fetching Request Object
Used by portal:	yes

oidcRPMetaDataOptionsRequirePKCE

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Require PKCE
Description:	Require PKCE
Used by portal:	yes

oidcRPMetaDataOptionsRtActivity

Location:	OpenID Connect Relying Parties » configuration key » Options » Timeouts » refresh_token activity timeout
Description:	refresh_token activity timeout
Used by portal:	yes

oidcRPMetaDataOptionsRule

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Access rule
Description:	Rule to grant access to this RP
Used by portal:	yes

oidcRPMetaDataOptionsSigningKey

Location:	OpenID Connect Relying Parties » configuration key » Options » Keys » Signing key name
Used by portal:	yes

oidcRPMetaDataOptionsTokenXAuthorizedRP

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » Other RP allowed to exchange Access Token
Description:	List of RP authorized to query for an access_token of this RP
Used by portal:	yes

oidcRPMetaDataOptionsUserIDAttr

Location:	OpenID Connect Relying Parties » configuration key » Options » Advanced » User attribute
Used by portal:	yes

oidcRPMetaDataOptionsUserInfoEncContentEncAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Userinfo encryption content encryption algorithm
Description:	“enc” algorithm for user_info encryption
Used by portal:	yes

oidcRPMetaDataOptionsUserInfoEncKeyMgtAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Userinfo encryption key management algorithm
Description:	“alg” algorithm for user_info encryption
Used by portal:	yes

oidcRPMetaDataOptionsUserInfoSignAlg

Location:	OpenID Connect Relying Parties » configuration key » Options » Algorithms » Userinfo response format
Used by portal:	yes

oidcRPMetaDataOptionsUserinfoRequireHeaderToken

Location:	OpenID Connect Relying Parties » configuration key » Options » Security » Userinfo endpoint authentication using header only
Description:	/userinfo endpoint requires authn using Bearer token
Used by portal:	yes

oidcRPMetaDataScopeRules

Location:	OpenID Connect Relying Parties » configuration key » Options » Scope » Scope rules
Description:	Scope rules
Used by portal:	yes

oidcRPStateTimeout

Location:	General Parameters » Authentication parameters » OpenID Connect parameters » State session timeout
Description:	OpenID Connect Timeout of state sessions
Used by portal:	yes

oidcServiceAccessTokenExpiration

Location:	OpenID Connect Service » Timeouts » Access Tokens
Description:	OpenID Connect global access token TTL
Used by portal:	yes

oidcServiceAllowAuthorizationCodeFlow

Location:	OpenID Connect Service » Security » Authorization Code Flow
Description:	OpenID Connect allow authorization code flow
Used by portal:	yes

oidcServiceAllowDynamicRegistration

Location:	OpenID Connect Service » Dynamic registration » Activation
Description:	OpenID Connect allow dynamic client registration
Used by portal:	yes

oidcServiceAllowHybridFlow

Location:	OpenID Connect Service » Security » Hybrid Flow
Description:	OpenID Connect allow hybrid flow
Used by portal:	yes

oidcServiceAllowImplicitFlow

Location:	OpenID Connect Service » Security » Implicit Flow
Description:	OpenID Connect allow implicit flow
Used by portal:	yes

oidcServiceAllowOnlyDeclaredScopes

Location:	OpenID Connect Service » Security » Only allow declared scopes
Description:	OpenID Connect allow only declared scopes
Used by portal:	yes

oidcServiceAuthorizationCodeExpiration

Location:	OpenID Connect Service » Timeouts » Authorization Codes
Description:	OpenID Connect global code TTL
Used by portal:	yes

oidcServiceDynamicRegistrationExportedVars

Location:	OpenID Connect Service » Dynamic registration » Exported vars
Description:	OpenID Connect exported variables for dynamic registration
Used by portal:	yes

oidcServiceDynamicRegistrationExtraClaims

Location:	OpenID Connect Service » Dynamic registration » Extra claims
Description:	OpenID Connect extra claims for dynamic registration
Used by portal:	yes

oidcServiceEncAlgorithmAlg

Location:	OpenID Connect Service » Security » Default “alg” algorithm for JWE encryption
Description:	JWT encryption algorithme
Used by portal:	yes

oidcServiceEncAlgorithmEnc

Location:	OpenID Connect Service » Security » Default “enc” algorithm for JWE encryption
Description:	JWT encryption algorithme
Used by portal:	yes

oidcServiceEncryptionKey

Location:	OpenID Connect Service » Security » Advanced key configuration » Encryption key name
Description:	Key to use for OIDC encryption
Used by portal:	yes

oidcServiceHideMetadata

Location:	OpenID Connect Service » Security » Do not display metadata
Used by portal:	yes

oidcServiceIDTokenExpiration

Location:	OpenID Connect Service » Timeouts » ID Tokens
Description:	OpenID Connect global ID token TTL
Used by portal:	yes

oidcServiceIgnoreScopeForClaims

Location:	OpenID Connect Service » Security » Always send exported attributes
Description:	OpenID Connect release all attributes even when not allowed by scope
Used by portal:	yes

oidcServiceKeyIdEnc

Location:	OpenID Connect Service » Security » Keys » Encryption keys » Encryption key ID
Description:	OpenID Connect Encryption Key ID
Used by portal:	yes

oidcServiceKeyIdSig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Signing key ID
Description:	OpenID Connect Signature Key ID
Used by portal:	yes

oidcServiceKeyTypeEnc

Location:	OpenID Connect Service » Security » Keys » Encryption keys » Key type
Used by portal:	yes

oidcServiceKeyTypeSig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Key type
Used by portal:	yes

oidcServiceMetaDataAmrRules

Location:	OpenID Connect Service » Authentication Method Reference rules
Description:	OpenID Connect AMR rules
Used by portal:	yes

oidcServiceMetaDataAuthnContext

Location:	OpenID Connect Service » Authentication context
Description:	OpenID Connect Authentication Context Class Ref
Used by portal:	yes

oidcServiceMetaDataAuthorizeURI

Location:	OpenID Connect Service » Endpoints » Authorization
Description:	OpenID Connect authorizaton endpoint
Used by portal:	yes

oidcServiceMetaDataBackChannelURI

Location:	OpenID Connect Service » Endpoints » Back-Channel URI
Description:	OpenID Connect Back-Channel logout endpoint
Used by portal:	yes

oidcServiceMetaDataCheckSessionURI

Location:	OpenID Connect Service » Endpoints » Check Session
Description:	OpenID Connect check session iframe
Used by portal:	yes

oidcServiceMetaDataDisallowNoneAlg

Location:	OpenID Connect Service » Security » Disallow “none” algorithm for signature
Used by portal:	yes

oidcServiceMetaDataEndSessionURI

Location:	OpenID Connect Service » Endpoints » End of session
Description:	OpenID Connect end session endpoint
Used by portal:	yes

oidcServiceMetaDataFrontChannelURI

Location:	OpenID Connect Service » Endpoints » Front-Channel URI
Description:	OpenID Connect Front-Channel logout endpoint
Used by portal:	yes

oidcServiceMetaDataIntrospectionURI

Location:	OpenID Connect Service » Endpoints » Introspection
Description:	OpenID Connect introspection endpoint
Used by portal:	yes

oidcServiceMetaDataIssuer

Location:	OpenID Connect Service » Issuer identifier
Description:	OpenID Connect issuer
Used by portal:	yes

oidcServiceMetaDataJWKSURI

Location:	OpenID Connect Service » Endpoints » JWKS
Description:	OpenID Connect JWKS endpoint
Used by portal:	yes

oidcServiceMetaDataRegistrationURI

Location:	OpenID Connect Service » Endpoints » Registration
Description:	OpenID Connect registration endpoint
Used by portal:	yes

oidcServiceMetaDataRevokeURI

Location:	OpenID Connect Service » Endpoints » Token revocation
Description:	OpenID Connect token revocation endpoint
Used by portal:	yes

oidcServiceMetaDataRpLogoutReturnURI

Location:	OpenID Connect Service » Endpoints » Logout return endpoint
Description:	OpenID Connect RP-Initiated logout return endpoint
Used by portal:	yes

oidcServiceMetaDataTokenURI

Location:	OpenID Connect Service » Endpoints » Tokens
Description:	OpenID Connect token endpoint
Used by portal:	yes

oidcServiceMetaDataUserInfoURI

Location:	OpenID Connect Service » Endpoints » User Info
Description:	OpenID Connect user info endpoint
Used by portal:	yes

oidcServiceMetadataTtl

Location:	OpenID Connect Service » Timeouts » OIDC Metadata TTL
Description:	OIDC Metadata TTL
Used by portal:	yes

oidcServiceNewKeyIdSig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Next signing key ID
Description:	Future OpenID Connect Signature Key ID
Used by portal:	yes

oidcServiceNewKeyTypeSig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Key type
Used by portal:	yes

oidcServiceNewPrivateKeySig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Next signing private key
Used by portal:	yes

oidcServiceNewPublicKeySig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Next signing public key
Used by portal:	yes

oidcServiceOfflineSessionExpiration

Location:	OpenID Connect Service » Timeouts » Offline sessions
Description:	OpenID Connect global offline session TTL
Used by portal:	yes

oidcServiceOldKeyIdEnc

Location:	OpenID Connect Service » Security » Keys » Encryption keys » Previous encryption key ID
Description:	Previous OpenID Connect Encryption Key ID
Used by portal:	yes

oidcServiceOldKeyIdSig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Previous signing key ID
Description:	Previous OpenID Connect Signature Key ID
Used by portal:	yes

oidcServiceOldKeyTypeEnc

Location:	OpenID Connect Service » Security » Keys » Encryption keys » Key type
Used by portal:	yes

oidcServiceOldKeyTypeSig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Key type
Used by portal:	yes

oidcServiceOldPrivateKeyEnc

Location:	OpenID Connect Service » Security » Keys » Encryption keys » Previous encryption private key
Used by portal:	yes

oidcServiceOldPrivateKeySig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Previous signing private key
Used by portal:	yes

oidcServiceOldPublicKeyEnc

Location:	OpenID Connect Service » Security » Keys » Encryption keys » Previous encryption public key
Used by portal:	yes

oidcServiceOldPublicKeySig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Previous signing public key
Used by portal:	yes

oidcServicePrivateKeyEnc

Location:	OpenID Connect Service » Security » Keys » Encryption keys » Encryption private key
Used by portal:	yes

oidcServicePrivateKeySig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Signing private key
Used by portal:	yes

oidcServicePublicKeyEnc

Location:	OpenID Connect Service » Security » Keys » Encryption keys » Encryption public key
Used by portal:	yes

oidcServicePublicKeySig

Location:	OpenID Connect Service » Security » Keys » Signature keys » Signing public key
Used by portal:	yes

oidcServiceSignatureKey

Location:	OpenID Connect Service » Security » Advanced key configuration » Signing key name
Description:	Key to use for OIDC signature
Used by portal:	yes

oidcStorage

Location:	OpenID Connect Service » Sessions » OIDC sessions module name
Description:	Apache::Session module to store OIDC user data
Used by portal:	yes

oidcStorageOptions

Location:	OpenID Connect Service » Sessions » OIDC sessions module options
Description:	Apache::Session module parameters
Used by portal:	yes

okta2fActivation

Location:	General Parameters » Second factors » Okta » Activation
Description:	Okta2F activation
Used by portal:	yes

okta2fAdminURL

Location:	General Parameters » Second factors » Okta » Administration URL
Description:	Okta Administration URL
Used by portal:	yes

okta2fApiKey

Location:	General Parameters » Second factors » Okta » API key
Description:	Okta API key
Used by portal:	yes

okta2fAuthnLevel

Location:	General Parameters » Second factors » Okta » Authentication level
Description:	Authentication level for users authentified by Okta2F
Used by portal:	yes

okta2fLabel

Location:	General Parameters » Second factors » Okta » Label
Description:	Portal label for Okta2F
Used by portal:	yes

okta2fLoginAttribute

Location:	General Parameters » Second factors » Okta » Attribute containing the login
Description:	Session key containing Okta login
Used by portal:	yes

okta2fLogo

Location:	General Parameters » Second factors » Okta » Logo
Description:	Custom logo for Okta 2F
Used by portal:	yes

oldNotifFormat

Location:	General Parameters » Plugins » Notifications » Use old XML format
Description:	Use old XML format for notifications
Used by portal:	yes

openIdAttr

Location:	General Parameters » Issuer modules » OpenID » Options » OpenID login
Used by portal:	yes

openIdAuthnLevel

Location:	General Parameters » Authentication parameters » OpenID parameters » Authentication level
Description:	OpenID authentication level
Used by portal:	yes

openIdExportedVars

Location:	General Parameters » Authentication parameters » OpenID parameters » Exported variables
Description:	OpenID exported variables
Used by portal:	yes

openIdIDPList

Location:	General Parameters » Authentication parameters » OpenID parameters » Authorized domains
Used by portal:	yes

openIdIssuerSecret

Location:	General Parameters » Issuer modules » OpenID » Options » Secret token
Used by portal:	yes

openIdSPList

Location:	General Parameters » Issuer modules » OpenID » Options » Authorized domains
Used by portal:	yes

openIdSecret

Location:	General Parameters » Authentication parameters » OpenID parameters » Secret token
Used by portal:	yes

openIdSreg_country

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Country
Used by portal:	yes

openIdSreg_dob

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Date of birth
Used by portal:	yes

openIdSreg_email

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Email
Description:	OpenID SREG email session parameter
Used by portal:	yes

openIdSreg_fullname

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Full name
Description:	OpenID SREG fullname session parameter
Used by portal:	yes

openIdSreg_gender

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Gender
Used by portal:	yes

openIdSreg_language

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Language
Used by portal:	yes

openIdSreg_nickname

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Nick name
Description:	OpenID SREG nickname session parameter
Used by portal:	yes

openIdSreg_postcode

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Postal code
Used by portal:	yes

openIdSreg_timezone

Location:	General Parameters » Issuer modules » OpenID » Options » SREG mapping » Timezone
Description:	OpenID SREG timezone session parameter
Used by portal:	yes

pamAuthnLevel

Location:	General Parameters » Authentication parameters » PAM parameters » Authentication level
Description:	PAM authentication level
Used by portal:	yes

pamService

Location:	General Parameters » Authentication parameters » PAM parameters » PAM service
Description:	PAM service
Used by portal:	yes

password2fActivation

Location:	General Parameters » Second factors » Password » Activation
Description:	Password2F activation
Used by portal:	yes

password2fAuthnLevel

Location:	General Parameters » Second factors » Password » Authentication level
Description:	Authentication level for users authentified by Password2F
Used by portal:	yes

password2fLabel

Location:	General Parameters » Second factors » Password » Label
Description:	Portal label for Password2F
Used by portal:	yes

password2fLogo

Location:	General Parameters » Second factors » Password » Logo
Description:	Custom logo for Password 2F
Used by portal:	yes

password2fSelfRegistration

Location:	General Parameters » Second factors » Password » Self registration
Description:	Password2F self registration activation
Used by portal:	yes

password2fTTL

Location:	General Parameters » Second factors » Password » Lifetime
Description:	Password2F device time to live
Used by portal:	yes

password2fUserCanRemoveKey

Location:	General Parameters » Second factors » Password » Allow user to remove password
Description:	Authorize users to remove existing Password2F secret
Used by portal:	yes

passwordDB

Location:	General Parameters » Authentication parameters » Password module
Description:	Password module
Used by portal:	yes

passwordPolicyActivation

Location:	General Parameters » Portal » Customization » Password policy » Activation
Description:	Enable password policy
Used by portal:	yes

passwordPolicyMaxSize

Location:	General Parameters » Portal » Customization » Password policy » Maximal size
Description:	Password policy: maximal size
Used by portal:	yes

passwordPolicyMinDigit

Location:	General Parameters » Portal » Customization » Password policy » Minimal digit characters
Description:	Password policy: minimal digit characters
Used by portal:	yes

passwordPolicyMinLower

Location:	General Parameters » Portal » Customization » Password policy » Minimal lower characters
Description:	Password policy: minimal lower characters
Used by portal:	yes

passwordPolicyMinSize

Location:	General Parameters » Portal » Customization » Password policy » Minimal size
Description:	Password policy: minimal size
Used by portal:	yes

passwordPolicyMinSpeChar

Location:	General Parameters » Portal » Customization » Password policy » Minimal special characters
Description:	Password policy: minimal special characters
Used by portal:	yes

passwordPolicyMinUpper

Location:	General Parameters » Portal » Customization » Password policy » Minimal upper characters
Description:	Password policy: minimal upper characters
Used by portal:	yes

passwordPolicySpecialChar

Location:	General Parameters » Portal » Customization » Password policy » Allowed special characters
Description:	Password policy: allowed special characters
Used by portal:	yes

passwordResetAllowedRetries

Location:	General Parameters » Plugins » Reset password by mail » Other » Max reset password retries
Description:	Maximum number of retries to reset password
Used by portal:	yes

pdataDomain

Used by handler:
Description:	pdata cookie DNS domain
Used by portal:	yes
	yes
Ini only:	yes

persistentSessionAttributes

Description:	Persistent session attributes to hide
Used by portal:	yes
Ini only:	yes

persistentStorage

Location:	General Parameters » Sessions » Persistent sessions » Apache::Session module
Description:	Storage module for persistent sessions
Used by portal:	yes

persistentStorageOptions

Location:	General Parameters » Sessions » Persistent sessions » Apache::Session module parameters
Description:	Options for persistent sessions storage module
Used by portal:	yes

port

Used by handler:
Location:	General Parameters » Advanced parameters » Handler redirections » Port
Description:	Force port in redirection
	yes

portal

Used by manager:
Location:	General Parameters » Portal » URL
Description:	Portal URL
Used by portal:	yes
	yes
Used by handler:
	yes

portalAntiFrame

Location:	General Parameters » Portal » Customization » Other » Anti iFrame protection
Description:	Avoid portal to be displayed inside frames
Used by portal:	yes

portalCheckLogins

Location:	General Parameters » Portal » Customization » Buttons on login page » Check last logins
Description:	Display login history checkbox in portal
Used by portal:	yes

portalCustomCss

Location:	General Parameters » Portal » Customization » Custom CSS file
Description:	Path to custom CSS file
Used by portal:	yes

portalCustomJs

Location:	General Parameters » Portal » Customization » Custom JS file
Description:	Path to custom JS file
Used by portal:	yes

portalCustomTplParams

Location:	General Parameters » Portal » Customization » Custom template parameters
Description:	Custom templates parameters
Used by portal:	yes

portalDisplayAppslist

Location:	General Parameters » Portal » Menu » Modules activation » Application list
Description:	Display applications tab in portal
Used by portal:	yes

portalDisplayCertificateResetByMail

Location:	General Parameters » Portal » Customization » Buttons on login page » Reset certificate
Description:	Display certificate reset by mail button in portal
Used by portal:	yes

portalDisplayChangePassword

Location:	General Parameters » Portal » Menu » Modules activation » Password change
Description:	Display password tab in portal
Used by portal:	yes

portalDisplayGeneratePassword

Location:	General Parameters » Plugins » Reset password by mail » Other » Display generate password box
Description:	Display password generate box in reset password form
Used by portal:	yes

portalDisplayLoginHistory

Location:	General Parameters » Portal » Menu » Modules activation » Login history
Description:	Display login history tab in portal
Used by portal:	yes

portalDisplayLogout

Location:	General Parameters » Portal » Menu » Modules activation » Logout
Description:	Display logout tab in portal
Used by portal:	yes

portalDisplayOfflineTokens

Location:	General Parameters » Portal » Menu » Modules activation » Display offline session tab
Used by portal:	yes

portalDisplayOidcConsents

Location:	General Parameters » Portal » Menu » Modules activation » OIDC consents
Description:	Display OIDC consents tab in portal
Used by portal:	yes

portalDisplayOrder

Location:	General Parameters » Portal » Menu » Modules activation » Display order
Description:	List for ordering tabs in portal
Used by portal:	yes

portalDisplayPasswordPolicy

Location:	General Parameters » Portal » Customization » Password policy » Display policy in password form
Description:	Display policy in password form
Used by portal:	yes

portalDisplayRefreshMyRights

Location:	General Parameters » Portal » Customization » Other » Display rights refresh link
Description:	Display link to refresh the user session
Used by portal:	yes

portalDisplayRegister

Location:	General Parameters » Portal » Customization » Buttons on login page » Register new account
Description:	Display register button in portal
Used by portal:	yes

portalDisplayResetPassword

Location:	General Parameters » Portal » Customization » Buttons on login page » Reset password
Description:	Display reset password button in portal
Used by portal:	yes

portalEnablePasswordDisplay

Location:	General Parameters » Portal » Customization » Password management » Allow to display password
Description:	Allow to display password in login form
Used by portal:	yes

portalErrorOnExpiredSession

Location:	General Parameters » Portal » Customization » Other » Show error on expired session
Description:	Show error if session is expired
Used by portal:	yes

portalErrorOnMailNotFound

Location:	General Parameters » Portal » Customization » Other » Show error on mail not found
Description:	Show error if mail is not found in password reset process
Used by portal:	yes

portalFavicon

Location:	General Parameters » Portal » Customization » Favicon
Description:	Path to favicon file
Used by portal:	yes

portalForceAuthn

Location:	General Parameters » Advanced parameters » Security » Force authentication
Description:	Enable force to authenticate when displaying portal
Used by portal:	yes

portalForceAuthnInterval

Location:	General Parameters » Advanced parameters » Security » Force authentication interval
Description:	Maximum interval in seconds since last authentication to force reauthentication
Used by portal:	yes

portalMainLogo

Location:	General Parameters » Portal » Customization » Main logo
Description:	Portal main logo path
Used by portal:	yes

portalOpenLinkInNewWindow

Location:	General Parameters » Portal » Customization » Other » New window
Description:	Open applications in new windows
Used by portal:	yes

portalPingInterval

Location:	General Parameters » Portal » Customization » Other » Ping interval
Description:	Interval in ms between portal Ajax pings
Used by portal:	yes

portalRequireOldPassword

Location:	General Parameters » Portal » Customization » Password management » Require old password
Description:	Rule to require old password to change the password
Used by portal:	yes

portalSkin

Location:	General Parameters » Portal » Customization » Default skin
Description:	Name of portal skin
Used by portal:	yes

portalSkinBackground

Location:	General Parameters » Portal » Customization » Skin background
Description:	Background image of portal skin
Used by portal:	yes

portalSkinRules

Location:	General Parameters » Portal » Customization » Skin display rules
Description:	Rules to choose portal skin
Used by portal:	yes

portalStatus

Location:	General Parameters » Plugins » Publish portal status
Description:	Enable portal status
Used by portal:	yes

portalUserAttr

Location:	General Parameters » Portal » Customization » Other » User attribute
Description:	Session parameter to display connected user in portal
Used by portal:	yes

post

Location:	Virtual Hosts » configuration key » Form replay
Description:	Virtualhost urls/Data to post
Used by portal:	yes

protection

Used by manager:
Description:	Manager protection method
	yes
Used by handler:
	yes
Ini only:	yes

proxyAuthService

Location:	General Parameters » Authentication parameters » Proxy parameters » Internal Portal » URL
Used by portal:	yes

proxyAuthServiceChoiceParam

Location:	General Parameters » Authentication parameters » Proxy parameters » Internal Portal » Choice parameter
Used by portal:	yes

proxyAuthServiceChoiceValue

Location:	General Parameters » Authentication parameters » Proxy parameters » Internal Portal » Choice value
Used by portal:	yes

proxyAuthServiceImpersonation

Location:	General Parameters » Authentication parameters » Proxy parameters » Internal Portal » Impersonation
Description:	Enable internal portal Impersonation
Used by portal:	yes

proxyAuthnLevel

Location:	General Parameters » Authentication parameters » Proxy parameters » Authentication level
Description:	Proxy authentication level
Used by portal:	yes

proxyCookieName

Location:	General Parameters » Authentication parameters » Proxy parameters » Internal Portal » Cookie name
Description:	Name of the internal portal cookie
Used by portal:	yes

proxySessionService

Location:	General Parameters » Authentication parameters » Proxy parameters » Internal Portal » Session service URL
Used by portal:	yes

proxyUseSoap

Location:	General Parameters » Authentication parameters » Proxy parameters » Use SOAP instead of REST
Description:	Use SOAP instead of REST
Used by portal:	yes

publicNotifications

Location:	General Parameters » Plugins » Notifications » Public notifications
Description:	Enable PublicNotification plugin
Used by portal:	yes

radius2fActivation

Location:	General Parameters » Second factors » Radius second factor » Activation
Description:	Radius second factor activation
Used by portal:	yes

radius2fAuthnLevel

Location:	General Parameters » Second factors » Radius second factor » Authentication level
Description:	Authentication level for users authenticated by Radius second factor
Used by portal:	yes

radius2fDictionaryFile

Location:	General Parameters » Second factors » Radius second factor » Dictionary
Used by portal:	yes

radius2fLabel

Location:	General Parameters » Second factors » Radius second factor » Label
Description:	Portal label for Radius 2F
Used by portal:	yes

radius2fLogo

Location:	General Parameters » Second factors » Radius second factor » Logo
Description:	Custom logo for Radius 2F
Used by portal:	yes

radius2fMsgAuth

Location:	General Parameters » Second factors » Radius second factor » Authenticate RADIUS requests
Description:	Use Message-Authentication for Radius requests
Used by portal:	yes

radius2fRequestAttributes

Location:	General Parameters » Second factors » Radius second factor » Access request attributes
Description:	RADIUS second factor authentication attributes
Used by portal:	yes

radius2fSecret

Location:	General Parameters » Second factors » Radius second factor » Shared secret
Used by portal:	yes

radius2fSendInitialRequest

Location:	General Parameters » Second factors » Radius second factor » Add login validation call
Description:	Dial in to radius server before displaying form
Used by portal:	yes

radius2fServer

Location:	General Parameters » Second factors » Radius second factor » Server hostname
Used by portal:	yes

radius2fTimeout

Location:	General Parameters » Second factors » Radius second factor » Authentication timeout
Description:	Radius 2f verification timeout
Used by portal:	yes

radius2fUsernameSessionKey

Location:	General Parameters » Second factors » Radius second factor » Session key containing login
Description:	Session key used as Radius login
Used by portal:	yes

radiusAuthnLevel

Location:	General Parameters » Authentication parameters » Radius parameters » Authentication level
Description:	Radius authentication level
Used by portal:	yes

radiusDictionaryFile

Location:	General Parameters » Authentication parameters » Radius parameters » Dictionary
Used by portal:	yes

radiusExportedVars

Location:	General Parameters » Authentication parameters » Radius parameters » Exported variables
Description:	RADIUS exported variables
Used by portal:	yes

radiusMsgAuth

Location:	General Parameters » Authentication parameters » Radius parameters » Authenticate RADIUS requests
Description:	Use Message-Authentication for Radius requests
Used by portal:	yes

radiusRequestAttributes

Location:	General Parameters » Authentication parameters » Radius parameters » Access request attributes
Description:	RADIUS authentication attributes
Used by portal:	yes

radiusSecret

Location:	General Parameters » Authentication parameters » Radius parameters » Shared secret
Used by portal:	yes

radiusServer

Location:	General Parameters » Authentication parameters » Radius parameters » Server hostname
Used by portal:	yes

radiusTimeout

Location:	General Parameters » Authentication parameters » Radius parameters » Authentication timeout
Used by portal:	yes

randomPasswordRegexp

Location:	General Parameters » Plugins » Reset password by mail » Other » Regexp for password generation
Description:	Regular expression to create a random password
Used by portal:	yes

redirectFormMethod

Location:	General Parameters » Advanced parameters » Forms » Method for redirect form
Description:	HTTP method for redirect page form
Used by portal:	yes

refreshSessions

Location:	General Parameters » Plugins » Refresh sessions API
Description:	Refresh sessions plugin
Used by portal:	yes

registerConfirmBody

Location:	General Parameters » Plugins » Register new account » Mail content » Verification mail content
Description:	Mail body for register confirmation
Used by portal:	yes

registerConfirmSubject

Location:	General Parameters » Plugins » Register new account » Mail content » Verification mail subject
Description:	Mail subject for register confirmation
Used by portal:	yes

registerDB

Location:	General Parameters » Authentication parameters » Register module
Description:	Register module
Used by portal:	yes

registerDoneBody

Location:	General Parameters » Plugins » Register new account » Mail content » Credentials mail content
Description:	Mail body when register is done
Used by portal:	yes

registerDoneSubject

Location:	General Parameters » Plugins » Register new account » Mail content » Credentials mail subject
Description:	Mail subject when register is done
Used by portal:	yes

registerTimeout

Location:	General Parameters » Plugins » Register new account » Other » Validity time of a register request
Description:	Register session timeout
Used by portal:	yes

registerUrl

Location:	General Parameters » Plugins » Register new account » Other » Register page URL
Description:	URL of register page
Used by portal:	yes

reloadTimeout

Used by manager:
Location:	General Parameters » Advanced parameters » Events management » Reload timeout
Description:	Configuration reload timeout
	yes

reloadUrls

Location:	General Parameters » Advanced parameters » Events management » Reload URLs
Description:	URL to call on reload
Used by portal:	yes

rememberAuthChoiceForgetAtLogout

Location:	General Parameters » Plugins » Remember authentication choice » Forget auth choice at logout
Description:	Forget Auth Choice at logout
Used by portal:	yes

rememberAuthChoiceRule

Location:	General Parameters » Plugins » Remember authentication choice » Activation
Description:	remember auth choice activation rule
Used by portal:	yes

rememberCookieName

Location:	General Parameters » Plugins » Remember authentication choice » Cookie name
Description:	Name of the remember auth choice cookie
Used by portal:	yes

rememberCookieTimeout

Used by manager:
Location:	General Parameters » Plugins » Remember authentication choice » cookie lifetime
Description:	lifetime of the remember auth choice cookie
	yes

rememberDefaultChecked

Location:	General Parameters » Plugins » Remember authentication choice » Check by default
Description:	Is remember auth choice checkbox enabled by default?
Used by portal:	yes

rememberTimer

Used by manager:
Location:	General Parameters » Plugins » Remember authentication choice » Timer before automatic authentication choice
Description:	timer before automatic authentication with remembered choice
	yes

remoteCookieName

Location:	General Parameters » Authentication parameters » Remote parameters » Cookie name
Description:	Name of the remote portal cookie
Used by portal:	yes

remoteGlobalStorage

Location:	General Parameters » Authentication parameters » Remote parameters » Sessions module
Description:	Remote session backend
Used by portal:	yes

remoteGlobalStorageOptions

Location:	General Parameters » Authentication parameters » Remote parameters » Sessions module options
Description:	Apache::Session module parameters
Used by portal:	yes

remotePortal

Location:	General Parameters » Authentication parameters » Remote parameters » Portal URL
Used by portal:	yes

requireToken

Location:	General Parameters » Advanced parameters » Security » Require token for forms
Description:	Enable token for forms
Used by portal:	yes

rest2fActivation

Location:	General Parameters » Second factors » REST second factor » Activation
Description:	REST second factor activation
Used by portal:	yes

rest2fAuthnLevel

Location:	General Parameters » Second factors » REST second factor » Authentication level
Description:	Authentication level for users authentified by REST second factor
Used by portal:	yes

rest2fCodeActivation

Location:	General Parameters » Second factors » REST second factor » Code regex
Description:	OTP generated by Portal
Used by portal:	yes

rest2fInitArgs

Location:	General Parameters » Second factors » REST second factor » Arguments » Init arguments
Description:	Args for REST 2F init
Used by portal:	yes

rest2fInitUrl

Location:	General Parameters » Second factors » REST second factor » URL » Init URL
Description:	REST 2F init URL
Used by portal:	yes

rest2fLabel

Location:	General Parameters » Second factors » REST second factor » Label
Description:	Portal label for REST second factor
Used by portal:	yes

rest2fLogo

Location:	General Parameters » Second factors » REST second factor » Logo
Description:	Custom logo for REST 2F
Used by portal:	yes

rest2fResendInterval

Location:	General Parameters » Second factors » REST second factor » Re-send interval
Description:	Delay before user is allowed to resend code
Used by portal:	yes

rest2fVerifyArgs

Location:	General Parameters » Second factors » REST second factor » Arguments » Verify arguments
Description:	Args for REST 2F verify
Used by portal:	yes

rest2fVerifyUrl

Location:	General Parameters » Second factors » REST second factor » URL » Verify URL
Description:	REST 2F verify URL
Used by portal:	yes

restAuthArgs

Location:	General Parameters » Authentication parameters » REST parameters » Arguments » Authentication arguments
Description:	Extra args for REST Auth request
Used by portal:	yes

restAuthServer

Location:	General Parameters » Plugins » Portal servers » REST services » Authentication server
Description:	Enable REST authentication server
Used by portal:	yes

restAuthUrl

Location:	General Parameters » Authentication parameters » REST parameters » URL » Authentication URL
Used by portal:	yes

restAuthnLevel

Location:	General Parameters » Authentication parameters » REST parameters » Authentication level
Description:	REST authentication level
Used by portal:	yes

restClockTolerance

Location:	General Parameters » Plugins » Portal servers » REST services » Server clock tolerance
Description:	How tolerant the REST session server will be to clock dift
Used by portal:	yes

restConfigServer

Location:	General Parameters » Plugins » Portal servers » REST services » Configuration server
Description:	Enable REST config server
Used by portal:	yes

restExportSecretKeys

Location:	General Parameters » Plugins » Portal servers » REST services » Export secret attributes
Description:	Allow to export secret keys in REST session server
Used by portal:	yes

restFindUserDBArgs

Location:	General Parameters » Plugins » Search for user account » User accounts arguments
Description:	Extra args for REST FindUser request
Used by portal:	yes

restFindUserDBUrl

Location:	General Parameters » Plugins » Search for user account » User accounts URL
Used by portal:	yes

restPasswordServer

Location:	General Parameters » Plugins » Portal servers » REST services » Password reset server
Description:	Enable REST password reset server
Used by portal:	yes

restPwdConfirmArgs

Location:	General Parameters » Authentication parameters » REST parameters » Arguments » Password confirmation arguments
Description:	Extra args for REST password confirm request
Used by portal:	yes

restPwdConfirmUrl

Location:	General Parameters » Authentication parameters » REST parameters » URL » Password confirmation URL
Used by portal:	yes

restPwdModifyArgs

Location:	General Parameters » Authentication parameters » REST parameters » Arguments » Password change arguments
Description:	Extra args for REST password modify request
Used by portal:	yes

restPwdModifyUrl

Location:	General Parameters » Authentication parameters » REST parameters » URL » Password change URL
Used by portal:	yes

restSessionServer

Location:	General Parameters » Plugins » Portal servers » REST services » Session server
Description:	Enable REST session server
Used by portal:	yes

restUserDBArgs

Location:	General Parameters » Authentication parameters » REST parameters » Arguments » User data arguments
Description:	Extra args for REST UserDB request
Used by portal:	yes

restUserDBUrl

Location:	General Parameters » Authentication parameters » REST parameters » URL » User data URL
Used by portal:	yes

sameSite

Used by handler:
Location:	General Parameters » Cookies » Cookie SameSite value
Description:	Cookie SameSite value
Used by portal:	yes
	yes

samlAttributeAuthorityDescriptorAttributeServiceSOAP

Location:	SAML2 Service » Attribute Authority » Attribute Service » SOAP
Description:	SAML Attribute Authority SOAP
Used by portal:	yes

samlAuthnContextMapExtra

Location:	SAML2 Service » Authentication contexts » Other authentication contexts
Description:	SAML extra authn contexts
Used by portal:	yes

samlAuthnContextMapKerberos

Location:	SAML2 Service » Authentication contexts » Kerberos
Description:	SAML authn context kerberos level
Used by portal:	yes

samlAuthnContextMapPassword

Location:	SAML2 Service » Authentication contexts » Password
Description:	SAML authn context password level
Used by portal:	yes

samlAuthnContextMapPasswordProtectedTransport

Location:	SAML2 Service » Authentication contexts » Password protected transport
Description:	SAML authn context password protected transport level
Used by portal:	yes

samlAuthnContextMapTLSClient

Location:	SAML2 Service » Authentication contexts » TLS client
Description:	SAML authn context TLS client level
Used by portal:	yes

samlCommonDomainCookieActivation

Location:	SAML2 Service » Advanced » Common Domain Cookie » Activation
Description:	SAML CDC activation
Used by portal:	yes

samlCommonDomainCookieDomain

Location:	SAML2 Service » Advanced » Common Domain Cookie » Common domain
Used by portal:	yes

samlCommonDomainCookieReader

Location:	SAML2 Service » Advanced » Common Domain Cookie » Reader URL
Used by portal:	yes

samlCommonDomainCookieWriter

Location:	SAML2 Service » Advanced » Common Domain Cookie » Writer URL
Used by portal:	yes

samlDiscoveryProtocolActivation

Location:	SAML2 Service » Advanced » Discovery Protocol » Activation
Description:	SAML Discovery Protocol activation
Used by portal:	yes

samlDiscoveryProtocolIsPassive

Location:	SAML2 Service » Advanced » Discovery Protocol » Is Passive
Description:	SAML Discovery Protocol Is Passive
Used by portal:	yes

samlDiscoveryProtocolPolicy

Location:	SAML2 Service » Advanced » Discovery Protocol » Policy
Description:	SAML Discovery Protocol Policy
Used by portal:	yes

samlDiscoveryProtocolURL

Location:	SAML2 Service » Advanced » Discovery Protocol » EndPoint URL
Description:	SAML Discovery Protocol EndPoint URL
Used by portal:	yes

samlEntityID

Location:	SAML2 Service » Entity Identifier
Description:	SAML service entityID
Used by portal:	yes

samlFederationFiles

Location:	SAML2 Service » Advanced » Federation » SAML Federation Metadata files
Description:	Path to SAML Federation Metadata
Used by portal:	yes

samlIDPMetaDataExportedAttributes

Location:	SAML Identity Providers » configuration key » Exported attributes
Used by portal:	yes

samlIDPMetaDataNodes

Used by portal:	yes
Ini only:	yes

samlIDPMetaDataOptions

Location:	Options
Used by portal:	yes

samlIDPMetaDataOptionsAdaptSessionUtime

Location:	SAML Identity Providers » configuration key » Session » Adapt session lifetime
Used by portal:	yes

samlIDPMetaDataOptionsAllowLoginFromIDP

Location:	SAML Identity Providers » configuration key » Options » Allow login from IDP
Used by portal:	yes

samlIDPMetaDataOptionsCheckAudience

Location:	SAML Identity Providers » configuration key » Security » Check audience conditions
Used by portal:	yes

samlIDPMetaDataOptionsCheckSLOMessageSignature

Location:	SAML Identity Providers » configuration key » Signature » Check SLO message signature
Used by portal:	yes

samlIDPMetaDataOptionsCheckSSOMessageSignature

Location:	SAML Identity Providers » configuration key » Signature » Check SSO message signature
Used by portal:	yes

samlIDPMetaDataOptionsCheckTime

Location:	SAML Identity Providers » configuration key » Security » Check time conditions
Used by portal:	yes

samlIDPMetaDataOptionsComment

Location:	SAML Identity Providers » configuration key » Options » Comment
Used by portal:	yes

samlIDPMetaDataOptionsDisplayName

Location:	SAML Identity Providers » configuration key » Display » Name
Used by portal:	yes

samlIDPMetaDataOptionsEncryptionMode

Location:	SAML Identity Providers » configuration key » Security » Encryption mode
Used by portal:	yes

samlIDPMetaDataOptionsFederationEntityID

Location:	SAML Identity Providers » configuration key » Options » Federation » Entity Identifier
Used by portal:	yes

samlIDPMetaDataOptionsForceAuthn

Location:	SAML Identity Providers » configuration key » Options » Force authentication
Used by portal:	yes

samlIDPMetaDataOptionsForceUTF8

Location:	SAML Identity Providers » configuration key » Session » Force UTF-8
Used by portal:	yes

samlIDPMetaDataOptionsIcon

Location:	SAML Identity Providers » configuration key » Display » Logo
Used by portal:	yes

samlIDPMetaDataOptionsIsPassive

Location:	SAML Identity Providers » configuration key » Options » Passive authentication
Used by portal:	yes

samlIDPMetaDataOptionsNameIDFormat

Location:	SAML Identity Providers » configuration key » Options » NameID format
Used by portal:	yes

samlIDPMetaDataOptionsRelayStateURL

Location:	SAML Identity Providers » configuration key » Options » Allow URL as RelayState
Used by portal:	yes

samlIDPMetaDataOptionsRequestedAuthnContext

Location:	SAML Identity Providers » configuration key » Options » Requested authentication context
Used by portal:	yes

samlIDPMetaDataOptionsResolutionRule

Location:	SAML Identity Providers » configuration key » Display » Resolution rule
Used by portal:	yes

samlIDPMetaDataOptionsSLOBinding

Location:	SAML Identity Providers » configuration key » Binding » SLO binding
Used by portal:	yes

samlIDPMetaDataOptionsSSOBinding

Location:	SAML Identity Providers » configuration key » Binding » SSO binding
Used by portal:	yes

samlIDPMetaDataOptionsSignSLOMessage

Location:	SAML Identity Providers » configuration key » Signature » Sign SLO message
Used by portal:	yes

samlIDPMetaDataOptionsSignSSOMessage

Location:	SAML Identity Providers » configuration key » Signature » Sign SSO message
Used by portal:	yes

samlIDPMetaDataOptionsSignatureKey

Location:	SAML Identity Providers » configuration key » Signature » Signing key name
Used by portal:	yes

samlIDPMetaDataOptionsSignatureMethod

Location:	SAML Identity Providers » configuration key » Signature » Signature method
Used by portal:	yes

samlIDPMetaDataOptionsSortNumber

Location:	SAML Identity Providers » configuration key » Display » Order
Used by portal:	yes

samlIDPMetaDataOptionsStoreSAMLToken

Location:	SAML Identity Providers » configuration key » Session » Store SAML Token
Used by portal:	yes

samlIDPMetaDataOptionsTooltip

Location:	SAML Identity Providers » configuration key » Display » Tooltip
Used by portal:	yes

samlIDPMetaDataOptionsURL

Location:	SAML Identity Providers » configuration key » Options » Metadata URL
Used by portal:	yes

samlIDPMetaDataOptionsUserAttribute

Location:	SAML Identity Providers » configuration key » Session » Attribute containing user identifier
Used by portal:	yes

samlIDPMetaDataXML

Location:	SAML Identity Providers » configuration key » Metadata
Used by portal:	yes

samlIDPSSODescriptorArtifactResolutionServiceArtifact

Location:	SAML2 Service » Identity Provider » Artifact Resolution » Artifact Service
Description:	SAML IDP artifact resolution service
Used by portal:	yes

samlIDPSSODescriptorSingleLogoutServiceHTTPPost

Location:	SAML2 Service » Identity Provider » Single Logout » HTTP POST
Description:	SAML IDP SLO HTTP POST
Used by portal:	yes

samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect

Location:	SAML2 Service » Identity Provider » Single Logout » HTTP Redirect
Description:	SAML IDP SLO HTTP Redirect
Used by portal:	yes

samlIDPSSODescriptorSingleLogoutServiceSOAP

Location:	SAML2 Service » Identity Provider » Single Logout » SOAP
Description:	SAML IDP SLO SOAP
Used by portal:	yes

samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact

Location:	SAML2 Service » Identity Provider » Single Sign On » HTTP Artifact
Description:	SAML IDP SSO HTTP Artifact
Used by portal:	yes

samlIDPSSODescriptorSingleSignOnServiceHTTPPost

Location:	SAML2 Service » Identity Provider » Single Sign On » HTTP POST
Description:	SAML IDP SSO HTTP POST
Used by portal:	yes

samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect

Location:	SAML2 Service » Identity Provider » Single Sign On » HTTP Redirect
Description:	SAML IDP SSO HTTP Redirect
Used by portal:	yes

samlIDPSSODescriptorWantAuthnRequestsSigned

Location:	SAML2 Service » Identity Provider » Want Authentication Request Signed
Description:	SAML IDP want authn request signed
Used by portal:	yes

samlMetadataForceUTF8

Location:	SAML2 Service » Advanced » UTF8 metadata conversion
Description:	SAML force metadata UTF8 conversion
Used by portal:	yes

samlNameIDFormatMapEmail

Location:	SAML2 Service » NameID formats » Email
Description:	SAML session parameter for NameID email
Used by portal:	yes

samlNameIDFormatMapKerberos

Location:	SAML2 Service » NameID formats » Kerberos
Description:	SAML session parameter for NameID kerberos
Used by portal:	yes

samlNameIDFormatMapWindows

Location:	SAML2 Service » NameID formats » Windows
Description:	SAML session parameter for NameID windows
Used by portal:	yes

samlNameIDFormatMapX509

Location:	SAML2 Service » NameID formats » X509
Description:	SAML session parameter for NameID x509
Used by portal:	yes

samlOrganizationDisplayName

Location:	SAML2 Service » Organization » Display Name
Description:	SAML service organization display name
Used by portal:	yes

samlOrganizationName

Location:	SAML2 Service » Organization » Name
Description:	SAML service organization name
Used by portal:	yes

samlOrganizationURL

Location:	SAML2 Service » Organization » URL
Description:	SAML service organization URL
Used by portal:	yes

samlOverrideIDPEntityID

Location:	SAML2 Service » Advanced » Override Entity ID when acting as IDP
Description:	Override SAML EntityID when acting as an IDP
Used by portal:	yes

samlRelayStateTimeout

Location:	SAML2 Service » Advanced » RelayState session timeout
Description:	SAML timeout of relay state
Used by portal:	yes

samlSPMetaDataExportedAttributes

Location:	SAML Service Providers » configuration key » Exported attributes
Used by portal:	yes

samlSPMetaDataMacros

Location:	SAML Service Providers » configuration key » Macros
Description:	Macros
Used by portal:	yes

samlSPMetaDataNodes

Used by portal:	yes
Ini only:	yes

samlSPMetaDataOptions

Location:	Options
Used by portal:	yes

samlSPMetaDataOptionsActivation

Location:	SAML Service Providers » configuration key » Options » Activation
Used by portal:	yes

samlSPMetaDataOptionsAuthnLevel

Location:	SAML Service Providers » configuration key » Options » Security » Required authentication level
Description:	Authentication level requires to access to this SP
Used by portal:	yes

samlSPMetaDataOptionsCheckSLOMessageSignature

Location:	SAML Service Providers » configuration key » Options » Signature » Check SLO message signature
Used by portal:	yes

samlSPMetaDataOptionsCheckSSOMessageSignature

Location:	SAML Service Providers » configuration key » Options » Signature » Check SSO message signature
Used by portal:	yes

samlSPMetaDataOptionsComment

Location:	SAML Service Providers » configuration key » Options » Comment
Used by portal:	yes

samlSPMetaDataOptionsEnableIDPInitiatedURL

Location:	SAML Service Providers » configuration key » Options » Security » Enable use of IDP initiated URL
Used by portal:	yes

samlSPMetaDataOptionsEncryptionMode

Location:	SAML Service Providers » configuration key » Options » Security » Encryption mode
Used by portal:	yes

samlSPMetaDataOptionsFederationEntityID

Location:	SAML Service Providers » configuration key » Options » Federation » Entity Identifier
Used by portal:	yes

samlSPMetaDataOptionsFederationOptionalAttributes

Location:	SAML Service Providers » configuration key » Options » Federation » Optional attributes
Used by portal:	yes

samlSPMetaDataOptionsFederationRequiredAttributes

Location:	SAML Service Providers » configuration key » Options » Federation » Required attributes
Used by portal:	yes

samlSPMetaDataOptionsForceNameIDFormat

Location:	SAML Service Providers » configuration key » Options » Authentication response » Force NameID format
Used by portal:	yes

samlSPMetaDataOptionsForceUTF8

Location:	SAML Service Providers » configuration key » Options » Authentication response » Force UTF-8
Used by portal:	yes

samlSPMetaDataOptionsNameIDFormat

Location:	SAML Service Providers » configuration key » Options » Authentication response » Default NameID format
Used by portal:	yes

samlSPMetaDataOptionsNameIDSessionKey

Location:	SAML Service Providers » configuration key » Options » Authentication response » Force NameID session key
Used by portal:	yes

samlSPMetaDataOptionsNotOnOrAfterTimeout

Location:	SAML Service Providers » configuration key » Options » Authentication response » notOnOrAfter duration
Used by portal:	yes

samlSPMetaDataOptionsOneTimeUse

Location:	SAML Service Providers » configuration key » Options » Authentication response » One time use
Used by portal:	yes

samlSPMetaDataOptionsRule

Location:	SAML Service Providers » configuration key » Options » Security » Access rule
Description:	Rule to grant access to this SP
Used by portal:	yes

samlSPMetaDataOptionsSessionNotOnOrAfterTimeout

Location:	SAML Service Providers » configuration key » Options » Authentication response » sessionNotOnOrAfter duration
Used by portal:	yes

samlSPMetaDataOptionsSignSLOMessage

Location:	SAML Service Providers » configuration key » Options » Signature » Sign SLO message
Used by portal:	yes

samlSPMetaDataOptionsSignSSOMessage

Location:	SAML Service Providers » configuration key » Options » Signature » Sign SSO message
Used by portal:	yes

samlSPMetaDataOptionsSignatureKey

Location:	SAML Service Providers » configuration key » Options » Signature » Signing key name
Used by portal:	yes

samlSPMetaDataOptionsSignatureMethod

Location:	SAML Service Providers » configuration key » Options » Signature » Signature method
Used by portal:	yes

samlSPMetaDataOptionsURL

Location:	SAML Service Providers » configuration key » Options » Metadata URL
Used by portal:	yes

samlSPMetaDataXML

Location:	SAML Service Providers » configuration key » Metadata
Used by portal:	yes

samlSPSSODescriptorArtifactResolutionServiceArtifact

Location:	SAML2 Service » Service Provider » Artifact Resolution » Artifact Service
Description:	SAML SP artifact resolution service
Used by portal:	yes

samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact

Location:	SAML2 Service » Service Provider » Assertion Consumer » HTTP Artifact
Description:	SAML SP ACS HTTP artifact
Used by portal:	yes

samlSPSSODescriptorAssertionConsumerServiceHTTPPost

Location:	SAML2 Service » Service Provider » Assertion Consumer » HTTP POST
Description:	SAML SP ACS HTTP POST
Used by portal:	yes

samlSPSSODescriptorAuthnRequestsSigned

Location:	SAML2 Service » Service Provider » Signed Authentication Request
Description:	SAML SP AuthnRequestsSigned
Used by portal:	yes

samlSPSSODescriptorSingleLogoutServiceHTTPPost

Location:	SAML2 Service » Service Provider » Single Logout » HTTP POST
Description:	SAML SP SLO HTTP POST
Used by portal:	yes

samlSPSSODescriptorSingleLogoutServiceHTTPRedirect

Location:	SAML2 Service » Service Provider » Single Logout » HTTP Redirect
Description:	SAML SP SLO HTTP Redirect
Used by portal:	yes

samlSPSSODescriptorSingleLogoutServiceSOAP

Location:	SAML2 Service » Service Provider » Single Logout » SOAP
Description:	SAML SP SLO SOAP
Used by portal:	yes

samlSPSSODescriptorWantAssertionsSigned

Location:	SAML2 Service » Service Provider » Want Assertions Signed
Description:	SAML SP WantAssertionsSigned
Used by portal:	yes

samlServiceEncryptionKey

Location:	SAML2 Service » Security parameters » Encryption key name
Description:	Key to use for SAML encryption
Used by portal:	yes

samlServicePrivateKeyEnc

Location:	SAML2 Service » Security parameters » Encryption » Private key
Description:	SAML encryption private key
Used by portal:	yes

samlServicePrivateKeyEncPwd

Location:	SAML2 Service » Security parameters » Encryption » Private key password
Used by portal:	yes

samlServicePrivateKeySig

Location:	SAML2 Service » Security parameters » Signature » Private key
Description:	SAML signature private key
Used by portal:	yes

samlServicePrivateKeySigPwd

Location:	SAML2 Service » Security parameters » Signature » Private key password
Description:	SAML signature private key password
Used by portal:	yes

samlServicePublicKeyEnc

Location:	SAML2 Service » Security parameters » Encryption » Public key
Description:	SAML encryption public key
Used by portal:	yes

samlServicePublicKeySig

Location:	SAML2 Service » Security parameters » Signature » Public key
Description:	SAML signature public key
Used by portal:	yes

samlServiceSignatureKey

Location:	SAML2 Service » Security parameters » Signing key name
Description:	Key to use for SAML signature
Used by portal:	yes

samlServiceSignatureMethod

Location:	SAML2 Service » Security parameters » Signature method
Used by portal:	yes

samlServiceUseCertificateInResponse

Location:	SAML2 Service » Security parameters » Use certificate in responses
Description:	Use certificate instead of public key in SAML responses
Used by portal:	yes

samlStorage

Location:	SAML2 Service » Sessions » SAML sessions module name
Description:	Apache::Session module to store SAML user data
Used by portal:	yes

samlStorageOptions

Location:	SAML2 Service » Sessions » SAML sessions module options
Description:	Apache::Session module parameters
Used by portal:	yes

samlUseQueryStringSpecific

Location:	SAML2 Service » Advanced » Use specific query_string method
Description:	SAML use specific method for query_string
Used by portal:	yes

scrollTop

Location:	General Parameters » Portal » Customization » Scroll to top button
Description:	Display back to top button
Used by portal:	yes

secureTokenAllowOnError

Used by handler:
Description:	Secure Token allow requests in error
	yes
Ini only:	yes

secureTokenAttribute

Used by handler:
Description:	Secure Token attribute
	yes
Ini only:	yes

secureTokenExpiration

Used by handler:
Description:	Secure Token expiration
	yes
Ini only:	yes

secureTokenHeader

Used by handler:
Description:	Secure Token header
	yes
Ini only:	yes

secureTokenMemcachedServers

Used by handler:
Description:	Secure Token Memcached servers
	yes
Ini only:	yes

secureTokenUrls

Used by handler:
	yes
Ini only:	yes

securedCookie

Used by handler:
Location:	General Parameters » Cookies » Secured Cookie (SSL)
Description:	Cookie securisation method
Used by portal:	yes
	yes

sentryDsn

Used by manager:
Description:	Sentry logger DSN
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

sessionDataToRemember

Location:	General Parameters » Plugins » Login history » Session data to store
Description:	Data to remember in login history
Used by portal:	yes

sfEngine

Description:	Second factor engine
Used by portal:	yes
Ini only:	yes

sfExtra

Location:	General Parameters » Second factors » Additional second factors
Description:	Extra second factors
Used by portal:	yes

sfLoginTimeout

Location:	General Parameters » Second factors » Global options » Login timeout
Description:	Timeout for 2F login process
Used by portal:	yes

sfManagerRule

Location:	General Parameters » Second factors » Global options » Display Manager link
Description:	Rule to display second factor Manager link
Used by portal:	yes

sfOnlyUpgrade

Location:	General Parameters » Second factors » Global options » Use 2FA for session upgrade
Description:	Only trigger second factor on session upgrade
Used by portal:	yes

sfRegisterTimeout

Location:	General Parameters » Second factors » Global options » Registration timeout
Description:	Timeout for 2F registration process
Used by portal:	yes

sfRemovedMsgRule

Location:	General Parameters » Second factors » Global options » Warn if an expired 2FA is removed » Activation
Description:	Display a message if at leat one expired SF has been removed
Used by portal:	yes

sfRemovedNotifMsg

Location:	General Parameters » Second factors » Global options » Warn if an expired 2FA is removed » Notification message
Description:	Notification message
Used by portal:	yes

sfRemovedNotifRef

Location:	General Parameters » Second factors » Global options » Warn if an expired 2FA is removed » Notification reference
Description:	Notification reference
Used by portal:	yes

sfRemovedNotifTitle

Location:	General Parameters » Second factors » Global options » Warn if an expired 2FA is removed » Notification title
Description:	Notification title
Used by portal:	yes

sfRemovedUseNotif

Location:	General Parameters » Second factors » Global options » Warn if an expired 2FA is removed » Use Notifications plugin
Description:	Use Notifications plugin to display message
Used by portal:	yes

sfRequired

Location:	General Parameters » Second factors » Global options » Force 2FA registration at login
Description:	Second factor required
Used by portal:	yes

sfRetries

Location:	General Parameters » Second factors » Global options » Allowed retries
Description:	Allowed number of retries
Used by portal:	yes

shortTokenTTL

Location:	General Parameters » Advanced parameters » Security » Short token TTL
Description:	Short token timeout (for machines)
Used by portal:	yes

showLanguages

Location:	General Parameters » Portal » Customization » Show languages choice
Description:	Display langs icons
Used by portal:	yes

singleIP

Location:	General Parameters » Sessions » Multiple sessions » One IP address per user
Description:	Allow only one session per IP
Used by portal:	yes

singleSession

Location:	General Parameters » Sessions » Multiple sessions » One session per user
Description:	Allow only one session per user
Used by portal:	yes

singleUserByIP

Location:	General Parameters » Sessions » Multiple sessions » One user per IP address
Description:	Allow only one user per IP
Used by portal:	yes

skipRenewConfirmation

Location:	General Parameters » Advanced parameters » Portal redirections » Skip re-auth confirmation
Description:	Avoid asking confirmation when an Issuer asks to renew auth
Used by portal:	yes

skipUpgradeConfirmation

Location:	General Parameters » Advanced parameters » Portal redirections » Skip upgrade confirmation
Description:	Avoid asking confirmation during a session upgrade
Used by portal:	yes

slaveAuthnLevel

Location:	General Parameters » Authentication parameters » Slave parameters » Authentication level
Description:	Slave authentication level
Used by portal:	yes

slaveCertificateField

Location:	General Parameters » Authentication parameters » Slave parameters » Security » Extracted certificate field
Used by portal:	yes

slaveCertificateRegexp

Location:	General Parameters » Authentication parameters » Slave parameters » Security » Regexp to test extracted certificate field
Description:	Regular expression to test Slave var
Used by portal:	yes

slaveDisplayLogo

Location:	General Parameters » Authentication parameters » Slave parameters » Display authentication logo
Description:	Display Slave authentication logo
Used by portal:	yes

slaveExportedVars

Location:	General Parameters » Authentication parameters » Slave parameters » Exported variables
Description:	Slave exported variables
Used by portal:	yes

slaveHeaderContent

Location:	General Parameters » Authentication parameters » Slave parameters » Security » Control header content
Used by portal:	yes

slaveHeaderName

Location:	General Parameters » Authentication parameters » Slave parameters » Security » Control header name
Used by portal:	yes

slaveMasterIP

Location:	General Parameters » Authentication parameters » Slave parameters » Security » Master’s IP address
Used by portal:	yes

slaveUserHeader

Location:	General Parameters » Authentication parameters » Slave parameters » Header for user login
Used by portal:	yes

soapConfigServer

Location:	General Parameters » Plugins » Portal servers » SOAP services » Configuration server
Description:	Enable SOAP config server
Used by portal:	yes

soapProxyUrn

Description:	SOAP URN for Proxy
Used by portal:	yes
Ini only:	yes

soapSessionServer

Location:	General Parameters » Plugins » Portal servers » SOAP services » Session server
Description:	Enable SOAP session server
Used by portal:	yes

sslByAjax

Location:	General Parameters » Authentication parameters » mTLS parameters » Use Ajax request
Description:	Use Ajax request for Mutual TLS Authentication
Used by portal:	yes

sslHost

Location:	General Parameters » Authentication parameters » mTLS parameters » Ajax mTLS URL
Description:	URL for Mutual TLS Authentication Ajax request
Used by portal:	yes

staticPrefix

Description:	Prefix of static files for HTML templates
Used by portal:	yes
Ini only:	yes

statusQueueName

Used by handler:
Description:	Status channel name
	yes
Ini only:	yes

stayConnected

Location:	General Parameters » Plugins » Trusted browser » Authentication bypass
Description:	Stay connected activation rule
Used by portal:	yes

stayConnectedBypassFG

Location:	General Parameters » Plugins » Trusted browser » Do not check fingerprint
Description:	Disable fingerprint checkng
Used by portal:	yes

stayConnectedCookieName

Location:	General Parameters » Plugins » Trusted browser » Cookie name
Description:	Name of the stayConnected plugin cookie
Used by portal:	yes

stayConnectedSingleSession

Location:	General Parameters » Plugins » Trusted browser » One trusted browser per user
Description:	Allow only one permanent session per user
Used by portal:	yes

stayConnectedTimeout

Used by manager:
Location:	General Parameters » Plugins » Trusted browser » Expiration time
Description:	StayConnected persistent connexion session timeout
	yes

storePassword

Location:	General Parameters » Sessions » Store user password in session
Description:	Store password in session
Used by portal:	yes

storePasswordEncrypted

Location:	General Parameters » Sessions » Encrypt password in session
Description:	Crypt the password in session
Used by portal:	yes

strictTransportSecurityMax_Age

Location:	General Parameters » Advanced parameters » Security » Strict-Transport-Security max age
Description:	Max-age for Strict-Transport-Security
Used by portal:	yes

successLoginNumber

Location:	General Parameters » Plugins » Login history » Max successful logins count
Description:	Number of success stored in login history
Used by portal:	yes

syslogFacility

Used by manager:
Description:	Syslog logger technical facility
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

syslogSockOptions

Used by manager:
Description:	Option to send to setlogsock()
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

timeout

Location:	General Parameters » Sessions » Sessions timeout
Description:	Session timeout on server side
Used by portal:	yes

timeoutActivity

Location:	General Parameters » Sessions » Sessions activity timeout
Description:	Session activity timeout on server side
Used by portal:	yes

timeoutActivityInterval

Location:	General Parameters » Sessions » Sessions update interval
Description:	Update session timeout interval on server side
Used by portal:	yes

tokenUseGlobalStorage

Location:	General Parameters » Advanced parameters » Security » Use global storage
Description:	Enable global token storage
Used by portal:	yes

totp2fActivation

Location:	General Parameters » Second factors » TOTP » Activation
Description:	TOTP activation
Used by portal:	yes

totp2fAlgorithm

Location:	General Parameters » Second factors » TOTP » Algorithm
Description:	Hashing algorithm to use for HMAC
Used by portal:	yes

totp2fAuthnLevel

Location:	General Parameters » Second factors » TOTP » Authentication level
Description:	Authentication level for users authentified by password+TOTP
Used by portal:	yes

totp2fDigits

Location:	General Parameters » Second factors » TOTP » Number of digits
Description:	Number of digits for TOTP code
Used by portal:	yes

totp2fEncryptSecret

Location:	General Parameters » Second factors » TOTP » Encrypt TOTP secrets
Description:	Encrypt TOTP secrets in database
Used by portal:	yes

totp2fInterval

Location:	General Parameters » Second factors » TOTP » Time step
Description:	TOTP interval
Used by portal:	yes

totp2fIssuer

Location:	General Parameters » Second factors » TOTP » Issuer name
Description:	TOTP Issuer
Used by portal:	yes

totp2fLabel

Location:	General Parameters » Second factors » TOTP » Label
Description:	Portal label for TOTP 2F
Used by portal:	yes

totp2fLogo

Location:	General Parameters » Second factors » TOTP » Logo
Description:	Custom logo for TOTP 2F
Used by portal:	yes

totp2fRange

Location:	General Parameters » Second factors » TOTP » Range of attempts
Description:	TOTP range (number of interval to test)
Used by portal:	yes

totp2fSelfRegistration

Location:	General Parameters » Second factors » TOTP » Self registration
Description:	TOTP self registration activation
Used by portal:	yes

totp2fTTL

Location:	General Parameters » Second factors » TOTP » Lifetime
Description:	TOTP device time to live
Used by portal:	yes

totp2fUserCanRemoveKey

Location:	General Parameters » Second factors » TOTP » Allow user to remove TOTP
Description:	Authorize users to remove existing TOTP secret
Used by portal:	yes

trustedBrowserRule

Location:	General Parameters » Plugins » Trusted browser » Activation condition
Description:	Trusted browser registration rule
Used by portal:	yes

trustedBrowserUseTotp

Location:	General Parameters » Plugins » Trusted browser » Use time-based fingerprinting
Description:	Use TOTP for trusted browser registration
Used by portal:	yes

trustedDomains

Location:	General Parameters » Advanced parameters » Security » Trusted domains
Description:	Trusted domains
Used by portal:	yes

twitterAppName

Location:	General Parameters » Authentication parameters » Twitter parameters » Application name
Used by portal:	yes

twitterAuthnLevel

Location:	General Parameters » Authentication parameters » Twitter parameters » Authentication level
Description:	Twitter authentication level
Used by portal:	yes

twitterKey

Location:	General Parameters » Authentication parameters » Twitter parameters » API key
Used by portal:	yes

twitterSecret

Location:	General Parameters » Authentication parameters » Twitter parameters » API secret
Used by portal:	yes

twitterUserField

Location:	General Parameters » Authentication parameters » Twitter parameters » Field containing user identifier
Used by portal:	yes

upgradeSession

Location:	General Parameters » Plugins » Upgrade session
Description:	Upgrade session activation
Used by portal:	yes

useRedirectAjaxOnUnauthorized

Used by handler:
Location:	General Parameters » Advanced parameters » Handler redirections » Redirect AJAX requests on unauthorized
Description:	Redirect Ajax requests to portal for unauthorized (401)
	yes

useRedirectOnError

Used by handler:
Location:	General Parameters » Advanced parameters » Handler redirections » Redirect on error
Description:	Use 302 redirect code for error (500)
	yes

useRedirectOnForbidden

Location:	General Parameters » Advanced parameters » Handler redirections » Redirect on forbidden
Description:	Use 302 redirect code for forbidden (403)
Used by portal:	yes

useSafeJail

Used by handler:
Location:	General Parameters » Advanced parameters » Security » Use Safe jail
Description:	Activate Safe jail
Used by portal:	yes
	yes

userControl

Location:	General Parameters » Advanced parameters » Security » Username control
Description:	Regular expression to validate login
Used by portal:	yes

userDB

Location:	General Parameters » Authentication parameters » Users module
Description:	User module
Used by portal:	yes

userLogger

Used by manager:
Description:	User actions logger
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

userPivot

Location:	General Parameters » Authentication parameters » DBI parameters » Schema » Login field name in user table
Used by portal:	yes

userSyslogFacility

Used by manager:
Description:	Syslog logger user-actions facility
Used by portal:	yes
	yes
Used by handler:
	yes
Ini only:	yes

vhostAccessToTrace

Location:	Virtual Hosts » configuration key » Options » Access to trace
Used by portal:	yes

vhostAliases

Location:	Virtual Hosts » configuration key » Options » Aliases
Used by portal:	yes

vhostAuthnLevel

Location:	Virtual Hosts » configuration key » Options » Required authentication level
Used by portal:	yes

vhostComment

Location:	Virtual Hosts » configuration key » Options » Comment
Used by portal:	yes

vhostDevOpsRulesUrl

Location:	Virtual Hosts » configuration key » Options » DevOps rules file URL
Used by portal:	yes

vhostHttps

Location:	Virtual Hosts » configuration key » Options » HTTPS
Used by portal:	yes

vhostMaintenance

Location:	Virtual Hosts » configuration key » Options » Maintenance mode
Used by portal:	yes

vhostOptions

Location:	Options
Used by portal:	yes

vhostPort

Location:	Virtual Hosts » configuration key » Options » Port
Used by portal:	yes

vhostServiceTokenTTL

Location:	Virtual Hosts » configuration key » Options » ServiceToken timeout
Used by portal:	yes

vhostType

Location:	Virtual Hosts » configuration key » Options » Type
Description:	Handler type
Used by portal:	yes

viewerAllowBrowser

Description:	Allow configuration browser
Used by portal:	yes
Ini only:	yes

viewerAllowDiff

Description:	Allow configuration diff
Used by portal:	yes
Ini only:	yes

viewerHiddenKeys

Used by manager:
Description:	Hidden Conf keys
	yes
Ini only:	yes

virtualHosts

Used by portal:	yes
Ini only:	yes

webCronSecret

Location:	General Parameters » Plugins » WebCron » Secret
Description:	Secret token for webcron plugin
Used by portal:	yes

webIDAuthnLevel

Location:	General Parameters » Authentication parameters » WebID parameters » Authentication level
Description:	WebID authentication level
Used by portal:	yes

webIDExportedVars

Location:	General Parameters » Authentication parameters » WebID parameters » Exported variables
Description:	WebID exported variables
Used by portal:	yes

webIDWhitelist

Location:	General Parameters » Authentication parameters » WebID parameters » WebID whitelist
Used by portal:	yes

webauthn2fActivation

Location:	General Parameters » Second factors » WebAuthn » Activation
Description:	WebAuthn second factor activation
Used by portal:	yes

webauthn2fAttestation

Location:	General Parameters » Second factors » WebAuthn » Attestation
Description:	Ask the authenticator for an attestation
Used by portal:	yes

webauthn2fAttestationTrust

Location:	General Parameters » Second factors » WebAuthn » Attestation trusted certificates
Description:	Certificate bundle for attestation trust validation
Used by portal:	yes

webauthn2fAuthnLevel

Location:	General Parameters » Second factors » WebAuthn » Authentication level
Description:	Authentication level for users authentified by WebAuthn second factor
Used by portal:	yes

webauthn2fLabel

Location:	General Parameters » Second factors » WebAuthn » Label
Description:	Portal label for WebAuthn second factor
Used by portal:	yes

webauthn2fLogo

Location:	General Parameters » Second factors » WebAuthn » Logo
Description:	Custom logo for WebAuthn 2F
Used by portal:	yes

webauthn2fResidentKey

Location:	General Parameters » Second factors » WebAuthn » Use discoverable credential
Description:	Use discoverable credential
Used by portal:	yes

webauthn2fSelfRegistration

Location:	General Parameters » Second factors » WebAuthn » Self registration
Description:	WebAuthn self registration activation
Used by portal:	yes

webauthn2fUserCanRemoveKey

Location:	General Parameters » Second factors » WebAuthn » Allow user to remove WebAuthn
Description:	Authorize users to remove existing WebAuthn
Used by portal:	yes

webauthn2fUserVerification

Location:	General Parameters » Second factors » WebAuthn » User verification
Description:	Verify user during registration and login
Used by portal:	yes

webauthnAppId

Location:	General Parameters » Second factors » WebAuthn » Send U2F AppID
Description:	Send AppID extension
Used by portal:	yes

webauthnAuthnLevel

Location:	General Parameters » Authentication parameters » WebAuthn parameters » Authentication level
Description:	WebAuthn authentication level
Used by portal:	yes

webauthnDefaultTransports

Location:	General Parameters » Second factors » WebAuthn » Default transports
Description:	WebAuthn default transports
Used by portal:	yes

webauthnDisplayNameAttr

Location:	General Parameters » Second factors » WebAuthn » User Display Name attribute
Description:	Session attribute containing user display name
Used by portal:	yes

webauthnRpId

Location:	General Parameters » Second factors » WebAuthn » Relying Party ID
Description:	WebAuthn Relying Party ID
Used by portal:	yes

webauthnRpName

Location:	General Parameters » Second factors » WebAuthn » Relying Party display name
Description:	WebAuthn Relying Party display name
Used by portal:	yes

whatToTrace

Used by handler:
Location:	General Parameters » Logs » REMOTE_USER
Description:	Session parameter used to fill REMOTE_USER
Used by portal:	yes
	yes

wsdlServer

Location:	General Parameters » Plugins » Portal servers » SOAP services » WSDL server
Description:	Enable /portal.wsdl server
Used by portal:	yes

yubikey2fActivation

Location:	General Parameters » Second factors » Yubico OTP » Activation
Description:	Yubikey second factor activation
Used by portal:	yes

yubikey2fAuthnLevel

Location:	General Parameters » Second factors » Yubico OTP » Authentication level
Description:	Authentication level for users authentified by Yubikey second factor
Used by portal:	yes

yubikey2fClientID

Location:	General Parameters » Second factors » Yubico OTP » API client ID
Description:	Yubico client ID
Used by portal:	yes

yubikey2fFromSessionAttribute

Location:	General Parameters » Second factors » Yubico OTP » Get Yubikey ID from session attribute
Description:	Provision yubikey from the given session variable
Used by portal:	yes

yubikey2fLabel

Location:	General Parameters » Second factors » Yubico OTP » Label
Description:	Portal label for Yubikey second factor
Used by portal:	yes

yubikey2fLogo

Location:	General Parameters » Second factors » Yubico OTP » Logo
Description:	Custom logo for Yubikey 2F
Used by portal:	yes

yubikey2fNonce

Location:	General Parameters » Second factors » Yubico OTP » Nonce
Description:	Yubico nonce
Used by portal:	yes

yubikey2fPublicIDSize

Location:	General Parameters » Second factors » Yubico OTP » OTP public ID part size
Description:	Yubikey public ID size
Used by portal:	yes

yubikey2fSecretKey

Location:	General Parameters » Second factors » Yubico OTP » API secret key
Description:	Yubico secret key
Used by portal:	yes

yubikey2fSelfRegistration

Location:	General Parameters » Second factors » Yubico OTP » Self registration
Description:	Yubikey self registration activation
Used by portal:	yes

yubikey2fTTL

Location:	General Parameters » Second factors » Yubico OTP » Lifetime
Description:	Yubikey device time to live
Used by portal:	yes

yubikey2fUrl

Location:	General Parameters » Second factors » Yubico OTP » Service URL
Description:	Yubico server
Used by portal:	yes

yubikey2fUserCanRemoveKey

Location:	General Parameters » Second factors » Yubico OTP » Allow user to remove Yubikey
Description:	Authorize users to remove existing Yubikey
Used by portal:	yes

zimbraAccountKey

Used by handler:
Description:	Zimbra account session key
	yes
Ini only:	yes

zimbraBy

Used by handler:
Description:	Zimbra account type
	yes
Ini only:	yes

zimbraPreAuthKey

Used by handler:
Description:	Zimbra preauthentication key
	yes
Ini only:	yes

zimbraSsoUrl

Used by handler:
Description:	Zimbra local SSO URL pattern
	yes
Ini only:	yes

zimbraUrl

Used by handler:
Description:	Zimbra preauthentication URL
	yes
Ini only:	yes

Configuration backend parameters¶

Full name	Key name	Configuration backend
Configuration load timeout	confTimeout	all backends (default: 10)
DBI connection string	dbiChain	CDBI / RDBI
DBI user	dbiUser
DBI password	dbiPassword
DBI table name	dbiTable
Directory	dirName	File / YAML
LDAP server	ldapServer	LDAP
LDAP port	ldapPort
LDAP base	ldapConfBase
LDAP bind dn	ldapBindDN
LDAP bind password	ldapBindPassword
LDAP ObjectClass	ldapObjectClass
LDAP ID attribute	ldapAttributeId
LDAP content attribute	ldapAttributeContent
Certificate authorities file	caFile
Certificate authorities directory	caPath
MongoDB database	dbName	MongoDB
MongoDB collection	collectionName
Pretty print	prettyPrint	File
REST base URL	baseUrl	REST
REST realm	realm
REST user	user
REST password	password
SOAP server location (URL)	proxy	SOAP
LWP::UserAgent parameters	proxyOptions
SOAP user	User
SOAP password	Password
Overlay real configuration backend	overlayRealtype	Overlay
Overlay directory	overlayDirectory	Overlay
Overlay write authorization	overlayWrite	Overlay