Appendix B: vars.yml

Autonomous Identity has a configuration file where you can set the analytics data and configuration directories, UI dark theme mode, private IP address mapping, LDAP/SSO options, and session duration during installation. The file is created when running the create-template command during the installation and is located in the /autoid-config directory.

The file is as follows:

domain_name: forgerock.com                                  # Default domain name
target_environment: autoid                                  # Default namespace
analytics_data_dir: /data                                   # Default data directory
analytics_conf_dir: /data/conf                              # Default config directory for analytics
enable_dark_theme: false                                    # Set true for dark UI theme mode

# Needed only if private and public IP address of
# target nodes are different. If cloud VMs the private
# is different than the IP address (public ip) used for
# SSH. Private IP addresses are used by various services
# to reach other services in the cluster
# Example:
# private_ip_address_mapping:
#   35.223.33.21: "10.128.0.5"
#   108.59.83.132: "10.128.0.37"
#   ...
private_ip_address_mapping:                                 # private and external IP mapping
#private_ip_address_mapping-ip-addesses#

api:
  authentication_option: "Ldap"                             # Values: "Ldap", "SSO", "LdapAndSSO"
  access_log_enabled: true                                  # Enable access logs
  jwt_expiry: "30 minutes"                                  # Default session duration
  jwt_secret_file: "{{ install_path }}/jwt/secret.txt"      # Location of JWT secret file

# set the following API parameters when                     # SSO and LdapAndSSO properties
# authentication_option is SSO or LdapAndSSO
#  oidc_issuer:
#  oidc_auth_url:
#  oidc_token_url:
#  oidc_user_info_url:
#  oidc_callback_url:
#  oidc_jwks_url:
#  oidc_client_scope:
#  oidc_groups_attribute:
#  oidc_uid_attribute:
#  oidc_client_id:
#  oidc_client_secret:
#  admin_object_id:
#  entitlement_owner_object_id:
#  executive_object_id:
#  supervisor_object_id:
#  user_object_id: