Authenticate Internal Service URL

Summary

Authenticate Internal Service URL is only required for split-service mode deployments where Pomerium can’t access the public Authenticate Service URL.

If included, Authenticate Internal Service URL will override Authenticate Service URL.

Note:

Pomerium uses the Hosted Authenticate Service by default.

If you want to run Pomerium with a self-hosted authenticate service, you must include an identity provider and authenticate service URL in your configuration.

See Self-Hosted Authenticate Service for more information.

How to configure

Core

Config file keys	Environment variables	Type	Usage
authenticate_internal_service_url	AUTHENTICATE_INTERNAL_SERVICE_URL	URL	required (In split-service mode only)

Examples

authenticate_internal_service_url: https://authenticate.internal

AUTHENTICATE_INTERNAL_SERVICE_URL=https://authenticate.internal

Enterprise

authenticate_internal_service_url is a bootstrap configuration setting and is not configurable in the Console.

Kubernetes

Kubernetes does not support authenticate_internal_service_url