Skip to main content

Configuration variables

As IAM is a Spring Boot application, you may use the standard Spring configuration methods.

Feature control​

Environment variableDescriptionDefault value
FEATURE_LDAPToggle LDAP support within IAM.false

Functionality​

Environment variableDescriptionDefault value
ENFORCE_ACCESS_CONTROLControls enforcement of permissions for the IAM component. If set to false, all users can access user, role, and permission management.false
ENFORCE_HTTPSControls if the URLs specified for client configuration must be https://.true

LDAP​

All LDAP properties are prefixed with LDAP_.

Environment variableDescriptionDefault value
DEFAULT_USERNAMEThe username of a default user to initialize IAM with.-
SERVER_URLThe URL at which the LDAP server is reachable.-
DOMAINThe domain of an Active Directory (AD) LDAP server; only to be set if AD is used.-
MANAGER_DNThe credentials to bind the Camunda Account service to the LDAP server; must be empty if connecting to an AD server.-
MANAGER_PASSWORDThe credentials to bind the Camunda Account service to the LDAP server; must be empty if connecting to an AD server.-
BASE_DNThe start location for LDAP search. If AD is used and this property is empty, this property is determined from configured domain.-
USER_SEARCH_BASEThe start location for user search. Relative to base-dn; must be empty if AD is used.-
USER_SEARCH_FILTERA filter to restrict the group of users to search in.-
UUID_ATTRIBUTEThe attribute names used on the LDAP server; must be set to an attribute holding a universally unique identifier (UUID) of a user.-
USER_FIRST_NAME_ATTRIBUTEUsed to build the full name of the user.-
USER_LAST_NAME_ATTRIBUTEUsed to build the full name of the user.-
USER_EMAIL_ATTRIBUTEUsed to determine a user's email address used for log in.-