Skip to main content

Configuration variables

As Identity is a Spring Boot application, you may use the standard Spring configuration methods.

Core configuration​

Environment variableDescriptionDefault value
IDENTITY_AUTH_PROVIDER_BACKEND_URLUsed to support container to container communicationhttp://localhost:18080/auth/realms/camunda-platform
IDENTITY_AUTH_PROVIDER_ISSUER_URLUsed to denote the token issuerhttp://localhost:18080/auth/realms/camunda-platform
IDENTITY_BASE_PATHUsed to configure Identity to run on a subpath (Requires HTTPs for IDENTITY_URL)
IDENTITY_CLIENT_IDThe client ID for the Identity clientcamunda-identity
IDENTITY_CLIENT_SECRETThe client secret for the Identity client
IDENTITY_LOG_LEVELThe level of which to log messages atINFO
IDENTITY_LOG_PATTERNThe pattern to use when logging%clr{%d{yyyy-MM-dd HH:mm:ss.SSS}}{faint} %clr{%5p} %clr{${sys:PID}}{magenta} %clr{---}{faint} %clr{[%15.15t]}{faint} %clr{%-40.40c{1.}}{cyan} %clr{:}{faint} %m%n%xwEx
IDENTITY_URLThe URL of the Identity servicehttp://localhost:8080
KEYCLOAK_REALMThe name of the Keycloak Realm to connect tocamunda-platform
KEYCLOAK_SETUP_USERThe username of a user with admin access to Keycloakadmin
KEYCLOAK_SETUP_PASSWORDThe password of a user with admin access to Keycloakadmin
KEYCLOAK_SETUP_REALMThe realm that the setup user is inmaster
KEYCLOAK_SETUP_CLIENT_IDThe client to use for authentication during setup of the provided Keycloakadmin-cli
KEYCLOAK_URLThe URL of the Keycloak instance to usehttp://localhost:18080/auth

Component configuration​

Identity supports component configuration using preset values. This means to configure a component for use within Identity, all that is required is to set two variables:

Environment variableDescriptionDefault value
KEYCLOAK_INIT_<COMPONENT>_SECRETThe secret used for authentication flowsNo default
KEYCLOAK_INIT_<COMPONENT>_ROOT_URLThe root URL of where the component is hostedNo default
note

Identity supports the following values for the <COMPONENT> placeholder: OPERATE, OPTIMIZE, TASKLIST, and WEBMODELER.

For the WEBMODELER value, only the KEYCLOAK_INIT_<COMPONENT>_ROOT_URL variable is required to be set.