Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Name

Example value

Available from version

Definition

AuthenticationServerUrl

https://auth.coreone.ch

7.0

The IdP responsible for the portal

CosWebUrl

https://admin.corone.ch

7.0

The URL for the CoreOne Web Portal

DisabledPages

[ ]

7.0

An array of pages to be completely disabled in the portal.

For example

Code Block
[
  "Home",
  "PersonalData",
  "Security",
  "Communication",
  "Consents",
  "Services",
  "Representations",
  "LegalEntities",
  "Representations",
  "SelfService.AccountAndSecurity"
]

ReauthenticationSettings

Code Block
{
    “ForceAfterSecondsSinceLastAuthentication" : "1"
}

7.0

How long a user does not have to re-authenticate for security reasons to make changes to their data and settings. Often users log in to the portal to change their data, for example. To avoid unnecessary authentication twice, this setting can be used.

OpenIdConnectSettings

Code Block
{
    "ClientId": "cos_selfservice",
    "Secret": "xxxxxx"
}

7.0

Client ID and Secret, automatically generated during installation. But can be adjusted here if necessary.

LogoutAfterMinutes

30

7.0

After how many minutes a user should be logged out in case of inactivity. If the value is set to 0, this feature is disabled.

BackendApiUrl

https://app.corone.ch:8000/api

7.0

URL to the backend API

UserNotificationIntervalInSeconds 

60

7.0

The intverval in seconds when the notifcations for a user should refreshed.

CallbackSettings

Code Block
{
    "Enabled": true,
    "AllowedUrls": ["https://google.com", "https://coreone.ch/"],
    "AllowedUrlsRegex": ["^https:\\/\\/(?:www\\.)?itsense\\.ch(?:\\/.*)?$"]
}

9.0

Applications can provide a callback URL when redirecting users to the portal. You can enalbe enable and disablte disable this feature and define allowed Urls and Url pattern to only allow certain callbacks.If the callback url is set, the user will be presented with a an option to navigate back to the original

application.AllowedUrls: Checked first → if matched, it allows the URL

AllowedUrlsRegex: Checked if AllowedUrls didn’t match → if regex matches, it allows the URL