Certain settings can be made via the configuration file of the CoreOne Self-Service Portal, which are documented below.

Configuration file

The configuration file is located in the following directory:

C:\ProgramData\itsense\Configuration\Portal_ApplicationConfiguration.json

Settings

Name	Example value	Available from version	Definition

Name	Example value	Available from version	Definition
`AuthenticationServerUrl`	https://auth.coreone.ch	7.0	The IdP responsible for the portal
`CosWebUrl`	https://admin.corone.ch	7.0	The URL for the CoreOne Web Portal
`DisabledPages` Deprecated since version 9.1.2	[ ]	7.0	An array of pages to be completely disabled in the portal. For example `[ "Home", "PersonalData", "Security", "Communication", "Consents", "Services", "Representations", "LegalEntities", "Representations", "SelfService.AccountAndSecurity" ]`
`ReauthenticationSettings`	`{ “ForceAfterSecondsSinceLastAuthentication" : "1" }`	7.0	How long a user does not have to re-authenticate for security reasons to make changes to their data and settings. Often users log in to the portal to change their data, for example. To avoid unnecessary authentication twice, this setting can be used.
`OpenIdConnectSettings`	`{ "ClientId": "cos_selfservice", "Secret": "xxxxxx" }`	7.0	Client ID and Secret, automatically generated during installation. But can be adjusted here if necessary.
`LogoutAfterMinutes`	30	7.0	After how many minutes a user should be logged out in case of inactivity. If the value is set to 0, this feature is disabled.
`BackendApiUrl`	https://app.corone.ch:8000/api	7.0	URL to the backend API
`UserNotificationIntervalInSeconds`	60	7.0	The intverval in seconds when the notifcations for a user should refreshed.
`CallbackSettings`		9.0	Applications can provide a callback URL when redirecting users to the portal. You can enable and disable this feature and define allowed Urls and Url pattern to only allow certain callbacks. AllowedUrls: Checked first → if matched, it allows the URL AllowedUrlsRegex: Checked if AllowedUrls didn’t match → if regex matches, it allows the URL