The Central Configuration is where all global settings for a Domino installation are listed. ` . Go to Admin portal. . Click Advanced > Central Config. . On the Configuration Management page, you can:

Click an existing record to edit its attributes.
Click Add Record to create a new setting. If no record is created in the application, the system uses the default value.

You must restart the Domino services for changes to take effect.

Authentication

These options relate to the Keycloak authentication service. They are available in namespace common and must be recorded with no name.

Key

Default

Description

authentication.oidc.externalOrgsEnabled

false

Enables Domino organization membership to synchronize with SAML identity provider attributes so that membership can be managed by the identity provider.

authentication.oidc.externalRolesEnabled

false

Enables Domino’s user roles to synchronize with SAML identity provider attributes so that user role management can be managed by the identity provider. See Admin roles assignments through users role SAML attributes.

com.cerebro.domino.frontend.authentication.defaultRoles

Practitioner

If authentication.oidc.externalRolesEnabled is true, then user roles are retrieved from SAML. If that key is false, use this key to set the default roles using a comma-separated list. An example value is: Practitioner,SysAdmin. To set this key to a LiteUser, delete the central config key entry. A Lite User is a user with no roles.

See Roles for more information.

authentication.oidc.externalOrgsEnabled

false

Enables Domino organization membership to synchronize with SAML identity provider attributes so that membership can be managed by the identity provider.