Skip to main content

Authenticate Internal Service URL


Authenticate Internal Service URL is only required for split-service mode deployments where Pomerium can’t access the public Authenticate Service URL.

If included, Authenticate Internal Service URL will override Authenticate Service URL.


Pomerium uses the Hosted Authenticate Service by default.

If you want to run Pomerium with a self-hosted authenticate service, you must include an identity provider and authenticate service URL in your configuration.

See Self-Hosted Authenticate Service for more information.

How to configure

Config file keysEnvironment variablesTypeUsage
authenticate_internal_service_urlAUTHENTICATE_INTERNAL_SERVICE_URLURLrequired (In split-service mode only)


authenticate_internal_service_url: https://authenticate.internal