Authenticate Callback Path

• Environmental Variable: AUTHENTICATE_CALLBACK_PATH
• Config File Key: authenticate_callback_path
• Kubernetes: authenticate.callbackPath
• Type: string
• Default: /oauth2/callback
• Optional

Authenticate callback path sets the path at which the authenticate service receives callback responses from your identity provider. The value must exactly match one of the authorized redirect URIs for the OAuth 2.0 client.

This value is referred to as the redirect_url in the OpenIDConnect and OAuth2 specs.

See also:

• OAuth2 RFC 6749
• OIDC Spec
• Google - Setting Redirect URI

Note:

Pomerium uses the Hosted Authenticate Service by default.

If you want to run Pomerium with a self-hosted authenticate service, you must include an identity provider and authenticate service URL in your configuration.

See Self-Hosted Authenticate Service for more information.