Configure Web Security Settings

You can add CORS and CSP directives to EmpowerID directly from the application itself. This frees you from needing to open and edit the EmpowerID web.config file on all your EmpowerID servers. Once you add your specific CORS and CSP directives in the Web UI, you simply restart the EmpowerID Web Role Windows Service to have those changes propagate to the web.config file.

Configure the settings

1. On the navbar, expand Single Sign-On > SSO Connections and select Security.
   
   This directs you to the Find Security page, which contains two tabs, one for CORS and the other for CSP.
   
   

   Open

   

    

2. To add a URL to CORS, select the CORS tab and click the Add button on the grid header.

3. Enter the URL into the URL field and then click Save.
   
   

   Open

   

    

4. Repeat for other URLs as needed.

5. To add to the CSP directives, select the CSP tab and click the Name link for the directive you want to alter.
   
   

    

6. On the Directive Details view that appears, expand the Values accordion and then click the Add button on the grid header.
   
   

    

7. Enter the value in the in the Name field and click Save.

8. Repeat for other values as needed.

9. Once you have finished adding your values, open Services.msc and restart the EmpowerID Web Role Windows Service.