Forcing the local IdP as a fallback

If the currently configured identity provider is unreachable or incorrectly configured, you can temporarily switch to the local identity provider using the options listed below. This enables a login that allows you to fix an incorrect configuration of the identity provider.

Configuration via the Karaf Console

In the Karaf Console, there are two ways to enable the local identity provider. The easiest way is via the Karaf Console Commands for the BPC:

  • Enable

  • Disable

virtimo@virtimo()> bpc:force-local-idp on
virtimo@virtimo()> bpc:force-local-idp off

Alternatively, the corresponding setting can be changed using the Karaf command config. The change takes effect without restarting Karaf.

  • Enable

  • Disable

virtimo@virtimo()> config:edit de.virtimo.bpc.core
virtimo@virtimo()> config:property-set de.virtimo.bpc.core.forceLocalIdentityProvider true
virtimo@virtimo()> config:update
virtimo@virtimo()> config:edit de.virtimo.bpc.core
virtimo@virtimo()> config:property-set de.virtimo.bpc.core.forceLocalIdentityProvider false
virtimo@virtimo()> config:update

Configuration via the configuration file

The configuration file de.virtimo.bpc.core.cfg is located in the etc directory of the Karaf installation. There, you can modify the following line to enable or disable the local identity provider. The changes take effect immediately upon saving, without requiring a Karaf restart.

  • Enable

  • Disable

...
de.virtimo.bpc.core.forceLocalIdentityProvider = "true"
...
...
de.virtimo.bpc.core.forceLocalIdentityProvider = "false"
...

For the values "true"/"false", use the existing values in the file. If these are present without quotation marks, then also use true/false without quotation marks.
Otherwise, Karaf will not be able to read the file correctly.


Keywords: