Skip to main content

System Settings

ADMIN Intermediate

Configure system settings in the EZ-Console admin interface.

Overview​

System Settings allows you to configure various aspects of your EZ-Console application, including security policies, email configuration, OAuth/LDAP integration, and AI models.

Accessing System Settings​

Navigate to: System → Settings

Settings Categories​

Security Settings​

Configure security policies and authentication:

  • Password Policies

    • Minimum password length
    • Password complexity requirements
    • Password expiration
    • Password history

  • Session Management

    • Session timeout
    • Maximum concurrent sessions
    • Session auto-renewal

  • Multi-Factor Authentication

    • MFA enforcement
    • TOTP settings
    • Email MFA

  • Account Security

    • Account lockout threshold
    • Account lockout duration
    • Inactive account handling

Email & SMTP​

Configure email sending:

  1. Go to Email & SMTP tab
  2. Enter SMTP server details:
    • Host
    • Port
    • Username
    • Password
    • From email
    • From name
  3. Click Test Connection
  4. Click Save

Common Providers:

  • Gmail
  • Outlook/Office 365
  • SendGrid
  • Amazon SES
  • Custom SMTP

OAuth2.0 Authentication​

OAuth2/OIDC can also be defined in config.yml; the OAuth2.0 Authentication tab is the second supported place (see OAuth & LDAP Integration).

  1. Go to System → Settings and open OAuth2.0 Authentication.
  2. Enable OAuth2.0 Authentication.
  3. Choose OAuth Provider (including Auto Discover for OIDC discovery), set Client ID, Client Secret, Well-known endpoint and Scope as required by your IdP.
  4. Register the Redirect URI shown in the form with your identity provider.
  5. Set Auto Create User, Default Role, and Role Mapping Mode if your process requires them.
  6. Click Save.

System Settings: OAuth2.0 Authentication

LDAP Authentication​

LDAP is configured only here (not via config.yml for operators).

  1. Go to System → Settings and open LDAP Authentication.
  2. Enable Enable LDAP Authentication.
  3. Enter LDAP Server URL, Bind DN, Bind Password, Base DN, optional User Filter, and attribute mapping (User Attribute, Email Attribute, Display Name Attribute), plus Default Role and Timeout.
  4. Use Test Connection when available, then Save.

System Settings: LDAP Authentication

AI Models​

Configure AI model providers:

  1. Go to AI Models tab
  2. Click Create AI Model
  3. Configure:
    • Name and description
    • Provider (OpenAI, custom)
    • API credentials
    • Model settings
  4. Set as default (optional)
  5. Click Save

Toolsets​

Configure AI toolsets:

  1. Go to Toolsets tab
  2. View available toolsets
  3. Enable/disable toolsets
  4. Configure toolset settings

Organization Settings​

Multi-tenant organization settings:

  1. Go to Organizations tab
  2. View organization list
  3. Create/edit organizations
  4. Configure organization-specific settings

Updating Settings​

Via UI​

  1. Navigate to System → Settings
  2. Select the appropriate tab
  3. Modify settings
  4. Click Save
  5. Changes take effect immediately

Via API​

PUT /api/system/settings
Content-Type: application/json
Authorization: Bearer <token>

{
  "password_min_length": "12",
  "session_idle_timeout_minutes": "120",
  "mfa_enforced": "true"
}

Settings Validation​

Test Connections​

Before saving, test connections for:

  • SMTP servers
  • LDAP servers
  • OAuth providers
  • AI model APIs

Validation Errors​

If validation fails:

  • Check error messages
  • Verify credentials
  • Test network connectivity
  • Review configuration format

Best Practices​

1. Test Before Production​

Always test settings in staging before applying to production.

2. Document Changes​

Document any custom settings for future reference.

3. Regular Review​

Regularly review and update settings:

  • Security policies
  • Email configuration
  • OAuth providers

4. Backup Settings​

Export or document settings before major changes.

Need help? Ask in GitHub Discussions.