---
title: "Built-in IdP settings"
slug: "built-in-idp-settings-v6-5"
description: "Explore built-in IdPs, IP Pools, and security settings for secure remote access and user management in AppGate."
updated: 2025-10-31T18:25:39Z
published: 2025-10-31T18:25:39Z
canonical: "support.appgate.com/built-in-idp-settings-v6-5"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Built-in IdP settings

There are three built in IdPs with some settings that can (should) be edited.

- Connector - which is a simplified IdP (not all fields are required) used by the Client instances running within the Connector Appliance.

> [!NOTE]
> **NOTE**
> 
> You must add the IP Pools before you can use Connector appliances.
- Service - which is a simplified IdP (not all fields are required) used by the k8s service Client instances running within containers. See [service users](/v1/docs/built-in-idp-settings#service) to manage the users themselves.

> [!NOTE]
> **NOTE**
> 
> You must add the IP Pools before you can use k8s service Client instances.
- Local - which is a locally managed internal database. See [Local users](/v1/docs/built-in-idp-settings#local) to manage the users themselves.

Below are specific fields that apply only to the local IdP.,

## Connector

### IP Pools

See [General IdP settings](/v1/docs/general-settings#ip-pools).

### Claims

See [General IdP settings](/v1/docs/general-settings).

> [!NOTE]
> **NOTE**
> 
> Scripted (formerly on-demand) Device Claims are not available.

## Local

### Sign-in Settings

See [General IdP settings](/v1/docs/general-settings#signin-settings).

***Sign-in Attempts Limit***

After the threshold is reached, further sign-in attempts will be blocked.

> [!NOTE]
> **NOTE**
> 
> For SSH access this can also be set. Refer to SSH command line administration

***Sign-in Lockout Duration (in minutes)***

After the lockout threshold is reached, further sign-in attempts will be blocked according to the configured value.

***Minimum Password Length***

Minimum password length for local users. Enter 0 for no limit.

### Client Settings

See [General IdP settings](/v1/docs/general-settings#dns-configuration).

### IP Pools

See [General IdP settings](/v1/docs/general-settings#ip-pools).

### Claims

See [General IdP settings](/v1/docs/general-settings).

## Service

### Sign-in Settings

See [General IdP settings](/v1/docs/general-settings).

> [!NOTE]
> **NOTE**
> 
> MFA at Sign-in and Admin Access not available.

***Sign-in Attempts Limit***

After the threshold is reached, further sign-in attempts will be blocked.

> [!NOTE]
> NOTE
> 
> For SSH access this can also be set. Refer to SSH command line administration

***Sign-in Lockout Duration (in minutes)***

After the lockout threshold is reached, further sign-in attempts will be blocked according to the configured value.

***Minimum Password Length***

Minimum password length for local users. Enter 0 for no limit.

### Client Settings

See [General IdP settings](/v1/docs/general-settings#dns-configuration).

> [!NOTE]
> **NOTE**
> 
> Only DNS Servers and DNS Domains can be set.

### IP Pools

See [general idp settings](/v1/docs/general-settings#ip-pools).

### Claims

See [General IdP settings](/v1/docs/general-settings).

> [!NOTE]
> **NOTE**:
> 
> Scripted (formerly on-demand) Device Claims are not available.

A component that extends connectivity to remote sites and unmanaged resources without requiring the use of a standalone Client.

The virtual or physical instance on which the system is running. Each appliance is a stateless, configurable machine that can operate as a single function or a combination of functions.

Key-value pairs related to the identity and content of the user or device and are specific to each session.