---
title: "Built-in IdP settings for Connector, Service, and Local IdPs"
slug: "built-in-idp-settings-v6-6"
description: "Configure the three built-in IdPs: Connector, Service, and Local, with customizable settings for user management and security features."
updated: 2026-02-20T21:22:21Z
published: 2026-02-20T21:22:21Z
canonical: "support.appgate.com/built-in-idp-settings-v6-6"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Built-in IdP settings

AppGate ZTNA has three built in IdPs with some settings that should be edited:

- **Connector**. A simplified IdP used by Client instances running within the Connector appliance. Not all fields for the Connector IdP are required.

> [!NOTE]
> **NOTE**
> 
> You must add IP Pools before you can use Connector appliances.

- **Service**. A simplified IdP used by the Kubernetes (k8s) service Client instances running within containers. Not all fields are required. See the [service users](/v1/docs/built-in-idp-settings-v6-6#service) section to manage the users.

> [!NOTE]
> **NOTE**
> 
> You must add IP Pools before you can use k8s service Client instances.

- **Local**. A locally managed internal database. See the [Local users](/v1/docs/built-in-idp-settings-v6-6#local) section to manage the users. See [Local IdP configuration](/v1/docs/built-in-idp-settings-v6-6#local-idp-configuration) below for fields that apply only to this IdP.

Go to the **Identity Providers** page (Identity > Identity Providers) and select each IdP to view their settings.

## Connector IdP configuration

To view settings for the Connector IdP, go to the **Identity Providers** page and select the IdP with the Type *Connector*.

See the [General IdP settings](/v1/docs/general-settings-v6-6) section for information on editing the the [IP Pools](/v1/docs/general-settings-v6-6#ip-pools) and [Claims](/v1/docs/general-settings-v6-6#claims) fields.

> [!NOTE]
> **NOTE**
> 
> Scripted (formerly on-demand) Device Claims are not available.

## Local IdP configuration

To view settings for the Local IdP, go to the **Identity Providers** page and select the IdP with the Type *Local*.

See the General settings section for information on editing the [Sign-in Settings](/v1/docs/general-settings-v6-6#signin-settings) fields. Then edit the following fields for the Local IdP:

- ***Sign-in Attempts Limit.*** Enter the number of sign-in attempts allowed before the user is blocked.

> [!NOTE]
> **NOTE**
> 
> For SSH access this can also be set. Refer to SSH command line administration

- ***Sign-in Lockout Duration (in minutes).*** Enter the number of minutes the user must wait before attempting to sign-in again.
- ***Minimum Password Length.*** Enter the minimum password length for local users. Enter 0 for no limit.

See the General settings section for information on editing the [Client Settings](/v1/docs/general-settings-v6-6#client-settings) fields, [IP Pools](/v1/docs/general-settings-v6-6#ip-pools) fields, and [Claims](/v1/docs/general-settings-v6-6#claims) fields.

## Service IdP configuration

To view settings for the Service IdP, go to the **Identity Providers** page and select the IdP with the Type *Service*.

See the General settings section for information on editing the [Sign-in Settings](/v1/docs/general-settings-v6-6#signin-settings) fields. Then edit the following fields for the Service IdP:

> [!NOTE]
> **NOTE**
> 
> MFA at Sign-in and Admin Access not available.

- ***Sign-in Attempts Limit.*** Enter the number of sign-in attempts allowed before the user is blocked.

> [!NOTE]
> NOTE
> 
> For SSH access this can also be set. Refer to SSH command line administration

- ***Sign-in Lockout Duration (in minutes).*** Enter the number of minutes the user must wait before attempting to sign-in again.
- ***Minimum Password Length.*** Enter the minimum password length for local users. Enter 0 for no limit.

See General settings section for information on editing the [Client Settings](/v1/docs/general-settings-v6-6#client-settings) fields, [IP Pools](/v1/docs/general-settings-v6-6#ip-pools) fields, and [Claims](/v1/docs/general-settings-v6-6#claims) fields.