Service Security Configuration

Insert the following block in settings.json to enable service security (GDK > 4.4.0.318):

  "SecuritySettings": {
	"RequireAuthentication": true,
	"RequireAuthorization": true,		
    "AuthenticationServiceUrl": <OIDC authentication url>,
	"AuthorizationServiceUrl": <Authorization url, for future use>,
	"DeactivateSecurity": {
		"TPG.Hosts.AddInHosting.AddIns.CatalogServiceAddIn.CatalogServiceAddIn": true,
		"TPG.Hosts.AddInHosting.AddIns.DrawObjectServiceAddIn.DrawObjectServiceAddIn": true,
		"TPG.Hosts.AddInHosting.AddInUtilities.ManagementServiceHoster": true,
	}	
  }

RequireAuthentication contols whether service security is enabled. Setting this value to false will disable service security, and access to the services will not require authentication.

Only users allow to change security policy should be allowed write access to settings.json.