1. Home
  2. Documentation
  3. AI Gateway
  4. General

General

Configure the gateway's Authorization Server and global integration.

The General module centralizes the global parameters that AI Gateway uses to validate access tokens and integrate with Sensedia Platform. Unlike the other features, General is not a listing page. It is a single page with an update form.

IMPORTANT

The values registered here affect all gateway routes. Changing the Authorization Server changes who issues the tokens the gateway accepts: tokens issued by the previous provider start being rejected as soon as the new configuration is saved.

Learn how to:

Editing

Step 1

In the side menu, access General. The form opens directly on the page. There is no listing or modal.

Step 2

Decide which Authorization Server the gateway should use to validate tokens: the platform default or your own OpenID provider.

Step 3

Fill in or update the remaining fields (see Form fields).

Step 4

Click Save to persist the changes. To discard unsaved changes, click Cancel. The form returns to the last loaded values.

Platform Authorization Server

With the Use a custom authorization server option unchecked, the gateway validates access tokens against the platform's own Authorization Server. This is the default mode and requires no additional configuration: the credentials issued in AI Agents and the scopes registered in Scopes work without you providing any URL.

Your own Authorization Server

Check Use a custom authorization server to validate tokens against your own OpenID Provider. When you check the option, the Well-Known URL field appears and becomes required.

Provide the URL of your provider's OpenID discovery document (usually ending in /.well-known/openid-configuration). On save, the gateway:

  1. Accesses the well-known document you provided.
  2. Extracts the issuer (issuer) and the address of the public key set (jwks_uri) from it.
  3. Accesses that key set and verifies that it contains at least one signing key.

Only after these three checks is the configuration accepted. From then on, the gateway accepts only tokens issued by the discovered issuer and signed by one of those keys.

THE URL MUST BE PUBLIC

The Well-Known URL is accessed by the gateway itself at the moment you save, so it must be a publicly reachable address. Internal, private, or loopback URLs are rejected.

VALIDATION ERRORS

If any of the three steps fails β€” unreachable document, missing jwks_uri, or an empty key set or one without a signing key β€” the form displays the corresponding message and the configuration is not saved. Check the URL and your provider's public availability before trying again.

To go back to the platform Authorization Server, uncheck the option β€” the Well-Known URL field is cleared β€” and click Save.

Form fields

The table below covers all fields visible in the form.

Field
Type
Required
Rules
Use a custom authorization serverCheckboxNoUnchecked, the gateway uses the platform Authorization Server. Checked, it displays the Well-Known URL field so you can connect your own OpenID Provider.
Well-Known URLText (URL)Yes β€” when Use a custom authorization server is checkedURL of the provider's OpenID discovery document (e.g., https://your-idp/.well-known/openid-configuration). It must be a valid, publicly accessible URL, and the provider must expose at least one signing key.
Sensedia Platform Client IDText (sensitive, password)NoClient ID used to authenticate with Sensedia Platform APIs. Displayed as a password field.
Sensedia Platform Client SecretText (sensitive, password)NoClient Secret corresponding to the Sensedia Platform Client ID. Displayed as a password field.

How happy are you with this page?

We use cookies to enhance your experience on our site. By continuing to browse, you agree to our use of cookies.Learn more