These parameters are shared by various sources: Google Workspace, Azure AD, Okta Directory, MSAD/LDAP, etc. Source-specific parameters are listed in each source article.
The following override mechanisms will be processed in order, the last override representing the final value:
- Default value 
- config.json file on the CWD of the service process 
- Docker-provisioned secret (/run/secrets/<key>) 
- AWS SSM (all keys prefixed with the value from the ‘prefix’ key; disable check with env variable DISABLE_AWS_SSM=1 ) 
- AWS SecretsManager (all keys prefixed with the value from the ‘prefix’ key; disable check with env variable DISABLE_AWS_SEC_MANAGER=1 ) 
- Environment variable, prefixed with FYDE_, all caps and replacing dashes ( - ) with underscores ( _ ). 
- Command-line arguments in long-form notation like ‘--example’, all keys underscores converted to dashes. 
The following is a complete list of all configuration parameters used by this program.
| Key | Default | Type | Description | 
| 
 | 
 | bool | Validate the TLS certificates of the API server | 
| 
 | 60 | int | Timeout to fail a connection to the API server | 
| 
 | 
 | bool | This flag will run all the synchronization and delta calculation steps, but it will not send the changes over to the Enterprise Console. | 
| 
 | None | string | Enrollment token provided by the CloudGen Access Console | 
| 
 | 
 | bool | Force a full sync of the directory source. | 
| 
 | string | Group import filtering (regex). Note that all groups are still imported. This will filter the users that are imported. | |
| 
 | string | Group import filtering (regex). Note that all groups are still imported. This will filter the users that are imported. | |
| 
 | string | Use HTTP proxy. Example:  | |
| 
 | string | Use HTTPS proxy. Example:  | |
| 
 | 30 | int | Liveness of the redis data for active jobs in server_mode. If data about a pending job is not refreshed by the end of this timeout, the system considers the connector instance handling the job has died and cleans up the associated data. | 
| 
 | string | Log file to send all output. It is also sent to stderr by default. | |
| 
 | 
 | string | Log level to use. Valid values error/warning/info/debug | 
| 
 | 
 | bool | Decides if it should push only groups that match the group filters, or all of them. | 
| 
 | 
 | string | Define the prefix used for keys stored in AWS SSM and AWS SecretsManager | 
| 
 | 
 | bool | Prometheus metrics for the connector | 
| 
 | 9000 | int | Prometheus port | 
| 
 | 
 | bool | Run only one sync cycle and exit | 
| 
 | 
 | string | IP address to listen to for requests when running in server_mode | 
| 
 | 
 | bool | Run connector in microservice mode | 
| 
 | 8000 | int | Port to listen in server_mode | 
| 
 | 900 | int | Time to wait between sync cycles | 
| 
 | 30 | int | Time to wait before retrying a failed sync attempt | 
| 
 | 30 | int | Time to wait between polls to confirm a sync job has been processed | 
| 
 | string | User import filtering (regex). Note that all groups are still imported. This will filter the users that are imported. | |
| 
 | string | User import filtering (regex). Note that all groups are still imported. This will filter the users that are imported. | 

