---
description: >-
  This chapter describes settings (configuration) required for integration
  (writing) flexible and configurable apps. The important categories are
  discussed below.
---

# Settings



## Properties

Every application in Trillo Workbench features a set of configurable properties, allowing admins to tailor settings based on their environment. As an example, what template to use for sending a certain types of email. These properties are further divided into two sub-categories.

### System Properties

These are properties that are used by the Trillo Workbench for certain built-in functionalities. For example, the name of template file to be used for sending "forgot password" email. The key (name) are retained, but the value can be changed.

### Custom Properties

Custom properties are entirely defined and managed by users (admin), as opposed to system properties with fixed keys.&#x20;

Trillo Workbench provides APIs to read a list of properties or a single property given its name.

<figure><img src="https://3894296373-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MV-642lNorw6_vRdCpS%2Fuploads%2FpHnJZxTefqSSIgdQQgvc%2FSettings_Properties_Tab.png?alt=media&#x26;token=5dbda650-9ddb-40a3-b93e-f51056b8328a" alt=""><figcaption><p>Settings > Properties Tab</p></figcaption></figure>



## API Credentials

API credentials are used for issuing credentials by Trillo Workbench and used for accessing its APIs.

Users can issue API credentials for programatic access to its APIs. It supports client-credentials and password grant. These are discussed in the chapter "Using Trillo Workbench APIs".

Admins can create and manage multiple API credentials for a single application client.

### Adding a New Credential

<figure><img src="https://3894296373-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MV-642lNorw6_vRdCpS%2Fuploads%2F4LXkGm6dcv4jZjrBzOLf%2FCreating_New_API_Credentials.png?alt=media&#x26;token=9e29fb8b-3f22-41b9-aefa-13d875f07dce" alt=""><figcaption><p>Creating a New Credentials</p></figcaption></figure>



### Generating New Credentials

Once a new instance (by giving it a name) is created, a user can generate credentials for it.

<figure><img src="https://3894296373-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MV-642lNorw6_vRdCpS%2Fuploads%2FIZDvFjuPJbqj6sYZV1uu%2FGenerating_Client_Credentails.png?alt=media&#x26;token=88e50041-dab9-43c7-866b-6440599ecf37" alt=""><figcaption><p>Generating New Credentials</p></figcaption></figure>

## Services Authorization

Service  Authorization is used for adding credentials of external services so Trillo Workbench can use them for integration (invoking their APIs) or login using authorization code flow.

Under Service Authorization, you define URLs and credentials of external services including identity. The chapter OpenID Connect (OIDC) discuss the authorization code flow settings. You can specify setting of all type of OAuth2 grants.

The following screen shows a service authorization settings for Google Identity.

<figure><img src="https://3894296373-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MV-642lNorw6_vRdCpS%2Fuploads%2FBaGVe1yeHRvQQHVkTuFf%2FGoogle%20Identity%20Integration%20-%20Authorization%20Code%20Settings.png?alt=media&#x26;token=03f96fc7-a1f9-423f-a202-0267905fcefb" alt=""><figcaption><p>Google Identity Integration - Authorization Code Settings</p></figcaption></figure>

### Using Secret Manager with Service Authorization

Trillo Workbench API seamlessly resolves any value if it starts with $ (leveraging the Google Secret Manager). For example, instead of specifying the value of client\_id as "324332....6.apps.googleusercontent.com", you can specify $google\_idp\_client\_id. Trillo Workbench will replace the string $google\_idp\_client\_id with the value of "google\_idp\_client\_id" in secret manager (notice secret manager lookup key is without $).
