App settings
Liberty Next → Administer → App holds every setting of the install: nothing needs to be edited in a file. The sections are listed in alphabetical order, the read-only Deployment last; each folds and its header shows a summary (configured, not set — restricted mode, no API key, disabled, restart after a change…). Save validates and applies the whole page at once.
Secret fields — the licence key, the Anthropic API key, the SMTP password, the OIDC client secret and session secret — are masked inputs with an eye; they are encrypted with the master key when saved (Encryption).
At a glance
Server
| Field | Notes |
|---|---|
| App name | The application's name. |
| Bind host, Port | Listening address and port. Restart needed. |
| Sub-path behind a reverse proxy | /liberty to serve the application under that path behind a reverse proxy; blank = the site root. The page, the API, the downloads, the live connection and the single sign-on callback follow it — see Serving under a sub-path. Restart needed. |
| Log level | debug, info, warning, error, critical. Restart needed. |
| Hot-reload config TOML files on change | Apply configuration files as soon as they change — see Hot reload. |
| Oracle thick mode (…) | Oracle Instant Client for every Oracle pool — needed for Native Network Encryption and LOBs over a database link. Takes effect after a restart. See Connectors. |
Display
| Field | Notes |
|---|---|
| Default language | Labels when a request names no language. |
| Default period (dashboards) | The preset a dashboard opens on when it names none — see Dashboards. |
| Grid page size | The grids' initial page size (10 to 10 000, default 50). A saved view's own size wins. |
| Dashboard cache (seconds, 0 = none) | How long a reopened dashboard reuses its widgets' results (default 60). |
| Several tabs at once (off: one page at a time) | On by default. Off: opening a page replaces the current one. |
| Close the tabs when switching application | Off by default. On: picking another application in the switcher closes the tabs of the other applications; the Settings, Monitoring and run tabs stay. |
| Tabs at most | 5 by default (1 to 50). When the limit is reached, opening a page closes the oldest tab. |
| Drill-downs open inside the current tab (…) | Off by default. On: a row's drill-down opens as a panel inside the current tab, with a breadcrumb and Back, unless the action itself decides — see Actions. |
External addresses
The systems this install links to — the JD Edwards web client, an intranet. One line per address: a name in capitals (JDE_WEB) and its URL (https://jde.example.com:8080/jde); Add an address adds one. An Open in action or a link menu item writes #URL.JDE_WEB# at the start of its address instead of the address itself: the screens and menus shipped with an application then carry no customer address, and each install sets its own. A change applies at once. An address the install does not set gives no link: the action opens nothing.
When a saved change needs a restart, the page says Saved. Restart the server to apply the new settings.
Server log
| Field | Notes |
|---|---|
| Console log format | text, a readable line (default), or json, one object per line for a log shipper. |
| Keep the server log on disk | On by default: the log searched in Monitoring → Server log. |
| Log file | Blank = .logs/liberty.log in the configuration folder. |
| Size per file (MB), Files kept | The rotation: 10 MB and 5 previous files by default. |
Restart needed for every field of the section.
Sign-in
| Field | Notes |
|---|---|
| Accounts store | File (auth.toml) (default) or Database, with its Database pool. Switching does not move the accounts from one store to the other. |
| Token issuer | The name written in the session tokens (liberty-next). |
| Session (access token) lifetime (s) | 3600 by default: how long a session stays valid before it is renewed. |
| Sign-in (refresh token) lifetime (s) | 1,209,600 by default — 14 days: how long a user stays signed in. |
| Refresh reuse grace (s) | 60 by default: a renewal already used is still accepted for that time — two tabs renewing together; 0 = strict single use. |
| Failed sign-ins before a pause, Counting window (s) | 10 failures within 300 seconds pause the sign-ins of that account — see Sign-in. |
Restart needed for every field of the section.
Nomaflow
| Field | Notes |
|---|---|
| Scheduler and runner on | On by default. Off: the jobs are listed but neither scheduled nor run. |
| Run history pool | The database of the run history (default). |
| Run log lines kept per run | 5,000 by default. |
| Work area | Blank = .nomaflow/files next to the configuration: uploads, rejects, reports, exports. |
| Largest upload (MB) | 200 by default. |
Restart needed for every field of the section.
Change packages
| Field | Notes |
|---|---|
| Capture tracked writes into change packages | On by default. Off: the screens marked for tracking capture nothing. See Change packages. |
| Database pool | Where the change packages are kept (default). |
| Keep exported / promoted packages (days, 0 = always) | 0 by default; see Monitoring → Retention. |
Restart needed for every field of the section.
License
License key: paste the key delivered by Nomana-IT. The licensed connectors load at once, without a restart. See Licence key.
AI Assistant
| Field | Notes |
|---|---|
| Enabled | The assistant answers; users need the ai:chat permission. |
| Anthropic API key | Without it, the assistant says it is not configured. |
| Model, Effort, Max tokens, Adaptive thinking | The model and how much it reasons and writes. |
| Max tool iterations | Tool calls per answer, at most (default 8). |
| Request timeout (s) | Default 120. |
| System prompt | Empty: the built-in instructions. |
| Connector tools | The assistant may list connectors and run their read queries. |
| Data Explorer tools | On by default: the assistant computes totals, rankings and trends on the Data Explorer models, and saves analyses and dashboards. |
| API tool | The assistant may call API endpoints — off by default, since an endpoint may change data. |
| Scaffold tools | The assistant may propose queries, dictionary entries, screens and menu items; the user applies the proposal. |
| Allowed connectors | The connectors the assistant may use; empty means all. |
| Allowed domains, Max fetches per turn | Web pages the assistant may read; no domain means no web access. |
| Operations tools | The assistant may read the jobs' status, the server log tail and the integrity checks — off by default, for installations whose chat users are administrators. |
| Models users may pick | The models offered in the drawer's Model picker besides the one above; empty → the model above only, and no picker. |
| Starter questions | Questions shown on an empty conversation: everywhere (*), per application, or per application/screen — the most specific set wins. They take precedence over the questions an application ships (Liberty Next → Build → AI). |
See AI assistant.
Notifications (email)
Notifications enabled, then the Server (SMTP host, Port, Encryption — STARTTLS, implicit TLS or none —, Timeout), the Account (User, Password) and Sending (From address, Keep read notifications — days, 0 = forever). Inbox database pool sets where the notifications of the bell are kept (default). See Notifications.
OpenID Connect (SSO)
| Field | Notes |
|---|---|
| Enabled | Shows the OIDC button on the sign-in page. |
| Discovery URL | The provider's .well-known/openid-configuration. |
| Client ID, Client secret, Scopes | As registered at the provider (openid email profile by default). |
| Username claim, Email claim, Name claim | Which ID-token claims fill the user (preferred_username, email, name). |
| Redirect URL override (proxy), Frontend redirect | Only behind a proxy that rewrites the host, or for a front-end that handles the tokens itself. |
| Attributes from claims | One line per attribute: the user attribute ← the ID-token claim (company ← org_id). The attributes feed the roles' data scope and are refreshed at every sign-in; a claim missing from the token removes the attribute. |
| Session secret | Signs the sign-in cookie; blank = the JWT secret. Encrypted. Restart needed. |
Register https://<host>/auth/oidc/callback as redirect URI at the provider. See Sign-in.
PDF branding
The cover and page settings of the PDF reports: author, primary colours, cover texts, footer. Empty fields keep the framework's defaults.
Deployment (read-only)
The last section lists the values set by the installation, not from this page — the value in force and why: the master key and the JWT secret, only set or not set, which come from the environment; the token signing algorithm; the location of each configuration file, which follows the install's layout.
Not on this page
| Setting | Where |
|---|---|
| Pools and their passwords | Liberty Next → Administer → Pools. |
| Users and roles | Liberty Next → Administer → Access. |
| The master key and the JWT secret | The environment — see Environment variables. |