Administration and Security

System Settings

Open System Settings from the user menu (or /account/admin when authentication is enabled). In standalone deployments without login, the page is available directly.

Available tabs:

• Database Timeouts — connection (1–300s), query (1–3600s), and validation (1–60s) timeouts
• Query Settings — maximum rows returned and pagination defaults for the Query Console
• AI Settings — Anthropic or OpenAI provider, API keys, and model names for the query assistant
• API Keys — programmatic access keys (when API key auth is enabled)
• CoreIQ Connections — tenant-wide CoreIQ base URL, credentials, host, and catalog for Import Legacy Schema
• Application Logs — real-time log viewer

Use Save All Settings to persist timeout, query, and AI changes.

Hub connectivity (OL_HUB_URL, per-service *_SERVICE_URL, and OL_HUB_API_KEY) is configured on the server — not in this UI.

Authentication

OL DataIQ supports three deployment patterns:

Mode	User experience
No authentication	No login screen; protect at the network layer
Hub IAM (Auth0)	SaaS sign-in via OpenLegacy Hub; account shell (Profile, API Keys, Team, Licenses)
Keycloak SSO	On-prem SSO; bearer tokens on API calls; Logout ends the Keycloak session

The active mode is reported by GET /api/v1/config/public at startup.

Deployment practices

• Use dedicated database accounts with least-privilege permissions.
• Rotate credentials regularly.
• Use HTTPS and appropriate TLS certificates in production.
• Place OL DataIQ behind corporate firewalls and segment database networks.
• Restrict access to configuration directories and back them up securely.

Important: Treat connection exports and ODZ packs as secrets because they can contain credentials.