Configure Hostname and Token URLs

Excalibur SAM uses a mobile app that serves as your secure authentication and authorization token. The mobile app needs to know which Excalibur SAM server it should connect to. This information is shared using QR codes, which include the server's connection details.

In some environments — especially when Excalibur SAM is deployed in isolated or segmented networks — you may need to use different fully qualified domain names (FQDNs) for the Dashboard and for the mobile app's connection endpoint. For example, the web Dashboard might only be accessible from inside your network, while the mobile app connects through a public-facing reverse proxy or load balancer that handles SSL/TLS termination.

Where to Configure

During the Excalibur SAM setup wizard, you can specify the Token URL used by the mobile app. You can later adjust both the Token URL and the main application Hostname URL under Dashboard → Settings → System → Server Settings.

URL Definitions

• Hostname URL — defines the base URL of your Excalibur SAM system. It appears in email notifications such as registration invitations and peer verification messages.
• Token URL — defines the endpoint used by the mobile app and determines what is embedded in the QR codes. It must be reachable by the smartphone, either using a resolvable hostname/FQDN/address or via an always-on-VPN solution.

Warning

Incorrectly configuring either of these URLs can cause invalid QR codes, mobile app connection failures, or broken links in email notifications. Always ensure the URLs are correct, accessible for their intended purpose, and aligned with your network design.