---
title: TrustAllManager
description: Blindly trusts all server certificates presented the servers for protected applications. It can be used instead of a TrustManager (deprecated) in test environments to trust server certificates that were not signed by a well-known CA, such as self-signed certificates.
component: pinggateway
version: 2023.11
page_id: pinggateway:reference:TrustAllManager
canonical_url: https://docs.pingidentity.com/pinggateway/2026/reference/TrustAllManager.html
llms_txt: https://docs.pingidentity.com/pinggateway/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2025-06-03T11:21:31Z
superseded_by: https://docs.pingidentity.com/pinggateway/2026/reference/TrustAllManager.html
section_ids:
  TrustAllManager-usage: Usage
  TrustAllManager-example: Example
  TrustAllManager-moreinfo: More information
---

# TrustAllManager

Blindly trusts all server certificates presented the servers for protected applications. It can be used instead of a [TrustManager (deprecated)](TrustManager.html) in test environments to trust server certificates that were not signed by a well-known CA, such as self-signed certificates.

The TrustAllManager is not safe for production use. Use a properly configured [TrustManager (deprecated)](TrustManager.html) instead.

## Usage

```none
{
    "name": string,
    "type": "TrustAllManager"
}
```

## Example

The following example configures a client handler that blindly trusts server certificates when IG connects to servers over HTTPS:

```json
{
    "name": "BlindTrustClientHandler",
    "type": "ReverseProxyHandler",
    "config": {
        "trustManager": {
            "type": "TrustAllManager"
        }
    }
}
```

## More information

[org.forgerock.openig.security.TrustAllManager](../_attachments/apidocs/org/forgerock/openig/security/TrustAllManager.html)