---
title: TrustAllManager
description: Blindly trusts all server certificates presented the servers for protected applications. Use this instead of a TrustManager (deprecated) only in tests where you can trust server certificates that were not signed by a well-known CA, such as self-signed certificates.
component: pinggateway
version: 2025.9
page_id: pinggateway:reference:TrustAllManager
canonical_url: https://docs.pingidentity.com/pinggateway/2026/reference/TrustAllManager.html
llms_txt: https://docs.pingidentity.com/pinggateway/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
superseded_by: https://docs.pingidentity.com/pinggateway/2026/reference/TrustAllManager.html
section_ids:
  TrustAllManager-usage: Usage
  TrustAllManager-example: Example
  TrustAllManager-moreinfo: More information
---

# TrustAllManager

Blindly trusts all server certificates presented the servers for protected applications. Use this instead of a [TrustManager (deprecated)](TrustManager.html) only in tests where you can trust server certificates that were not signed by a well-known CA, such as self-signed certificates.

|   |                                                                                                                                      |
| - | ------------------------------------------------------------------------------------------------------------------------------------ |
|   | The TrustAllManager isn't safe for production use. Use a properly configured [TrustManager (deprecated)](TrustManager.html) instead. |

## Usage

```json
{
    "name": string,
    "type": "TrustAllManager"
}
```

## Example

The following example configures a handler that blindly trusts server certificates and doesn't verify hostnames when PingGateway connects to servers over HTTPS:

```json
{
    "name": "BlindTrustReverseProxyHandler",
    "type": "ReverseProxyHandler",
    "config": {
        "tls": {
            "type": "ClientTlsOptions",
            "config": {
                "trustManager": {
                    "type": "TrustAllManager"
                },
                "hostnameVerifier": "ALLOW_ALL"
            }
        }
    }
}
```

## More information

[org.forgerock.openig.security.TrustAllManager](../_attachments/apidocs/org/forgerock/openig/security/TrustAllManager.html)