---
title: TrustAllManager
description: Blindly trusts all server certificates presented the servers for protected applications. It can be used instead of a TrustManager in test environments to trust server certificates that were not signed by a well-known CA, such as self-signed certificates.
component: pinggateway
version: 7.2
page_id: pinggateway:reference:TrustAllManager
canonical_url: https://docs.pingidentity.com/pinggateway/2026/reference/TrustAllManager.html
llms_txt: https://docs.pingidentity.com/pinggateway/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2025-06-02T16:30:54Z
superseded_by: https://docs.pingidentity.com/pinggateway/2026/reference/TrustAllManager.html
section_ids:
  TrustAllManager-usage: Usage
  TrustAllManager-example: Example
  TrustAllManager-moreinfo: More information
---

# TrustAllManager

Blindly trusts all server certificates presented the servers for protected applications. It can be used instead of a [TrustManager](MiscellaneousConfigurationObjects.html#TrustManager) in test environments to trust server certificates that were not signed by a well-known CA, such as self-signed certificates.

The TrustAllManager is not safe for production use. Use a properly configured [TrustManager](MiscellaneousConfigurationObjects.html#TrustManager) instead.

## Usage

```json
{
    "name": string,
    "type": "TrustAllManager"
}
```

## Example

The following example configures a client handler that blindly trusts server certificates when IG connects to servers over HTTPS:

```json
{
    "name": "BlindTrustClientHandler",
    "type": "ReverseProxyHandler",
    "config": {
        "trustManager": {
            "type": "TrustAllManager"
        }
    }
}
```

## More information

[org.forgerock.openig.security.TrustAllManager](../_attachments/apidocs/org/forgerock/openig/security/TrustAllManager.html)