---
title: Configuration settings
summary: Configuration keys consumed by SAIF.Business.Policy.Audit.ApiCalls, retrieval methods, and runtime dependencies.
status: draft
owner: Technical Writer
last_reviewed: 2026-07-31
library: SAIF.Business.Policy.Audit.ApiCalls
reference_type: package
---

# Configuration settings

`SAIF.Business.Policy.Audit.ApiCalls` resolves all of its live runtime settings through `SAIF.Framework.Security.AppGlobal.EnvironmentService`. The library has no `appSettings` keys or connection strings of its own; the local config files only carry Oracle provider registration and assembly binding redirects, while the one secure setting is used to construct NTLM credentials for the Policy Audit API client.

## Configuration retrieval methods

| Method | Class / Interface | Namespace | Usage pattern |
| --- | --- | --- | --- |
| `GetConfigSetting(string)` | `IEnvironmentService` via `AppGlobal.EnvironmentService` | `SAIF.Framework.Security` | Reads the base URL for each outbound API client before `JsonHttpClient` is constructed. |
| `GetSecureConfigSetting(string, string)` | `IEnvironmentService` via `AppGlobal.EnvironmentService` | `SAIF.Framework.Security` | Reads the secure NTLM credential pair used only by `ApiCall`. |
| `MachineName` | `IEnvironmentService` via `AppGlobal.EnvironmentService` | `SAIF.Framework.Security` | Populates `ClientInfo.MachineName` for every outbound client. |
| `UserId()` | `IEnvironmentService` via `AppGlobal.EnvironmentService` | `SAIF.Framework.Security` | Populates `ClientInfo.UserId` for every outbound client. |
| `ConfigurationManager.AppSettings` | — | `System.Configuration` | Not used by this library. |

## Environment API settings

| Setting key | Method | Data type | Purpose | Consuming class | Source |
| --- | --- | --- | --- | --- | --- |
| `policyauditapi.policyauditapiurl` | `GetConfigSetting` | `string` | Supplies the base URL for Policy Audit API requests. | `ApiCall` | `Business\SAIF.Business.Policy.Audit.ApiCalls\ApiCall.cs` |
| `gwcommon.gw_lg_pc_pr_service` | `GetSecureConfigSetting` | `string` | Supplies the secure NTLM credential pair used to authenticate Policy Audit API requests. | `ApiCall` | `Business\SAIF.Business.Policy.Audit.ApiCalls\ApiCall.cs` |
| `documentapi.url` | `GetConfigSetting` | `string` | Supplies the base URL for Document API requests. | `DocumentApiCall` | `Business\SAIF.Business.Policy.Audit.ApiCalls\DocumentApiCall.cs` |
| `policydocumentdistributionapi.url` | `GetConfigSetting` | `string` | Supplies the base URL for preset-based policy document distribution requests. | `PolicyDocDistributionCall` | `Business\SAIF.Business.Policy.Audit.ApiCalls\PolicyDocDistributionCall.cs` |

## AppSettings (Web.config)

| Setting key | Default value | Purpose | Consuming class | Source |
| --- | --- | --- | --- | --- |
| _(none)_ | — | This library does not declare or read any `appSettings` keys. | — | `Business\SAIF.Business.Policy.Audit.ApiCalls\Web.config` |

## Database connection configuration

| Connection name | Provider | Retrieval method | Purpose | Source |
| --- | --- | --- | --- | --- |
| _(none)_ | — | — | This library defines no connection strings and performs no direct database access. | `Business\SAIF.Business.Policy.Audit.ApiCalls\app.config` |

## Secure settings

| Setting key | Encryption method | Purpose | Consuming class | Source |
| --- | --- | --- | --- | --- |
| `gwcommon.gw_lg_pc_pr_service` | `SystemHashUtil.ComputeHash(SystemType.WebApp, "PolicyAuditAPI")` | Stores the NTLM service-account credential pair used by `ApiCall` to authenticate Policy Audit API requests; the value itself is not documented here. | `ApiCall` | `Business\SAIF.Business.Policy.Audit.ApiCalls\ApiCall.cs` |

## Transitive configuration (from dependencies)

| Setting key | Method | Source dependency | Dependency type | Purpose |
| --- | --- | --- | --- | --- |
| _(none resolved)_ | — | `SAIF.BOF.Framework`, `SAIF.Web.API.Clients`, `SAIF.HashUtil` | NuGet Package | These packages participate at runtime, but no additional concrete transitive setting keys can be confirmed from this repository. |

## Configuration dependencies

| Dependency | Type | Required at | Impact if missing |
| --- | --- | --- | --- |
| `EnvironmentService` endpoint settings | service | runtime | Client constructors cannot resolve downstream base URLs or caller metadata. |
| `gwcommon.gw_lg_pc_pr_service` secure value format | secure setting | runtime | `ApiCall` cannot construct the NTLM authenticator needed for Policy Audit API requests. |
| `oracle.manageddataaccess.client` and provider registration | file/section | startup | Deployment still carries Oracle provider registration and redirects even though this library does not use Oracle directly. |

## Related documentation
- [Index](index.md)
- [Overview](overview.md)
- [Architecture](architecture.md)
- [Dependencies](dependencies.md)
- [Operations and processes](operations-processes.md)
- [Business rules](business-rules.md)
- [Security and authorization](security-authorization.md)
- [API reference](api/index.md)

## Sources
- `Business\SAIF.Business.Policy.Audit.ApiCalls\ApiCall.cs`
- `Business\SAIF.Business.Policy.Audit.ApiCalls\DocumentApiCall.cs`
- `Business\SAIF.Business.Policy.Audit.ApiCalls\PolicyDocDistributionCall.cs`
- `Business\SAIF.Business.Policy.Audit.ApiCalls\app.config`
- `Business\SAIF.Business.Policy.Audit.ApiCalls\Web.config`
- `Business\SAIF.Business.Policy.Audit.ApiCalls\packages.config`
- `Business\SAIF.Business.Policy.Audit.ApiCalls\SAIF.BOF.Business.Policy.Audit.ApiCalls.csproj`