---
title: Application configuration
summary: Web.config settings, environment settings, database connection and deployment configuration of the ClaimBillEntry application.
status: draft
owner: Claims
last_reviewed: 2026-09-30
---

# Application configuration

ClaimBillEntry keeps its framework settings in `Web.config` and reads runtime environment settings (database pool, API addresses) through the SAIF `IEnvironmentService` rather than from `connectionStrings` or `appSettings`. `Web.config` declares two custom configuration sections, `glimpse` and `oracle.manageddataaccess.client` (`ClaimBillEntry/Web.config:3-6`). No settings classes or secure settings were identified.

## Web.config settings

| Setting | Value | Effect | Source |
| --- | --- | --- | --- |
| `customErrors` | `Off` | Detailed errors are shown to all callers | `ClaimBillEntry/Web.config:31` |
| `compilation debug` | `true` in the base file; removed by the Release transform | Debug builds in non-release deployments | `ClaimBillEntry/Web.config:30`, `ClaimBillEntry/Web.Release.config:18` |
| Glimpse | `On` in the base file; Release sets `defaultRuntimePolicy` to `Off` | Diagnostics tool enabled unless transformed | `ClaimBillEntry/Web.config:45-62`, `:381-385`, `ClaimBillEntry/Web.Release.config:31` |
| `httpRuntime requestValidationMode` | `2.0` | Legacy request validation | `ClaimBillEntry/Web.config:32` |
| `pages validateRequest` | `false` | Request validation disabled for views | `ClaimBillEntry/Views/Web.config:29` |
| `aspnet:MaxJsonDeserializerMembers` | `150000` | Raises the JSON member limit | `ClaimBillEntry/Web.config` |
| `aspnet:MaxHttpCollectionKeys` | `10000` | Raises the form key limit | `ClaimBillEntry/Views/Web.config:16` |
| `webpages:Enabled` and `webpages:Version` | `false` and `3.0.0.0` | Web Pages handler disabled | `ClaimBillEntry/Web.config` |
| `ClientValidationEnabled`, `UnobtrusiveJavaScriptEnabled` | `true` | Client-side validation in views | `ClaimBillEntry/Web.config` |
| `nhibernate-logger` | `NHibernate.Glimpse` with `NHibernate.Glimpse.Loggers` command | NHibernate command logging to Glimpse | `ClaimBillEntry/Web.config` |
| `DbProviderFactories` | `Oracle.ManagedDataAccess` | Oracle provider registration | `ClaimBillEntry/Web.config:392-397` |
| `ApplicationHost` | `np17` | Application setting whose consumer and meaning were not resolved; it may name a host** | `ClaimBillEntry/Web.config:15` |
| `glimpse` section | Declared with `Glimpse.Core.Configuration.Section`; configured at `defaultRuntimePolicy="On"` | Custom configuration section for Glimpse | `ClaimBillEntry/Web.config:4`, `:381-391` |
| `oracle.manageddataaccess.client` section | Declared with `OracleInternal.Common.ODPMSectionHandler` | Custom configuration section for the Oracle managed driver | `ClaimBillEntry/Web.config:5` |

The security effect of these settings is recorded in [Tech debt](tech-debt.md).

## Environment settings

The application has no `connectionStrings` section. The composition root reads environment settings through `IEnvironmentService.GetConfigSetting` backed by `WindowsEnvironmentService`, and builds the Oracle connection through `DbConnectionManager.GetOracleConnectionString` (`SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs:65-70`).

| Key | Used for | Notes | Source |
| --- | --- | --- | --- |
| `EnvironmentConfigKeys.OracleDatabase` | Oracle database selection | Connection pool `CLM`; unit of work named `ClaimBillEntry` | `SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs:43-44`, `:64-72` |
| `imagingapiurl` | Imaging API base address | Used by `IImagingClient` | `SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs:160-161` |
| `cc.ccclaimdataapiurl` | Claim data API address | Read into an `HttpClient` that is never registered | `SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs:47-49` |

Values for these keys are supplied per environment at deployment and are not stored in the repository.**

## Deployment configuration

| Setting | Value | Source |
| --- | --- | --- |
| IIS Windows authentication (internal and external) | On | `Pipelines/build-vars.yml:20-27` |
| IIS anonymous authentication (internal and external) | Off | `Pipelines/build-vars.yml:20-27` |
| Application pool .NET version | `v4.0` | `Pipelines/build-vars.yml:30-35` |
| Application pool pipeline mode | Classic | `Pipelines/build-vars.yml:30-35` |
| Environment settings file | `\EnvironmentSettings\settings.yml`, applied by the shared release template | `Pipelines/release.yml:59-68` |
| Build configuration | Release, for both the internal and external artifacts | `Pipelines/build-vars.yml` |

## Framework versions
- The project targets .NET Framework 4.6.2 while `Web.config` declares 4.6.1, and the declared MVC package version is 5.2.7 (`ClaimBillEntry/packages.config:21`) while the project references an assembly version of 5.2.6.0 (`ClaimBillEntry/ClaimBillEntry.csproj:320`, whose HintPath points at the 5.2.7 package); see [Tech debt](tech-debt.md).

## Related documentation
- [Index](index.md)
- [Overview](overview.md)
- [Architecture](architecture.md)
- [Dependencies](dependencies.md)
- [Operations and processes](operations-processes.md)
- [Business rules](business-rules.md)
- [Security and authorization](security-authorization.md)
- [Data model](data-model.md)
- [Hosted endpoints](hosted-endpoints.md)
- [Tech debt](tech-debt.md)
- [Screen catalog](../screens/index.md)

> **Note:** Statements marked with `**` could not be confirmed; treat
> as unknown until verified.

## Sources
- ClaimBillEntry/Web.config
- ClaimBillEntry/Web.Release.config
- ClaimBillEntry/Views/Web.config
- ClaimBillEntry/ClaimBillEntry.csproj
- SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs
- Pipelines/build-vars.yml
- Pipelines/release.yml