What this surface does
System Settings / Detail is the dynamic editor for Core system settings. The page fetches the current settings plus the setting definitions, groups fields by group, and renders each setting according to its declared type.
Use it when you need to configure runtime behavior without redeploying code.
How the form works
- Text, number, and boolean-like values render as normal fields.
- JSON and HTML settings render in the code editor.
- Encrypted settings render as password fields with a visibility toggle.
Updatesubmits the form to Core and Core upserts each setting by definition name.- After save, Core refreshes the shared settings snapshots so downstream services can pick up the new values.
CRM Docs settings
CRM Docs Enabled: when false, the Backoffice help entry stays disabled even if a URL exists.CRM Docs Base URL: the HTTPS origin for the docs runtime. If Backoffice is served over HTTPS, this must also be HTTPS or the browser blocks embedded/API access as mixed content.CRM Docs Reviewer Emails: comma/newline/semicolon-separated allow-list for reviewer/editor access.CRM Docs Lookup Timeout Ms: timeout used by the help drawer/API lookup path.
If CRM Docs is off or incomplete, normal CRM work should continue. Operators may lose inline help, but the product flow itself should not depend on docs being online.
Identity Graph settings
These settings configure Identity Graph integration for CRM/admin/casino-side graph sync and the restricted Identity Graph Control page.
Identity Graph URL,Identity Graph API Key, andIdentity Graph Merchant Codeare the base readiness fields.Identity Graph Merchant IDenables customer projection readiness.Identity Graph Merchant Nameis display metadata for control/status screens.Identity Graph Tags to Syncis the allowed tag list. Empty means tag sync is intentionally not ready.Identity Graph Tag Match Signalscontrols tag dispatch matching. Supported values areemail,phone,global_id,payment, andpayout; empty/invalid values fall back toemail.Identity Graph Payment Evidence Sync Enabledlets eligible payment evidence be sent only when the base integration is ready.Identity Graph SuspiciousPattern Enabledis the master capability toggle. Its default is on. Turning it off makes the SuspiciousPattern readiness capability inactive.Identity Graph SuspiciousPattern Card Honeypot Enabledcontrols whether an eligible cross-brand card-deposit decision may be stopped before payment-provider dispatch. Its default is on; it does not apply to non-card methods.Identity Graph SuspiciousPattern Failed Card Thresholdsets how many failed card deposits without a later successful card deposit are required for source-brand activation. The default is2; consuming services constrain the effective value to1..20.Identity Graph SuspiciousPattern Same-Day Cross-Brand Enabledlimits the cross-brand honeypot policy to the configured same-day reference. Its default is on.Identity Graph SuspiciousPattern Match Signalsacceptsemail,uid, andip. The default isemail,uid;ipis evidence-only and must not trigger an automatic honeypot by itself.Identity Graph HTTP Timeout in Millisecondsbounds outbound Identity Graph calls.
Turning off or clearing these fields disables the related sync capability instead of silently falling back to shared environment variables.
Same-day reference is visible on the dedicated Identity Graph Control page, with Registration date and First seen date choices, but its setting is not currently registered in Core. It therefore does not appear in this generic System Settings editor. The dedicated control page still submits it, so that page's complete save currently fails and rolls back until the product contract is aligned.
SuspiciousPattern settings affect fraud evidence and card-deposit handling across brands. Change them only with the fraud/payment owner, then verify the effective policy and a safe test flow before relying on the result.
Marketing Events settings
These settings affect downstream marketing/event delivery.
Marketing Events NOT sent to third-party: JSON allow/deny control for events excluded from third-party delivery.Sent Manual Deposit/Withdrawal to Affiliates: controls whether manual wallet deposit/withdrawal adjustments dispatch affiliate third-party events.Sent Only Depositors to CustomerIO: when on, CustomerIO sync skips users without deposits.Sent To CustomerIO Who Register Days Ago: minimum age window used by CustomerIO selection.Sent To CustomerIO Who Have Tags: comma-separated tag filter for CustomerIO targeting.Sent all events to Third Party: JSON list of third-party event targets.Third Party API Key: API key used by external third-party API checks.
Common confusion
- Encrypted fields can be toggled visible in the browser, but stored values remain encrypted in Core.
- Saving an empty encrypted field can overwrite a setting if the generic system editor submits it. For specialized pages like Identity Graph Control, use the dedicated control page when it has safer write-only behavior.
- CRM Docs
Reviewer Emailsis not the same thing as the docs admin key. Emails decide who may request reviewer/editor access; the key is the server-to-server exchange credential. - The SuspiciousPattern match-signal list is separate from
Identity Graph Tag Match Signals. The former controls fraud/honeypot matching; the latter controls ordinary tag dispatch. - A disabled or unavailable SuspiciousPattern capability is not proof that a player is safe. It means this specific automated policy is not active or not ready.