> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.itential.com/itential-platform/2023-2/auth/overview/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server.

# Authentication overview

> Secure user access with enterprise authentication methods

Itential Platform supports multiple authentication methods to integrate with your existing identity infrastructure and meet your security requirements.

Only one authentication method can be active at a time. When one method is enabled, all others are disabled.

## Authentication methods

Choose the authentication method that best fits your environment:

#### [SAML SSO](/itential-platform/configure/auth/saml-sso/overview)

Enterprise Single Sign-On with Azure EntraID, Okta, PingID, or AD FS

#### [LDAP](/itential-platform/configure/auth/ldap/overview)

Active Directory and OpenLDAP integration for centralized authentication

#### [RADIUS](/itential-platform/configure/auth/radius/configure-radius-authentication)

Network access authentication via RADIUS protocol

#### [Local AAA](/itential-platform/auth/aaa/configure-local-aaa-authentication)

MongoDB-based authentication for development and testing

#### [Service accounts](/itential-platform/admin-essentials/authorization#service-accounts)

Set up OAuth clients for automated API access to Itential Platform

## Secrets management integration

All authentication methods support integration with enterprise secrets management:

**HashiCorp Vault:**

* Automatic password encryption
* Centralized credential storage
* Version control and audit trails
* Credential rotation support

**CyberArk CCP:**

* Enterprise credential provider integration
* Read-only access to existing vaults
* Compliance and audit capabilities
* Integration with existing CyberArk infrastructure

See [Secrets management](/itential-platform/secrets/overview) for configuration details.

## Get started

#### [Configure SAML SSO](/itential-platform/configure/auth/saml-sso/overview)

Set up enterprise Single Sign-On

#### [Configure LDAP](/itential-platform/configure/auth/ldap/configure-ldap-authentication)

Integrate with Active Directory or OpenLDAP

#### [Configure RADIUS](/itential-platform/configure/auth/radius/configure-radius-authentication)

Set up RADIUS authentication

#### [Configure Local AAA](/itential-platform/auth/aaa/configure-local-aaa-authentication)

Set up local authentication for development

#### [Rotate passwords](/itential-platform/auth/aaa/rotate-aaa-passwords)

Safely update authentication credentials

## Additional resources

* [Manage users](/itential-platform/control-access/users-groups-roles/reference-user-accounts) - Create and manage user accounts
* [Manage groups](/itential-platform/control-access/users-groups-roles/reference-groups) - Configure group-based access control
* [User permissions](/itential-platform/admin-essentials/user-permissions) - Define and assign permissions
* [Secrets management](../secrets/overview) - Secure credential storage

> Secure user access with enterprise authentication methods