For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
Open sourceSupportFAQsDocs Home
DocumentationAPI referenceRelease notes
DocumentationAPI referenceRelease notes
  • Platform On-Prem
    • Overview
    • Navigate
        • Overview
    • Search resources
  • Apps
    • FlowAI
    • Itential Automation Gateway
  • Resources
    • Itential Academy
    • Version lifecycle
    • Itential MCP
    • Accessibility conformance
    • Get support
    • FAQs
LogoLogo
Open sourceSupportFAQsDocs Home
On this page
  • Authentication methods
  • Secrets management integration
  • Get started
  • Additional resources
Platform On-PremControl accessAuthentication

Authentication overview

Was this page helpful?
Previous

Configure local AAA authentication

Next
Built with

Itential Platform supports multiple authentication methods to integrate with your existing identity infrastructure and meet your security requirements.

Only one authentication method can be active at a time. When one method is enabled, all others are disabled.

Authentication methods

Choose the authentication method that best fits your environment:

SAML SSO

Enterprise Single Sign-On with Azure EntraID, Okta, PingID, or AD FS

LDAP

Active Directory and OpenLDAP integration for centralized authentication

RADIUS

Network access authentication via RADIUS protocol

Local AAA

MongoDB-based authentication for development and testing

Service accounts

Set up OAuth clients for automated API access to Itential Platform

Secrets management integration

All authentication methods support integration with enterprise secrets management:

HashiCorp Vault:

  • Automatic password encryption
  • Centralized credential storage
  • Version control and audit trails
  • Credential rotation support

CyberArk CCP:

  • Enterprise credential provider integration
  • Read-only access to existing vaults
  • Compliance and audit capabilities
  • Integration with existing CyberArk infrastructure

See Secrets management for configuration details.

Get started

Configure SAML SSO

Set up enterprise Single Sign-On

Configure LDAP

Integrate with Active Directory or OpenLDAP

Configure RADIUS

Set up RADIUS authentication

Configure Local AAA

Set up local authentication for development

Rotate passwords

Safely update authentication credentials

Additional resources

  • Manage users - Create and manage user accounts
  • Manage groups - Configure group-based access control
  • User permissions - Define and assign permissions
  • Secrets management - Secure credential storage