> This page is for Itential Platform On-Prem, version 2023.2.
> For other versions, use one of these documentation indexes:
> - 6 (default): https://docs-test.itntl.com/itential-platform/6/llms.txt
> - 2023.2: https://docs-test.itntl.com/itential-platform/2023-2/llms.txt

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs-test.itntl.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs-test.itntl.com/_mcp/server.

# Authentication overview

> Secure user access with enterprise authentication methods

Itential Platform supports multiple authentication methods to integrate with your existing identity infrastructure and meet your security requirements.

> **Warning**
>
> Only one authentication method can be active at a time. When one method is enabled, all others are disabled.

## Authentication methods

Choose the authentication method that best fits your environment:

#### [SAML SSO](/itential-platform/configure/auth/saml-sso/overview)

Enterprise Single Sign-On with Azure EntraID, Okta, PingID, or AD FS

#### [LDAP](/itential-platform/configure/auth/ldap/overview)

Active Directory and OpenLDAP integration for centralized authentication

#### [RADIUS](/itential-platform/configure/auth/radius/configure-radius-authentication)

Network access authentication via RADIUS protocol

#### [Local AAA](/itential-platform/auth/aaa/configure-local-aaa-authentication)

MongoDB-based authentication for development and testing

#### [Service accounts](/itential-platform/admin-essentials/authorization#service-accounts)

Set up OAuth clients for automated API access to Itential Platform

## Secrets management integration

All authentication methods support integration with enterprise secrets management:

**HashiCorp Vault:**

* Automatic password encryption
* Centralized credential storage
* Version control and audit trails
* Credential rotation support

**CyberArk CCP:**

* Enterprise credential provider integration
* Read-only access to existing vaults
* Compliance and audit capabilities
* Integration with existing CyberArk infrastructure

See [Secrets management](/itential-platform/secrets/overview) for configuration details.

## Get started

#### [Configure SAML SSO](/itential-platform/configure/auth/saml-sso/overview)

Set up enterprise Single Sign-On

#### [Configure LDAP](/itential-platform/configure/auth/ldap/configure-ldap-authentication)

Integrate with Active Directory or OpenLDAP

#### [Configure RADIUS](/itential-platform/configure/auth/radius/configure-radius-authentication)

Set up RADIUS authentication

#### [Configure Local AAA](/itential-platform/auth/aaa/configure-local-aaa-authentication)

Set up local authentication for development

#### [Rotate passwords](/itential-platform/auth/aaa/rotate-aaa-passwords)

Safely update authentication credentials

## Additional resources

* [Manage users](/itential-platform/control-access/users-groups-roles/reference-user-accounts) - Create and manage user accounts
* [Manage groups](/itential-platform/control-access/users-groups-roles/reference-groups) - Configure group-based access control
* [User permissions](/itential-platform/admin-essentials/user-permissions) - Define and assign permissions
* [Secrets management](../secrets/overview) - Secure credential storage