Authentication
The Authentication page (/admin/authentication) configures the directories, single sign-on and the security
policy. It needs auth:manage.
Actions
| Section | Button | Effect |
|---|---|---|
| LDAP | Enable LDAP sign-in, Bind password, Use StartTLS, Test the directory | sign in with the LDAP or Active Directory of your organization |
| Group mappings | Add mapping | maps a directory group to a role, global or for a cluster |
| OIDC | New OIDC provider, edit, Delete provider, Enabled | sign in with an OIDC provider (Keycloak, Entra ID); Last test shows the last result |
| Policy | Two-factor required for the roles and the password rules | applied at each sign in when NM_MFA_ENABLED is true |
Typical tasks
- Connect Active Directory. Fill the LDAP fields, Test the directory (Connection succeeded), Enable LDAP sign-in, then Add mapping for each group.
See also Security.