Authentication
ODD Platform's four supported authentication mechanisms for the UI/API surface — Disabled, Login form, OAuth2/OIDC, and LDAP — plus the S2S API-key surface for programmatic clients.
Last updated
ODD Platform's four supported authentication mechanisms for the UI/API surface — Disabled, Login form, OAuth2/OIDC, and LDAP — plus the S2S API-key surface for programmatic clients.
This section provides detailed explanations on how to enable one of the authentication mechanisms supported by ODD Platform.
The shipped default is auth.type: DISABLED — no authentication at all. Out of the box, ODD Platform permits every request to the UI and API anonymously: there is no login page, and every caller is treated as an administrator. Nothing in the default configuration prompts you to change this. Before you expose ODD Platform on any network another person can reach, set auth.type to one of the modes below.
The auth.type setting selects how users sign in to the UI and API. It accepts four values — DISABLED, LOGIN_FORM, OAUTH2, and LDAP — described on the pages below. Server-to-server (S2S) is a separate API-key mechanism layered on top of whichever mode you choose.
Disable authentication — the shipped default; permit-all, no sign-in
Server-to-server (S2S) — API-key access for automated clients. A valid key grants full administrator authority on every endpoint, independent of the auth.type mode you run.
Last updated