> For the complete documentation index, see [llms.txt](https://docs.opendatadiscovery.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.opendatadiscovery.org/configuration-and-deployment/enable-security/authentication.md).

# Authentication

This section provides detailed explanations on how to enable one of the authentication mechanisms supported by ODD Platform.

{% hint style="danger" %}
**The shipped default is `auth.type: DISABLED` — no authentication at all.** Out of the box, ODD Platform permits every request to the UI and API anonymously: there is no login page, and every caller is treated as an administrator. Nothing in the default configuration prompts you to change this. Before you expose ODD Platform on any network another person can reach, set `auth.type` to one of the modes below.
{% endhint %}

The `auth.type` setting selects how users sign in to the UI and API. It accepts four values — `DISABLED`, `LOGIN_FORM`, `OAUTH2`, and `LDAP` — described on the pages below. Server-to-server (S2S) is a separate API-key mechanism layered on top of whichever mode you choose.

### Contents

* [Disable authentication](/configuration-and-deployment/enable-security/authentication/disabled-authentication.md) — the shipped default; permit-all, no sign-in
* [Login form](/configuration-and-deployment/enable-security/authentication/login-form.md)
* [OAUTH2/OIDC](/configuration-and-deployment/enable-security/authentication/oauth2-oidc.md)
* [LDAP](/configuration-and-deployment/enable-security/authentication/ldap.md)
* [Server-to-server (S2S)](/configuration-and-deployment/enable-security/authentication/s2s.md) — API-key access for automated clients. A valid key grants full administrator authority on every endpoint, independent of the `auth.type` mode you run.