2019-12-06 11:39:55 -05:00
[[servlet-authentication]]
2019-09-22 02:56:30 -04:00
= Authentication
2021-08-10 16:21:42 -04:00
Spring Security provides comprehensive support for xref:features/authentication/index.adoc#authentication[Authentication].
2022-09-01 07:55:35 -04:00
We start by discussing the overall xref:servlet/authentication/architecture.adoc[Servlet Authentication Architecture].
2021-07-29 18:12:34 -04:00
As you might expect, this section is more abstract describing the architecture without much discussion on how it applies to concrete flows.
2019-09-22 02:56:30 -04:00
2021-07-29 18:12:34 -04:00
If you prefer, you can refer to <<servlet-authentication-mechanisms,Authentication Mechanisms>> for concrete ways in which users can authenticate.
These sections focus on specific ways you may want to authenticate and point back at the architecture sections to describe how the specific flows work.
2020-02-21 12:33:36 -05:00
2020-02-24 16:13:41 -05:00
[[servlet-authentication-mechanisms]]
2021-07-29 18:12:34 -04:00
== Authentication Mechanisms
2020-02-21 12:33:36 -05:00
2020-02-24 16:13:41 -05:00
// FIXME: brief description
2021-08-25 14:31:00 -04:00
* xref:servlet/authentication/passwords/index.adoc#servlet-authentication-unpwd[Username and Password] - how to authenticate with a username/password
2021-11-04 13:55:53 -04:00
* xref:servlet/oauth2/login/index.adoc#oauth2login[OAuth 2.0 Login] - OAuth 2.0 Log In with OpenID Connect and non-standard OAuth 2.0 Login (i.e. GitHub)
2021-07-30 17:56:54 -04:00
* xref:servlet/saml2/index.adoc#servlet-saml2[SAML 2.0 Login] - SAML 2.0 Log In
2022-12-10 11:39:24 -05:00
* xref:servlet/authentication/cas.adoc#servlet-cas[Central Authentication Server (CAS)] - Central Authentication Server (CAS) Support
2021-07-30 17:56:54 -04:00
* xref:servlet/authentication/rememberme.adoc#servlet-rememberme[Remember Me] - how to remember a user past session expiration
* xref:servlet/authentication/jaas.adoc#servlet-jaas[JAAS Authentication] - authenticate with JAAS
2021-07-30 18:02:44 -04:00
* xref:servlet/authentication/preauth.adoc#servlet-preauth[Pre-Authentication Scenarios] - authenticate with an external mechanism such as https://www.siteminder.com/[SiteMinder] or Java EE security but still use Spring Security for authorization and protection against common exploits.
2021-07-30 17:56:54 -04:00
* xref:servlet/authentication/x509.adoc#servlet-x509[X509 Authentication] - X509 Authentication