Authentication

UDMG supports authentication for Users and Accounts using Standard, LDAP, and SSO methods.

Standard Authentication

Authenticate Users and Accounts with a username and password stored locally in UDMG.

LDAP for Users

Authenticate Users using an external LDAP directory.

LDAP for Accounts

Authenticate Accounts using an external LDAP directory.

SSO for Users

Authenticate Users via an external SSO provider using SAML or OIDC/OAuth 2.0.

SSO for Accounts

Authenticate Accounts via an external SSO provider using SAML or OIDC/OAuth 2.0.

In addition, Admins can enable Two-Factor Authentication (2FA) for Users who log in with Standard or LDAP authentication:

Two-Factor Authentication

Adds an extra layer of security using a TOTP code from an authenticator app.

info

Once a User or Account is created, its authentication method (Login Method) cannot be changed. If you need to support multiple authentication methods, create separate Users or Accounts for each method.

A single Account can support multiple protocols by associating it with the necessary Account Groups and attaching the appropriate credentials for each protocol.