The authentication framework in OpenIAM provides a flexible solution where you can configure a variety of parameters to implement a flexible and secure authentication solution. This section describes the authentication functionality found in OpenIAM and how it can be configured.

The framework consists of several components which are described below:

• Authentication policy. Used to define authentication parameters such as failed authentication attempts, token life, auto-unlock, etc.
• Authentication provider. Defines the type of authentication which will be used, for instance UserID/password, OTP, Certificate, etc.
• Adaptive authentication provider. Allows creating the authentication workflows, which include other factors such as IP address, Role, etc.
• Content provider. Enables the association of an authentication provider to a domain or URL.

The diagram above describes how the various parts of the authentication framework fit together.

Configuring authentication overview

Configuring authentication starts simple and then is expanded to other types of authentications. You can use the pages below that follow the configuration steps applicable to you needs.

• Configuring authentication.
• Password based authentication.
• Directory based authentication
• Strong authentication using OTP.
• Step-up authentication.

Once you are familiar with the framework, you can extend your authentication model by leveraging the authentication methods further in the document.

Authentication methods

OpenIAM supports the authentication methods described below