Technology/Installation

Overview Authentication Mechanisms


Components / Technology

Password

OpenID
Connect1

SAML

Header based 1 (X-Authenticated-User / X-Forwarded-User / Bearer JWT3)

LDAP1

Kerberos

Desktop Client (project)

X

X

X

X

X

Headless Client (project)
(legacy)

X2

Web Client (project)

X

X

X3

PLANTA link (project)

X3

PLANTA pulse

X

X

pulse API

X2

X3

Legend:

  • 1 Requires PLANTA secure

  • 2 BCrypt Hash

  • 3 Token-based authentication:

    • API token (statically configured, e.g. for PLANTA link)

    • JWT token in the HTTP header (Authorization: Bearer <token>), requires OIDC configuration:
      planta__server__secure__oidc__user_authent_by_token
      planta__server__secure__oidc__token_user_attribute

  • Colored background: Login with single sign-on