There are several ways to authenticate/authorize users in OpenPaaS:

• Basic Access Authentication.
• Cookies.
• OAuth. Even if OAuth is not an authentication protocol, this section shows how to use OAuth in OpenPaaS.
• Single sign-on (SSO). SSO is a property of access control of multiple related, yet independent, software systems. With this property, a user logs in with a single ID and password to gain access to a connected system or systems without using different usernames or passwords, or in some configurations seamlessly sign on at each system. OpenPaaS supports single sign-on(SSO) by external modules:
  • LemonLDAP: provided by the linagora.esn.lemonldap module.
  • OIDC: Deprecated OpenID Connect strategy implementation, check the OpenID Connect one.
  • OpenID Connect