MicroStrategy ONE

Authentication Modes

Several authentication modes are supported in the MicroStrategy environment. The main difference between the modes is the authentication authority used by each mode. The authentication authority is the system that verifies and accepts the login/password credentials provided by the user.

The available authentication modes are:

  • Standard: Intelligence server is the authentication authority. This is the default authentication mode. For more information, see Implement Standard Authentication .
  • LDAP (lightweight directory access protocol): An LDAP server is the authentication authority. For more information, see Implement LDAP Authentication and
  • Anonymous: Users log in as "Guest" and do not need to provide a password. This authentication mode may be required to enable other authentication modes. For more information, see Implement Anonymous Authentication .
  • Single sign-on: Single sign-on encompasses several different third-party authentication methods, including:
    • OpenID Connect (OIDC) authentication: A modern authentication protocol built on an authorization protocol called OAuth2. The protocol allows a client application to securely delegate user authentication to an Identity and Access Management (IAM) service. The protocol is designed for the internet and relies on features of the HTTPS protocol. For more information, see Enabling Single Sign-On with OIDC Authentication.
    • SAML authentication: A two way authentication set up between your MicroStrategy server and a SAML Identity Provider. For more information, see Enable Single Sign-On with SAML Authentication.
    • Integrated authentication: A domain controller using Kerberos authentication is the authentication authority. For more information, see Enabling Integrated Authentication.
  • MicroStrategy Identity: Users log into Web and Mobile using MicroStrategy Identity. MicroStrategy Identity enables users to electronically validate their identity using the Badge app on their smartphone, instead of entering a password. For steps, see Enable Badge Authentication for Web and Mobile.

For examples of situations where you might want to implement specific authentication modes, and the steps to do so, see Authentication Examples.