Authentication methods in YugabyteDB

Authentication is the process by which the database server establishes the identity of the client, and by extension determines whether the client application (or the user who runs the client application) is permitted to connect with the database user name that was requested. YugabyteDB offers a number of different client authentication methods. The method used to authenticate a particular client connection can be selected on the basis of (client) host address, database, and user.

{{< note title="Note" >}} The authentication methods do not require any external security infrastructure and are the quickest way for YugabyteDB DBAs to secure the database. Password authentication is the easiest choice for authenticating remote user connections. {{< /note >}}

YugabyteDB supports the following methods for authenticating users.

    <div class="title">Password authentication</div>
  </div>
  <div class="body">
      Authenticate using <code>MD5</code> or <code>SCRAM-SHA-256</code> authentication methods.
  </div>
</a>

    <div class="title">LDAP authentication</div>
  </div>
  <div class="body">
      Use an external LDAP service to perform client authentication.
  </div>
</a>

    <div class="title">Host-based authentication</div>
  </div>
  <div class="body">
    Fine-grained authentication for local and remote clients based on IP addresses.
  </div>
</a>

    <div class="title">Trust authentication</div>
  </div>
  <div class="body">
      Allow clients to connect using a database user name.
  </div>
</a>