Security, Identity and Access Management
Contents
Enonic XP ships with a complete and pluggable concept for authentication, authorization and auditing - commonly referred to as IAM.
ID providers
ID providers represent a pluggable abstraction layer for user authentication. To authenticate - or even create users in XP - you will need an ID provider.
XP ships with a built-in System ID provider to get you started quickly. Choose from a range of standard ID providers on Enonic Market, or build your own for a fully customized approach.
Service accounts
Service accounts enable secure, token-based authentication for machine-to-machine communication - for example when accessing the Management API from remote clients or CI/CD pipelines.
Permissions
In addition to role-based access control, the CMS (and underlying NoSQL storage) supports fine-grained access control - down to a single item.
Audit logs
XP automatically registers completed actions affecting repositories, content, applications, principals and ID providers in a dedicated repository. Visit Audit logs for details on the available events and how to enable or disable logging.
Management
Principals, ID providers and service accounts can be managed through the Users admin tool, or programmatically via APIs.