Authentication methods

Vault clients must authenticate with Vault first and acquire a valid token. Learn available auth methods.

Start

16 tutorials

35min
Tokens
Tokens are the core method for authentication within Vault. Learn how the token lifecycle works.
- Vault
- Interactive
27min
OIDC auth method
Demonstrates the OIDC authentication method to verify and create a token with a pre-configured policy for Vault clients.
- Vault
- Video
14min
Azure Active Directory with OIDC auth method and external groups
Demonstrates how to configure Vault's OIDC authentication method with Azure Active Directory and Vault external groups.
- Vault
37min
OIDC authentication with Okta
Demonstrates the OIDC authentication method to verify and create a token using Okta.
- Vault
12min
Vault as an OIDC identity provider
Setup Vault as an OIDC identity provider with authorization code flow for Boundary.
- Vault
- Boundary
7min
AppRole usage best practices
Understand the best practices in securely distributing the AppRole credentials to the target Vault clients.
- Vault
22min
AppRole pull authentication
Authentication is a process in Vault by which user or machine-supplied information is verified to create a token with a pre-configured policy.
- Vault
- Interactive
21min
Enable login multi factor authentication (MFA)
Learn how to enable and use MFA to add an additional authentication mechanism to a Vault auth method.
- Vault
11min
Active Directory Auth Method with TOTP Login MFA
Learn how to enable and configure TOTP based MFA login for the Active Directory Auth Method.
- Vault
- Vagrant
15min
Vault Agent with AWS
This tutorial is an introduction the Vault Agent which was introduced in Vault 0.11. Its basic usage is demonstrated using AWS auth method as an example.
- Terraform
- Vault
- Video
13min
Retrieve secrets for Kubernetes workloads with Vault Agent
Enable the Vault Agent to automatically authenticate with Vault, read and inject secret values for applications running in Kubernetes.
- Vault
40min
Identity: entities and groups
Create entities, entity aliases, and groups to maintain the Vault client's identity when the client has multiple auth methods to log in with Vault.
- Vault
- Interactive
8min
Build custom Vault plugins
Build, register, and mount a custom auth method and secrets engine written in Go language.
- Vault
- Video
8min
OIDC authentication with Google Workspace
Learn how to use configure use OIDC on Google Workspace for authentication to a HCP Vault Dedicated cluster.
- Vault
15min
Google Cloud Platform (GCP) auth method
Authenticate with Vault using GCP IAM service accounts or Compute engine (GCE) instances.
- Vault
18min
SAML authentication
Learn how to authenticate with Vault using SAML and an identity provider.
- Vault