> For the complete documentation index, see [llms.txt](https://docs.linuxcontrolcenter.com.br/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.linuxcontrolcenter.com.br/en/configs-integrations/user-management/authentication.md).

# Authentication

## Requirements

* **Linux Control Center**: version **2.12.X** or higher
* **Pre-configured Single Sign-On (SSO)** provider

***

## Overview

The **Linux Control Center (LCC)** allows your users to centrally configure their authentication service through the **"Config Authentication"** menu.

Through this service, you can:

* Control the creation of users through external authentication providers integrated with the LCC
* Define **TOTP** settings
* Manage **active providers**
* Create authentication rules for **groups** and **users**
* Perform other security configurations

***

### Authentication Panel

1. Access the **Authentication** panel through the **Config** option in the side menu.
2. Click on the **Authentication** option.

   ![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-a032334bb37592362720e2f2164d64e6750fd8a7%2Facessando.png?alt=media)

***

### Initial Configuration

Configure the initial parameters according to your needs:

```
![](/pt-br/images/authentication/inicial.png)
```

* **Default Provider ID**: Default provider identifier, used if the user does not select a different one at the time of authentication
* **TOTP Time Tolerance**: Tolerance time to validate the TOTP code after starting the login
* **TOTP Time Tmp Token Login Validation**: Tolerance time for using a rotated TOTP token
* **Local Login All Users**: Applies the rules in this panel to all local LCC users
* **Providers Auto Create User**: Allows LCC to create the authenticated user via provider locally, if it does not already exist
* **TOTP Force All Users**: Forces all users to use TOTP to login, regardless of the provider selected

***

### Selecting Users and Groups

1. Click **Next** to select the **users** that will have rules applied during login.

   ![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-0591ab3166b504489485d8909bd0beb5d931f5c9%2Fusers.png?alt=media)
2. In the **groups** tab, select the groups that will also have the rules applied.

   ![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-04886489687681def2ba051d5ff9068aa19c52da%2Fgroups.png?alt=media)

***

### Selecting Providers

In the **Providers** tab, define which providers will be available for login.

```
![](/pt-br/images/authentication/providers.png)
```

***

### TOTP by User and Group

1. Individually select the users that will be logged in via **TOTP**.

   ![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-6610e07054ee368764ec03a7dffd547ccfccd37d%2Fusers_totp.png?alt=media)
2. Click **Next** to define the **groups** that should also use TOTP at login.

   ![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-4734076caa4bdf007c380a358e82c35155ea7040%2Fgroups_totp.png?alt=media)
3. Click **Save** to save the settings and apply them to the LCC Console.

***

> 💡 **Hint**: When defining users individually and **disabling the `TOTP Force All Users`** flag, other users will still be able to manually activate TOTP in their **Profile** panel to use it at login.