Authentication methods

Vault clients must authenticate with Vault first and acquire a valid token. Learn available auth methods.

Start

16 tutorials

35min
Tokens
Tokens are the core method for authentication within Vault. Learn how the token lifecycle works.
- Vault
- Interactive
27min
OIDC auth method
Demonstrates the OIDC authentication method to verify and create a token with a pre-configured policy for Vault clients.
- Vault
- Video
14min
Azure Active Directory with OIDC auth method and external groups
Demonstrates how to configure Vault's OIDC authentication method with Azure Active Directory and Vault external groups.
- Vault
37min
OIDC authentication with Okta
Demonstrates the OIDC authentication method to verify and create a token using Okta.
- Vault
12min
Vault as an OIDC identity provider
Setup Vault as an OIDC identity provider with authorization code flow for Boundary.
- Vault
- Boundary
7min
AppRole usage best practices
Understand the best practices in securely distributing the AppRole credentials to the target Vault clients.
- Vault
22min
AppRole pull authentication
Authentication is a process in Vault by which user or machine-supplied information is verified to create a token with a pre-configured policy.
- Vault
- Interactive
21min
Enable login multi factor authentication (MFA)
Learn how to enable and use MFA to add an additional authentication mechanism to a Vault auth method.
- Vault
11min
Active Directory Auth Method with TOTP Login MFA
Learn how to enable and configure TOTP based MFA login for the Active Directory Auth Method.
- Vault
- Vagrant
15min
Retrieve secrets for AWS applications with Vault Agent
Retreieve secrets on AWS with Vault Agent. Using terraform, set up a Vault client running on an EC2 instance. Retrieve an initial token for Vault Agent AWS auth method, then configure response wrapping the token.
- Terraform
- Vault
- Video
13min
Retrieve secrets for Kubernetes workloads with Vault Agent
Install and use Vault Agent on Kubernetes via Helm. Basic usage of the Vault Agent is demonstrated using Kubernetes auth method, then configuring auto-auth and response wrapping of the returned token.
- Vault
40min
Identity: entities and groups
Create entities, entity aliases, and groups to maintain the Vault client's identity when the client has multiple auth methods to log in with Vault.
- Vault
- Interactive
8min
Build custom Vault plugins
Build, register, and mount a custom auth method and secrets engine written in Go language.
- Vault
- Video
8min
OIDC authentication with Google Workspace
Learn how to use configure use OIDC on Google Workspace for authentication to a HCP Vault Dedicated cluster.
- Vault
15min
Google Cloud Platform (GCP) auth method
Authenticate with Vault using GCP IAM service accounts or Compute engine (GCE) instances.
- Vault
18min
SAML authentication
Learn how to authenticate with Vault using SAML and an identity provider.
- Vault