Email-only authentication
Lagoon can identify users solely by their email address.
Lagoon can identify users solely by their email address.
Two certificates are used to sign or encrypt data related to authentication.
Forms authentication enables login with a username and password.
You can enable two-factor authentication for form-based logins, i.e. login / password.
Lagoon relies on ASP.NET Core Identity to manage users, roles, hashed passwords, account recovery, account confirmation, and related mechanisms.
This page covers the SAML2 configuration of a Lagoon application and the associated ADFS settings.
With UserStorage = None, an SSO or Windows login neither writes user nor token to the database: the user's identity only lives in the cookie and tokens.
Windows authentication is enabled server-side and requires configuring the execution environment, notably in development with IIS Express or when publishing to IIS.