Files
Jacob Valdez 8dfb0874a0 Docs: removing docs debt in install docs (#101750)
* Docs: removing docs debt in install docs

* cleaning up set up docs debt

* fixing some vale errors

* fixing broken admonition shortcode

* fixing broken shortcode

* fixing broken shortcode

* working to the grafana authentication config

* updating some more files

* editing down to ldap in the repo

* editing ldap doc except final section with link needed

* Finishing doc debt cleanup through configure authetication

* fixing shortcodes reverted by merge conflict fix

* fixing admonition

* fixing more broken shortcodes

* adjusting some wordings ot make vale happy

* updating feature toggle info
2025-04-09 09:02:51 -05:00

1.5 KiB
Raw Blame History

aliases description labels menuTitle title weight
../../../auth/grafana/
Learn how to configure basic authentication in Grafana
products
enterprise
oss
Basic auth Configure basic authentication 200

Configure basic authentication

Grafana provides a basic authentication system with password authentication enabled by default. This document details configuration options to manage and enhance basic authentication.

Disable basic authentication

To disable basic authentication, use the following configuration:

[auth.basic]
enabled = false

Password policy

By default, Grafanas password policy requires a minimum of four characters for basic auth users. For a stronger password policy, enable the password_policy configuration option.

With the password_policy option enabled, new and updated passwords must meet the following criteria:

  • At least 12 characters
  • At least one uppercase letter
  • At least one lowercase letter
  • At least one number
  • At least one special character
[auth.basic]
password_policy = true

{{< admonition type="note" >}} Existing passwords that do not comply with the new password policy will not be affected until the user updates their password. {{< /admonition >}}

Disable login form

To hide the Grafana login form, use the following configuration setting:

[auth]
disable_login_form = true

This can be helpful in setups where authentication is handled entirely through external mechanisms or single sign-on (SSO).