mirror of
https://github.com/grafana/grafana.git
synced 2025-09-21 07:32:52 +08:00
8dfb0874a0
* Docs: removing docs debt in install docs * cleaning up set up docs debt * fixing some vale errors * fixing broken admonition shortcode * fixing broken shortcode * fixing broken shortcode * working to the grafana authentication config * updating some more files * editing down to ldap in the repo * editing ldap doc except final section with link needed * Finishing doc debt cleanup through configure authetication * fixing shortcodes reverted by merge conflict fix * fixing admonition * fixing more broken shortcodes * adjusting some wordings ot make vale happy * updating feature toggle info
58 lines
1.5 KiB
Markdown
58 lines
1.5 KiB
Markdown
---
|
||
aliases:
|
||
- ../../../auth/grafana/
|
||
description: Learn how to configure basic authentication in Grafana
|
||
labels:
|
||
products:
|
||
- enterprise
|
||
- oss
|
||
menuTitle: Basic auth
|
||
title: Configure basic authentication
|
||
weight: 200
|
||
---
|
||
|
||
# Configure basic authentication
|
||
|
||
Grafana provides a basic authentication system with password authentication enabled by default. This document details configuration options to manage and enhance basic authentication.
|
||
|
||
## Disable basic authentication
|
||
|
||
To disable basic authentication, use the following configuration:
|
||
|
||
```bash
|
||
[auth.basic]
|
||
enabled = false
|
||
```
|
||
|
||
## Password policy
|
||
|
||
By default, Grafana’s password policy requires a minimum of four characters for basic auth users. For a stronger password policy, enable the `password_policy` configuration option.
|
||
|
||
With the `password_policy` option enabled, new and updated passwords must meet the following criteria:
|
||
|
||
- At least 12 characters
|
||
- At least one uppercase letter
|
||
- At least one lowercase letter
|
||
- At least one number
|
||
- At least one special character
|
||
|
||
```bash
|
||
[auth.basic]
|
||
password_policy = true
|
||
```
|
||
|
||
{{< admonition type="note" >}}
|
||
Existing passwords that do not comply with the new password policy will not be affected until the user updates their password.
|
||
{{< /admonition >}}
|
||
|
||
## Disable login form
|
||
|
||
To hide the Grafana login form, use the following configuration setting:
|
||
|
||
```bash
|
||
[auth]
|
||
disable_login_form = true
|
||
```
|
||
|
||
This can be helpful in setups where authentication is handled entirely through external mechanisms or single sign-on (SSO).
|