[comment]: # ({1ee49cda-e73a60a4})
# Authentication object
The following objects are directly related to the `authentication` API.
[comment]: # ({/1ee49cda-e73a60a4})
[comment]: # ({6773c7c3-2df9176c})
### Authentication
The authentication object has the following properties.
|Property|[Type](/manual/api/reference_commentary#data_types)|Description|
|--|--|------|
|authentication\_type|integer|Default authentication.
Possible values:
0 - *(default)* Internal;
1 - LDAP.|
|http\_auth\_enabled|integer|Enable HTTP authentication.
Possible values:
0 - *(default)* Disable;
1 - Enable.|
|http\_login\_form|integer|Default login form.
Possible values:
0 - *(default)* Zabbix login form;
1 - HTTP login form.|
|http\_strip\_domains|string|Remove domain name.|
|http\_case\_sensitive|integer|HTTP case-sensitive login.
Possible values:
0 - Off;
1 - *(default)* On.|
|ldap\_configured|integer|Enable LDAP authentication.
Possible values:
0 - Disable;
1 - *(default)* Enable.|
|ldap\_host|string|LDAP host.|
|ldap\_port|integer|LDAP port.|
|ldap\_base\_dn|string|LDAP base DN.|
|ldap\_search\_attribute|string|LDAP search attribute.|
|ldap\_bind\_dn|string|LDAP bind DN.|
|ldap\_case\_sensitive|integer|LDAP case-sensitive login.
Possible values:
0 - Off;
1 - *(default)* On.|
|ldap\_bind\_password|string|LDAP bind password.|
|saml\_auth\_enabled|integer|Enable SAML authentication.
Possible values:
0 - *(default)* Disable;
1 - Enable.|
|saml\_idp\_entityid|string|SAML IdP entity ID.|
|saml\_sso\_url|string|SAML SSO service URL.|
|saml\_slo\_url|string|SAML SLO service URL.|
|saml\_username\_attribute|string|SAML username attribute.|
|saml\_sp\_entityid|string|SAML SP entity ID.|
|saml\_nameid\_format|string|SAML SP name ID format.|
|saml\_sign\_messages|integer|SAML sign messages.
Possible values:
0 - *(default)* Do not sign messages;
1 - Sign messages.|
|saml\_sign\_assertions|integer|SAML sign assertions.
Possible values:
0 - *(default)* Do not sign assertions;
1 - Sign assertions.|
|saml\_sign\_authn\_requests|integer|SAML sign AuthN requests.
Possible values:
0 - *(default)* Do not sign AuthN requests;
1 - Sign AuthN requests.|
|saml\_sign\_logout\_requests|integer|SAML sign logout requests.
Possible values:
0 - *(default)* Do not sign logout requests;
1 - Sign logout requests.|
|saml\_sign\_logout\_responses|integer|SAML sign logout responses.
Possible values:
0 - *(default)* Do not sign logout responses;
1 - Sign logout responses.|
|saml\_encrypt\_nameid|integer|SAML encrypt name ID.
Possible values:
0 - *(default)* Do not encrypt name ID;
1 - Encrypt name ID.|
|saml\_encrypt\_assertions|integer|SAML encrypt assertions.
Possible values:
0 - *(default)* Do not encrypt assertions;
1 - Encrypt assertions.|
|saml\_case\_sensitive|integer|SAML case-sensitive login.
Possible values:
0 - Off;
1 - *(default)* On.|
|passwd\_min\_length|integer|Password minimal length requirement.
Possible range of values: 1-70
8 - *default*|
|passwd\_check\_rules|integer|Password checking rules.
Possible bitmap values are:
0 - Check password length;
1 - Check if password uses uppercase and lowercase Latin letters;
2 - Check if password uses digits;
4 - Check if password uses special characters;
8 - *(default)* Check if password is not in the list of commonly used passwords and does not contain derivations of word "Zabbix" or user's name, last name, or username.
This is a bitmask field; any sum of possible bitmap values is acceptable (for example, 15 for checking all rules).|
[comment]: # ({/6773c7c3-2df9176c})