[comment]: # ({1ee49cda-e73a60a4})
# Authentication object
The following objects are directly related to the `authentication` API.
[comment]: # ({/1ee49cda-e73a60a4})
[comment]: # ({9282f09f-2df9176c})
### Authentication
The authentication object has the following properties.
|Property|[Type](/manual/api/reference_commentary#data_types)|Description|
|--|--|------|
|authentication\_type|integer|Default authentication.
Possible values:
0 - *(default)* Internal;
1 - LDAP.|
|http\_auth\_enabled|integer|HTTP authentication.
Possible values:
0 - *(default)* Disabled;
1 - Enabled.|
|http\_login\_form|integer|Default login form.
Possible values:
0 - *(default)* Zabbix login form;
1 - HTTP login form.|
|http\_strip\_domains|string|Domain name to remove.|
|http\_case\_sensitive|integer|HTTP case sensitive login.
Possible values:
0 - Off;
1 - *(default)* On.|
|ldap\_auth\_enabled|integer|LDAP authentication.
Possible values:
0 - *(default)* Disabled;
1 - Enabled.|
|ldap\_case\_sensitive|integer|LDAP case sensitive login.
Possible values:
0 - Off;
1 - *(default)* On.|
|ldap\_userdirectoryid|string|Default user directory for LDAP authentication. Used for user groups with `gui_access` set to LDAP or System default.
[Property behavior](/manual/api/reference_commentary#property-behavior):
- *required* if `ldap_auth_enabled` is set to "Enabled"|
|saml\_auth\_enabled|integer|SAML authentication.
Possible values:
0 - *(default)* Disabled;
1 - Enabled.|
|saml\_case\_sensitive|integer|SAML case sensitive login.
Possible values:
0 - Off;
1 - *(default)* On.|
|passwd\_min\_length|integer|Password minimal length requirement.
Valid values range from 1 to 70.
Default: 8.|
|passwd\_check\_rules|integer|Password checking rules.
Possible bitmap values:
0 - Check password length;
1 - Check if password uses uppercase and lowercase Latin letters;
2 - Check if password uses digits;
4 - Check if password uses special characters;
8 - *(default)* Check if password is not in the list of commonly used passwords and does not contain derivations of word "Zabbix" or user's name, last name, or username.
This is a bitmask field; any sum of possible bitmap values is acceptable (for example, 15 for checking all rules).|
|ldap\_jit\_status|integer|Status of LDAP provisioning.
Possible values:
0 - Disabled for configured LDAP IdPs;
1 - Enabled for configured LDAP IdPs.|
|saml\_jit\_status|integer|Status of SAML provisioning.
Possible values:
0 - Disabled for configured SAML IdPs;
1 - Enabled for configured SAML IdPs.|
|jit\_provision\_interval|string|Time interval between JIT provision requests for logged-in user.
Accepts seconds and time unit with suffix with month and year support (3600s,60m,1h,1d,1M,1y). Minimum value: 1h.
Default: 1h.
Available only for LDAP provisioning.|
|disabled\_usrgrpid|integer|User group ID to assign the deprovisioned user to.
The user group must be disabled and cannot be enabled or deleted when configured.
[Property behavior](/manual/api/reference_commentary#property-behavior):
- *required* if `ldap_jit_status` is set to "Enabled for configured LDAP IdPs", or `saml_jit_status` is set to "Enabled for configured SAML IdPs"|
[comment]: # ({/9282f09f-2df9176c})