kPow supports Jetty (File, LDAP, DB, etc), SAML, and OpenID mechanisms for authenticating users.
kPow is built on the Eclipse Jetty Web Server.
Jetty provides a number of JAAS (Java Authentication and Authorization) integrations including:
PropertyFileLoginModule: user credentials are stored in a property file.
LdapLoginModule: user credentials are stored in LDAP.
JDBCLoginModule: user credentials are stored in a DB accessed via JDBC.
DataSourceLoginModule: similar to JDBC but uses a JNDI Datasource to connect to the DB.
kPow supports all of these Jetty JAAS integrations. Details of each are in this guide.
With authentication configured kPow requires all users to authenticate prior to accessing the UI.
When Jetty Authentication is configured users will be prompted with form-based or basic login prompts.
Regardless of the mechanism used for authentication, all users can view their profile information.