Document vault authentication
The Authentication tab of the Document Vault Properties dialog contains settings related to vault user synchronization and authentication with . The tab is available in the Document Vault Properties dialog of existing vaults. When you create a vault, you cannot see this tab.
User synchronization
For information about user synchronization, see User Synchronization with Identity Providers.
User authentication
Refer to the specified instructions in this table to set up user authentication in your environment:
| Deployment | Instructions |
|---|---|
| and | Setting up federated authentication with in the user guide. |
| On-premises server and | Configuring Vault Authentication with Microsoft Entra ID in On-Premises Environments |
| Any environment and any OAuth 2.0 or OpenID Connect compliant identity provider | Configuring OpenID Connect and OAuth 2.0 for Authentication |
Additional information:
- In
, is
automatically configured for vaults created in .
- In , refer to Configuring Vault Authentication with M-Files Login Service to manually set up authentication through Login Service.
- If the vault has been migrated from on-premises, see Requirements.
- If you use or the add-ins based on , also refer to Setting Up OAuth 2.0 for the New M-Files Web and Web-Based Add-Ins.
- In on-premises environments, also refer to Configuring OpenID Connect and OAuth 2.0 for Authentication.
Anonymous authentication
On the Authentication tab of the Document Vault Properties dialog, you can also find the Use anonymous authentication setting. It lets you set and users to have read-only access to this vault without username and password.
When the feature is enabled, adds an anonymous user to the vault. The user has no login account on the server, but you can use it to set permissions, and add it to user groups. The anonymous user is created as an external user. However, you can change it to an internal user.
Prerequisites to set up the feature:
- You must have External Connector license.
- You must be a system administrator or have full control of the vault.
- In on-premises and self-managed cloud environments, you must set up mappings between incoming connections and your vaults.
Remarks:
- The classic and classic do not use this setting. To set up anonymous authentication for the classic , see Optional: Changing Publication Settings.
- The anonymous user does not decrease the number of your read-only licenses.