Authentication and Authorization
Implement authentication methods and configure authorization rules to control who can access and modify your graph data.
AuthN vs. AuthZ: The Basics
When we talk about database security, two key concepts are Authentication and Authorization. While they sound similar, they serve distinct purposes.
Authentication (AuthN) is about verifying who you are. It confirms your identity, typically using a username and password.
Authorization (AuthZ) is about determining what you can do. Once authenticated, the system decides what actions you're permitted to perform.
Neo4j Authentication Methods
Neo4j primarily uses native authentication, where user credentials (username and password) are stored and managed directly within the database.
For enterprise setups, Neo4j also supports integration with external authentication systems like LDAP or Kerberos, but for most applications, native authentication is sufficient and simpler to manage.
All lessons in this course
- User Management and Roles
- Authentication and Authorization
- Securing Your Neo4j Deployment
- Fine-Grained Access Control and Auditing