Harbor supports different modes for authenticating users and managing user accounts. You should select an authentication mode as soon as you deploy Harbor.

If you create user accounts in the Harbor database, Harbor is locked in database mode. You cannot change to a different authentication mode after creating local users.

  • Database Authentication: You create and manage user accounts directly in Harbor. The user accounts are stored in the Harbor database.
  • LDAP/Active Directory Authentication: You connect Harbor to an external LDAP/Active Directory server. The user accounts are created and managed by your LDAP/AD provider.
  • OIDC Provider Authentication: You connect Harbor to an external OIDC provider. The user accounts are created and managed by your OIDC provider.

The Harbor interface offers an option to configure UAA authentication. This authentication mode is not recommended and is not documented in this guide.

Pages in this section