:_mod-docs-content-type: ASSEMBLY
[id="understanding-authentication"]
= Understanding authentication
include::_attributes/common-attributes.adoc[]
:context: understanding-authentication

toc::[]

[role="_abstract"]
To interact with {product-title}, log in so the authentication layer can verify your identity. The authorization layer then uses your identity to determine which actions and resources you can access.

ifdef::openshift-enterprise,openshift-webscale,openshift-origin[]
As an administrator, you can configure authentication for {product-title}.
endif::[]

include::modules/rbac-users.adoc[leveloffset=+1]

include::modules/rbac-groups.adoc[leveloffset=+1]

include::modules/rbac-api-authentication.adoc[leveloffset=+1]

include::modules/oauth-server-overview.adoc[leveloffset=+2]

include::modules/oauth-token-requests.adoc[leveloffset=+2]

ifdef::openshift-enterprise,openshift-webscale,openshift-origin[]
include::modules/authentication-api-impersonation.adoc[leveloffset=+3]

[role="_additional-resources"]
.Additional resources
* link:https://kubernetes.io/docs/reference/access-authn-authz/authentication/#user-impersonation[User impersonation (Kubernetes documentation)]

include::modules/authentication-prometheus-system-metrics.adoc[leveloffset=+3]

endif::[]

