• HashiCorp Developer

  • HashiCorp Cloud Platform
  • Terraform
  • Packer
  • Consul
  • Vault
  • Boundary
  • Nomad
  • Waypoint
  • Vagrant
Vault
  • Install
  • Tutorials
  • Documentation
  • API
  • Integrations
  • Try Cloud(opens in new tab)
  • Sign up
Vault Home

Tutorials

Skip to main contentTutorials

Get Started

  • CLI Quick Start
  • HCP Vault Quick Start
  • UI Quick Start

Use Cases

  • ADP
  • Database Credentials
  • Data Encryption
  • Key Management
  • Secrets Management

Certification Prep

  • Associate
  • Operations Pro

Production

  • Day One Preparation
  • Enterprise
  • HCP Vault Monitoring
  • Monitor & Troubleshoot
  • Recommended Patterns
  • Standard Procedures

Integrations

  • App Integration
  • Custom Secrets Engine
  • HashiCorp Products
  • Vault Agent

Kubernetes

  • HCP Vault
  • Vault

Operations

  • Authentication
  • Auto Unseal
  • Consul Storage Backend
  • Fundamentals
  • HCP Vault Operations
  • Integrated Storage
  • Policies
  • Terraform for HCP Vault
  • Tokens

  • Resources

  • Tutorial Library
  • Certifications
  • Community Forum
    (opens in new tab)
  • Support
    (opens in new tab)
  • GitHub
    (opens in new tab)
  1. Developer
  2. Vault
  3. Tutorials
  4. Authentication

Auth Methods

Vault clients must authenticate with Vault first and acquire a valid token. Learn available auth methods.

Start
14 tutorials
  •  
    31min
    Tokens
    Tokens are the core method for authentication within Vault. Learn how the token lifecycle works.
    • Vault
    • Interactive
  •  
    26min
    OIDC Auth Method
    Demonstrates the OIDC authentication method to verify and create a token with a pre-configured policy for Vault clients.
    • Vault
    • Video
  •  
    14min
    Azure Active Directory with OIDC Auth Method and External Groups
    Demonstrates how to configure Vault's OIDC authentication method with Azure Active Directory and Vault external groups.
    • Vault
  •  
    37min
    OIDC Authentication with Okta
    Demonstrates the OIDC authentication method to verify and create a token using Okta.
    • Vault
  •  
    12min
    Vault as an OIDC Identity Provider
    Setup Vault as an OIDC identity provider with authorization code flow for Boundary.
    • Vault
    • Boundary
  •  
    7min
    AppRole Usage Best Practices
    Understand the best practices in securely distributing the AppRole credentials to the target Vault clients.
    • Vault
  •  
    22min
    AppRole Pull Authentication
    Authentication is a process in Vault by which user or machine-supplied information is verified to create a token with a pre-configured policy.
    • Vault
    • Interactive
  •  
    20min
    AppRole With Terraform & Chef
    This tutorial discusses the concepts necessary to help users understand Vault's AppRole authentication pattern and how to use it to securely introduce a Vault authentication token to a target server, application, or container.
    • Terraform
    • Vault
    • Video
  •  
    21min
    Enable Login Multi Factor Authentication (MFA)
    Learn how to enable and use MFA to add an additional authentication mechanism to a Vault auth method.
    • Vault
  •  
    11min
    Active Directory Auth Method with TOTP Login MFA
    Learn how to enable and configure TOTP based MFA login for the Active Directory Auth Method.
    • Vault
    • Vagrant
  •  
    15min
    Vault Agent with AWS
    This tutorial is an introduction the Vault Agent which was introduced in Vault 0.11. Its basic usage is demonstrated using AWS auth method as an example.
    • Terraform
    • Vault
    • Video
  •  
    17min
    Vault Agent with Kubernetes
    This tutorial demonstrates the Auto-Auth method of Vault Agent using Kubernetes auth method on the server side.
    • Vault
  •  
    40min
    Identity: Entities and Groups
    Create entities, entity aliases, and groups to maintain the Vault client's identity when the client has multiple auth methods to log in with Vault.
    • Vault
    • Interactive
  •  
    8min
    Build Your Own Plugins
    Learn how to build, register, and mount a custom plugin.
    • Vault
    • Video
Give Feedback(opens in new tab)
  • Certifications
  • System Status
  • Terms of Use
  • Security
  • Privacy
  • Trademark Policy
  • Trade Controls
  • Give Feedback(opens in new tab)