---
description: >-
  Use the Auth package to allow ProcessMaker users to log on using SSO, SAML,
  LDAP and SCIM authentication protocols.
---

# Auth Package

## Overview

Use the Auth package to authenticate ProcessMaker Platform users to log on using any of the following protocols:

* **Lightweight Directory Access Protocol (LDAP):** Synchronize users from LDAP organization to ProcessMaker Platform.
* **Single sign-on (SSO):** SSO is an identification system that allows users to log on to ProcessMaker Platform using any of the following third-party services:
  * [Atlassian](https://www.atlassian.com/) products
  * [Facebook](https://www.facebook.com/)
  * [Google](https://www.google.com/)
  * [LinkedIn](https://www.linkedin.com/)
  * [Microsoft Active Directory](https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview)
  * [Twitter](https://twitter.com/?lang=en)
* **SSO via Security Assertions Markup Language (SAML) 2.0:** SAML is an open-standard format to exchange authentication and authorization data between parties when establishing a SSO session.
* **System for Cross-domain Identity Management (SCIM):** SCIM is an open standard that allows for the automation of user provisioning.

The Auth package is based on [OAuth 2.0](https://oauth.net/2/) framework, which is an open-standard [authorization](https://www.okta.com/identity-101/authentication-vs-authorization/#what-is-authorization-1) protocol that describes how unrelated servers and services can securely authenticate access to their assets without sharing log on credentials.
