---
title: Authorization & Access Control
canonical: https://openvpn.net/as-docs/authorization---access-control/
product: Access Server Docs
---

# Authorization & Access Control

These plugins determine whether a user is allowed to establish a VPN session and what access they receive after authentication. These integrations apply policy checks, such as group mapping, device registration, IP/domain restrictions, or attribute-based rules. These occur before allowing the connection to complete. Use these capabilities to enforce access policies and segment network access based on identity and defined requirements.

## In this section:

- [LDAP Group Mapping](https://openvpn.net/as-docs/ldap-group-mapping.md)
- [RADIUS Group Mapping](https://openvpn.net/as-docs/radius-group-mapping.md)
- [SAML Group Mapping](https://openvpn.net/as-docs/saml-group-mapping.md)
- [IP Restriction](https://openvpn.net/as-docs/ip-restriction.md)
- [X.509 Attribute Rules](https://openvpn.net/as-docs/x-509-attribute-rules.md)
- [Hardware Address Registration](https://openvpn.net/as-docs/hardware-address-registration.md)
- [Host Checking](https://openvpn.net/as-docs/host-checking.md)

---

Prev: [Custom Authentication System](https://openvpn.net/as-docs/custom-authentication-system.md)
Next: [LDAP Group Mapping](https://openvpn.net/as-docs/ldap-group-mapping.md)
Index: https://openvpn.net/as-docs/llms.txt