---
title: 'Tutorial: How to Change the Authentication Mode from the Admin Web UI'
canonical: https://openvpn.net/as-docs/tutorials/tutorial--change-auth-mode-admin-web-ui/
product: Access Server Docs
description: Access Server supports local, PAM, LDAP, RADIUS, and SAML authentication modes you can set from the Admin Web UI.
---

# Tutorial: How to Change the Authentication Mode from the Admin Web UI

## Overview

Access Server supports multiple authentication methods you can manage from the Admin Web UI or the command-line interface (CLI). This tutorial provides information about changing the authentication mode from the Admin Web UI.

## Prerequisites

- An installed Access Server.
- Admin Web UI access.
- RADIUS, LDAP, or SAML authentication configured before setting as the default mode.

## Step 1: Set the authentication mode

1. Sign in to the Admin Web UI.
2. Click **Authentication \> Settings**.
3. Under **Default Authentication System**, select the desired authentication mode.
4. Select **Save Settings** and **Update Running Server**.

## Step 2: Set additional authentication options (optional)

For Access Server 2.10.2 and newer, you can allow LDAP and RADIUS authentication as additional authentication options for users and groups, and you can allow SAML with 2.11.0 and newer. Ensure you configure these authentication methods first.

1. Click **Authentication** and select the desired authentication method (RADIUS, LDAP, or SAML).
2. Click **Yes** to enable the authentication method.
3. Select **Save Settings** and **Update Running Server**.
4. You can then choose LDAP, RADIUS, or SAML as the authentication method for users and groups:
   1. **For users:** Click **User Management \> User Permissions**, click **More Settings** for the user, select the authentication method under **Configure user authentication method**, then save and update the server.
   2. **For groups:** Click **User Management \> Group Permissions**, click **More Settings** for the group, select the authentication method under **Configure user authentication method**, then save and update the server.

> **Important**
>
> LDAP, RADIUS, and SAML require additional configuration steps. If they aren't configured, you can’t enable them as the default authentication method or for users or groups.

---

Prev: [Authentication Mode Configuration](https://openvpn.net/as-docs/tutorials/authentication-mode-configuration.md)
Next: [Tutorial: How to Change the Authentication Mode in the Command-Line Interface](https://openvpn.net/as-docs/tutorials/tutorial--change-auth-mode-cli.md)
Index: https://openvpn.net/as-docs/llms.txt