---
title: 'Tutorial: How to Install a Post-Auth Script'
canonical: https://openvpn.net/as-docs/tutorials/tutorial--install-post-auth-script/
product: Access Server Docs
description: Access Server supports a programming hook called post-authentication. You can use a custom Python script for post-auth functionality.
---

# Tutorial: How to Install a Post-Auth Script

## Overview

Access Server's post-auth programming hook allows you to extend Access Server's possibilities for authenticating against a source of credentials. This tutorial shows you how to install one.

## Prerequisites

- An installed Access Server.
- A good understanding of Python.

## Step 1: Install the post-auth script

1. Download or create the script.
2. Modify the script as needed for your configuration.
3. Save it somewhere on your Access Server's file system.
4. Install it on Access Server (connected to the console and get root privileges):

   ```
   cd /usr/local/openvpn_as/scripts
   ./sacli --key "auth.module.post_auth_script" --value_file="<POST_AUTH_SCRIPT_PATH_AND_FILENAME>" ConfigPut
   ./sacli start
   ```

   Replace \<POST\_AUTH\_SCRIPT\_PATH\_AND\_FILENAME\> with the full path and filename where you saved the post-auth script.

> **Tip**
>
> We recommend keeping a copy of the script for any needed updates. It’s complicated to change it in Access Server’s configuration database, so we recommend editing the original file and loading it again with the above command.

---

Prev: [Tutorial: Implementing a Post-Auth Script with X.509 Attributes](https://openvpn.net/as-docs/tutorials/tutorial--x509-post-auth.md)
Next: [Tutorial: How to Remove a Post-Auth Script](https://openvpn.net/as-docs/tutorials/tutorial--remove-post-auth-script.md)
Index: https://openvpn.net/as-docs/llms.txt