---
title: 'Tutorial: How to Change the Authentication Mode from the Admin Web UI'
canonical: https://openvpn.net/as-docs/v3/tutorials/tutorial--change-auth-mode-admin-web-ui/
product: Access Server Docs
description: Access Server supports local, PAM, LDAP, RADIUS, and SAML authentication modes you can set from the Admin Web UI.
---

# Tutorial: How to Change the Authentication Mode from the Admin Web UI

## Overview

Access Server supports multiple authentication methods you can manage from the Admin Web UI or the command-line interface (CLI). This tutorial provides information about changing the authentication mode from the Admin Web UI.

## Prerequisites

- An installed Access Server.
- Admin Web UI access.
- RADIUS, LDAP, or SAML authentication configured before setting as the default mode.

## Step 1: Set the authentication mode

1. Sign in to the Admin Web UI.
2. Click **Authentication**.
3. On the **General Settings** tab, select your preferred authentication method for **Default authentication system**. (**Local** is the default.)

   > **Note**
   >
   > An authentication method must be enabled on its tab before you can set it as the default.
4. Click **Save** and **Restart**.

## Step 2: Set additional authentication options (optional)

Access Server allows multiple authentication methods. Here's how you can add methods at the group and user levels as well.

1. Click **Authentication**, and click on the tab for the additional authentication method: LDAP, RADIUS, or SAML.
2. Configure the server configuration for the selected authentication method.
3. Click **Save** and **Restart**.
4. You can now assign one authentication method as the global method with different group or user-level methods:
   1. **For users:** Click **Users**, click the specific user, and select their **Auth method** under **Authentication** on the **User Settings** tab.
   2. **For groups:** Click **Groups**, click the specific group, and select the **Auth method** under **Authentication** on the **Group Settings** tab.
5. Click **Save** and **Restart**.

> **Important**
>
> LDAP, RADIUS, and SAML require additional configuration steps. If they aren't configured, you can’t enable them as the default authentication method or for users or groups.

---

Prev: [Authentication Mode Configuration](https://openvpn.net/as-docs/v3/tutorials/authentication-mode-configuration.md)
Next: [Tutorial: How to Change the Authentication Mode in the Command-Line Interface](https://openvpn.net/as-docs/v3/tutorials/tutorial--change-auth-mode-cli.md)
Index: https://openvpn.net/as-docs/llms.txt