---
title: 'Tutorial: How to Use Local User Authentication'
canonical: https://openvpn.net/as-docs/v3/tutorials/tutorial--local-auth/
product: Access Server Docs
description: Use Access Server's robust, local authentication system to manage users and groups in the Admin Web UI.
---

# Tutorial: How to Use Local User Authentication

## Overview

By default, Access Server uses [local authentication](https://openvpn.net/as-docs/v3/local.md), where you manage users and groups within the Admin Web UI, and Access Server stores them in the local database.

For detailed information about Access Server’s robust authentication system, refer to [Access Server's User Authentication System](https://openvpn.net/as-docs/v3/user-authentication-system.md).

## Prerequisites

- An installed Access Server.
- Admin Web UI access.

## Step 1: Set local authentication as the default method

> **Tip**
>
> **Local** is the default authentication method in Access Server. If you haven't changed it, no action is needed in this step.

To start creating users, set 'local' as the authentication method and then manage users and groups. To set local as the default authentication for users and groups:

1. Sign in to the Admin Web UI.
2. Click **Authentication**.
3. Set **Default authentication system** to **Local** on the **General Settings** tab.
4. Click **Save** and **Restart**.

   > **Tip**
   >
   > You can also set other authentication methods as the default and assign local as the method at the user or group level.

## Step 2: Create a new group

1. Sign in to the Admin Web UI.
2. Click **Groups**.
3. Click **Add new group**.
4. Enter the group name and click **Save**.
   - The group is created, and its **Single Group** page is displayed.
5. Set the **Auth method** as **Inherit from default** or select **Local**.
6. Define any other group properties desired.
7. Click **Save**.

## Step 3: Create a new user

1. Sign in to the Admin Web UI.
2. Click **Users**.
3. Click **Add New User**.
4. Enter a username.
5. Assign the user to a group (optional).
6. Click **Save**.
   - The user is created, and its **Single User** page is displayed.
7. Set the **Auth method** as **Inherit from default** or select **Local**.
8. Click **Reset Password**, enter a password, and click **Reset**.
9. Define any other user properties as desired.
10. Click **Save**.

---

Prev: [Local Authentication](https://openvpn.net/as-docs/v3/tutorials/local-authentication.md)
Next: [Tutorial: Allow Users to Change Passwords from the Client Web UI](https://openvpn.net/as-docs/v3/tutorials/tutorial--user-password-change-cws.md)
Index: https://openvpn.net/as-docs/llms.txt