---
title: Set a User's connection authentication policy
canonical: https://openvpn.net/cloud-docs/owner/users/users---groups/set-a-user-s-connection-authentication-policy/
product: CloudConnexa Docs
description: Set how and when you want the user to authenticate prior to connection based on the User Group.
keywords: connection authentication
---

# Set a User's connection authentication policy

You can have a user authenticate every time prior to connection, or not at all, or authenticate only **On prior auth timeout**, meaning the user will not be prompted for credentials during the 12 hours following a successfully authenticated connection. This setting, called **Connect Auth**, for a User is inherited from the User Group setting.

The default **Connect Auth** value, used whenever a new User Group is created, is configured in **Settings**. Refer to [Connect Auth](https://openvpn.net/cloud-docs/owner/settings/settings---users/set-the-default-connection-authentication--connect-auth--policy-for-users.md)

To change the **Connect Auth** while creating a new User Group, refer to [Add a User Group](https://openvpn.net/cloud-docs/owner/users/users---groups/add-a-user-group.md)

To change the **Connect Auth** for an existing User Group, refer to [Edit a User Group](https://openvpn.net/cloud-docs/owner/users/users---groups/edit-a-user-group.md)

---

Prev: [Restrict the User to connect to a specific set of Regions](https://openvpn.net/cloud-docs/owner/users/users---groups/restrict-the-user-to-connect-to-a-specific-set-of-regions.md)
Next: [Set the Internet Access method for a User](https://openvpn.net/cloud-docs/owner/users/users---groups/set-the-internet-access-method-for-a-user.md)
Index: https://openvpn.net/cloud-docs/llms.txt