Glossar
Authentication
Ibexa DXP delegates authentication to the Symfony Security component, which provides flexible support for username/password, API token, and SSO protocols such as OAuth 2.0, SAML 2.0, and LDAP. Multiple authenticators can be active simultaneously for different SiteAccesses or user groups.
User groups and roles enforce access control within the repository: each role defines a list of policies (module + function + optional limitations), and roles are assigned to user groups. Multi-factor authentication can be added through standard Symfony Security bundles.