> ## Documentation Index
> Fetch the complete documentation index at: https://docs.domino.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# User authentication

Domino uses [Keycloak](https://www.keycloak.org) authentication service that runs in a pod on your Domino cluster to view, create, and manage groups of users.

## Enterprise authentication and identity

Domino seamlessly integrates with Enterprise Identity Management systems and access control policies.

Learn how to [Set up the Keycloak authentication services](/6.3/admin/identity-and-access/authentication/keycloak-set-up) and get started with the following to manage identities:

* [Single sign-on federation (SSO)](/6.3/admin/identity-and-access/authentication/sso/sso-configuration) with SAML and OIDC.

* Standardized [LDAP federation](/6.3/admin/identity-and-access/authentication/ldap-ad-federation).

* [Group and role synchronization](/6.3/admin/identity-and-access/authentication/sso/group-role-synchronization#role-synchronization).

* [Credential propagation](/6.3/admin/identity-and-access/authentication/sso/aws-credential-propagation).

## Setup authentication services

To set up authentication services you must first set up [locally hosted authentication on the Domino Cluster](/6.3/admin/identity-and-access/authentication/keycloak-set-up).

Once [Keycloak is set up](/6.3/admin/identity-and-access/authentication/keycloak-set-up) for local authentication, you can then use the following guides:

* [Federated Authentication through an LDAP Active Directory Provider](/6.3/admin/identity-and-access/authentication/ldap-ad-federation).

* [Set up SSO (Single-Sign On)](/6.3/admin/identity-and-access/authentication/sso).

* [Limit concurrent user sessions](/6.3/admin/identity-and-access/authentication/limit-sessions).