Authentication mechanisms

The mechanisms drivers authenticate with and when to use each one.

Drivers authenticate with the same mechanisms as in MongoDB. With speculativeAuthenticate, they do so in the same round trip as the initial handshake.

MechanismUse
SCRAM-SHA-256User and password; the default one.
SCRAM-SHA-1User and password for older clients.
MONGODB-X509Client certificate; the user lives in $external.
PLAINLDAP, with --ldapServers.
GSSAPIKerberos.
MONGODB-AWSAWS credentials.
MONGODB-OIDCAn OIDC provider, with oidcIdentityProviders.

See also