pfSense Users and Authentication

The pfSense User Manager (System > User Manager) provides management of user accounts, groups, and access privileges for the web interface and network services. The system supports a local user database as well as authentication through external LDAP, Active Directory, and RADIUS servers. User accounts are used for web GUI access, VPN connections (OpenVPN, IPsec), Captive Portal authorization, and SSH console access.

Proper access control configuration is a critical security element - each user should possess only the minimum set of privileges required for their tasks (principle of least privilege).

In This Section

• User Management - creating local accounts, configuring groups and privileges, LDAP/Active Directory and RADIUS integration, multi-factor authentication