Authentication mechanisms

Mechanisms drivers authenticate with and the case each one serves.

Drivers authenticate with the same mechanisms as in MongoDB. With speculativeAuthenticate, they do so in the same round trip as the initial handshake.

MechanismUse
SCRAM-SHA-256User and password; the default one.
SCRAM-SHA-1User and password for older clients.
MONGODB-X509Client certificate; the user lives in $external.
PLAINLDAP, with --ldapServers.
GSSAPIKerberos.
MONGODB-AWSAWS credentials.
MONGODB-OIDCAn OIDC provider, with oidcIdentityProviders.

See also