synapse/docs/usage/configuration/user_authentication
..
single_sign_on
README.md
refresh_tokens.md

User Authentication

Synapse supports multiple methods of authenticating users, either out-of-the-box or through custom pluggable authentication modules.

Included in Synapse is support for authenticating users via:

  • A username and password.
  • An email address and password.
  • Single Sign-On through the SAML, Open ID Connect or CAS protocols.
  • JSON Web Tokens.
  • An administrator's shared secret.

Synapse can additionally be extended to support custom authentication schemes through optional "password auth provider" modules.