> For the complete MongoDB documentation index, see www.mongodb.com/docs/llms.txt

# Authentication and Authorization with OIDC/OAuth 2.0

You can authenticate and authorize access to Atlas clusters or Atlas [Online Archives](https://www.mongodb.com/docs/atlas/online-archive/overview.md#std-label-online-archive-overview) for both human users and applications with your own identity provider that supports OIDC (OpenID Connect) or OAuth 2.0.

You can use your existing identity provider to configure single-sign-on for human user access to Atlas clusters with Workforce Identity Federation. You can similarly use your existing cloud provider application users, such as Azure Service Principals, Azure Managed Identities, or GCP Service Accounts, for application access to Atlas clusters with Workload Identity Federation.

You can manage authentication all in one place, either using your OIDC (OpenID Connect) provider for human user access, or your OAuth 2.0 provider for application access. The following table compares the OIDC (OpenID Connect) and OAuth 2.0 access options.

**Note:**

If you use other authentication mechanisms such as SCRAM, X.509 or AWS-IAM, you can continue to use them for database access. However, you cannot use both LDAP (Lightweight Directory Access Protocol) authorization and OIDC (OpenID Connect) authentication.

| Authentication method | User type | Supported protocols |
| --- | --- | --- |
| Workforce Identity Federation | Human users | OIDC (OpenID Connect) |
| Workload Identity Federation | Programmatic users | OAuth 2.0 |

Select the authentication method to learn more:

- [Workforce Identity Federation (Humans)](https://www.mongodb.com/docs/atlas/workforce-oidc.md#std-label-oidc-authentication-workforce)

- [Workload Identity Federation (Applications)](https://www.mongodb.com/docs/atlas/workload-oidc.md#std-label-oidc-authentication-workload)

For step-by-step instructions on configuring specific identity providers for Workforce Identity Federation, see:

- [Configure Workforce Identity Federation from Okta](https://www.mongodb.com/docs/atlas/security/oidc-okta-setup.md#std-label-oidc-okta-setup)

- [Configure Workforce Identity Federation from PingOne](https://www.mongodb.com/docs/atlas/security/oidc-pingone-setup.md#std-label-oidc-pingone-setup)