# Centralized Authentication

> A design pattern that verifies identity once, at a shared identity provider, and passes the result to each service.

Record: `architecture:centralized-authentication`
Kind: pattern
Layer: [Execution Core](https://banes-lab.com/records/layer/execution-core.md)
Severity: recommended
Scope: identity, system
Canonical: https://banes-lab.com/ontology#architecture-centralized-authentication

Listed in [Architecture principles](https://banes-lab.com/api/records/architecture.md), after [Centralized Configuration](https://banes-lab.com/records/architecture/centralized-configuration.md) and before [Centralized Logging](https://banes-lab.com/records/architecture/centralized-logging.md).

## Repair

- Refactored by: Introduce IdP, Federate Auth
- Detected by: duplicated credential stores
- Violated by: custom auth per service without federation
- Measured by: auth centralization coverage
- Enforced by: [security policy](https://banes-lab.com/records/algorithms/security-policy.md)

## Requires

- [Identity Provider](https://banes-lab.com/records/lexicon/identity-provider.md)

## Reinforces

- [Security](https://banes-lab.com/records/lexicon/security.md)
- [Governance](https://banes-lab.com/records/architecture/governance.md)

## Enables

- [Unified Identity](https://banes-lab.com/records/lexicon/unified-identity.md)

## Conflicts with

- [Scattered Auth Implementations](https://banes-lab.com/records/lexicon/scattered-auth-implementations.md)

## In tension with

- [Identity Provider Availability](https://banes-lab.com/records/lexicon/identity-provider-availability.md)

## Tensions

- [Centralized Authentication / Identity Provider Availability](https://banes-lab.com/records/tension/centralized-authentication-identity-provider-availability.md)

## Severity

- [recommended](https://banes-lab.com/records/vocabulary/severity-recommended.md)

## Category

- [Control / Coordination / Centralization](https://banes-lab.com/records/architecture-category/control-coordination-centralization.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)
- [Control / Coordination / Centralization](https://banes-lab.com/ontology/lexicon/lexicon-category-control-coordination-centralization.md)
- [Quality Attributes](https://banes-lab.com/ontology/lexicon/lexicon-category-quality-attributes.md)
- [Severity levels](https://banes-lab.com/ontology/schema/the-vocabulary-severity.md)
- [The resolutions](https://banes-lab.com/ontology/schema/the-resolutions.md)