Local and enterprise login options

Last Updated : Sep 16, 2025 |
Prolog information
Metadata
Keywords:
CMS supports local and enterprise login options.

Local login

  • Use the CMS-administered user ID and password.
  • You can optionally administer users for LDAP password authentication using Microsoft Active Directory.

Enterprise login

  • CMS supports authentication through Microsoft Azure and OKTA.
  • This option is available only with the CMS Web Client.
  • If Microsoft Azure or OKTA is configured for multifactor authentication (MFA), CMS enforces MFA.
  • The LDAP package is not required for enterprise login.
  • You must have a login ID configured in CMS.
  • CMS must be administered to be recognized by Microsoft Azure or OKTA.
CMS also supports login authentication using personal certificates. The method of using personal certificates is required for Joint Interoperability Test Command (JITC) certification. For Federal and Department of Defense employees, Common Access Card (CAC) encodes and provides personal certificates.
CMS does not require certificates to be stored on CACs. Personal certificates can also reside in standard certificate stores, such as the Microsoft Certificate Store.