# \#authentication

**URL:** https://talk.openmrs.org/tag/authentication/157.md

[Latest](https://talk.openmrs.org/latest.md) · [Categories](https://talk.openmrs.org/categories.md) · [Tags](https://talk.openmrs.org/tags.md)

---

## [GSoC 2026: Integrate O3 with the Authentication module](https://talk.openmrs.org/t/gsoc-2026-integrate-o3-with-the-authentication-module/49459)

<div class="topic-metadata">

**Author:** [@dilankavishka](https://talk.openmrs.org/u/dilankavishka)\
**Replies:** 22\
**Last updated:** [July 30, 2026, 1:05pm UTC](https://talk.openmrs.org/t/gsoc-2026-integrate-o3-with-the-authentication-module/49459 "2026-07-30T13:05:04Z")

</div>

Hello Beautiful Community! I’m creating this thread to keep track of and stay focused on my GSoC 2026 project, “Integrate O3 with the Authentication module”. First, I’d like to share the project proposal that was select…

---

## [GSoC 2026: O3 Frontend Architecture for Authentication Module Integration](https://talk.openmrs.org/t/gsoc-2026-o3-frontend-architecture-for-authentication-module-integration/49131)

<div class="topic-metadata">

**Author:** [@praneeth622](https://talk.openmrs.org/u/praneeth622)\
**Replies:** 21\
**Last updated:** [April 27, 2026, 8:59pm UTC](https://talk.openmrs.org/t/gsoc-2026-o3-frontend-architecture-for-authentication-module-integration/49131 "2026-04-27T20:59:14Z")

</div>

Hey @jayasanka @ibacher, Following up on my earlier post — I’ve since done a deeper dive into the auth module codebase and @twiine’s thread. Rather than repeat the backend analysis, I want to focus on the frontend side …

---

## [Navigation behavior in O3 during logout](https://talk.openmrs.org/t/navigation-behavior-in-o3-during-logout/44838)

<div class="topic-metadata">

**Author:** [@wyclif](https://talk.openmrs.org/u/wyclif)\
**Replies:** 12\
**Last updated:** [February 24, 2025, 3:10pm UTC](https://talk.openmrs.org/t/navigation-behavior-in-o3-during-logout/44838 "2025-02-24T15:10:45Z")

</div>

Hi, I was investigating a frontend issue and I observed some strange behavior specifically in the esm-login-app. I understand OpenMRS recommends use of Chrome but for purposes of demonstrating the behavior I’m observing…

---

## [Forced Password Changes in O3: Status Update](https://talk.openmrs.org/t/forced-password-changes-in-o3-status-update/43680)

<div class="topic-metadata">

**Author:** [@ibacher](https://talk.openmrs.org/u/ibacher)\
**Replies:** 0\
**Last updated:** [September 27, 2024, 1:22pm UTC](https://talk.openmrs.org/t/forced-password-changes-in-o3-status-update/43680 "2024-09-27T13:22:03Z")

</div>

So, as most of you know, both O1 (as we call it now) supported a flow for users to be required to change their passwords the first time they log in. This is a useful system to have in-place, because it allows assurance t…

---

## [openmrs-module-authentication config](https://talk.openmrs.org/t/openmrs-module-authentication-config/39747)

<div class="topic-metadata">

**Author:** [@nischith](https://talk.openmrs.org/u/nischith)\
**Replies:** 5\
**Last updated:** [May 31, 2023, 8:41am UTC](https://talk.openmrs.org/t/openmrs-module-authentication-config/39747 "2023-05-31T08:41:46Z")

</div>

This TALK thread is a continuation of an earlier conversation visible here As stated in the earlier thread: openmrs-module-authentication works perfectly fine alongside the default Authentication mechanism of OpenMRS, …

---

## [API Authenticatoin always false](https://talk.openmrs.org/t/api-authenticatoin-always-false/33889)

<div class="topic-metadata">

**Author:** [@christoforos](https://talk.openmrs.org/u/christoforos)\
**Replies:** 1\
**Last updated:** [June 27, 2021, 6:30pm UTC](https://talk.openmrs.org/t/api-authenticatoin-always-false/33889 "2021-06-27T18:30:48Z")

</div>

Reference Application 2.11.0 Hello I am trying to authenticate through api call. I follow the guide and I make this call: OkHttpClient client = new OkHttpClient().newBuilder().build(); Request request = new Re…

---

## [How to make endpoint secure?](https://talk.openmrs.org/t/how-to-make-endpoint-secure/32921)

<div class="topic-metadata">

**Author:** [@narukumar](https://talk.openmrs.org/u/narukumar)\
**Replies:** 15\
**Last updated:** [May 28, 2021, 12:48pm UTC](https://talk.openmrs.org/t/how-to-make-endpoint-secure/32921 "2021-05-28T12:48:31Z")

</div>

I have created one separate module and implemented some services and controller. Those endpoints are not secure, yet everyone can call them, I just want to make them secure so only authorized users can call them. Is ther…

---

## [FHIR2 and basic authentication](https://talk.openmrs.org/t/fhir2-and-basic-authentication/33302)

<div class="topic-metadata">

**Author:** [@keithduddy](https://talk.openmrs.org/u/keithduddy)\
**Replies:** 7\
**Last updated:** [May 7, 2021, 6:13am UTC](https://talk.openmrs.org/t/fhir2-and-basic-authentication/33302 "2021-05-07T06:13:35Z")

</div>

Sorry if this thread is dragging out a bit… but we’re still unsure how to use the FHIR2 module without OAuth, now that we have put that off until a later stage. I think I have read all the REST2 Wiki manual pages, but I…

---

## [Security of Health Information](https://talk.openmrs.org/t/security-of-health-information/28157)

<div class="topic-metadata">

**Author:** [@laurenmy](https://talk.openmrs.org/u/laurenmy)\
**Replies:** 7\
**Last updated:** [April 28, 2020, 7:09pm UTC](https://talk.openmrs.org/t/security-of-health-information/28157 "2020-04-28T19:09:05Z")

</div>

How is patient information protected in OpenMRS? How does OpenMRS prevent hackers or false providers?

---

## [Authentication Error when Running a Report via an external URL call via curl yet it works when logged in via the browser](https://talk.openmrs.org/t/authentication-error-when-running-a-report-via-an-external-url-call-via-curl-yet-it-works-when-logged-in-via-the-browser/24319)

<div class="topic-metadata">

**Author:** [@ssmusoke](https://talk.openmrs.org/u/ssmusoke)\
**Replies:** 1\
**Last updated:** [August 15, 2019, 8:29pm UTC](https://talk.openmrs.org/t/authentication-error-when-running-a-report-via-an-external-url-call-via-curl-yet-it-works-when-logged-in-via-the-browser/24319 "2019-08-15T20:29:47Z")

</div>

I am trying to call the following url curl -u manager:Manager123 -i 'http://aijar.mets.or.ug:8080/ugandaemr/ws/rest/v1/concept?limit=2' which works, yet curl -L -u manager:Manager123 -i 'http://aijar.mets.or.ug:8080/u…

---

## [How to manage session for OpenMRS Mobile Apps](https://talk.openmrs.org/t/how-to-manage-session-for-openmrs-mobile-apps/23339)

<div class="topic-metadata">

**Author:** [@suthagar23](https://talk.openmrs.org/u/suthagar23)\
**Replies:** 2\
**Last updated:** [May 24, 2019, 3:36pm UTC](https://talk.openmrs.org/t/how-to-manage-session-for-openmrs-mobile-apps/23339 "2019-05-24T15:36:51Z")

</div>

Hi every one, I just encountered an issue while working on iOS-Client. I’m using the Authorization: Basic (base64 of username:password) as mentioned here to log in to the OpenMRS Server, and it sends the response with s…

---

## [Letting authentication schemes create new users (and map roles) (TRUNK-381)](https://talk.openmrs.org/t/letting-authentication-schemes-create-new-users-and-map-roles-trunk-381/22080)

<div class="topic-metadata">

**Author:** [@mksd](https://talk.openmrs.org/u/mksd)\
**Replies:** 7\
**Last updated:** [March 4, 2019, 6:41pm UTC](https://talk.openmrs.org/t/letting-authentication-schemes-create-new-users-and-map-roles-trunk-381/22080 "2019-03-04T18:41:06Z")

</div>

Hi all, @dkayiwa @burke, So there’s been a bit of discussion already happening on Jira, see from here on TRUNK-381. As requested by @dkayiwa I’m taking this here as some more design is needed at this point. The bottom …

---

## [Pluggabale authentication modules for OpenMRS](https://talk.openmrs.org/t/pluggabale-authentication-modules-for-openmrs/6229)

<div class="topic-metadata">

**Author:** [@vvinay](https://talk.openmrs.org/u/vvinay)\
**Replies:** 14\
**Last updated:** [January 28, 2019, 12:38pm UTC](https://talk.openmrs.org/t/pluggabale-authentication-modules-for-openmrs/6229 "2019-01-28T12:38:17Z")

</div>

As part of the work we are doing in Bahmni for offline data entry by health workers, we are looking in to the following aspects- Two-factor authentication to ensure increased security of data sync with Bahmni/OpenMRS …

---

## [2 Factor Authentication for OpenMRS](https://talk.openmrs.org/t/2-factor-authentication-for-openmrs/12258)

<div class="topic-metadata">

**Author:** [@ssmusoke](https://talk.openmrs.org/u/ssmusoke)\
**Replies:** 2\
**Last updated:** [July 7, 2017, 4:48am UTC](https://talk.openmrs.org/t/2-factor-authentication-for-openmrs/12258 "2017-07-07T04:48:42Z")

</div>

Continuing the discussion from Enhance Bahmni security with 2FA or TFA: Decided to open a new thread for OpenMRS Specifically

---

## [Enhance Bahmni security with 2FA or TFA](https://talk.openmrs.org/t/enhance-bahmni-security-with-2fa-or-tfa/6786)

<div class="topic-metadata">

**Author:** [@shanmugam](https://talk.openmrs.org/u/shanmugam)\
**Replies:** 30\
**Last updated:** [July 6, 2017, 12:00pm UTC](https://talk.openmrs.org/t/enhance-bahmni-security-with-2fa-or-tfa/6786 "2017-07-06T12:00:58Z")

</div>

Bahmni using basic authentication (username, password) from OpenMRS so far. But always good to have additional security mechanism so that user is protected from fraudulent act. So, we are planning to introduce 2FA in Ba…

---

## [Changing password strength requirements](https://talk.openmrs.org/t/changing-password-strength-requirements/3892)

<div class="topic-metadata">

**Author:** [@maimoonak](https://talk.openmrs.org/u/maimoonak)\
**Replies:** 3\
**Last updated:** [August 15, 2016, 8:53pm UTC](https://talk.openmrs.org/t/changing-password-strength-requirements/3892 "2016-08-15T20:53:40Z")

</div>

Hi all, Currently, OpenMRS (verified on 1.11 or below) doesnot allow to create a user without a password containing Upper-Lower-Number combination. We piloted OpenMRS used by field workers (via mobile) and found out…

---

## [Bahmni User Authentication via LDAP](https://talk.openmrs.org/t/bahmni-user-authentication-via-ldap/7505)

<div class="topic-metadata">

**Author:** [@gsluthra](https://talk.openmrs.org/u/gsluthra)\
**Replies:** 4\
**Last updated:** [August 4, 2016, 1:09pm UTC](https://talk.openmrs.org/t/bahmni-user-authentication-via-ldap/7505 "2016-08-04T13:09:50Z")

</div>

Hello Bahmni, will your open source application be able to connect to an existing windows LDAP server to authenticate existing users? Is there such a module available in your most recent application? (posted on behalf …

---

## [CAS authentication module release](https://talk.openmrs.org/t/cas-authentication-module-release/3398)

<div class="topic-metadata">

**Author:** [@sunbiz](https://talk.openmrs.org/u/sunbiz)\
**Replies:** 3\
**Last updated:** [October 23, 2015, 2:32pm UTC](https://talk.openmrs.org/t/cas-authentication-module-release/3398 "2015-10-23T14:32:59Z")

</div>

After my rant post a few months back that we are not doing the long requested single-sign on authentication feature for OpenMRS, I've written a module that can authenticate OpenMRS using Central Authentication Service (C…
