> For the complete documentation index, see [llms.txt](https://docs.cybus.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cybus.io/access.md).

# Access & Security

- [Admin UI](https://docs.cybus.io/access/admin-ui.md): The web-based interface for managing, monitoring, and interacting with Connectware.
- [User Management](https://docs.cybus.io/access/user-management.md): Controlling Connectware access through secure identity management and permissions.
- [Users](https://docs.cybus.io/access/user-management/users.md): Create and manage users, their roles, and permissions.
- [Default Admin User](https://docs.cybus.io/access/user-management/users/default-admin-user.md): Manage the default admin user credentials and access settings.
- [User Session Expiration](https://docs.cybus.io/access/user-management/users/user-session-expiration.md): Configure how long user sessions remain valid before re-authentication is required.
- [Roles](https://docs.cybus.io/access/user-management/roles.md): Define permission groups based on job functions and responsibilities.
- [Permissions](https://docs.cybus.io/access/user-management/permissions.md): Granular access control through resource-specific authorization settings.
- [MQTT Client Authentication](https://docs.cybus.io/access/user-management/mqtt-user-authentication.md): Configure authentication for MQTT clients connecting to Connectware.
- [Adding an MQTT Publish Prefix](https://docs.cybus.io/access/user-management/mqtt-user-authentication/adding-an-mqtt-publish-prefix.md): Configure a per-user topic prefix that Connectware adds to every MQTT message the user publishes.
- [Multi-Factor Authentication](https://docs.cybus.io/access/user-management/multi-factor-authentication.md): Add an extra layer of security to Connectware accounts with one-time codes from an authentication app.
- [Single Sign-On (SSO)](https://docs.cybus.io/access/user-management/single-sign-on-sso.md): Let users sign in to Connectware with a single set of credentials via Microsoft Entra ID or LDAP.
- [Single Sign-On with Microsoft Entra ID](https://docs.cybus.io/access/user-management/single-sign-on-sso/sso-with-microsoft-entra-id.md): Configure Microsoft Entra ID as the identity provider for single sign-on in Connectware.
- [Single Sign-On with LDAP](https://docs.cybus.io/access/user-management/single-sign-on-sso/sso-with-ldap.md): Configure LDAP Single Sign-On authentication and authorization for Connectware users with Active Directory or OpenLDAP integration.
- [Access Permissions for Admin UI](https://docs.cybus.io/access/user-management/access-permissions-for-admin-ui.md): Configure fine-grained access permissions for Admin UI features and operations.
- [Admin UI Pages Available to Minimum Access Users](https://docs.cybus.io/access/user-management/access-permissions-for-admin-ui/minimum-access-role-pages.md)
- [Admin UI Permissions](https://docs.cybus.io/access/user-management/access-permissions-for-admin-ui/ui-access.md)
- [Client Registry](https://docs.cybus.io/access/client-registry.md): Secure self-registration for simplified device management.
- [Self-Registering MQTT Clients](https://docs.cybus.io/access/client-registry/self-registering-mqtt-clients.md): Simple self-registration for MQTT clients with username and password.
- [Self-Registering Clients via REST API](https://docs.cybus.io/access/client-registry/self-registering-clients-via-rest-api.md): Flexible and secure client self-registration with role, permission, and certificate configuration.
- [Client Registry View](https://docs.cybus.io/access/client-registry/client-registry-view.md): Here you can add and manage your certificates within Connectware.
- [Troubleshooting Client Registry](https://docs.cybus.io/access/client-registry/troubleshooting-client-registry.md): Resolve common issues with client registration, authentication, and connectivity.
- [Security](https://docs.cybus.io/access/security.md): Security configuration and certificate management.
- [TLS Certificates](https://docs.cybus.io/access/security/tls-certificates.md): Manage certificates for secure device communication in Connectware.
- [Certificate Requirements](https://docs.cybus.io/access/security/tls-certificates/certificate-requirements.md): Create certificates that Connectware accepts, covering validity periods, subject fields, extensions, signature algorithms, and TLS versions.
- [Cipher Suites & TLS Versions](https://docs.cybus.io/access/security/tls-certificates/certificate-requirements/cipher-suites-and-tls-versions.md): Check which cipher suites and TLS versions each Connectware component supports for secure communication.
- [CA Certificates](https://docs.cybus.io/access/security/tls-certificates/ca-certificates.md): Establish trust with built-in Cybus CA certificates or add your own certificate authority.
- [Certificates View](https://docs.cybus.io/access/security/tls-certificates/ca-certificates/certificates-view.md): Here you can add and manage your certificates within Connectware.
- [Client Certificates](https://docs.cybus.io/access/security/tls-certificates/client-certificates.md): Learn how to secure MQTT connections with client certificates via mTLS.
- [Server Certificates](https://docs.cybus.io/access/security/tls-certificates/server-certificates.md): Generate and install your server certificate for secure connections.
- [Password Policy Configuration](https://docs.cybus.io/access/security/password-policy-configuration.md): Define and implement organization-specific password policies.
- [JSON Web Tokens](https://docs.cybus.io/access/security/json-web-tokens.md): Generate long-lived JSON Web Tokens (JWT) to authenticate API requests and automate tasks in Connectware.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.cybus.io/access.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.