---
updatedAt: 2026-09-16T02:21:39.000Z
---

# Security providers | PRA Pathfinder

## What are security providers?

Security providers authenticate users against existing identity sources like LDAP, RADIUS, Kerberos, OpenID Connect, SCIM, or SAML2 servers. They can also assign privileges based on the hierarchy and group settings defined in those servers.

## How are security providers useful?

Security providers streamline authentication by using LDAP for directory services, SAML2, OpenID Connect, and Kerberos for single sign-on, and SCIM for automated user provisioning. They also enhance security with two-factor methods like RSA via RADIUS.

## How do I access the Security Providers page?

1. Sign into **app.beyondtrust.io**.\
   The **BeyondTrust Home** page displays.
2. From the main menu, click **Privileged Remote Access** > **Users & Security**.\
   The **User & Security** page opens and the **Users** tab displays by default.
3. Click the **Security Providers** tab.\
   The **Security Providers** tab displays.

<Accordion title="For users moving from Cloud or On-premises">

The way authentication providers are managed in Privileged Remote Access on Pathfinder differs from Cloud and On-premises. Instead of configuring them directly in the admin interface of Privileged Remote Access, authentication providers are created and managed through the Pathfinder Platform.

All tasks related to creating and maintaining security providers must now be performed within Pathfinder configuration. This decreases the amount of administrative overhead and standardizes authentication configuration when configuring users across all BeyondTrust products.

Privileged Remote Access connects to the Pathfinder Platform using OpenID Connect (OIDC), which is automatically set up during the provisioning of your Pathfinder tenant.

As a result, all configuration of local and SAML users is managed at the Pathfinder Platform level, not within individual instances of the Privileged Remote Access (PRA) product.

SAML users and groups defined in Pathfinder are exposed within the Admin interface of PRA, where user and groups can be used for individual assignments or group policy configurations.

> 🚧 Important information
> 
> This explains why you cannot add or view security providers on the **Security providers** page in Privileged Remote Access on Pathfinder.
> 
> In Remote Support, you do have the ability to add **SAML for Public Portals**.

</Accordion>

## The Security Providers page

[block:image]
{
  "images": [
    {
      "image": [
        "https://files.readme.io/5cebc7df461fb7ebf91be5e3fa2b1d91b6a3f54df5b4fdea9483b7586df70eab-pf-users-security-providers.png",
        "",
        "An image of BeyondTrust Privileged Remote Access interface showing the 'Users & Security' page with the 'Security Providers' tab selected. The page includes sections for Security Providers and OIDC Providers. Under OIDC Providers, an entry labeled 'BeyondTrust-Pathfinder' is listed, providing user authentication, user provisioning, and group lookup. Its status is marked as 'Available,' with icons for editing and additional options next to the status. The top bar includes a menu icon, the label 'Privileged Remote Access,' and a tenant dropdown labeled 'your-tenant'."
      ],
      "align": "center",
      "border": true
    }
  ]
}
[/block]

1. **Left menu:** Easy access to all pages in Privilege Remote Access, including [Status](https://docs.beyondtrust.com/pra/docs/status-pathfinder), [Consoles & Downloads](https://docs.beyondtrust.com/pra/docs/pf-consoles-and-downloads), [My Account](https://docs.beyondtrust.com/pra/docs/pf-my-account), [Configuration](https://docs.beyondtrust.com/pra/docs/pf-configuration), [Asset Management](https://docs.beyondtrust.com/pra/docs/pf-jump-clients), [Vault](https://docs.beyondtrust.com/pra/docs/pf-vault), [Console Settings](https://docs.beyondtrust.com/pra/docs/pf-consoles-settings), [Users & Security](https://docs.beyondtrust.com/pra/docs/pf-users-and-security), [Reports](https://docs.beyondtrust.com/pra/docs/pf-reports), [Management](https://docs.beyondtrust.com/pra/docs/pf-management), and [Appliance](https://docs.beyondtrust.com/pra/docs/pf-appliance) pages.

2. **Status:** Opens the [Status](https://docs.beyondtrust.com/pra/docs/pf-site-status) page.

3. **Header:** Change your tenant site, manage your profile, and access documentation.

4. **Security Providers:** A list of security providers is located on the **Administration > Identity & Authentication Providers** page.

5. **OIDC Provider:** A list of OIDC providers.

6. **Security Providers list options**:  [Edit a OIDC Security Provider](#edit-a-service-provider).

## How to manage security providers

Security providers are configured in the **Administration** tenant in Pathfinder. To add, edit, or delete a security provider, see [Identity providers](https://docs.beyondtrust.com/pra/docs/identity-providers#add-identity-provider).

## Edit an OIDC provider

1. From the **Security Providers** page, locate the provider from the **OIDC Provider** section.

2. To edit the provider, click ![Image of the Edit icon.](https://files.readme.io/193a08aebef194888cd5700d3b76e6af43744364ca6802117abc6bd56eebb1fe-pencil.png).

3. Make the necessary changes, then click **Save**.

[block:image]{"images":[{"image":["https://files.readme.io/030f48e319253fd1a04c5144d09f5e3e78a47c9c07a984dd74da434e35d3541f-PF_editprovider.png","","Image of the Users & Security: Security Providers > Edit Security Provider page."],"align":"center","border":true}]}[/block]

## To view the security provider log

1. From the **Security Providers** page, locate the provider from the **OIDC Provider** section.
2. Click ![Image of the More Actions Menu icon.](https://files.readme.io/773f022c796bf96dceed7e6b529993f939b0ed61e5639aeb618b2c7b5c2231bf-ellipses.png) **> View Log**.