--- description: "Learn about the authentication methods Fluid Attacks may use to securely access your repositories. Get links to the steps for using OAuth, SSH, and HTTPS." keywords: "repository authentication, add Git root, authenticate to Git repository, add repository using OAuth, add repository with SSH, add repo with HTTPS, Fluid Attacks platform, Fluid Attacks documentation" other: private: false title: Types of authentication used --- # Types of authentication used import { Table } from "nextra/components"; This section guides you through the different authentication methods available for [Fluid Attacks](https://fluidattacks.com/) to access your repositories: - [OAuth](https://help.fluidattacks.com/portal/en/kb/articles/types-of-authentication-used#OAuth) - [SSH](https://help.fluidattacks.com/portal/en/kb/articles/types-of-authentication-used#SSH) - [HTTPS](https://help.fluidattacks.com/portal/en/kb/articles/types-of-authentication-used#HTTPS) ## OAuth > [!NOTE] > > Available for Azure, Bitbucket, GitHub, and GitLab > [!TIP] > > Using the OAuth protocol is advised, as it is more secure and simple than the two alternatives. OAuth (Open Authorization) is an authorization protocol that allows users to grant applications limited access to their resources without directly sharing their credentials. Once authorized, the application receives an access token, which is a string representing the granted permissions. This token allows the application to access the specified resources for a certain period and within the defined scope of permissions, without ever needing the user's credentials. The following are some key benefits of OAuth: 1. **Enhanced security:** Users do not expose their credentials to third-party applications. 1. **Granular control:** Users can choose which resources to share and revoke access at any time. 1. **Improved user experience:** OAuth provides a simplified authorization process without the need for multiple logins. > [!TIP] > > Learn to use this option by reading [Import repositories fast and safely with OAuth](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-fast-and-safely-with-oauth). OAuth is supported for connections as follows: **[Cloud](https://help.fluidattacks.com/portal/en/kb/articles/cloud)** **[Egress IP](https://help.fluidattacks.com/portal/en/kb/articles/egress)** **[Connector](https://help.fluidattacks.com/portal/en/kb/articles/connector)** ✅ Only for SaaS Only for SaaS

## SSH SSH (Secure Shell) is a network protocol that provides a secure, encrypted connection to remote devices over the cloud. It is primarily used for remote login and command-line execution but also supports file transfer, port forwarding, and other secure network services. SSH connectivity is established through an authentication process that uses public and private key cryptography. The following are some key benefits of SSH: 1. **Strong authentication:** SSH typically employs public-key cryptography for authentication, where a user generates a pair of keys: a private key (kept secret) and a public key (shared with the server). This ensures that only someone with the private key can access the server. 1. **Encryption:** All communication over SSH is encrypted, protecting data from eavesdropping and tampering. 1. **Integrity:** SSH includes mechanisms to verify the integrity of transmitted data, ensuring that it has not been modified in transit. > [!TIP] > > Learn to use this option by reading [Add a root with an SSH key](https://help.fluidattacks.com/portal/en/kb/articles/manage-roots#Add_a_root_with_an_SSH_key). SSH is supported for connections as follows: **[Cloud](https://help.fluidattacks.com/portal/en/kb/articles/cloud)** **[Egress IP](https://help.fluidattacks.com/portal/en/kb/articles/egress)** **[Connector](https://help.fluidattacks.com/portal/en/kb/articles/connector)** ✅ ✅ ✅

## HTTPS HTTPS (Hypertext Transfer Protocol Secure) is an extension of the Hypertext Transfer Protocol (HTTP) that is used for secure communication over a computer network. HTTPS secures communications by encrypting the communication channel with Transport Layer Security (TLS), or formerly, its predecessor, Secure Sockets Layer (SSL). This encryption ensures that the information transferred between users and the repository is protected against possible threats, guaranteeing the data's confidentiality, integrity, and authenticity, maintaining a reliable and secure collaboration environment. The following are some key benefits of HTTPS: 1. **Data encryption:** HTTPS prevents eavesdropping and [man-in-the-middle attacks](https://fluidattacks.com/learn/what-is-man-in-the-middle-attack/). 1. **Data integrity:** HTTPS ensures that the data received has not been altered in transit. 1. **Website identity verification\*\***:\*\* HTTPS verifies the identity of the website, protecting against [phishing](https://fluidattacks.com/blog/phishing/) and other fraudulent activities. > [!TIP] > > Learn to use this option by reading [Add a root with user and password](https://help.fluidattacks.com/portal/en/kb/articles/manage-roots#Add_a_root_with_user_and_password). > [!TIP] > > **Note:** While Fluid Attacks also supports the HTTP protocol, using HTTPS is strongly recommended for secure connections and data protection. HTTPS is supported for connections as follows: **[Cloud](https://help.fluidattacks.com/portal/en/kb/articles/cloud)** **[Egress IP](https://help.fluidattacks.com/portal/en/kb/articles/egress)** **[Connector](https://help.fluidattacks.com/portal/en/kb/articles/connector)** ✅ ✅ ✅

> [!TIP] > > **Free trial** > Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your [21-day free trial](https://app.fluidattacks.com/SignUp) and discover the benefits of the [Continuous Hacking](https://fluidattacks.com/services/continuous-hacking/) [Essential plan](https://fluidattacks.com/plans/). If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out [this contact form](https://fluidattacks.com/contact-us/).