User management<\/h1>

Easy account management, from 5 to 50 million users<\/p>\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t<\/div>\r\n<\/div>\r\n<\/section>\n\n

\n\t

\n\t\t

\n\t\t\t

\n\t\t\t\t

\n\t\t\t\t\t

Integrated account management<\/h1>\n

Nextcloud features integration with external user directories like LDAP, Active Directory or others as well as built-in account management, two-factor authentication and Single-sign-on support.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/section>\n\n

\r\n\t

\r\n\t\t

<\/div><\/div><\/div><\/div>

Easy user management<\/h3>

<\/div><\/div><\/div><\/div>

Admins can create, modify, search and view user accounts using Nextcloud built-in user management. Name, disk quota, mail addresses and group membership can be handled and users can be given administrator privileges if needed.<\/p>\n

If you need to integrate Nextcloud with an existing system, take advantage of support for one or more LDAP directories instead of or in addition to local users. Nextcloud can secure logins with two-factor authentication and supports single sign-on through SAML, OAuth2, Kerberos and others.<\/p>\n

For large-scale solutions, performance optimization, additional tools and advice, see the Nextcloud customer portal.<\/p>\n<\/div><\/div><\/div>

<\/div><\/div><\/div><\/div>

Group admins<\/h3>

<\/div><\/div><\/div><\/div>

The administrator can delegate some work by elevating some accounts to group administrator over specified groups. This allows them to create new users as members of these groups as well as delete and modify them.<\/p>\n

When enabled, group admins can also create 2-factor one-time login codes and do other administrative tasks like manage ACLs on Groupfolders.<\/p>\n<\/div><\/div><\/div>

<\/div><\/div><\/div><\/div>

Guest accounts<\/h3>

<\/div><\/div><\/div><\/div>

The guest accounts app enables users to create guest accounts for recipients. The administrator can determine what access rights these users need to have to external storage and apps.<\/p>\n

As guests have a special (hidden) group, administrators can use the Workflow and File Access Control capabilities to restrict, for example, users from downloading or sharing data. In Virtual Dataroom scenarios guest accounts can be given access to data read-only or with editing rights while blocking downloads and watermarking all files. Documents can shared with them through the Secure Mailbox feature from the Nextcloud Outlook Add-in which prevents the mail body and attachments from leaking.<\/p>\n

Upon creation, users can designate a group to a guest account.<\/p>\nWorkflow and file access control<\/a><\/div><\/div><\/div>

<\/div><\/div><\/div><\/div>

Password security enforcement<\/h3>

<\/div><\/div><\/div><\/div>

Password security is extremely important and Nextcloud follows the latest and most strict standards.<\/p>\n

We go beyond these standards, checking passwords against the database of compromised accounts and passwords from well known security researcher Troy Hunt. This optional but highly recommended feature ensures users can not reuse a password which has been compromised on another website already. Read our blog to learn how this feature protects your users.<\/p>\nBlog on HaveIBeenPwned<\/a><\/div><\/div><\/div>