# Overview of authentication options

> Understand the different authentication options Fern offers

Fern supports three ways to restrict access to your documentation:

* **RBAC** — Control which content different users can see. Supports [API key injection](/learn/docs/authentication/api-key-injection) via JWT or OAuth. Recommended for most use cases.
* **SSO** — Require login without role management. Good for internal docs where all users see the same content.
* **Password protection** — A single shared password for the entire site. Good for pre-release docs or basic access restriction.

<Note>
  Learn how Fern handles user credentials and authentication in the [Security overview](/learn/docs/security/overview).
</Note>

Learn more about Fern's authentication options:

<CardGroup cols={2}>
  <Card title="Role-based access control" icon="fa-duotone fa-people-group" href="/learn/docs/authentication/rbac">
    Granular access for different audiences
  </Card>

  <Card title="API key injection" icon="fa-duotone fa-key" href="/learn/docs/authentication/api-key-injection">
    JWT or OAuth flows available
  </Card>

  <Card title="SSO" icon="fa-duotone fa-user-check" href="/learn/docs/authentication/sso">
    Basic functionality and simple setup
  </Card>

  <Card title="Password protection" icon="fa-duotone fa-lock" href="/learn/docs/authentication/password-protection">
    Shared password for simple access control
  </Card>
</CardGroup>