Authentication Strategies

TLS/SSL must be enabled before NiFi can support any form of user authentication.

Get Client Certificates for Authentication
After you install NiFi CA, you can use the NiFi Toolkit to generate a client certificate for users you wish to authenticate. You can do this with NiFi Toolkit binaries running locally or located on agent machines where CFM is installed.
Configure Kerberos Authentication
Both NiFi and NiFi Registry support authentication supported by Kerberos/Spnego.
Configure LDAP Authentication