Security

All aspects of securing Stroom and the content within it. Includes application security, user and group accounts and the permissions model.

There are many aspects of security that should be considered when installing and running Stroom.

Authentication against other systems.

User accounts for authentication when using Stroom’s internal identity provider.

What happens when a user signs in to Stroom, how passwords are reset and how a locked account is recovered.

Viewing and ending user sessions, and revoking the tokens held by a user.

The keys Stroom’s internal identity provider uses to sign tokens, and how to withdraw one that may have been exposed.

The Stroom user and group entities that can be granted application and document permissions.

Assigning application level permissions (such as ‘Manage Users’) to users or groups.

Assigning document level permissions (such as ‘View’) to users or groups.

Last modified August 14, 2026: fix build (307b3f0)