---
title: Configuring ASE native authentication
description: By default, ASE uses native ASE authentication which ships with the system. Each user can run CLI commands by including the shared username and password with each command. The system ships with a default username (admin) and password (admin).
component: pingintelligence
version: 5.2
page_id: pingintelligence:pingintelligence_reference_guide:pingintelligence_configuring_ase_native_authentication
canonical_url: https://docs.pingidentity.com/pingintelligence/5.2/pingintelligence_reference_guide/pingintelligence_configuring_ase_native_authentication.html
revdate: April 3, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
  example: Example:
---

# Configuring ASE native authentication

## About this task

By default, ASE uses native ASE authentication which ships with the system. Each user can run CLI commands by including the shared username and password with each command. The system ships with a default username (`admin`) and password (`admin`).

|   |                                                                                                                               |
| - | ----------------------------------------------------------------------------------------------------------------------------- |
|   | Always change the default password using the `update_password` command. For more information on ASE commands, see Appendix A. |

## Steps

* To configure `ase.conf` to support native authentication, use the default configuration values:

  ```
  auth_method=ase::db
  ```

* To change the authentication from native authentication to PAM mode, enter the following command in ASE command line:

  |   |                                                                  |
  | - | ---------------------------------------------------------------- |
  |   | In the example, `login` is a PAM script used for authentication. |

  ```
  /opt/pingidentity/ase/bin/cli.sh update_auth_method pam::login -u admin -p
   <password>
  ```

* To switch from PAM mode authentication back to native authentication, issue the following CLI command:

  ```
  /opt/pingidentity/ase/bin/cli.sh update_auth_method ase::db -u  <pam_user>  -p
   <password>
  ```

  ### Example:

  The following is an example of a CLI command with native authentication (-u,-p) enabled:

  ```
  /opt/pingidentity/ase/bin/cli.sh add_server -u admin -p
   <password>
  ```
