Security in MongoDB deployments
Security in MongoDB deployments is essential for ensuring the integrity and confidentiality of your data. By securing your application, data, and deployment, you can safeguard your entire system against potential threats.
This section explores various security methods available for protecting your self-managed MongoDB deployment. We’ll cover MongoDB 8.0’s deprecation of Lightweight Directory Access Protocol (LDAP) support and how to transition to Microsoft OpenID Connect (OIDC) for more modern, efficient external authentication.
Additionally, we’ll discuss Kerberos authentication, creating custom user roles, and strengthening your deployment with network hardening. These methods can be used together to enhance the security of your database from multiple angles.
LDAP deprecation
MongoDB Enterprise Advanced provided support for both authentication and authorization using LDAP. As mentioned earlier in this chapter...