anchor.diff:  link:../architecture/additional_concepts/authentication.html#api-authentication[OAuth
   access tokens] to authenticate themselves to the API.
   
  -As an administrator, you can configure OAuth using a
  +As an administrator, you can configure OAuth using the
   link:../install_config/master_node_configuration.html[master configuration file] to specify an
   link:#identity-providers[identity provider]. If you installed OpenShift using
   the
  
positive.code: present on the request. Clients that expect to receive Basic `WWW-Authenticate`
  challenges should set this header to a non-empty value.
  
  .^|`login`     | When *true*, unauthenticated token requests from web clients
  (like the web console) are redirected to a login page backed by this provider.
  Not supported by all identity providers.
  |===
  
  [[AllowAllPasswordIdentityProvider]]
  
negative.code: [[identity-providers]]
  
  == Identity Providers
  You can configure the master host for authentication using your desired identity
  provider by modifying the
  link:../install_config/master_node_configuration.html[master configuration
  file]. The following sections detail the identity providers supported by
  OpenShift.
  
  There are three parameters common to all identity providers:
  
  [cols="2a,8a",options="header"]
  |===
  |Parameter     | Description
  |`name`      | The provider name is prefixed to provider user names to form an
  identity name.
  |`challenge` | When *true*, unauthenticated token requests from non-web
  clients (like the CLI) are sent a `WWW-Authenticate` challenge header. Not
  supported by all identity providers.
  
  