Simple Authentication and Security Layer (SASL) Mechanisms

Last Updated

• 2024-12-06

Note

The Simple Authentication and Security Layer (SASL) RFC 4422 is a method for adding authentication support to connection-based protocols. To use this specification, a protocol includes a command for identifying and authenticating a user to a server and for optionally negotiating a security layer for subsequent protocol interactions. The command has a required argument identifying a SASL mechanism.

SASL mechanisms are named by strings, from 1 to 20 characters in length, consisting of upper-case letters, digits, hyphens, and/or underscores. SASL mechanism names must be registered with the IANA. Procedures for registering new SASL mechanisms are described in RFC 4422.

SASL mechanism names starting with "GS2-" are reserved for SASL mechanisms which conform to RFC 5801.

Registration procedures for SASL mechanism names starting with "SCRAM-" are defined in RFC 7677.

Available Formats

• XML
• HTML
• TXT

SASL Mechanisms

Registration Procedure(s)

• First Come First Served for mechanisms. Expert Review with mailing list for family name registrations. For names beginning with "GS2-", see RFC 5801. For names beginning with "SCRAM-", see RFC 7677.

Expert(s)

• Simon Josefsson

Reference

• RFC 4422: Simple Authentication and Security Layer (SASL)

Note

SASL mechanisms are named by character strings from 1 to 20 characters in length, consisting of ASCII uppercase letters, digits, hyphens, and/or underscores.

Available Formats

• CSV

SASL SCRAM Family Mechanisms

Registration Procedure(s)

• IETF Review with mailing list

Reference

• RFC 7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms

Available Formats

• CSV