> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Log in to StreamNative Console

StreamNative Console is a web-based GUI management and monitoring tool that helps Pulsar users manage tenants, namespaces, topics, subscriptions, and so on.

After [deploying StreamNative Platform](/private-cloud/v1/operating-streamnative-platform/deploy/sn-deploy) and a [Pulsar cluster](/private-cloud/v1/operating-streamnative-platform/deploy/sn-deploy#deploy-pulsar-clusters), you can log in to StreamNative Console to manage and monitor Pulsar resources.

This document guides you through logging in to StreamNative Console in any of the following situations:

* Authentication is disabled.
* Only vault-based authentication is enabled.
* Only OAuth2 authentication is enabled. StreamNative Platform supports the following OAuth2 authentication providers. You can configure one or more kinds of them.
  * Google OAuth2 authentication
  * Azure AD OAuth2 authentication
  * Okta OAuth2 authentication
* Only JWT authentication is enabled.

<Note title="Note">
  In the following examples, the (`release name`) refers to the Helm chart release when you use the `sn-platform` Helm chart.
</Note>

## Login for no authentication

By default, when authentication is disabled, an arbitrary username (`admin`) and an arbitrary password (`apachepulsar`) are initialized for StreamNative Console. You can use the initialized username and password to log in to StreamNative Console.

1. Execute the following command to expose the StreamNative Console service to a localhost address.

   ```bash theme={null}
   kubectl port-forward <release_name>-pulsar-streamnative-console-0 9527:9527 -n <k8s_namespace>
   ```

2. Visit the StreamNative Console at `http://localhost:9527`.

3. Enter the username and the password. Then, click **Login** to log in to StreamNative Console.

   <img src="https://mintcdn.com/streamnative/tIZ04bis3aV5g7je/media/log-in-console.png?fit=max&auto=format&n=tIZ04bis3aV5g7je&q=85&s=e47d840c0a69fc91ff908314aabcbc54" alt="screenshot of StreamNative Console login window" width="2734" height="1168" data-path="media/log-in-console.png" />

## Login for vault-based authentication

When only vault-based authentication is enabled, you can log in to StreamNative Console using a username and a password. By default, an `admin` user is created for StreamNative Console. You can also configure a specific user and password. For details, see [customize usernames and passwords](/private-cloud/v1/streamnative-console/streamnative-console#customize-the-username-and-password).

<Note title="Note">
  For security reasons, it is recommended to execute the following command to automatically generate the password.

  ```bash theme={null}
  kubectl get secret <release_name>-sn-platform-vault-console-admin-passwd -o=jsonpath='{.data.password}' -n <k8s_namespace> | base64 --decode; echo
  ```
</Note>

1. Execute the following command to expose the StreamNative Console service to a localhost address.

   ```bash theme={null}
   kubectl port-forward <release_name>-pulsar-streamnative-console-0 9527:9527 -n <k8s_namespace>
   ```

2. Visit the StreamNative Console at `http://localhost:9527`.

3. Enter the username and the password. Then, click **Login** to log in to StreamNative Console.

   <img src="https://mintcdn.com/streamnative/tIZ04bis3aV5g7je/media/log-in-console.png?fit=max&auto=format&n=tIZ04bis3aV5g7je&q=85&s=e47d840c0a69fc91ff908314aabcbc54" alt="screenshot of StreamNative Console login window" width="2734" height="1168" data-path="media/log-in-console.png" />

## Login for OAuth2 authentication

This section describes how to log in to StreamNative Console when OAuth2 authentication is enabled.

### Login for Google OAuth2 authentication

This section describes how to log in to StreamNative Console using a Google account.

#### Prerequisites

<span id="login-google-prereq" />

To log in to StreamNative Console using a Google account, you need to enable Google OAuth2 login and configure related parameters. For details, see [configure login methods](/private-cloud/v1/streamnative-console/streamnative-console#configure-login-methods).

#### Steps

<span id="login-google-steps" />

To log in to StreamNative Console using a Google account, follow these steps.

1. Execute the following command to expose the StreamNative Console service to a localhost address.

   ```bash theme={null}
   kubectl port-forward <release_name>-pulsar-streamnative-console-0 9527:9527 -n <k8s_namespace>
   ```

2. Visit the StreamNative Console at `http://localhost:9527`.

3. Click **Sign in with Google**.

   <img src="https://mintcdn.com/streamnative/pWNa1MQhJLhzkRwZ/media/google-login.png?fit=max&auto=format&n=pWNa1MQhJLhzkRwZ&q=85&s=768086e7043e3693f820f6e34fd518a6" alt="screenshot of StreamNative Console login using a Google account" width="2730" height="1284" data-path="media/google-login.png" />

4. Enter your email and then click **Next**.

5. Enter your password and then click **Next**.

6. (Optional) If Two-Factor Authentication (2FA) is enabled, enter the verification code and then click **Next**.

   <img src="https://mintcdn.com/streamnative/URPLmIWqdNJY7HIj/media/verification-code.png?fit=max&auto=format&n=URPLmIWqdNJY7HIj&q=85&s=938437797fa3b765a1e573f6e3cf5729" alt="screenshot of Two-Factor Authentication" width="409" height="512" data-path="media/verification-code.png" />

### Login for Azure AD OAuth2 authentication

This section describes how to log in to StreamNative Console using a Microsoft account.

#### Prerequisites

<span id="install-azuread-prereq" />

To log in to StreamNative Console using a Microsoft account, you need to enable Azure OAuth2 login and configure related parameters. For details, see [configure login methods](/private-cloud/v1/streamnative-console/streamnative-console#configure-login-methods).

#### Steps

<span id="install-azuread-steps" />

To log in to StreamNative Console using a Microsoft account, follow these s teps.

1. Execute the following command to expose the StreamNative Console service to a localhost address.

   ```bash theme={null}
   kubectl port-forward <release_name>-pulsar-streamnative-console-0 9527:9527 -n <k8s_namespace>
   ```

2. Visit the StreamNative Console at `http://localhost:9527`.

3. Click **Sign in with Microsoft**.

   <img src="https://mintcdn.com/streamnative/tIZ04bis3aV5g7je/media/microsoft-login.png?fit=max&auto=format&n=tIZ04bis3aV5g7je&q=85&s=1961e8d603808a2462fff06df4e226cd" alt="screenshot of StreamNative Console login using a Microsoft account" width="2710" height="1306" data-path="media/microsoft-login.png" />

4. Enter your email and then click **Next**.

5. Enter your password and then click **Sign in**.

### Login for Okta OAuth2 authentication

This section describes how to log in to StreamNative Console using Okta.

#### Prerequisites

<span id="login-okta-prereq" />

To log in to StreamNative Console using Okta, you need to enable Okta login and configure related parameters. For details, see [configure login methods](/private-cloud/v1/streamnative-console/streamnative-console#configure-login-methods).

#### Steps

<span id="login-okta-steps" />

To log in to StreamNative Console using Okta，follow these steps.

1. Execute the following command to expose the StreamNative Console service to a localhost address.

   ```bash theme={null}
   kubectl port-forward <release_name>-pulsar-streamnative-console-0 9527:9527 -n <k8s_namespace>
   ```

2. Visit the StreamNative Console at `http://localhost:9527`.

3. Click **Sign in with OKTA**.

   <img src="https://mintcdn.com/streamnative/DYzjgCK90kxVTpdd/media/okta-login.png?fit=max&auto=format&n=DYzjgCK90kxVTpdd&q=85&s=9d1164ccabc4dbede49d62f353432705" alt="screenshot of StreamNative Console login using OKTA" width="2852" height="1374" data-path="media/okta-login.png" />

4. Enter your username and password.

5. Click **Sign in**.

## Login for JWT authentication

This section describes how to log in to StreamNative Console when JWT authentication is enabled.

### Prerequisites

<span id="login-jwt-prereq" />

* Prepare a running Pulsar cluster with JWT authentication enabled. For details about how to enable JWT authentication, see [configure JWT authentication](/private-cloud/v1/operating-streamnative-platform/security/jwt-auth).
* Enable JWT login and configure related parameters. For details, see [configure login methods](/private-cloud/v1/streamnative-console/streamnative-console#configure-login-methods).

### Steps

<span id="login-jwt-steps" />

To log in to StreamNative Console using a JWT token, follow these steps.

1. Execute the following command to expose the StreamNative Console service to a localhost address.

   ```bash theme={null}
   kubectl port-forward <release_name>-pulsar-streamnative-console-0 9527:9527 -n <k8s_namespace>
   ```

2. Visit the StreamNative Console at `http://localhost:9527`.

3. Click **Sign in with JWT**.

   <img src="https://mintcdn.com/streamnative/tIZ04bis3aV5g7je/media/jwt-login.png?fit=max&auto=format&n=tIZ04bis3aV5g7je&q=85&s=8f8036e477fcb3c3bcabd306675bd413" alt="screenshot of StreamNative Console login using a JWT token" width="3298" height="1034" data-path="media/jwt-login.png" />

4. Enter your token and then click **Login**.

## Related topics

After logging into StreamNative Console, you can manage the following resources:

* [Service accounts](/private-cloud/v1/streamnative-console/service-account)
* [Users](/private-cloud/v1/streamnative-console/user)
* [Tenants](/cloud/manage-data-streams/tenant)
* [Namespaces](/cloud/manage-data-streams/namespace)
* [Topics](/cloud/manage-data-streams/topic)