# Control Center Security on Confluent Platform Configuring security for Control Center requires planning and needs to be done carefully. You can secure Control Center as a server, meaning you can require users to login when they access Control Center in their browser, and you can secure its communication with the browser. Because Control Center relies on Kafka Connect, Apache Kafka® brokers, Kafka Streams, interceptors, and metrics reporters to work properly, you can also secure Control Center as a proxy server to each of these components, if the component is secured. After you secure a Confluent Platform component, it can’t communicate with other non-secured components. For instance, if you have a secured Kafka broker and a secured Control Center, but you have not secured Connect, Control Center acts erratically when you attempt to use it. Be sure to secure all components in your environment. ## Version support - Control Center supports TLS and HTTP Basic authentication with Confluent Platform 7.5.x and later. - Control Center supports mutual TLS (mTLS) authentication with Confluent Platform 7.9.1 and later. ## General security configuration - [Configure TLS for Control Center on Confluent Platform](ssl.md#controlcenter-security-ssl) - [Configure SASL for Control Center on Confluent Platform](sasl.md#controlcenter-security-sasl) - [Configure HTTP Basic Authentication with Control Center on Confluent Platform](authentication.md#ui-authentication) - [Configure Control Center with LDAP Authentication on Confluent Platform](c3-auth-ldap.md#controlcenter-security-ldap) - [Configure RBAC for Control Center on Confluent Platform](c3-rbac.md#controlcenter-security-rbac) - [Configure Control Center to work with Kafka ACLs on Confluent Platform](config-c3-for-kafka-acls.md#c3-auth-acls) - [TLS and HTTP Basic Authentication among Confluent Control Center Components](broker-to-alert.md#basic-auth-prometheus-altermanager) - [mTLS Authentication for Confluent Control Center Monitoring and Alerting](mtls-to-alert.md#mtls-auth-prometheus-altermanager) ## Manage and view RBAC roles - [Sign in to Control Center when RBAC enabled on Confluent Platform](c3-rbac-login.md#c3-rbac-login) - [Manage RBAC roles with Control Center on Confluent Platform](c3-rbac-manage-roles-ui.md#c3-rbac-manage-roles-ui) - [View your RBAC roles in Control Center on Confluent Platform](c3-rbac-view-roles-ui.md#c3-rbac-view-roles-ui) ## SSO for Control Center - [Overview](/platform/current/security/authentication/sso-for-c3/overview.html) - [Configure OIDC SSO for Confluent Control Center](/platform/current/security/authentication/sso-for-c3/configure-sso-using-oidc.html) - [Configure OIDC SSO for Confluent CLI](/platform/current/security/authentication/sso-for-c3/configure-sso-for-cli.html) - [Automate SSO configuration with Confluent Ansible or Confluent for Kubernetes](/platform/current/security/authentication/sso-for-c3/overview.html#configuration-methods) - [Troubleshoot](/platform/current/security/authentication/sso-for-c3/troubleshoot.html) ## Related content - [Manage Security in Confluent Platform](/platform/current/security/overview.html) - [Authenticate in Confluent Platform](/platform/current/security/authentication/overview.html) - [Authorization in Confluent Platform](/platform/current/security/authorization/overview.html) - [Data Protection in Confluent Platform](/platform/current/security/protect-data/overview.html) - [Secure Components in Confluent Platform](/platform/current/security/component/overview.html) - [Security Compliance in Confluent Platform](/platform/current/security/compliance/overview.html)