Configuring user authentication in PEM v10.3
PEM user authentication is delegated to the Postgres backend server. To be able to login to PEM with a given username, there must exist a Postgres user of that name in the backend.
Users must have the pem_user role and be permitted by pg_hba.conf to connect to the pem database from the web application host.
For more on PEM user roles see Managing PEM Authentication.
By default, PEM requires users to authenticate using a password. You can optionally enforce 2FA, or enable passwordless authentication using Kerberos.