---
title: "Authenticating users from JSS apps"
slug: "authenticating-users-from-jss-apps"
abstract: "Leverage Sitecore security and authentication capabilities in JSS applications"
---
# Authenticating users from JSS apps

The Sitecore security model allows you to restrict content access by users and roles, personalize user profiles, and more. It is built on top of ASP.NET Membership and utilizes the `.ASPXAUTH` cookie by default.

The [Sitecore Layout Service](https://doc.sitecore.com/xp/en/developers/hd/23/sitecore-headless-development/layout-service.html "Layout Service") respects any logged-in users and Sitecore security. You can therefore leverage Sitecore security and authentication capabilities in JSS applications.

To learn how to authenticate users in JSS, start by [creating a user and a protected page](https://doc.sitecore.com/xp/en/developers/hd/23/sitecore-headless-development/walkthrough--creating-a-user-and-page-for-testing-sitecore-authentication.html "Walkthrough: Creating a user and page for testing Sitecore authentication").

You can also [enable Sitecore-integrated federated authentication](https://doc.sitecore.com/xp/en/developers/hd/23/sitecore-headless-development/enable-sitecore-integrated-federated-authentication.html "Enable Sitecore-integrated federated authentication") (requires Sitecore development).