# OpenAM Administration Guide
2.2.5. Hints For the Core Authentication Module

Sidebar | Prev | Up | Next

#### 2.2.5.6. Core - Security

This section of the Core Authentication module includes basic security options.

Module Based Authentication

  Enables users to authenticate using module-based authentication. Otherwise, all attempts at authentication using the `module=`module-name`` login parameter result in failure. It is recommended that this be turned off in a production environment.

  ssoadm attribute: `sunEnableModuleBasedAuth`

Valid goto URL domains

  List external domains to which clients can be redirected after authentication. This attribute requires valid DNS domains that reflect the set policy rules, such as https://website.example.com/* or https://website.example.com/*?*.

  ssoadm attribute: `iplanet-am-auth-valid-goto-domains`

Zero Page Login

  Enables the administrator to allow users to authenticate to a single authentication screen using GET request parameters. Enable this with caution as it can allow credentials to be cached.

  ssoadm attribute: `openam.auth.zero.page.login.enabled`