It's not unusual to request authentication when you are creating business applications. The Composer REST server provides the means to connect to many authentication and authorization providers, using Passport middleware. While the project claims that Passport has over 300 strategies for authentication and authorization, our experience has shown that not all of these work out of the box; sometimes, you have to create custom code in order to make them work. We have, however, successfully implemented Google, GitHub, Auth0, and LDAP authentication strategies out of the box.

Multiuser mode allows the use of a single Composer REST server for multiple participants, instead of deploying a distinct Composer REST server for each participant. In this mode, the API is retrieved using a master business card, but the interaction with the business network is done using its own business card. This mode requires user authentication to be enabled.