# Authenticate user - REST API

**URL:** https://forum.flowable.org/t/authenticate-user-rest-api/2307
**Category:** Flowable Engine
**Created:** [July 31, 2018, 1:03pm UTC](https://forum.flowable.org/t/authenticate-user-rest-api/2307 "2018-07-31T13:03:17Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![wirob](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/wirob/32/856_2.png) [@wirob](https://forum.flowable.org/u/wirob)
#### Post date: [July 31, 2018, 1:03pm UTC](https://forum.flowable.org/t/authenticate-user-rest-api/2307/1 "2018-07-31T13:03:17Z")

</div>

Hi,

My idea is to use Flowable IDM to manage groups and privileges, everyone should be able to create an account and login, but the admin/manager will add the privileges to those who’ll need it.

My question is rather simple:  
How do I authenticate that the user has supplied the right password/username upon login, using only the REST API?

After some research I found out that there is an authenticate method for the Java application(?) but is there a similar one for the REST API?

Thanks,  
Wirob

---

<div class="post-metadata">

### Author: ![filiphr](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/filiphr/32/315_2.png) [@filiphr](https://forum.flowable.org/u/filiphr)
#### Post date: [August 6, 2018, 6:01am UTC](https://forum.flowable.org/t/authenticate-user-rest-api/2307/2 "2018-08-06T06:01:15Z")

</div>

Hey Wirob,

Checking if a password if valid or not is not exposed over the REST API. If you need something like that then I would suggest that you create your own REST API that would invoke the appropriate Java API from Flowable.

Cheers,  
Filip