[id='property-realms_{context}']
= Property Realms
Property realms use property files to define users and groups.

`users.properties` maps usernames to passwords in plain-text format. Passwords
can also be pre-digested if you use the `DIGEST-MD5` SASL mechanism or `Digest`
HTTP mechanism.

[source,options="nowrap",subs=attributes+]
----
include::config_examples/server_users.properties[]
----

`groups.properties` maps users to roles.

[source,options="nowrap",subs=attributes+]
----
include::config_examples/server_groups.properties[]
----

.Endpoint authentication mechanisms

When you configure {brandname} Server to use a property realm, you can configure endpoints to use the following authentication mechanisms:

* Hot Rod (SASL): `PLAIN`, `+DIGEST-*+`, and `+SCRAM-*+`
* REST (HTTP): `Basic` and `Digest`

.Property realm configuration
[source,xml,options="nowrap",subs=attributes+]
----
include::config_examples/server_properties_realm.xml[]
----
