FarCry has its own in-built, roles based security model that is leveraged by the framework, and custom applications.

As of FarCry 5.0, a user directory can be defined outside the core as a plugin. While the basic FarCry user directory (where users and groups are stored in the application database) is still embedded in the core, LDAP and Active Directory, Janrain Engage, External (XUD) user directory and others are available as user directory plugins.