diff --git a/CHANGELOG.md b/CHANGELOG.md
index 88ac0b5297a401ebcc3edda414cce13d3142d3fd..81a411b7d7d13c765d062794c659b032984fe22b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
+* One-time Authentication Tokens for login without credentials and login with
+  particular permissions and roles for the course of the session.
 - `Entity/names` resource for retrieving all known entity names.
 - Scripting is simplified by adding a `home` directory, of which a copy is
   created for each called script and set as the `HOME` environment variable.
diff --git a/README_CONFIGURATION.md b/README_CONFIGURATION.md
index 55b47175762f15266e66bcca8d3b17143baaf578..27045eea4523c5009e246fe506ec6319965d8e9f 100644
--- a/README_CONFIGURATION.md
+++ b/README_CONFIGURATION.md
@@ -13,3 +13,9 @@ The default configuration can be overriden by
 
 in this order.
 
+# One-time Authentication Tokens
+
+One-time Authentication Tokens can be configure to be issued for special purposes (e.g. a call of a server-side script) or to be written to a file on a regular basis.
+
+An example of a configuration is located at `./conf/core/authtoken.example.yaml`.
+