Read the new white paper "Authentication in Firebird" from IBPhoenix: Developments introduced in Firebird 3 provide many options for authenticating users attempting to attach to a database. No longer is authentication restricted to a single method: the methods available are determined by the plug-in authentication modules configured in the global and/or database config files.
Also, there are many interesting articles in Documentation area of IBPhoenix website.