diff --git a/apps/emqx_authentication/include/emqx_authentication.hrl b/apps/emqx_authentication/include/emqx_authentication.hrl
index 09d3c5fc4..814c03eb4 100644
--- a/apps/emqx_authentication/include/emqx_authentication.hrl
+++ b/apps/emqx_authentication/include/emqx_authentication.hrl
@@ -39,3 +39,5 @@
         , services :: [{service_name(), #service{}}]
         , created_at :: integer()
         }).
+
+-define(AUTH_SHARD, emqx_authentication_shard).
diff --git a/apps/emqx_authentication/src/emqx_authentication.erl b/apps/emqx_authentication/src/emqx_authentication.erl
index ab7b8537c..a3d0241c0 100644
--- a/apps/emqx_authentication/src/emqx_authentication.erl
+++ b/apps/emqx_authentication/src/emqx_authentication.erl
@@ -56,6 +56,9 @@
 -define(CHAIN_TAB, emqx_authentication_chain).
 -define(SERVICE_TYPE_TAB, emqx_authentication_service_type).
 
+-rlog_shard({?AUTH_SHARD, ?CHAIN_TAB}).
+-rlog_shard({?AUTH_SHARD, ?SERVICE_TYPE_TAB}).
+
 %%------------------------------------------------------------------------------
 %% Mnesia bootstrap
 %%------------------------------------------------------------------------------
@@ -370,7 +373,7 @@ validate_other_service_params([#{type := Type, params := Params} = ServiceParams
         {error, not_found} ->
             {error, {not_found, {service_type, Type}}}
     end.
-    
+
 no_duplicate_names(Names) ->
     no_duplicate_names(Names, #{}).
 
@@ -423,7 +426,7 @@ extract_services([ServiceName | More], Services, Acc) ->
         false ->
             {error, {not_found, {service, ServiceName}}}
     end.
-    
+
 move_service_to_the_front_(ServiceName, Services) ->
     move_service_to_the_front_(ServiceName, Services, []).
 
@@ -513,7 +516,7 @@ trans(Fun) ->
     trans(Fun, []).
 
 trans(Fun, Args) ->
-    case mnesia:transaction(Fun, Args) of
+    case ekka_mnesia:transaction(?AUTH_SHARD, Fun, Args) of
         {atomic, Res} -> Res;
         {aborted, Reason} -> {error, Reason}
     end.
diff --git a/apps/emqx_authentication/src/emqx_authentication_app.erl b/apps/emqx_authentication/src/emqx_authentication_app.erl
index 2d395def7..3bea3c3d6 100644
--- a/apps/emqx_authentication/src/emqx_authentication_app.erl
+++ b/apps/emqx_authentication/src/emqx_authentication_app.erl
@@ -20,6 +20,8 @@
 
 -emqx_plugin(?MODULE).
 
+-include("emqx_authentication.hrl").
+
 %% Application callbacks
 -export([ start/2
         , stop/1
@@ -27,6 +29,7 @@
 
 start(_StartType, _StartArgs) ->
     {ok, Sup} = emqx_authentication_sup:start_link(),
+    ok = ekka_rlog:wait_for_shards([?AUTH_SHARD], infinity),
     ok = emqx_authentication:register_service_types(),
     {ok, Sup}.
 
diff --git a/apps/emqx_authentication/src/emqx_authentication_mnesia.erl b/apps/emqx_authentication/src/emqx_authentication_mnesia.erl
index 53dc4dd73..09307e38f 100644
--- a/apps/emqx_authentication/src/emqx_authentication_mnesia.erl
+++ b/apps/emqx_authentication/src/emqx_authentication_mnesia.erl
@@ -51,7 +51,7 @@
         salt_rounds => #{
             order => 3,
             type => number,
-            default => 10 
+            default => 10
         }
     }
 }).
@@ -72,6 +72,8 @@
 
 -define(TAB, mnesia_basic_auth).
 
+-rlog_shard({?AUTH_SHARD, ?TAB}).
+
 %%------------------------------------------------------------------------------
 %% Mnesia bootstrap
 %%------------------------------------------------------------------------------
@@ -231,7 +233,7 @@ import(UserGroup, [#{<<"user_id">> := UserID,
 import(_UserGroup, [_ | _More]) ->
     {error, bad_format}.
 
-%% Importing 5w users needs 1.7 seconds 
+%% Importing 5w users needs 1.7 seconds
 import(UserGroup, File, Seq) ->
     case file:read_line(File) of
         {ok, Line} ->
@@ -330,7 +332,7 @@ trans(Fun) ->
     trans(Fun, []).
 
 trans(Fun, Args) ->
-    case mnesia:transaction(Fun, Args) of
+    case ekka_mnesia:transaction(?AUTH_SHARD, Fun, Args) of
         {atomic, Res} -> Res;
         {aborted, Reason} -> {error, Reason}
     end.
diff --git a/apps/emqx_authentication/test/emqx_authentication_SUITE.erl b/apps/emqx_authentication/test/emqx_authentication_SUITE.erl
index d110d940a..d9f9ace8b 100644
--- a/apps/emqx_authentication/test/emqx_authentication_SUITE.erl
+++ b/apps/emqx_authentication/test/emqx_authentication_SUITE.erl
@@ -28,6 +28,7 @@ all() ->
     emqx_ct:all(?MODULE).
 
 init_per_suite(Config) ->
+    application:set_env(ekka, strict_mode, true),
     emqx_ct_helpers:start_apps([emqx_authentication]),
     Config.
 
@@ -40,7 +41,7 @@ t_chain(_) ->
     ?assertMatch({ok, #{id := ChainID, services := []}}, ?AUTH:create_chain(#{id => ChainID})),
     ?assertEqual({error, {already_exists, {chain, ChainID}}}, ?AUTH:create_chain(#{id => ChainID})),
     ?assertMatch({ok, #{id := ChainID, services := []}}, ?AUTH:lookup_chain(ChainID)),
-    ?assertEqual(ok, ?AUTH:delete_chain(ChainID)),
+    ?assertEqual(ok, ?AUTH:delete_chain(ChainID)),
     ?assertMatch({error, {not_found, {chain, ChainID}}}, ?AUTH:lookup_chain(ChainID)),
     ok.
 
@@ -186,6 +187,3 @@ t_multi_mnesia_service(_) ->
     ?assertEqual(ok, ?AUTH:authenticate(ClientInfo2)),
     ?assertEqual(ok, ?AUTH:delete_chain(ChainID)),
     ok.
-
-
-