archive/netdata_netdata
0
0
Fork 0
mirror of https://github.com/netdata/netdata.git synced 2025-02-27 23:05:55 +00:00
Code Issues Projects Releases Wiki Activity
netdata_netdata/docs/netdata-cloud/authentication-and-authorization/enterprise-sso-authentication.md
Fotis Voutsas f65cbf718f
docs: edit Authentication and Authorization section (#19160) 
* update on authentication and authorization README

* update on enterprise SSO auth page

* rbac docs edit

* improve structure

---------

Co-authored-by: ilyam8 <ilya@netdata.cloud>
2024-12-09 10:23:50 +00:00

3 KiB
Raw Permalink Blame History

Enterprise SSO Authentication

Enterprise Single Sign-On (SSO) integration enables organizations to manage Netdata Cloud access through their existing identity management solution. This simplifies user authentication and improves security through centralized access control.

Important: Enterprise SSO handles authentication only. User and role management must be configured separately within Netdata Cloud.

Prerequisites

Requirement Details
SSO Provider Must be supported by Netdata
Account Status Active Netdata Cloud account
Subscription Business plan or higher
Access Level Space Administrator permissions

Setup

Netdata Cloud Configuration:

To configure SSO in your Netdata Cloud space:

  1. Navigate to Space Settings (gear icon above profile)
  2. Select User Management → Authentication & Authorization
  3. Locate your desired SSO integration
  4. Click "Configure" and fill in the required integration attributes

Domain Verification:

Domain verification is required to establish secure SSO connectivity:

  1. Access the DNS TXT record:
    • Go to Space Settings → User Management → Authentication & Authorization
    • Click "DNS TXT record" button to reveal verification code
  2. Add DNS Record:
    • Log into your domain provider's DNS management
    • Create a new TXT record with these specifications:
      Field Value
      Value/Answer/Description "netdata-verification=[VERIFICATION CODE]"
      Name/Host/Alias Leave blank or use @ for subdomain
      TTL (Time to Live) 86400 (or use provider default)

SSO Provider Configuration: Consult your provider's documentation for detailed instructions.

How to Authenticate

Click on the link Sign-in with an Enterprise Single Sign-On (SSO) and follow the instructions. If you're not authenticated on the Enterprise SSO tool, you'll be prompted to authenticate there first before being allowed to proceed to Netdata Cloud.