CloudShell Identity Management

Users can be created within CloudShell, or imported from an active directory or LDAP server. In addition, CloudShell allows integration with an SSO solution to allow your users to access CloudShell from your company's home page.

CloudShell user permissions are determined by the role (e.g. domain admin, regular user) assigned to the user's group, while access to the system's existing blueprints, sandboxes, resources and Apps is provided through the user's domain. Groups are associated to domains, thereby providing domain access to the group's users. A user can be associated to multiple groups, each with a different role and associated to a different domain, essentially enabling the same user, for example, to log in as a regular user in "Domain A" and as a domain admin in "Domain B".

Note: Additional permissions like creating CloudShell blueprints and extending external user permissions require the use of configuration keys.

• CloudShell Identity Management
  • CloudShell Identity Management Overview
• CloudShell Users and Groups
  • CloudShell Users and Groups Overview
  • Managing CloudShell Users
  • Updating User Settings
  • Managing CloudShell Groups
• CloudShell Domains
  • Optimized Resource Utilization Using Domains
  • Domains Window
  • Adding Domains
  • Adding/Removing Resources from a Domain
  • Adding/Removing Domain Blueprints
  • Archiving and Restoring Domains
• Managing CloudShell Permissions
  • CloudShell User Permission Levels (RBAC)
• Access Control and Authentication
  • Active Directory Integration
    • Configure CloudShell to Automatically Import Active Directory Users on First Login
    • Importing users into CloudShell from an active directory
  • Single Sign-On (SSO) Configuration
    • Configuring Single Sign-On (SSO)
      • SSO Tester
    • Configuring Single Logout (SLO)
  • JSON Web Token (JWT) Configuration
  • LDAP Integration