tencent cloud

All product documents
Tencent Cloud Organization
DocumentationTencent Cloud OrganizationOperation GuideIdentity Center ManagementSettingsSSO LoginManage SSO
Manage SSO
Download PDF
Last updated: 2024-07-31 14:17:23
Manage SSO
Last updated: 2024-07-31 14:17:23
Download PDF

Overview

The TCO Identity Center supports SAML 2.0-based single sign-on (SSO). Tencent Cloud is a service provider (SP), and the enterprise's own identity management system is an identity provider (IdP). Through SSO, enterprise employees can use users in the IdP to directly log in to the Identity Center.

Directions

Enabling SSO

1. Log in to the TCO > Identity Center Management > Settings > SSO page. After enabling SSO, you can configure identity provider information.
Note:
Currently, only SSO is supported, and username and password login is not supported.
2. In the SSO Login area, turn on the SSO switch.



3. In the Enable SSO Login dialog box, click Enabled.



Managing Service Provider (SP) Information

When configuring SSO in an external IdP, you will need the SP metadata file. You can download the SP metadata file by clicking Download SP Metadata Documentation in the Service Provider (SP) Information area of the TCO > Identity Center Management > Settings > SSO Login page. You can also view or copy ACS URL and Entity ID for manual configuration in an external IdP.




Managing Identity Provider (IdP) Information

You need to configure identity provider (IdP) information and enable the SSO switch to use the SSO feature normally.
Both manual configuration and metadata file upload are supported to configure identity provider information.
Manual configuration can only be used to configure essential attributes for SSO: Entity ID, Login Address, and SAML Signing certificate.
If you need to configure more IdP information, generate a metadata file on the IdP side and use the metadata upload method for configuration.

Configuring Identity Provider (IdP) Information

You need to configure identity provider information before enabling SSO.
1. You have logged in to TCO > Identity Center.
2. In the left sidebar, click Settings.
3. In the SSO's Identity Provider (IdP) Information area, click Configure Identity Provider Information.
4. In the Configure Identity Provider Information dialog box, select Upload Metadata Documentation or Configure Manually to configure identity provider information.
You can choose either of the following two methods for configuration. Obtain the relevant metadata file or configuration information from your identity provider.
Upload Metadata Documentation
Click Select File to upload the identity provider's metadata documentation.


Configure Manually


Entity ID: Identity provider identifier.
Login Address: Identity provider login address.
Certificate: a certificate used by the identity provider for SAML response signature. You can click Select File to upload the identity provider's certificate.
5. Click OK.

Updating Identity Provider (IdP) Information

You can update identity provider information whether SSO is enabled or disabled. However, for an update when SSO is enabled, inconsistencies between new and existing identity provider information may cause SSO failure. Proceed with caution.
1. In the SSO's Identity Provider (IdP) Information area, click Configure Identity Provider Information.
2. In the Configure Identity Provider Information dialog box, select the configuration method, modify the configuration information, re-upload the certificate or metadata file, and click OK.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Contact Us
Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

Submit a Ticket
7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon