Home Explore Help
Sign In
SMusatov
/
netdata
mirror of https://github.com/netdata/netdata.git
1
0
Fork 0
Files Wiki
Tree: 6140ea50b0
Branches Tags
netdata
/
docs
/
netdata-cloud
/
authentication-and-authorization
/
enterprise-sso-authentication.md

enterprise-sso-authentication.md 3.0 KB
History Raw

Enterprise SSO Authentication

Enterprise Single Sign-On (SSO) integration enables organizations to manage Netdata Cloud access through their existing identity management solution. This simplifies user authentication and improves security through centralized access control.

Important: Enterprise SSO handles authentication only. User and role management must be configured separately within Netdata Cloud.

Prerequisites

Requirement Details
SSO Provider Must be supported by Netdata
Account Status Active Netdata Cloud account
Subscription Business plan or higher
Access Level Space Administrator permissions

Setup

Netdata Cloud Configuration:

To configure SSO in your Netdata Cloud space:

  1. Navigate to Space Settings (gear icon above profile)
  2. Select User Management → Authentication & Authorization
  3. Locate your desired SSO integration
  4. Click "Configure" and fill in the required integration attributes

Domain Verification:

Domain verification is required to establish secure SSO connectivity:

  1. Access the DNS TXT record:
    • Go to Space Settings → User Management → Authentication & Authorization
    • Click "DNS TXT record" button to reveal verification code

  2. Add DNS Record:

    • Log into your domain provider's DNS management
    • Create a new TXT record with these specifications:

    | Field | Value | |--------------------------|----------------------------------------------| | Value/Answer/Description | "netdata-verification=[VERIFICATION CODE]" | | Name/Host/Alias | Leave blank or use @ for subdomain | | TTL (Time to Live) | 86400 (or use provider default) |

SSO Provider Configuration: Consult your provider's documentation for detailed instructions.

How to Authenticate

Click on the link Sign-in with an Enterprise Single Sign-On (SSO) and follow the instructions. If you're not authenticated on the Enterprise SSO tool, you'll be prompted to authenticate there first before being allowed to proceed to Netdata Cloud.