To take advantage of cloud agility and burst computing capability, ABC Automobiles have extended their data center to a Virtual Cloud Network (VCN). In Oracle Cloud Infrastructure's (OCI) us-phoenlx-1 region. They have several members in their Cloud Operations (CloudOps) team that need I access the OCI management console. The security administrator does not want to create new IAM users and credentials that would then need to be distributed to each CloudOps member.
Which option will help solution architect meet the needs for CloudOps?
Oracle Cloud Infrastructure supports federation with Oracle Identity Cloud Service,and Microsoft Active Directory (via Active Directory Federation Services (AD FS)), Microsoft Azure Active Directory, Okta, and other identity providers that supports the Security Assertion Markup Language (SAML) 2.0 protocol.
Federated users choose which identity provider to use for sign-in, and then they're redirected to that identity provider's sign-in experience for authentication. After entering their login and password, they are authenticated by the IdP and redirected back to the Oracle Cloud Infrastructure Console. by this way, you don't need to create IAM user in OCI console for each operation user and can use their credentials in identity provider and user SSO to login to OCI console
For instructions for federating with other identity providers, see the following:
Federating with SAML 2.0 Identity Providers
Currently there are no comments in this discussion, be the first to comment!