Federations overview

Identity federations allow you to set up authentication in the control panel using Single Sign-On (SSO). With this authentication method, user data is stored with your identity provider (such as Keycloak, ADFS, and other SAML-compatible providers).

To work with federations, identity providers must support one of the following protocols:

• SAML 2.0;
• or OpenID Connect.

You can configure up to 10 federations for access through accounts of different providers.

You can manage federations through the control panel and via the Federations API.

Records of operations with federations are saved in audit logs.

Federated users

To work through federations, control panel users with the Federation login method are used. You can:

• add a federated user manually;
• or when creating a federation (SAML, OIDC), enable user auto-creation and configure user group mapping.

Federated users authenticate in the Servercore control panel via SSO just as they do when logging into corporate systems of their organization. During authentication, the user is redirected to the identity provider authorization page—they do not need to have a separate account for Servercore or enter a username and password each time they log in to the control panel.

The federated user's username and password are not stored in Servercore.

A federated user does not have access to the API.