Identity Management Introduction
Download
Modo Foco
Tamanho da Fonte
Identity Management provides unified identity and permission management for multiple accounts based on the organizational structure of TCO. By using the Identity Management feature in TCO, you can centrally manage users who use Tencent Cloud within your enterprise, configure SSO between your enterprise identity management system and Tencent Cloud in a single step, and centrally configure user access permissions for multiple accounts.
Features
Centrally managing users who use Tencent Cloud
Identity Management provides you with a user management module, where you can maintain all users who need to access Tencent Cloud. You can either manage users and user groups manually, or synchronize users and user groups from your enterprise identity management system to Identity Management using the SCIM protocol.
Centrally configuring SSO with your enterprise identity management system
Identity Management supports enterprise SSO based on the SAML 2.0 protocol. You only need to perform a one-time configuration in both Identity Management and your enterprise identity management system to complete the SSO setup.
Centrally configuring user access permissions for multiple accounts
By leveraging the organizational structure of TCO, you can centrally configure access permissions for users or user groups to any member account within the enterprise organization in Identity Management. These permissions can be modified or deleted at any time.
Unified login portal
Identity Management provides a unified login portal. From this portal, enterprise employees can obtain a list of all accounts they have access to in one step, log in to the Tencent Cloud console, and easily switch between multiple accounts.
Product Architecture
Identity Management users can access cloud resources of an account through Cloud Access Management (CAM) roles or CAM users.
Note:
If the same Identity Management user has configured both CAM role synchronization and CAM user synchronization for an account via permission settings, then that user can access the account's cloud resources through both CAM roles and CAM users.
Relationship Between Identity Management and CAM
CAM provides identity and permission management within a single Tencent Cloud account. CAM offers user management (including users, user groups, and roles), SSO, and permission configuration, but these are only effective within one Tencent Cloud account. When your enterprise has multiple Tencent Cloud accounts, you need to use CAM in each account to manage users separately and to configure SSO and permissions separately, which poses significant management challenges.
Identity Management provides unified identity and permission management for multiple accounts across the entire TCO organization. You can perform a one-time centralized configuration in Identity Management to complete user management, SSO, and permission configuration for multiple Tencent Cloud accounts. To achieve this, Identity Management offers identity management independent of CAM, but its permission configuration reuses the permission policies from CAM. Furthermore, access to accounts by Identity Management users is essentially a secondary SSO process, where the Identity Management user assumes a CAM role within each account.
When you start using Identity Management for unified identity and permission management across your TCO accounts, you no longer need to use CAM to manage individual accounts. However, in certain scenarios, such as: when you have existing CAM users or CAM roles, or when you need to use access keys for programmatic access to Tencent Cloud resources, you can still continue to use CAM within individual accounts. Using Identity Management does not restrict the original features of CAM, and both services can be used simultaneously.
Ajuda e Suporte
Esta página foi útil?
Você também pode entrar em contato com a Equipe de vendas ou Enviar um tíquete em caso de ajuda.
comentários