Tenant

Available in Classic and VPC

This section describes how to create and manage tenants from the NAVER Cloud Platform console to manage the flow of authentication protocols and authentication information for Ncloud Single Sign-On integration.

Tenant interface

The basics of using Tenant are as follows:

Create a tenant

To create a tenant:

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. Click on the [Create] in the Tenant information.
   • After the tenant is created, the button changes to [Delete].
4. When the Create tenant popup window appears, check the contents and click the [Create tenant] button after agreeing to the terms and conditions.
5. When the Tenant creation completed popup window appears, click the [OK].
   • Tenant ID and Tenant creation date and time are automatically assigned upon creation.
   • Whether or not the main account supports login is initially set to follow application-specific settings and can be changed.
   • The authentication URL is initially set using the automatically assigned tenant ID and can be changed.

Change NAVER Cloud login settings

After creating the tenant, you can change the login support of the main account initially set and the authentication URL.

Set support for login with the main account

You can set whether or not you can log in through the main account for each application registered in tenant. To configure settings:

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. Click the drop-down list in Support for login with the main account in NAVER Cloud login component, and select whether to support it.
   • Allow: Set to enable login with the main account for all registered applications.
   • Reject: Set to disable login with the main account for all registered applications.
   • Follow application settings: When registering each application, set whether to allow.
4. Check the information, and then click the [Save].
   • If you do not click the [Save], your changes will not be saved.

Set authentication URL

You can set the initial authentication URL that is set to the tenant ID by entering the tenant alias. To configure settings:

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. In the Authentication setting in NAVER Cloud login component, enter the desired value for Tenant alias.
   • You can only use uppercase and lowercase English letters, numbers, hyphens (-), and the special characters "-" and "_."
   • After entering the tenant alias, clicking the [Delete] will initialize the tenant alias and the authentication URL.
4. Confirm whether the value entered in the Authentication URL has been applied.
   • You can click the [Copy] to copy the URL.
5. Enter the URL, and then click the [Save].
   • If you do not click the [Save], your changes will not be saved.

Change external IdP login settings

This describes how to register external IdP information to integrate with an external account and set up a user profile to integrate.

Connect Organization

The master account can integrate and manage SSO user access permissions to resources held by member accounts within the Organization by integrating with the Organization service.

To integrate with the Organization service:

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. Click the [Connect Organization] in the external IdP login component.
   • When Organization integration is completed, the list of member accounts that can manage access permissions is updated in the assignment menu.

Register external IdP

You can set up an integration system between the external IdP and the Ncloud Single Sign-On service by registering the metadata of the external IdP to be integrated.

To register external IdP information:

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. Click the [Register external IDP] in External IDP metadata in the External IdP login component.
4. When the identity provider metadata interface appears, enter the metadata of the external IdP to be integrated in the metadata component and then click the [Save].
   • When valid metadata is entered, sub-information will be automatically entered.
5. Click the [Register].

Delete external IdP

You can stop Ncloud Single Sign-On integration with external IdP by deleting the integrated external IdP information.

To delete external IdP information:

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. Click the [Delete external IDP] in External IDP metadata in the External IdP login component.

Set login

To change the login settings for an account logged in with an external account:

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. Change the desired settings in the login settings of the External IdP login component.
   • Session timeout: The session expiration time of the logged-in external account. You can select from among 10 minutes, 30 minutes, 1 hour, or 3 hours, and if there is no activity during the set time, you will be automatically logged out.
   • Allow duplicate log-in: Select whether to allow duplicate logins. If duplicate logins are not allowed, only 1 session can be accessed per SSO role.
   • Possession authentication: Select whether to apply possession authentication. If you apply possession authentication, you can register and manage the authenticated email/SMS information of the SSO user in NAVER Cloud Platform. You can select whether to apply or not.
   • Possession authentication items: Select the method for possession authentication. You can select either email, SMS, or email+SMS.
   • Two-factor authentication: Select whether to apply two-factor authentication. If you apply two-factor authentication, you enter the SSO user's ID and password at login and select email/SMS/OTP for further authentication. You can select whether to apply or not.

Manage user profile

You can enter user profile information to integrate external accounts and Ncloud Single Sign-On accounts.

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. Click the [Attribute mapper] in the External IdP login component.
4. Enter the user properties information for the external account you wish to integrate.
5. In sync mode, set the user profile update method.
   • None: Do not update user profile.
   • Import: Update user profiles only at first login.
   • Force: Update the user profile at every login.
6. Click the [Save].

Manage certificate

You can create and import the service provider certificate and external IdP certificate required for external IdP login, and configure alerts for certificate expiration.

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Tenant menu.
3. Click the [Manage certificate] in the External IdP login component.
   • The [Manage certificate] button becomes available after registering an External IdP.
4. Certificate types are separated by tabs, and the following features are available for each type:
   • Service Provider Certificate: Create new certificate, download certificate, enable certificate, delete certificate, and configure expiration notifications.
   • External IdP Certificate: Import certificate, view certificate, delete certificate, and configure expiration notifications.

Delete a tenant

To delete the tenant created:

1. From the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Ncloud Single Sign-On.
2. Click the Subscription menu.
3. Click the Subscribed and then the Delete tenant.
4. Once the Confirm Tenant deletion popup window appears, enter the text and click [Delete].
   • Any values assigned or entered during tenant registration will be deleted as well.