SaltStack Config integrates with third-party identity and access management solutions to enable users to login to the SaltStack Config user interface.

SaltStack Config supports various authentication integrations:

  • Single sign-on authentication (SSO) for an identity provider (IdP) that uses the SAML or OAuth protocols.
  • Access management for directory services that use the LDAP protocol, such as Active Directory Domain Services.

Alternatively, you could also use the authentication that is native to SaltStack Config by storing user credentials locally in SaltStack Config on the RaaS node.

Prerequisites

Setting up SSO is one post-installation step in a series of several steps that should be followed in a specific order. First, complete one of the installation scenarios and then read the following post-installation pages:

How to set up SSO or directory services

You can best configure SSO or directory services using the user interface as opposed to using the API (RaaS) or command line. The instructions for setting up SSO or directory services are included in the SaltStack Config product documentation. These are static HTML reference documents that do not require a link outside the firewall.

What to do next

After configuring SSO, there may be additional post-installation steps. Check the list of post-installation steps to ensure you have completed all the necessary steps.