Tencent Cloud Console Integration with BambooCloud IDaaS (User-Based)
Overview
This article describes how to log in to the Tencent Cloud console through BambooCloud IDaaS (based on Tencent Cloud console users).
Reference document: Accessing the Tencent Cloud Management Console with SAML 2.0 Federated Identity Users
Prerequisites
The administrator has a Tencent Cloud account.
The administrator has access permissions to the BambooCloud IDaaS Enterprise Center.
Authentication Configuration
Tencent Cloud System Configuration
DANGER
After User SSO is enabled, sub-account login will redirect to the identity provider login page. Except for the main account, sub-accounts cannot log in with account passwords.
Log in to the Tencent Cloud console as an administrator, enter Access Management, Identity Providers > User SSO.
Edit the SSO login settings, select SAML for the SSO protocol, and import the IDaaS metadata XML file. To download BambooCloud IDaaS IDP metadata, visit
https://{your_domain}/api/v1/saml2/idp/metadata.
Copy the SAML service provider metadata URL, open the link, copy the webpage content, and save it as an sp.xml file.
BambooCloud IDaaS Configuration
Log in to the BambooCloud IDaaS Enterprise Center. Go to Resources --> Applications --> Pre-integrated Applications --> Search for Tencent Cloud.
Import the sp.xml saved in the steps above.
Enter the application details, Authentication Integration > Mapping Configuration, and add a mapping.
Authorization Management > Application Account > Add Account. The account name should be consistent with the sub-user name in Tencent Cloud.
Login Verification
Two login methods are as follows:
Authorized users log in to the BambooCloud IDaaS User Center and click the logo to single sign-on to the Tencent Cloud system.
Visit Tencent Cloud and use the sub-user login. After entering the main account ID, click User SSO Login, and you will be redirected to the BambooCloud IDaaS login interface. Enter the login credentials to enter Tencent Cloud.
