What is an Authentication Source
An authentication source is a logical concept in BambooCloud IDaaS for connecting various enterprise authentication systems or social authentication platforms. Administrators only need to configure the connection parameters and mapping relationships to complete the connection, and then use the original account/password or scan-to-login methods of these authentication sources to log in to the platform.
Pre-integrated Authentication Sources
BambooCloud IDaaS has pre-integrated the following authentication sources, covering built-in authentication, social authentication, and standard protocols:
| Authentication Source | 2E Scenario | 2C Scenario | Type | Authentication Method |
|---|---|---|---|---|
| Password verification | ✅ | ✅ | Built-in | Username + password |
| OTP | ✅ | ✅ | Built-in | OTP dynamic password |
| FIDO2 | ✅ | ✅ | Built-in | Security key, biometrics |
| Unified scan code | ✅ | ✅ | Built-in | Scan-to-login |
| DingTalk | ✅ | Enterprise social | Scan, account/password | |
| WeLink | ✅ | Enterprise social | Scan, account/password | |
| WeCom | ✅ | Enterprise social | Scan, account/password | |
| Feishu | ✅ | Enterprise social | Scan, account/password | |
| Cloud Hub | ✅ | Enterprise social | Scan, account/password | |
| Weaver Eteams | ✅ | Enterprise social | Scan, account/password | |
| WPS | ✅ | Enterprise social | Scan, account/password | |
| ✅ | ✅ | Personal social | Scan-to-login, quick login | |
| Sina Weibo | ✅ | ✅ | Personal social | Quick login |
| ✅ | ✅ | Personal social | Quick login | |
| Alipay | ✅ | ✅ | Personal social | Scan-to-login |
| Douyin | ✅ | ✅ | Personal social | Quick login |
| Apple | ✅ | ✅ | Personal social | Apple ID login |
| Taobao | ✅ | ✅ | Personal social | Quick login |
| SAML | ✅ | ✅ | Enterprise protocol | SSO assertion |
| OAuth | ✅ | ✅ | Enterprise protocol | Open authorization |
| OIDC | ✅ | ✅ | Enterprise protocol | Identity authentication |
| AD | ✅ | Enterprise protocol | Directory service authentication | |
| LDAP | ✅ | Enterprise protocol | Directory service authentication | |
| CAS | ✅ | ✅ | Enterprise protocol | SSO ticket |
| Kerberos | ✅ | Enterprise protocol | Ticket authentication |
Note: In addition to the authentication sources listed above, BambooCloud IDaaS also supports connecting the following mainstream foreign IAM products as external authentication sources:
- IBM Tivoli: IBM enterprise identity and access management suite
- Oracle AM: Oracle Access Management
- Okta: a leading cloud-native identity authentication and access management platform
- PingIdentity: enterprise identity security and SSO solution
If you need to connect to any of the above products, please contact the BambooCloud technical support team for a detailed configuration plan.
Scenario Description
- 2E scenario (enterprise employees): through enterprise social authentication or enterprise protocol access, realize one-stop login to office applications
- 2C scenario (end consumers): through personal social authentication or built-in authentication, lower the user registration threshold and improve the login experience
Examples:
- AD account/password login to Tencent Mail (2E)
- WeCom scan login to Salesforce (2E)
- WeChat one-click login to e-commerce App (2C)
- Alipay scan login to membership system (2C)
Authentication Source vs Identity Source
| Dimension | Identity Source | Authentication Source |
|---|---|---|
| Function | Synchronize user data | Provide login authentication capability |
| Data Flow | Upstream → IDaaS (pull) | IDaaS → Upstream (verify) |
| Typical Examples | AD, DingTalk address book | WeChat login, WeCom scan |
The two can be configured independently or combined. For example: synchronize DingTalk address book as user data through an identity source, and realize DingTalk scan login through an authentication source.