Manage User Account in IAM Federation

Once the organization IDP is onboarded to use IAM Federation, the organization's users can link their accounts to IAM Federation and unlink them whenever needed.

Link User Account to IAM Federation

Upon linking a user account from the organization to IAM Federation, users can log in to the DCD using their organization credentials.

Prerequisites:

• The onboarding of the organization IDP must be successfully completed using the discovery endpoint. For more information, see Configure IAM Federation.
• The user must already have an IONOS CLOUD account.
• The logged-in user's email address and the domain linked to the IDP must match.

To link a user's account from the organization to IONOS CLOUD DCD, follow these steps:

1

Initiate Account Linking

1. Log in to the DCD using your IONOS CLOUD account Email and Password. For more information, see Log in to the Data Center Designer.

2. Go to Menu > Management > IAM Federation.

2

IDP Selection

Note: Only IDPs onboarded by your organization for IAM Federation and matching your login email domain appear for account linking.

• In the Managed Linked Accounts, select Link under ACTIONS against the organization IDP user account that needs to be linked with IAM Federation.

Link the user account

3

IDP Authentication

Note: You are logged out of the DCD and redirected to your organization IDP to complete the authentication.

• Enter your organization login credentials such as Email, Password, and Sign In.

User signs in on the organization page

4

Authorization from IDP

• The IDP authenticates the user and authorizes the IONOS CLOUD IAM Federation system to access their account information.

Result:

• Your organization's user account is successfully linked with IAM Federation.
• The user successfully signs into the DCD and is redirected to the Manage Linked Accounts.

Link user account

Next steps

User can now log in to the DCD using their organization IDP credentials. To do so, see Log in to the Data Center Designer with your Identity Provider.

Unlink the user account from IAM Federation

Warning: Upon unlinking the user account from IAM Federation, users can log in to the DCD only using their IONOS CLOUD account credentials.

To unlink a user's account from the organization with IONOS CLOUD DCD, follow these steps:

1. In the DCD, go to Menu > Management > IAM Federation.

2. In the Managed Linked Accounts, select Unlink under ACTIONS against the organization IDP user account that needs to be linked with IAM Federation.

Unlink the user account

Result: Your user account from the organization has been successfully unlinked from IAM Federation. From then on, you can log in to the DCD only using your IONOS CLOUD account credentials.

Note: User can also unlink their account from the IDP anytime by revoking access to their account information.