How-to guides

Users can create the service by entering the required ID Center information and selecting detailed options through the Samsung Cloud Platform Console.

Create ID Center

You can create and use an ID Center in the Samsung Cloud Platform Console.

To create an ID Center, follow these steps.

1. All Services > Management > ID Center menu, click it. 1. Go to the Service Home page of ID Center.

2. On the Service Home page, click the ID Center Apply button. 2. Go to the Create ID Center page.

3. On the ID Center Creation page, after entering the basic information, click the Create button.

   • Enter the name and description of the ID Center in the Basic Information Input area.

     Category	Required	Detailed description
     ID Center name	required	Enter the ID Center name English letters, numbers, special characters (+=-_@,.) using them, enter between 3 and 128 characters
     Explanation	Selection	Enter a description of the organizational unit within 1,000 characters.

     Table. ID Center Basic Information Items
   • In the Credential Source Selection area, select the credential source type and enter the required information.

     Category	Required	Detailed description
     ID Center’s own directory	-	Manage all users and user groups in the ID Center Users log in via the Access Portal
     AD (Active Directory)	-	Register the Active Directory managed by the user as a credential source in ID Center for use Users log in via the Access Portal Detailed option configuration is required when using AD (Active Directory) LDAP Directory Service: Select the LDAP Directory Service type (OpenLDAP, Microsoft AD, 389 Directory Server) Connection URL: Enter the LDAP server address (e.g., ldap:// or ldaps:) Bind DN: Enter the DN (Distinguished Name) of the administrator or service account used to access the LDAP server Bind credentials: Enter the password for the account corresponding to the Bind DN User DN: Enter the directory path where user accounts are located (e.g., OU=Employees, OU=Accounts, DC=sub, DC=org) Username LDAP attribute: Enter the user account identifier (e.g., sAMAccountName, uid) RDN LDAP attribute: Enter the RDN (Relative Distinguished Name, the top-level attribute in the user DN) User object classes: Enter the list of LDAP classes that define user objects, separated by commas (,) (e.g., persion, organizationPersion, usersAMAccount) Password management: Choose the password management method ID Center management: When selected, users can manage passwords in the Access Portal Automatically synchronize AD information upon creation

     Table. ID Center credential source selection item

4. When the popup notifying the creation of the ID Center opens, click the Confirm button.

5. Check the ID Center dashboard on the Service Home page.

   Category	Detailed description
   ID Center information	Display the ID Center’s name, ID, and Access Portal URL ID Center Information Click the ID Center Settings item to navigate to the page where you can view detailed ID Center information
   User	Number of users created in ID Center Clicking the user count navigates to the User List page Clicking the Create item navigates to the User Creation page. Create User See
   User group	Number of user groups created in ID Center Click the group count to go to the User Group List page Click the Create item to go to the User Group Creation page. 사용자 그룹 생성하기 Refer
   Permission set	Number of permission sets created in ID Center Click the number of permission sets to go to the Permission Set List page Click the Add item to go to the Create Permission Set page. Refer to 권한 세트 생성하기

   Table. ID Center Service Home Dashboard Items

Check ID Center detailed information

You can view detailed information of the ID Center and manage permissions.

To view detailed information of the ID Center and manage permissions, follow the steps below.

1. All Services > Management > ID Center menu, click. 1. Go to the Service Home page of ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. Navigate to the ID Center Settings page.

   Category	Detailed description
   Delete ID Center	Delete ID Center button Not displayed on delegated Account
   service	Service name
   Resource Type	Resource Type
   SRN	Unique resource ID in Samsung Cloud Platform
   Resource name	Resource name
   Resource ID	Unique resource ID in the service
   constructor	User who created the service
   Creation date and time	Service creation date and time
   Editor	User who edited the service information
   Modification date and time	Date and time the service information was modified
   ID Center name	ID Center name Click the Edit button to change the usage status
   Region	Region where the ID Center was created
   Explanation	Description of the ID Center Edit button can be clicked to change the usage status
   Organization ID	Organization ID
   Credential source	Credential source type You can click the Edit button to change the credential source type. ID Center native directory: A directory within ID Center. AD (Active Directory): An Active Directory managed directly by the user. Last synchronization: The date and time of the last sync and its status. You can click the Sync button to perform manual synchronization. For details on synchronization, see the AD (Active Directory) 정보 동기화하기 reference. For details on Active Directory settings, see the 자격 증명 소스 유형 변경하기 reference.
   Access Portal URL	URL for accessing the Access Portal By clicking the Edit button, you can directly specify a subdomain of the Access Portal URL The subdomain must be set to 1–30 characters, using lowercase English letters and the special character (-) Special characters cannot be placed at the beginning or end of the domain Changing the Access Portal URL is allowed only once initially and cannot be restored
   Delegation of authority	Display the Account name, Account ID, Email, and Delegation time of the Account that delegated management authority in ID Center. For delegated Accounts, the managing Account’s information is displayed, and you cannot delegate or revoke authority. Permission delegation: The ability to delegate authority to an Account within ID Center. Displayed when there is no delegation information. When you click the button, you can select an Account on the Permission delegation page to set up delegation. For more details, see 권한 위임하기. Permission delegation cancellation: Cancel the delegated permission.

   Table. ID Center configuration items

Managing Credential Sources

You can change the credential source type or modify and manage the settings of the AD (Active Directory) type.

AD (Active Directory) Apply for Integration

If you want to use a user-managed AD (Active Directory) integration, you must first prepare the VPC and Load Balancer, then submit a request through SR. To apply for AD integration, follow these steps.

1. Secure a VPC that integrates with the user’s AD.

   • When a network connection is required, connect to the network where the user’s AD resides via the Direct Connect service.
   • For more details, please refer to Direct Connect 생성하기.

2. Configure the Load Balancer.

   1. Create a Load Balancer and an LB server group.
   2. Add the IP that will be linked to AD as a member of the connected resources of the LB server group.
   3. Create a Listener from the Load Balancer’s connected resources and associate it with the LB server group.
      Guide

      • Through the Load Balancer service, call information for AD synchronization from ID Center can pass through the user’s VPC to invoke the user’s AD.
      • For detailed information on creating and using the Load Balancer service, please refer to Load Balancer 서비스 이용하기.

3. Configure a PrivateLink Service in the user’s VPC.

   1. Create a PrivateLink Service for the user VPC that will be called from ID Center.
   2. When creating a PrivateLink Service, select the Load Balancer created in step 2 as the connection resource.

4. When the preparation work is complete, click the All Services > Management > Support Center menu. 4. Navigate to the Service Home page.

5. On the Service Home page, click the Service Request menu. 5. Service Request List page is accessed.

6. Service Request List page, select and enter the information required for the service request.

   Category	Required	Detailed description
   Title	Required	Title for the service request Korean, English, numbers, special characters(+=,.@-_) enter within 64 characters
   Region	Required	Select the region for the service request
   service	Required	Management service group’s ID Center service selection
   Task classification	Required	ID Center AD integration request Select
   Content	Required	Enter information for ID Center AD integration request

   Table. ID Center AD linked application items

7. Check the input information and click the Request button.

   • When creation is complete, check the Service Request List page.

Changing Credential Source Type

You can change the credential source or modify the settings.

To change the credential source type, follow these steps.

1. All Services > Management > ID Center Click the menu. 1. Navigate to the Service Home page of the ID Center.

2. On the Service Home page, click the ID Center Settings menu. 2. Navigate to the ID Center Details page.

3. On the ID Center Details page, click the Edit button of the Credential Source item. 3. Credential source change popup window opens.

4. After selecting the credential source type to use, click the Confirm button. 4. A popup window opens to notify a credential source change.

   Category	Detailed description
   ID Center’s own directory	Use directory within ID Center No separate configuration items
   AD (Active Directory)	Use Active Directory managed directly by the user LDAP Directory Service: Select LDAP Directory Service type (OpenLDAP, Microsoft AD, 389 Directory Server) Connection URL: Enter the LDAP server address (e.g., ldap:// or ldaps:) Bind DN: Enter the DN (Distinguished Name) of the administrator or service account used to access the LDAP server Bind credentials: Enter the password for the account corresponding to the Bind DN User DN: Enter the directory path where user accounts are located (e.g., OU=Employees, OU=Accounts, DC=sub, DC=org) Username LDAP attribute: Enter the user account identifier (e.g., sAMAccountName, uid) RDN LDAP attribute: Enter the RDN (Relative Distinguished Name, the top-level attribute in the user DN) User object classes: Enter a list of LDAP classes that define user objects, separated by commas (,) (e.g., persion, organizationPersion, usersAMAccount) Password management: Choose the password management method ID Center management: When selected, users can manage passwords in the Access Portal

   Table. Credential source type change items

5. Check the information about precautions when changing, check the checkbox, and then click the Confirm button. 5. Service Home Go to the page to begin changing the credential source type.

   • The change time varies depending on the scale, and you can confirm it via a notification once the change is complete.
   • You cannot navigate to another menu page while changes are being made.

Synchronizing AD (Active Directory) Information

You can view the AD information and initiate synchronization manually.

To synchronize AD information, follow the steps below.

1. All Services > Management > ID Center Click the menu. 1. Go to the Service Home page of ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. Navigate to the ID Center Details page.
3. On the ID Center Details page, click the Sync button next to the synchronization time of the Credential Source item. 3. AD information synchronization The popup window opens.
4. After reviewing the synchronization notification, click the Confirm button. 4. AD information synchronization is starting.
   • The change time varies depending on the scale.

Manage Permissions

You can delegate the administrative rights of the ID Center to another Account, or revoke delegated rights.

Permission Delegation

You can delegate the administrative rights of the ID Center to another account.

To delegate administrative privileges to another account, follow these steps.

1. All Services > Management > ID Center Click the menu. 1. Go to the ID Center’s Service Home page.
2. On the Service Home page, click the ID Center Settings menu. 2. Navigate to the ID Center Detail page.
3. On the ID Center Details page, click the Delegate Permission button. 3. Navigate to the Permission Delegation page.
   • Delegate button is displayed only when there is no Account that has currently delegated permissions.
4. On the Permission Delegation page, after selecting the Account to delegate permissions to, click the Complete button.

   Category	Detailed description
   Account name	Account name
   Account ID	Account ID
   email	Account email
   Additional date	Account creation or registration time in Organization
   Additional type	Method of adding an Account in Organization Create: Add Account page to create anew and add Join: Add an already created Account

   Table. ID Center Delegated Permissions Account List

Cancel delegation

You can revoke the administrative privileges of the ID Center delegated to another account.

To cancel delegated administrative permissions, follow the steps below.

1. All Services > Management > ID Center Click the menu. 1. Go to the Service Home page of the ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. ID Center Details page will be opened.
3. Click the Cancel Delegated Authority button on the ID Center Details page.
4. When the popup notifying the revocation of delegation opens, click the Confirm button.

Delete ID Center

To delete the ID Center, follow these steps.

1. All Services > Management > ID Center menu, click it. 1. Go to the Service Home page of ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. Go to the ID Center Settings page.
3. On the ID Center Settings page, click the ID Center Delete button. 3. Delete ID Center The popup window opens.
4. ID Center Delete In the popup window, after entering the name of the ID Center to delete, click the Confirm button. 4. Service Home page.
   • The deletion time for the ID Center varies depending on the size, and you can confirm completion via a notification.
   • You cannot navigate to other menu pages while the ID Center is being deleted.