How-to guides

Users can create the service by entering the required ID Center information and selecting detailed options through the Samsung Cloud Platform Console.

Create ID Center

You can create and use an ID Center in the Samsung Cloud Platform Console.

To create an ID Center, follow these steps.

1. Click the All Services > Management > ID Center menu. 1. Go to the Service Home page of ID Center.

2. Service Home on the page, click the ID Center Apply button. 2. Go to the ID Center Creation page.

3. ID Center Creation After entering the basic information on the page, click the Create button.

   • In the Basic Information Input area, enter the name and description of the ID Center.

     Category	required status	Detailed description
     ID Center name	Required	Enter the ID Center name using English letters, numbers, and special characters (+=-_@,.) within 3 to 128 characters
     Explanation	Selection	Enter a description of the organizational unit within 1,000 characters.

     Table. ID Center basic information items
   • In the Credential Source Selection area, select the credential source type and enter the required information.

     Category	required status	Detailed description
     ID Center’s own directory	-	Manage all users and user groups in the ID Center Users log in via the Access Portal
     AD (Active Directory)	-	사용자가 직접 관리하는 Active Directory를 ID Center의 자격 증명 소스로 등록하여 사용 사용자는 Access Portal을 통해 로그인 AD (Active Directory) 사용 시 상세 옵션 설정 필수 LDAP Directory Service: LDAP Directory Service 서비스 유형(OpenLDAP, Microsoft AD, 389 Directory Server) 선택 Connection URL: LDAP 서버 주소를 입력(예: ldap:// 또는 ldaps:) Bind DN: LDAP 서버에 접근할 때 사용하는 관리자 또는 서비스 계정의 DN (Distinguished Name)을 입력 Bind credentials: Bind DN에 해당하는 계정의 비밀번호 입력 User DN: 사용자 계정이 위치하는 디렉토리 경로 입력(예: OU=Employees, OU=Accounts, DC=sub, DC=org) Username LDAP attribute: 사용자 계정 식별값 입력(예: sAMAccountName, uid) RDN LDAP attribute: RDN (Relative Distinguished Name, 사용자 DN에서 최상위 속성) 입력 User object classes: 사용자 객체를 정의하는 LDAP 클래스 목록 콤마(,)로 구분하여 입력(예: persion, organizationPersion, usersAMAccount) 비밀번호 관리: 비밀번호 관리 방식 선택 ID Center 관리 선택 시 사용자가 Access Portal에서 비밀번호 관리 가능 생성 시 자동으로 AD 정보를 동기화

     Table. ID Center credential source selection item

4. When the popup notifying the creation of the ID Center opens, click the Confirm button.

5. On the Service Home page, check the ID Center dashboard.

   구분	상세 설명
   ID Center information	Display the name, ID, and Access Portal URL of the ID Center ID Center information When you click the ID Center settings item, you are taken to the ID Center configuration page where you can view detailed ID Center information
   User	Number of users created in ID Center Clicking the user count navigates to the User List page Create item click navigates to the User Creation page. 사용자 생성하기 Reference
   User group	Number of user groups created in ID Center Click the group count to go to the User Group List page Click the Create item to go to the User Group Creation page. 사용자 그룹 생성하기 Refer
   Permission set	Number of permission sets created in ID Center Click the permission set count to navigate to the Permission Set List page Click the Add item to go to the Create Permission Set page. see 권한 세트 생성하기

   Table. ID Center Service Home Dashboard Items

Check ID Center detailed information

You can view detailed information of the ID Center and manage permissions.

To view detailed information of the ID Center and manage permissions, follow these steps.

1. Click the All Services > Management > ID Center menu. 1. Go to the Service Home page of ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. Navigate to the ID Center Settings page.

   Category	Detailed description
   Delete ID Center	Delete ID Center button Not displayed on delegated Account
   service	Service name
   Resource Type	Resource Type
   SRN	Unique resource ID in Samsung Cloud Platform
   Resource Name	Resource Name
   Resource ID	Unique resource ID in the service
   Constructor	User who created the service
   Creation Date/Time	Service creation date and time
   Modifier	User who edited the service information
   Modification date	Date and time the service information was modified
   ID Center name	ID Center name Edit Click the button to change usage status
   Region	Region where the ID Center was created
   Explanation	Description of ID Center Edit button can be clicked to change usage status
   Organization ID	Organization’s ID
   Credential source	Credential source type Edit button can be clicked to change the credential source type ID Center native directory: Directory within ID Center AD (Active Directory): Active Directory managed directly by the user Last synchronization: Date and time of the last sync and its status Sync button can be clicked to perform a manual synchronization For details about synchronization, see AD (Active Directory) information synchronization For details about Active Directory settings, see Change credential source type
   Access Portal URL	URL to access the Access Portal

   | Display the Account name, Account ID, Email, Delegation time information of the Account that delegated management authority in ID Center

   • For delegated Accounts, the managing Account’s information is displayed, and delegation or cancellation of authority is not possible

   • Permission delegation: Ability to delegate authority to an Account within ID Center
     • Displayed when there is no delegation information
     • When the button is clicked, you can select an Account on the Permission delegation page to set up delegation
     • For more details, see 권한 위임하기

   • Cancel delegation: Cancel the permission delegation

   |

   Table. ID Center configuration items

Managing Credential Sources

You can change the credential source type, or modify and manage the settings for the AD (Active Directory) type.

AD (Active Directory) Apply for Integration

If you want to use a user-managed AD (Active Directory) integration, you must first prepare the VPC and Load Balancer, then submit a request through SR. To apply for AD integration, follow the steps below.

1. Secure a VPC that integrates with the user’s AD.

   • When a network connection is required, connect to the network where the user’s AD resides using the Direct Connect service.
   • For more details, refer to Direct Connect 생성하기.

2. Configure the Load Balancer.

   1. Create a Load Balancer and an LB server group.
   2. Add the IP that will link AD as a member of the resources connected to the LB server group.
   3. Create a Listener from the Load Balancer’s connected resources and attach the LB server group.
      Information

      • Through the Load Balancer service, call information for AD synchronization from ID Center can pass through the user’s VPC to invoke the user’s AD.
      • For detailed information on creating and using the Load Balancer service, please refer to Load Balancer 서비스 이용하기.

3. Configure a PrivateLink Service in the user’s VPC.

   1. Create a PrivateLink Service for the user VPC that will be called from ID Center.
   2. When creating a PrivateLink Service, select the Load Balancer created in step 2 as the connection resource.

4. When the preparation work is complete, click the All Services > Management > Support Center menu. 4. Go to the Service Home page.

5. Service Home on the page, click the Service Request menu. 5. Service Request List page is accessed.

6. On the Service Request List page, select and enter the information required for the service request.

   Category	Required status	Detailed description
   Title	Required	Enter the title of the service request using Korean, English, numbers, and special characters (+=,.@-_) within 64 characters
   Region	Required	Select the region to request the service
   service	Required	Management service group’s ID Center service selection
   Task classification	Required	ID Center AD Integration Request Select
   content	Required	Enter information for ID Center AD integration request

   Table. ID Center AD integration request items

7. Check the input information and click the Request button.

   • Once creation is complete, check the Service Request List page.

Changing the credential source type

You can change the credential source or modify the configuration values.

Follow these steps to change the credential source type.

1. All Services > Management > ID Center Click the menu. 1. Go to the Service Home page of ID Center.

2. On the Service Home page, click the ID Center Settings menu. 2. ID Center Details Go to the page.

3. On the ID Center Details page, click the Edit button of the Credential Source item. 3. Change Credential Source A popup window opens.

4. After selecting the credential source type to use, click the Confirm button. 4. A popup window notifying a credential source change opens.

   Category	Detailed description
   ID Center’s own directory	Use directory within ID Center No separate configuration items
   AD (Active Directory)	Use Active Directory managed directly by the user LDAP Directory Service: Select LDAP Directory Service type (OpenLDAP, Microsoft AD, 389 Directory Server) Connection URL: Enter the LDAP server address (e.g., ldap:// or ldaps:) Bind DN: Enter the DN (Distinguished Name) of the administrator or service account used to access the LDAP server Bind credentials: Enter the password for the account corresponding to the Bind DN User DN: Enter the directory path where user accounts are located (e.g., OU=Employees, OU=Accounts, DC=sub, DC=org) Username LDAP attribute: Enter the user account identifier attribute (e.g., sAMAccountName, uid) RDN LDAP attribute: Enter the RDN (Relative Distinguished Name, the top-level attribute in the user DN) User object classes: Enter the list of LDAP classes that define user objects, separated by commas (,) (e.g., persion, organizationPersion, usersAMAccount) Password management: Select password management method ID Center management: If ID Center management is selected, users can manage passwords in the Access Portal

   Table. Credential source type change items

5. After reviewing the precautions for changes and checking the checkbox, click the Confirm button. 5. Go to the Service Home page and start changing the credential source type.

   • The change time varies depending on the scale, and you can confirm it via a notification once the change is complete.
   • You cannot navigate to other menu pages while changes are in progress.

AD (Active Directory) Synchronize Information

You can check the AD information and perform synchronization manually.

To synchronize AD information, follow these steps.

1. Click the All Services > Management > ID Center menu. 1. Go to the Service Home page of ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. ID Center Details page will be opened.
3. On the ID Center 상세 page, click the 동기화 button next to the sync time of the 자격 증명 소스 item. 3. AD Information Synchronization The popup window opens.
4. After reviewing the synchronization notification, click the Confirm button. 4. AD information synchronization is starting.
   • The change time varies depending on the scale.

Manage Permissions

You can delegate the ID Center’s administrative privileges to another account, or revoke previously delegated privileges.

Delegating Permissions

You can delegate the administrative rights of the ID Center to another account.

To delegate administrative privileges to another account, follow these steps.

1. Click the All Services > Management > ID Center menu. 1. Go to the Service Home page of ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. ID Center Details page is opened.
3. On the ID Center Details page, click the Delegate Permissions button. 3. Go to the Permission Delegation page.
   • Permission Delegation button is displayed only when there is no Account that has currently delegated the permission.
4. Permission Delegation page, select the Account to delegate the permission to, then click the Complete button.

   Category	Detailed description
   Account name	Account name
   Account ID	Account ID
   email	Account email
   Additional date/time	Account creation or sign‑up time in the organization
   Additional type	Method of adding an Account in Organization Creation: Add Account page, create anew and add Sign-up: Add an already created Account

   Table. ID Center Delegated Authority Account List

Cancel delegation

You can revoke the ID Center’s administrative privileges that were delegated to another account.

To cancel delegated administrative permissions, follow these steps.

1. Click the All Services > Management > ID Center menu. 1. Go to the Service Home page of ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. Navigate to the ID Center Details page.
3. On the ID Center Details page, click the Cancel Permission Delegation button.
4. When the popup notifying the revocation of delegation opens, click the Confirm button.

Delete ID Center

To delete the ID Center, follow these steps.

1. Click the All Services > Management > ID Center menu. 1. Navigate to the Service Home page of ID Center.
2. On the Service Home page, click the ID Center Settings menu. 2. Go to the ID Center Settings page.
3. On the ID Center Settings page, click the Delete ID Center button. 3. ID Center Delete popup window opens.
4. In the ID Center Delete popup, after entering the name of the ID Center to delete, click the Confirm button. 4. Go to the Service Home page.
   • The deletion time for the ID Center varies depending on the scale, and you can confirm completion through a notification.
   • You cannot navigate to other menu pages while the ID Center is being deleted.