All Products
Search
Document Center

CloudSSO:Release notes

Last Updated:Nov 29, 2025

This topic describes the release notes for CloudSSO and provides links to the relevant references.

October 2025

Feature

Description

Release date

Supported region

References

New supported region

Available in the South Korea (Seoul) region.

2025-10

South Korea (Seoul)

Create a CloudSSO directory

April 2025

Feature

Description

Release date

Region expansion

References

CLI

Alibaba Cloud CLI version 3.0.271 and later introduce a new CloudSSO credential type, simplifying the credential configuration process.

2025-04

All

Use Alibaba Cloud CLI to access CloudSSO and Alibaba Cloud resources

Permission management

You can now use the acs:RDManageScope condition key in inline policies to specify the scope of Resource Directory (RD) resources that a CloudSSO user can manage, enabling delegated administration.

2025-04

All

Use CloudSSO for delegated administration

June 2024

Feature

Description

Release date

Supported region

References

Delegated administrator account

You can use the management account of a resource directory to specify a member of the resource directory as the delegated administrator account of CloudSSO. Then, you must enable the delegated administrator account for CloudSSO as a CloudSSO administrator. The delegated administrator account of CloudSSO is authorized by the CloudSSO administrator to manage CloudSSO resources.

2024-06

All

Manage the delegated administrator account of CloudSSO

May 2024

Feature

Description

Release date

Supported region

References

Security Token Service (STS) token

This feature allows a CloudSSO user to use an STS token to access the resources of the accounts in a resource directory by using Alibaba Cloud CLI or SDKs.

2024-05

All

Obtain an STS token of a CloudSSO user

Single sign-on (SSO)

Support for trusted CA-signed certificates for service providers. (Under invitational preview)

2024-05

All

Manage CA certificates of the SP (Under invitational preview)

January 2024

Feature

Description

Release date

Supported region

References

Password policy

You can configure a password policy to specify requirements such as the password length, password validity period, and number of password retries.

2024-01

All

Configure a password policy

Logon IP whitelist

You can configure the IP address whitelist to allow CloudSSO users to log on to the CloudSSO user portal from only specified IP addresses. This enhances access security.

2024-01

All

Configure the IP address whitelist

December 2023

Feature

Description

Release date

Supported region

References

Global acceleration

CloudSSO now offers a global acceleration feature to improve the stability of user access from international regions. (Under invitational preview)

2023-12

All

Accelerate access from outside the Chinese mainland

September

Feature

Description

Release date

Supported region

References

Quotas

CloudSSO is integrated with Quota Center to enable customers to apply for quota increases.

2023-09

All

Limits

June 2023

Feature

Description

Release date

Supported region

References

Alert notifications

You can configure alert notifications of System for Cross-domain Identity Management (SCIM) credential expiration and Security Assertion Markup Language (SAML) signing certificate expiration of CloudSSO by using Cloud Config and CloudMonitor.

2023-06

All

Configure alert notifications of SCIM credential expiration and SAML signing certificate expiration

November 2022

Feature

Description

Release date

Supported region

References

MFA

MFA settings for unusual logons are supported.

2022-11

All

Manage MFA

October 2022

Feature

Description

Release date

Supported region

References

Resource Access Management (RAM) user provisioning

RAM user provisioning is supported. You can create a RAM user provisioning for a member in your resource directory to create a RAM user that has the same username as a CloudSSO user that you use. This way, the CloudSSO user can access the resources of the member as the RAM user.

2022-10

All

Create a RAM user provisioning

August 2022

Feature

Description

Release date

Supported region

References

MFA

MFA settings can be applied to all users or a single user.

2022-08

All

Manage MFA

March 2022

Feature

Description

Release date

Supported region

References

Region expansion

Available in the Germany (Frankfurt) region.

2022-03

Germany (Frankfurt)

Create a directory

January 2022

Feature

Description

Release date

Supported region

References

Region expansion

Available in the China (Hong Kong) region.

2022-01

China (Hong Kong)

Create a directory

August 2021

Feature

Description

Release date

Supported region

References

CloudSSO

Cloud SSO is integrated with Alibaba Cloud Resource Directory to provide unified multi-account identity management and access control. You can use CloudSSO to centrally manage users of an enterprise who need to access Alibaba Cloud resources and assign access permissions on the accounts in a resource directory to the users. You can also configure settings to implement SSO access to Alibaba Cloud resources from an IdP. You need to configure the settings only once.

2021-08

China (Shanghai) and US (Silicon Valley)

What is CloudSSO?