A CloudSSO directory is a CloudSSO instance that stores all identities, permissions, and authorization data you manage through CloudSSO. Create a directory before using any CloudSSO features.
Region for the CloudSSO directory
When you create a CloudSSO directory, you select a region where Alibaba Cloud stores all CloudSSO data — identities, permissions, and authorization data. Your cloud resources, such as Elastic Compute Service (ECS) instances and ApsaraDB RDS instances, can run in any other region regardless of where the directory is located. You can also use your cloud account to log in and access those resources across regions.
Select the region closest to your intended users to minimize latency when they access cloud resources through CloudSSO.
The following regions are available for the CloudSSO directory:
China (Shanghai)
China (Hong Kong)
South Korea (Seoul)
Singapore
US (Silicon Valley)
Germany (Frankfurt)
Limits
Each management account can create only one directory.
The directory region cannot be changed after creation. To use a different region, delete the existing directory and create a new one in the target region.
The directory name must be globally unique.
Procedure
Log in to the CloudSSO console.
In the top navigation bar, select the region for the directory.
Click Create Directory.
-
In the Create Directory panel, enter a globally unique directory name and click OK.
CloudSSO automatically creates the service-linked role
AliyunServiceRoleForCloudSSOto access some of your cloud resources.