CloudSSO requires activation before use. The service is free of charge.
Prerequisites
-
A resource directory is enabled and a multi-account organization is set up.
-
Only the management account or a RAM user with administrative rights in the management account can enable CloudSSO.
-
Management account
The management account enables and fully administers the resource directory, including all members. It must be an Alibaba Cloud account that has passed enterprise identity verification. Each resource directory has one management account.
-
RAM users
Attach the AliyunCloudSSOFullAccess system policy to RAM users of the management account. Grant permissions to RAM users
-
Procedure
-
Log on to the CloudSSO console.
-
Read Terms of Service and select Read and Agree to Terms of Service.
-
Click Activate Now.
CloudSSO automatically establishes a trust relationship with your resource directory, giving you access to its folders and members.
What to do next
You must create the CloudSSO directory. Create the CloudSSO directory