Drive and Photo Service:RAM configuration

Step 1: Create an OAuth application

1. Log in to the RAM console with your Alibaba Cloud account.

2. In the left navigation pane, choose Integrations > OAuth Preview.

3. On the Enterprise Applications tab, click Create Application.

4. In the Create Application panel, configure the application parameters.

   1. Enter an Application Name and a Display Name.

   2. Set Application Type to WebApp.

   3. Set the Access Token Validity.

      The validity period of an access token ranges from 900 seconds (15 minutes) to 10,800 seconds (3 hours). The default value is 3,600 seconds.

   4. Set the Refresh Token Validity.

      The validity period of a refresh token ranges from 7,200 seconds (2 hours) to 31,536,000 seconds (1 year). The default value is 2,592,000 seconds.

   5. Set the Callback Address.

      Important

      In the example, change domainId to your actual enterprise code.

      The callback URL format is https://domainId.api.aliyunpds.com/v2/oauth/callback.

5. Click Create Application.

Step 2: Add OAuth scopes

Add OAuth scopes to allow PDS for Enterprise to retrieve RAM user information.

1. Log in to the RAM console with your Alibaba Cloud account.

2. In the left navigation pane, choose Integrations > OAuth Preview.

3. On the Enterprise Applications tab, click the name of your application.

4. On the Application OAuth Scopes tab, click Add OAuth Scopes.

5. In the Add OAuth Scopes panel, select the aliuid and profile scopes.

6. Click OK.

Step 3: Create a secret

1. On the application's details page, click App Secrets > Create Secret.

2. In the Create App Secret dialog box, view the application secret, click Copy, and then click Close.

   Important

   • The application secret is visible only upon creation and cannot be retrieved later. Save it securely.

   • You can create a maximum of two application secrets for each application.

   The dialog box contains the AppSecretId and AppSecretValue fields. Make sure to save the AppSecretValue. In addition to copying the value, you can also click Download CSV File to save the secret information.

3. Save the Application ID and AppSecretValue. You will need them in Step 4.

Step 4: Enable RAM configuration

1. Log on to CDE and go to the admin console.

2. In the left navigation pane, choose Dedicated Login Configuration > RAM configuration.

3. On the RAM configuration page, enable the RAM configuration switch.

4. In the Login Settings section, enter the RAM configuration parameters.

   1. OAuth2.0 Client ID: Enter the Application ID from Step 3.

   2. AppSecret: Enter the AppSecretValue from Step 3.

5. Click Save.

Step 5: Link a user to a RAM account

1. Log on to CDE and go to the admin console.

2. In the left navigation pane, choose Team Management, select a user, and click Edit.

3. In the Login Account Information section, set RAM user to the UID of the corresponding RAM user.

   Note

   You can find the RAM user UID on the Users page of the RAM console. For more information, see View RAM user information.

4. Click Save.