Resource Access Management:Log on to the Alibaba Cloud Management Console as a RAM user

Logon methods

• General logon page

  Access the RAM User Logon page or the logon page of the international site (alibabacloud.com) and click Sign In as RAM User.

• Account-specific logon URL (for RAM administrators)

  As an administrator, you can find a dedicated logon URL for your RAM users. Log on to the RAM console with your Alibaba Cloud account. In the left-side navigation pane, click Overview. On the page that appears, you will find the Login URL in the Basic Information section. RAM users can use this URL to log on to the Alibaba Cloud Management Console.

  

• Direct logon URL with pre-filled username

  You can create a direct logon link that pre-fills the username. To do this, add the username parameter to the logon URL. When a user opens this link, they only need to enter their password. The value of the username parameter is in the User Principal Name (UPN) format. The username of a RAM user is the logon name that is displayed in the RAM console. For example, you can use https://signin.alibabacloud.com/login.htm?username=Alice@example.onaliyun.com to log on to the Alibaba Cloud Management Console as a RAM user named Alice@example.onaliyun.com.

Log on with a username and password

The following section provides an example on how to log on to the Alibaba Cloud Management Console as a RAM user by using the RAM User Logon page.

1. Access the RAM User Logon page as a RAM user.

2. On the RAM User Logon page, enter the username of the RAM user and click Next.

   

   • Using the default domain name: The format of the logon name of the RAM user is <UserName>@<AccountAlias>.onaliyun.com, such as usern***@company-alias.onaliyun.com.

     Note

     <UserName> indicates the username of the RAM user. <AccountAlias>.onaliyun.com indicates the default domain name. For more information, see Terms and View and modify the default domain name.

   • Using an account alias: The format of the logon name of the RAM user is <UserName>@<AccountAlias>, such as username@company-alias.

     Note

     <UserName> indicates the username of the RAM user. <AccountAlias> indicates the account alias. For more information, see Terms and View and modify the default domain name.

   • Using a domain alias: If you configured a domain alias, you can use this logon name. The format of the logon name of the RAM user is <UserName>@<DomainAlias>, such as username@example.com.

     Note

     <UserName> indicates the username of the RAM user. <DomainAlias> indicates the domain alias. For more information, see Terms and Create and verify a domain alias.

3. Enter the logon password and click Log On.

4. (Optional) If multi-factor authentication (MFA) is enabled for the user, complete the additional authentication step.

   For more information, see multi-factor authentication (MFA) and Bind an MFA device to a RAM user.

Log on with a passkey

If a passkey is bound to a RAM user, they can use it to log on. Passkey authentication verifies that you are using a registered device and then uses that device's built-in security—such as fingerprint, face ID, or a PIN—to confirm your identity. For more information, see Use a passkey to log on to the Alibaba Cloud Management Console.