You can log on to the Alibaba Cloud Management Console as a Resource Access Management (RAM) user using several methods. Depending on your security requirements and preferences, you can log on with a username and password or a Passkey.
RAM user logon portals
RAM provides several logon portals. You can choose a portal based on your preferences.
General portal: You can go to the RAM User Logon page directly. Alternatively, you can go to the Alibaba Cloud account logon page and click RAM User Logon.
Dedicated portal (Recommended): If you know your company's default domain name, such as
@company-alias.onaliyun.com, you can use a dedicated link to go directly to your company's logon page. This way, you do not need to manually enter the domain name. For more information about how to view or change the default domain name, see Manage RAM user logon domain names.Link format:
https://signin.alibabacloud.com/<Your-Default-Domain-Name>/login.htmLog on to the RAM console using your Alibaba Cloud account. On the Overview page, you can find the RAM user logon URL and share it with other users.
RAM user-specific logon URL (Recommended): You can specify
username=RAM-Username@<Your-Default-Domain-Name>in the logon URL to pre-fill the username. Then, you only need to click Next and enter your password.Link format:
https://signin.alibabacloud.com/login.htm?username=RAM-Username@<Your-Default-Domain-Name>
Method 1: Log on with a username and password
The following steps describe how a RAM user can log on using the general logon portal.
Go to the RAM User Logon page.
On the RAM User Logon page, enter your username and click Next. The username must be in one of the following formats:
<RAM-Username>@<Default-Domain-Name>or<RAM-Username>@<Domain-Alias>. For more information about how to view or change the default domain name and domain alias, see Manage RAM user logon domain names.
Enter the logon password for the RAM user, and then click Log On.
(Optional) If multi-factor authentication (MFA) is enabled, you must also complete MFA. For more information, see Multi-factor authentication (MFA) and Bind an MFA device as a RAM user.
Method 2: Log on with a Passkey
Passkey authentication first verifies that the device is trusted. Then, it uses the device's built-in biometrics, such as a fingerprint or face recognition, or a PIN to verify your identity. This method is secure and does not require a password.
Prerequisites
Enabled by administrator: A RAM administrator must enable the option that allows RAM users to log on with passkeys in the global settings. This option is enabled by default for Alibaba Cloud accounts. To change this setting:
Log on to the RAM console as an Alibaba Cloud account or as a RAM user with administrative permissions (
AliyunRAMFullAccess).On the Settings page, in the Global Security section, click Modify.
In the Global Security dialog box, enable Allow users to log on with passkeys.
You have already set up a passkey: A passkey (such as Touch ID or Windows Hello) is set up in your personal security settings. For more information, see Manage passkeys for Resource Access Management (RAM) users.
Logon steps
Go to the RAM User Logon page.
On the RAM User Logon page, enter your username and click Next. The username must be in one of the following formats:
<RAM-Username>@<Default-Domain-Name>or<RAM-Username>@<Domain-Alias>. For more information about how to view or change the default domain name and domain alias, see Manage RAM user logon domain names.Click Log on with Passkey. If the passkey logon fails, you can also click Log on with Password.
A security authentication pop-up window appears in your browser. If you have bound multiple types of passkeys, you must select a device type.
After you complete the passkey authentication, you are logged on.
FAQ
What do I do if a RAM user forgets their logon password?
You must contact your RAM administrator to reset the password. For security purposes, RAM users cannot retrieve their own passwords. For more information, see Change the logon password of a RAM user.