Workspaces
Authentication
In software, "authentication" refers to the process of verifying the identity of a user or agent. It's a crucial security measure to ensure that only authorized entities can access a system and its resources. Essentially, authentication confirms that someone or something is who or what they claim to be.
Cloudsmith supports the following authentication methods:
Single sign-on via Security Assertion Markup Language (SAML)
Cloudsmith offers support for single sign-on (SSO) at the workspace level using SAML. With SAML, you can use your existing SSO provider to manage and control access to your Cloudsmith workspace.
For more information, see Single sign-on via Security Assertion Markup Language (SAML).
SAML group sync
With SAML group sync, you can configure automatic mapping of your SAML groups to Cloudsmith teams. For more information, see SAML Group Sync.
System for Cross-domain Identity Management (SCIM)
With Cloudsmith’s support for SCIM, you can automatically provision new users, de‑provision existing users and update user profile information based on changes within your IdP.
For more information, see System for Cross-domain Identity Management (SCIM).
Two-factor authentication (2FA)
Cloudsmith provides support for two-factor authentication via a time-based one-time password (TOTP) application such as Google Authenticator, LastPass Authenticator, and Okta Verify.
For more information, see Two-factor authentication (2FA).
OpenID Connect (OIDC)
With Cloudsmith's support for OIDC, you can enable short-lived authentication tokens, helping to secure your pipelines against the exposure of credentials.
For more information, see OpenID Connect (OIDC)
