12 docs tagged with "Identity"

Admin provisioning allows you to grant users from a parent tenant access to a child tenant. This is essential when setting up new tenants or managing cross-tenant access.

Some pipelines exist to serve a specific person in the moment: the clearest

Email domain group rules automatically assign users to groups based on their email address domain. When a user logs in for the first time via an external identity provider, the Identity Service checks their email against all configured rules and adds them to matching groups.

Groups simplify permission management by bundling roles together. Instead of assigning roles to each user individually, you assign roles to a group and add users to that group. Groups also support nesting — a group can contain child groups for hierarchical role inheritance.

Identity Management in OctoMesh Refinery Studio allows you to manage users, roles, groups, OAuth clients, identity providers, and email domain group rules for your tenant. All identity management features are accessible from the sidebar under the Identity section.

Identity providers allow users to authenticate with OctoMesh using external identity systems such as Google, Microsoft, Azure Entra ID, LDAP, or Active Directory. Each tenant configures its own set of providers independently.

Refinery Studio makes a pipeline's identity visible and manageable where you

OAuth clients are applications that can authenticate with OctoMesh. Every application that accesses OctoMesh APIs — whether a web application, a background service, or a CLI tool — must be registered as a client.

Why pipelines have an identity

Roles define what actions a user can perform in OctoMesh. Every permission check in the platform is based on roles. The Roles page lets you view, create, and delete roles in your tenant.

A service account is the identity a pipeline uses when it runs on its own —

The Users page allows you to manage user accounts in your tenant. You can create local users, assign roles and groups, reset passwords, and merge user accounts.