Single Sign-on
Single Sign-On (SSO) functionality of Qodana Cloud lets you use third-party identity providers for authentication in Qodana Cloud. This functionality is available only under Ultimate Plus licenses purchased for a minimum of ten users.
This section explains how you can manage users and authentication modules for authentication in Qodana Cloud and guides you through the SSO configuration process.
Configure SSO
Create a subdomain
Only users with the Admin and Owner organization roles can configure the single sign-on functionality in Qodana Cloud.
User authentication is carried out using a subdomain of Qodana Cloud, which you can create as explained below.
In your Qodana Cloud organization, navigate to the settings page.
On the settings page, click the tab.
On the tab, enter the name of the subdomain that you would like to use for authentication, and then click the button.
On the tab, copy and save the generated URL that you will be using for authentication, and then click the link to proceed to the next configuration stage.
Manage users and authentication modules
Based on the latest step of the previous action, you should be redirected to a JetBrains Hub instance.
Using the Access Management section of the Administration menu, navigate to the Auth Modules page. On this page, perform the following actions:
Select and configure the authentication modules that you would like to use.
Import users and groups, as well as assign them to Qodana user roles. Each imported user should be granted a Qodana role, which can be achieved by granting a role explicitly using the Roles tab or by creating user groups with Qodana roles and assigning users to those groups.
Authenticate in Qodana Cloud
Once you configured users and authentication modules, you can navigate to Qodana Cloud using the URL that was generated during the subdomain creation stage. On the page that opens, click the Login with SSO button.
This will redirect you to the authentication page containing configured providers.
