Authentication & SSO

As an account administrator, you can manage how your team and users access Cube Cloud.

You can authenticate using email and password, a GitHub account, or a Google account. Cube Cloud also provides single sign-on (SSO) via identity providers supporting SAML, e.g., Okta, Google Workspace, Azure AD, etc.

<InfoBox>

SAML is available on Enterprise and above plans.

</InfoBox>

<Diagram src="https://ucarecdn.com/e3b3bce2-117e-4cbc-b516-c71b51b98888/" style="border: 0;" />

Configuration

To manage authentication settings, navigate to <Btn>Admin → Settings</Btn> of your Cube Cloud account, and switch to the <Btn>Authentication & SSO</Btn> tab.

Use the toggles in <Btn>Password</Btn>, <Btn>Google</Btn>, and <Btn>GitHub</Btn> sections to enable or disable these authentication options.

SAML

Use the toggle in the <Btn>SAML</Btn> section to enable or disable the authentication via an identity provider supporting the SAML protocol. Once it's enabled, you'll see the <Btn>SAML Settings</Btn> section directly below.

Check the following guides to get tool-specific instructions on configuration:

<Grid imageSize={[56, 56]}> <GridItem url="sso/google-workspace" imageUrl="https://static.cube.dev/icons/google-cloud.svg" title="Google Workspace" /> <GridItem url="sso/microsoft-entra-id" imageUrl="https://static.cube.dev/icons/azure.svg" title="Microsoft Entra ID" /> <GridItem url="sso/okta" imageUrl="https://static.cube.dev/icons/okta.svg" title="Okta" /> </Grid>