ContextQMD
Back to Netdata

Authentication & Authorization

docs/netdata-cloud/authentication-and-authorization/README.md

2.11.04.2 KB
Original Source

Authentication & Authorization

Learn how to authenticate with Netdata Cloud and manage team member permissions through role-based authorization.

Authentication

MethodDescriptionSetup Process
Email• Standard email and password authentication
• Recommended for individual users1. Visit Netdata Cloud
  1. Enter email address
  2. Follow verification process
  3. Set up password (new accounts) | | Google OAuth | • Authentication using Google account credentials • Your account will be linked to your Google email address | 1. Visit Netdata Cloud
  4. Click Google sign-in
  5. Complete Google authentication flow | | GitHub OAuth | • Authentication using GitHub account credentials • Your account will be linked to your GitHub email address | 1. Visit Netdata Cloud
  6. Click GitHub sign-in
  7. Complete GitHub authentication flow | | Enterprise SSO | • Advanced authentication for organizations using identity providers • Features:   - Identity provider integration   - Centralized management   - Enhanced security   - Audit logging | See Enterprise SSO documentation |

:::important

When using OAuth, your Netdata Cloud account will be automatically associated with the email address provided by the OAuth provider. Ensure you have access to this email address.

:::

Multi-Factor Authentication (MFA)

Multi-factor authentication (MFA) adds an extra layer of protection to your Netdata Cloud account. The availability of MFA depends on which sign-in method you use.

MethodMFA Availability
EmailNetdata Cloud does not currently offer built-in MFA for email/password accounts.
Google OAuthMFA is managed by Google. Enable it in your Google Account security settings.
GitHub OAuthMFA is managed by GitHub. Enable it in your GitHub account settings.
Enterprise SSOMFA is configured and enforced by your identity provider (e.g., Okta, Microsoft Entra ID, Google Workspace) during the SSO authentication flow.

For organizations that require MFA for all users, Enterprise SSO delegates authentication entirely to your identity provider, which can enforce MFA policies centrally.

Authorization

Once logged in, you can manage role-based access in your Space to give each team member the appropriate role. For more information, see Role-Based Access model.