User Administration

Access roles

The DuploCloud Portal contains the following access roles:

• An Administrator has access to all Tenants plus access to administrative functions like Plan configuration, system dashboards, system defaults, etc.

• A User is a regular user that can be given access to a specific Tenant. A Tenant can be accessed by multiple users and a user can be given access to multiple Tenants.

• The Security role is for security and compliance auditors, in order to verify security and compliance dashboards and reports.

Read Only Permissions

For each of the access roles above, DuploCloud supports Read Only permissions, which restrict a user to "view" the resources that are in scope of that particular role but prevents them from making any updates to those resources. Read Only permissions also prevent Just-In-Time access to the underlying Cloud platform.

Single Sign On (SSO)

The user name is meant to be an email address associated with an Identity provider. Currently, supported identity providers are Google and Microsoft Azure. Once a user is created in the DuploCloud portal, the user receives an account-creation email with login instructions. No passwords are involved, the user simply has to navigate to their DuploCloud environment and use SSO to log in to their account.

Keycloak Integration

DuploCloud supports using Keycloak to integrate with external identity providers. For example, integrating LDAP directories (such as Active Directory (AD) or OpenLDAP) provides centralized authentication and user federation without requiring local DuploCloud accounts. Additional identity providers (e.g., OpenID Connect (OIDC) and SAML systems) can be integrated as needed.