mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-10-03 00:13:18 +00:00
17 lines
69 KiB
HTML
17 lines
69 KiB
HTML
<!doctype html>
|
||
<html lang="en" dir="ltr" class="docs-wrapper docs-doc-page docs-version-current plugin-docs plugin-id-default docs-doc-id-pages-for-subheaders/about-authentication">
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta name="viewport" content="width=device-width,initial-scale=1">
|
||
<meta name="generator" content="Docusaurus v2.0.0-beta.21">
|
||
<link rel="search" type="application/opensearchdescription+xml" title="Rancher Manager" href="/opensearch.xml"><title data-rh="true">Authentication | Rancher Manager</title><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="http://docs.ranchermanager.rancher.io//pages-for-subheaders/about-authentication"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Authentication | Rancher Manager"><meta data-rh="true" name="description" content="One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters."><meta data-rh="true" property="og:description" content="One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters."><link data-rh="true" rel="icon" href="/img/favicon.png"><link data-rh="true" rel="canonical" href="http://docs.ranchermanager.rancher.io//pages-for-subheaders/about-authentication"><link data-rh="true" rel="alternate" href="http://docs.ranchermanager.rancher.io//pages-for-subheaders/about-authentication" hreflang="en"><link data-rh="true" rel="alternate" href="http://docs.ranchermanager.rancher.io//pages-for-subheaders/about-authentication" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://30NEY6C9UY-dsn.algolia.net" crossorigin="anonymous"><link rel="stylesheet" href="/assets/css/styles.31d3122a.css">
|
||
<link rel="preload" href="/assets/js/runtime~main.d2604d48.js" as="script">
|
||
<link rel="preload" href="/assets/js/main.aa78001f.js" as="script">
|
||
</head>
|
||
<body class="navigation-with-keyboard">
|
||
<script>!function(){function t(t){document.documentElement.setAttribute("data-theme",t)}var e=function(){var t=null;try{t=localStorage.getItem("theme")}catch(t){}return t}();t(null!==e?e:"light")}()</script><div id="__docusaurus">
|
||
<div role="region"><a href="#" class="skipToContent_fXgn">Skip to main content</a></div><nav class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Navigation bar toggle" class="navbar__toggle clean-btn" type="button" tabindex="0"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a><div class="navbar__item dropdown dropdown--hoverable"><a aria-current="page" class="navbar__link active" aria-haspopup="true" aria-expanded="false" role="button" href="/">v2.6</a><ul class="dropdown__menu"><li><a aria-current="page" class="dropdown__link dropdown__link--active" href="/pages-for-subheaders/about-authentication">v2.6</a></li><li><a class="dropdown__link" href="/v2.5/pages-for-subheaders/about-authentication">v2.5</a></li><li><a class="dropdown__link" href="/v2.0-v2.4/pages-for-subheaders/about-authentication">v2.0-v2.4</a></li><li><a class="dropdown__link" href="/versions">All versions</a></li></ul></div></div><div class="navbar__items navbar__items--right"><a aria-current="page" class="navbar__item navbar__link navbar__docs navbar__link--active" href="/">Docs</a><a href="https://github.com/rancher/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn btn-secondary icon-github">GitHub<svg width="13.5" height="13.5" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_lCJq"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div class="main-wrapper docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebar_njMd"><nav class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">Rancher 2.6</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/getting-started">Getting Started</a><button aria-label="Toggle the collapsible sidebar category 'Getting Started'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/how-to-guides">How-to Guides</a><button aria-label="Toggle the collapsible sidebar category 'How-to Guides'" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/new-user-guides">New User Guides</a><button aria-label="Toggle the collapsible sidebar category 'New User Guides'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" tabindex="0" href="/pages-for-subheaders/advanced-user-guides">Advanced User Guides</a><button aria-label="Toggle the collapsible sidebar category 'Advanced User Guides'" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" tabindex="0" href="/pages-for-subheaders/authentication-permissions-and-global-configuration">Authentication, Permissions, and Global Configuration</a><button aria-label="Toggle the collapsible sidebar category 'Authentication, Permissions, and Global Configuration'" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" tabindex="0" href="/pages-for-subheaders/about-authentication">About Authentication</a><button aria-label="Toggle the collapsible sidebar category 'About Authentication'" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-5 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/authentication-config">Authentication Config</a><button aria-label="Toggle the collapsible sidebar category 'Authentication Config'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-5 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/configure-microsoft-ad-federation-service-saml">Configure Microsoft AD Federation Service (SAML)</a><button aria-label="Toggle the collapsible sidebar category 'Configure Microsoft AD Federation Service (SAML)'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-5 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/configure-shibboleth-saml">Configure Shibboleth (SAML)</a><button aria-label="Toggle the collapsible sidebar category 'Configure Shibboleth (SAML)'" type="button" class="clean-btn menu__caret"></button></div></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/manage-role-based-access-control-rbac">Manage Role-Based Access Control (RBAC)</a><button aria-label="Toggle the collapsible sidebar category 'Manage Role-Based Access Control (RBAC)'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/about-provisioning-drivers">About Provisioning Drivers</a><button aria-label="Toggle the collapsible sidebar category 'About Provisioning Drivers'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/about-rke1-templates">About RKE1 Templates</a><button aria-label="Toggle the collapsible sidebar category 'About RKE1 Templates'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/manage-cluster-templates">Cluster Templates</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies">Pod Security Policies</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry">Configuring a Global Default Private Registry</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/custom-branding">Custom Branding</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/manage-clusters">Manage Clusters</a><button aria-label="Toggle the collapsible sidebar category 'Manage Clusters'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/manage-projects">Manage Projects</a><button aria-label="Toggle the collapsible sidebar category 'Manage Projects'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/monitoring-alerting-guides">Monitoring/Alerting Guides</a><button aria-label="Toggle the collapsible sidebar category 'Monitoring/Alerting Guides'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/monitoring-v2-configuration-guides">Monitoring V2 Configuration Guides</a><button aria-label="Toggle the collapsible sidebar category 'Monitoring V2 Configuration Guides'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/istio-setup-guide">Istio Setup Guide</a><button aria-label="Toggle the collapsible sidebar category 'Istio Setup Guide'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/cis-scan-guides">CIS Scan Guides</a><button aria-label="Toggle the collapsible sidebar category 'CIS Scan Guides'" type="button" class="clean-btn menu__caret"></button></div></li></ul></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference-guides">Reference Guides</a><button aria-label="Toggle the collapsible sidebar category 'Reference Guides'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/explanations">Explanations</a><button aria-label="Toggle the collapsible sidebar category 'Explanations'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/faq">FAQ</a><button aria-label="Toggle the collapsible sidebar category 'FAQ'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/troubleshooting">Troubleshooting</a><button aria-label="Toggle the collapsible sidebar category 'Troubleshooting'" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/contribute-to-rancher">Contributing to Rancher</a></li></ul></nav></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_GujU"><div class="docItemContainer_Adtb"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_OVgt"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/how-to-guides"><span itemprop="name">How-to Guides</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/pages-for-subheaders/advanced-user-guides"><span itemprop="name">Advanced User Guides</span></a><meta itemprop="position" content="2"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/pages-for-subheaders/authentication-permissions-and-global-configuration"><span itemprop="name">Authentication, Permissions, and Global Configuration</span></a><meta itemprop="position" content="3"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">About Authentication</span><meta itemprop="position" content="4"></li></ul></nav><span class="theme-doc-version-badge badge badge--secondary">Version: v2.6</span><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_aoJ5"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Authentication</h1></header><p>One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters.</p><p>This centralized user authentication is accomplished using the Rancher authentication proxy, which is installed along with the rest of Rancher. This proxy authenticates your users and forwards their requests to your Kubernetes clusters using a service account.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="external-vs-local-authentication">External vs. Local Authentication<a class="hash-link" href="#external-vs-local-authentication" title="Direct link to heading"></a></h2><p>The Rancher authentication proxy integrates with the following external authentication services.</p><table><thead><tr><th>Auth Service</th></tr></thead><tbody><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-active-directory">Microsoft Active Directory</a></td></tr><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-github">GitHub</a></td></tr><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-azure-ad">Microsoft Azure AD</a></td></tr><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-freeipa">FreeIPA</a></td></tr><tr><td><a href="/pages-for-subheaders/configure-openldap">OpenLDAP</a></td></tr><tr><td><a href="/pages-for-subheaders/configure-microsoft-ad-federation-service-saml">Microsoft AD FS</a></td></tr><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-pingidentity">PingIdentity</a></td></tr><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-keycloak-oidc">Keycloak (OIDC)</a></td></tr><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-keycloak-saml">Keycloak (SAML)</a></td></tr><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-okta-saml">Okta</a></td></tr><tr><td><a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/configure-google-oauth">Google OAuth</a></td></tr><tr><td><a href="/pages-for-subheaders/configure-shibboleth-saml">Shibboleth</a></td></tr></tbody></table><br>However, Rancher also provides [local authentication](/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/create-local-users).<p>In most cases, you should use an external authentication service over local authentication, as external authentication allows user management from a central location. However, you may want a few local authentication users for managing Rancher under rare circumstances, such as if your external authentication provider is unavailable or undergoing maintenance.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="users-and-groups">Users and Groups<a class="hash-link" href="#users-and-groups" title="Direct link to heading"></a></h2><p>Rancher relies on users and groups to determine who is allowed to log in to Rancher and which resources they can access. When authenticating with an external provider, groups are provided from the external provider based on the user. These users and groups are given specific roles to resources like clusters, projects, multi-cluster apps, and global DNS providers and entries. When you give access to a group, all users who are a member of that group in the authentication provider will be able to access the resource with the permissions that you've specified. For more information on roles and permissions, see <a href="/pages-for-subheaders/manage-role-based-access-control-rbac">Role Based Access Control</a>.</p><div class="admonition admonition-note alert alert--secondary"><div class="admonition-heading"><h5><span class="admonition-icon"><svg xmlns="http://www.w3.org/2000/svg" width="14" height="16" viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</h5></div><div class="admonition-content"><p>Local authentication does not support creating or managing groups.</p></div></div><p>For more information, see <a href="/how-to-guides/advanced-user-guides/authentication-permissions-and-global-configuration/about-authentication/authentication-config/manage-users-and-groups">Users and Groups</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="scope-of-rancher-authorization">Scope of Rancher Authorization<a class="hash-link" href="#scope-of-rancher-authorization" title="Direct link to heading"></a></h2><p>After you configure Rancher to allow sign on using an external authentication service, you should configure who should be allowed to log in and use Rancher. The following options are available:</p><table><thead><tr><th>Access Level</th><th>Description</th></tr></thead><tbody><tr><td>Allow any valid Users</td><td><em>Any</em> user in the authorization service can access Rancher. We generally discourage use of this setting!</td></tr><tr><td>Allow members of Clusters, Projects, plus Authorized Users and Organizations</td><td>Any user in the authorization service and any group added as a <strong>Cluster Member</strong> or <strong>Project Member</strong> can log in to Rancher. Additionally, any user in the authentication service or group you add to the <strong>Authorized Users and Organizations</strong> list may log in to Rancher.</td></tr><tr><td>Restrict access to only Authorized Users and Organizations</td><td>Only users in the authentication service or groups added to the Authorized Users and Organizations can log in to Rancher.</td></tr></tbody></table><p>To set the Rancher access level for users in the authorization service, follow these steps:</p><ol><li>In the upper left corner, click <strong>☰ > Users & Authentication</strong>.</li><li>In the left navigation bar, click <strong>Auth Provider</strong>.</li><li>After setting up the configuration details for an auth provider, use the <strong>Site Access</strong> options to configure the scope of user authorization. The table above explains the access level for each option.</li><li>Optional: If you choose an option other than <strong>Allow any valid Users,</strong> you can add users to the list of authorized users and organizations by searching for them in the text field that appears.</li><li>Click <strong>Save</strong>.</li></ol><p><strong>Result:</strong> The Rancher access configuration settings are applied.</p><div class="admonition admonition-note alert alert--secondary"><div class="admonition-heading"><h5><span class="admonition-icon"><svg xmlns="http://www.w3.org/2000/svg" width="14" height="16" viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>SAML Provider Caveats:</h5></div><div class="admonition-content"><ul><li>SAML Protocol does not support search or lookup for users or groups. Therefore, there is no validation on users or groups when adding them to Rancher.</li><li>When adding users, the exact user IDs (i.e. <code>UID Field</code>) must be entered correctly. As you type the user ID, there will be no search for other user IDs that may match.</li><li>When adding groups, you must select the group from the drop-down that is next to the text box. Rancher assumes that any input from the text box is a user.</li><li>The group drop-down shows only the groups that you are a member of. You will not be able to add groups that you are not a member of.</li></ul></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="external-authentication-configuration-and-principal-users">External Authentication Configuration and Principal Users<a class="hash-link" href="#external-authentication-configuration-and-principal-users" title="Direct link to heading"></a></h2><p>Configuration of external authentication requires:</p><ul><li>A local user assigned the administrator role, called hereafter the <em>local principal</em>.</li><li>An external user that can authenticate with your external authentication service, called hereafter the <em>external principal</em>.</li></ul><p>Configuration of external authentication affects how principal users are managed within Rancher. Follow the list below to better understand these effects.</p><ol><li><p>Sign into Rancher as the local principal and complete configuration of external authentication.</p><p><img loading="lazy" alt="Sign In" src="/assets/images/sign-in-f314d4617d171cee6ff47132b18c7be9.png" width="503" height="150" class="img_ev3q"></p></li><li><p>Rancher associates the external principal with the local principal. These two users share the local principal's user ID.</p><p><img loading="lazy" alt="Principal ID Sharing" src="data:image/png;base64,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" width="272" height="171" class="img_ev3q"></p></li><li><p>After you complete configuration, Rancher automatically signs out the local principal.</p><p><img loading="lazy" alt="Sign Out Local Principal" src="data:image/png;base64,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" width="513" height="84" class="img_ev3q"></p></li><li><p>Then, Rancher automatically signs you back in as the external principal.</p><p><img loading="lazy" alt="Sign In External Principal" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAggAAABUCAIAAABoTViRAAAbYklEQVR42u2dCVAc15nHJeQktrfkVLIbOVvr3ar1VnlrUxvVbtW6kqw3tV5XEiWreE1JFlEsEIck7ltGBgQIEOhgdCJ0H1ySuCUkJO4bxC0sAcMpbgTiHIaZAeZg2E903B5P9zQNzNE9fP/6SoV6Xr/Xx3vf7929YRGFQqFQKA1tMPkVzM3NdXZ2FhUVpaen5+fn19bWvnr1Cl8MCoVCrTswAA+Ki4tDQkIs6RQQEACoUCqV+IZQKBRqXYChsLBwz549lsvJxcVFKBTiSzIDqRbUDf0TqU97BfnNR7Ia0dDQTGWnC5uhJEJ5hFLJFTCIxeLDhw9brkSxsbHoWPmr4enZz68Vv+0Zv8HlFhoaGncMSuWu68VQQk0MBpFI5OrqarlyXbx4Ua1Wc8rfbd269acc0OjoKJepcKW8fbN3ApEL33CL/ffITKc7T7DKhoZmQjtwuxJK4ibXWKJgQgmFcmoyMEilUmdnZ8vVKj4+nlMuD5zyBg5oZGSEm0gQyeS/v5BH5Lx/i8ws7RyZV6qw/YRCcURQHks6RqBsEoUUSuv0rNwEYAgLC7Ncmzo7O7kGBgsLi3dNIY6DQaFa+FVUFuS2tzzjo/KbFjjW2kOhUOTgH5TQH3jEQWn9n7PZ5KiDkcCQlZVluWZBg0Mul3MKDOCjTZI6x8HgkVIN+exNj/jml1NY9lAojqtpaApKK5RZr9Qa44FBqVSymYPERg8ePEAwcBwMPeMzRPdldAnOKEOh+KFzRUIos1Byu8dnjASG3NxcSz3JxsaGI40GBIMu2cSWQQ77+Ew2FjYUii9Sqxc/EjyCkrs3rsxIYPDw8LDUnwoKChAMnAWDakH9jk8iZK+spgEsbCgUjwRlFkruD30SoRQbHAwTExOWepVAIEAwcBYMea1DxCSHmTkFljQUikcSzymIwlvUPmxwMOTl5ekXDHv27EEwcBYMZ4taIGP9S1gGFjMUinf659B0KL/ni4UGB8O5c+cs9a3h4WEEAzfBcDT7GWSs/YmVWMZQKN7JPqECyu/x3OcGB4OubfLWotbWVgQDN8FwJKsRMhb8i2UMheKdyPJrcDB4enrqHQxVVVUIBgQDCoXiKxjc3d31Dobi4mIEA4IBhULxFQzBwcF6B8PTp08RDAgGFArFVzCcOXNG72Do6elBMCAYuKA5hepcebt+N4PKbBkanplDJ4UyZzAkJSXpHQwikQjBgGDggval1m34Mnlaf4s2FKqFN/3T/vVUDjoplDmDQSgU6pcKjo6OXHiCCAYEA2hzYDqA4aV4Vl8RAmMgwu99lYo70qLMGQwqlepPf/qTHsFw69YtBAOCgbaubRxTLiz8JW8vqN84lAp+vGNMsupItDQpk0OEYAMiKcPNqtVqJQtB6VvFF64WFhaoUS3ouGDm61lRKgyXCj8pFAqxeGZwcLChoaGsrLysrAz+GBgYEIvFcrmC/Y0wpMJ8C/AwlauSod8XL8EAOnnypB7B0NLSgmBAMHzXaywG5zW/5Z/6/a9SjGDvBKU/aBmCdHsmpYQT//5XOpPe5JdsQWc/DMo4WiBUUj66O/ENGG7WMQ2k9fT07N79xbJmbb3Xy8vn2rUb/f0DzG5aUwLBKWpUR46EMZySlZVFewETExO6TklKStIKTDsNHRzl9PT0zZuxX3xhzXCnN27cmJmZ0To3LCycGrKkpJT2euRyOW0SZIADB5zYPHMts7ffB+cCw9gEtrGx9fU9mJCQ+OrVKDOJzQEM3d3d+qKCt7c3RzygacEQ+o0kEgmCoaR7jHCmRjMgAaR7tfrFGuP54k611r30i2TET3+4Ubp2MGhBoqamls3zdHJyoY2B4TuyusAAUemqArMBA9Sgr127zv4e7969q5kc78Cgaba29h0dneYMBtDRo0f1Aoa6ujoEw7IaHh6+cOEC+xoir8EwLp1/OyDNyGD43hIY/nCjbI3xvHM4Xab49jUtqNV/uFFO/PSmf6p+wQD25z/vOX78BPPzFAqFEIz29MePs1cKBrC+vr7VgWF6Wuzu7rnSewwNDQOcmAEYCIOnZM5gGBwctLKyWiMV/P39ueN8OQuGsbGxH//4x3BtAoHA+K1R44Phz7erjEwFsL8KTIek//rIvbUC5lAKgG1UMt8/JasbmPyvi4Wav+odDAQb4uMTGWIGcug6Nzg4ZBVgAH9K22hgBsPs7Kynp/fq7vHevftmAwawJ0+qzBYMIHjra6HC3r17p6enEQzLys3NjRh+sLCwCAkJMW8wVPaOG58KYH8bnvl6pGfN8Wz8Mnl4Zu6Ty8Wb/FI2Un41BBjA9u61Y/ja1f79jgxQ0TVmwAAGsPb2jpWCISYmRlds0IyIibl4/vwFFxc32gDg34nrNA8w2Nk5SKVSswUD6M6dO6ujwq5du7iwcR4vwAD4hCdGsGHTpk2HDx82VzCIZhVbQjNNAoYd8a+3j92oj6gADP99qYj2p5WCATymUNhKWFNTU1bWI0dHZ1pfk55Ovy96Z2enrn4kwnJyclcBBoANtWOTAQxdXV20Phpup6+vj2wHq1Qq+O+ePTbUkPn5BcYBQ0bGvRJGlZdX6AKDq6sb+b6eP2+CqGxt7WgfYE1NjTmDAZSRkbFSKtjb23d3d3PN/3J5jEEmk/32t78l2w0RERFGG28wJhjc7jWYhApg12teZ8jIQqHhwPDHm2UrBcOXXx7SCjYzM+Pl5UMN6ePjSxttVJSAufaqa24SMxjA6usb2IPh7Nlz1BgcHPaPjo5Rk+7qekGFWUhIqFqtNgIYBgcH2eRVWjB4e2u/hampKWhhUEPeuhVr5mAAAUVtbGxYUgEqvJzqQeIFGAj95je/IdiwcePG06dPG4cNRgNDRc/YRhNRASwop+kvl9E7Hl3Zeba8nbRz5R1Xqro2+aWwieeNQylj0vn0pkHNGM5XdOS0jTBPZ2cJBtCTJ1W0TpY2WkfH7/i+Y8eOa50I1XPauUnLggFS1Oq/0gUGsVhsY2NLjSE1VedoPNWZQnKQ4XkHBhAwgBoyIiLS/MEAmpubS09Pt7OzY/5SW15eHmfdLvfBAAVj+/btJBug3WA2YBDPKf7p+KMNpgPDm/5pMZWdVb3jVMtuH/6Pc3krGnxexRNgD4b29g5dHd9aamtr1wpWUVFJ9ZX372euAgxglZWVbMBQU1NLOy4CTkPX03B1dafOzeUpGOAhUEOGhx9dF2Aguwjr6+ujoqK8vLxsbW137NgBqPDx8YmOjoanMz8/v8hhcR8MROULnirZp2SE8QbjgOGrx89NSAV9Tns1PBiampqoId3cPKghoVqqFezly2HqKEVQUPDqwAC1+NnZ2WXBcPv2Heq5vr5fMjwNDw8vuhaDio9goH2SFy9eWkdg4LV4AQaCDWS7YdOmTSEhIQadw2oEMNQPTL5x6NuOmq2nc+LqexAMtGBQq9WXLl2hhrx69Ro1TnCmWgusoHIWHHyE2ps0MTHJ7M6gwh4SEqprTJgZDJGRx6knnj59huFpuLq6AcAAHmFhR8+di46Njc/Pz9c1xlBUVKyik0wm4wIYDh70o71m8wEDPOiMjIxjx45lZmYyTI9bkUZGRpKTkyFLQUaE+BEMLPuUyPEGaDcIBALDjTcYAQz/d6uC8KoWfik74ytlcqWpJq1yHAzg1rOzs6nBaD17V1eXVjCB4LSu+vvDh1nMYAAP29vbRzvzkiy2usDg5eVNN8CQxvA0wL3Q7jJECwa4feAWrdE2dJjB8Phxdm1tnS4jCxobMMD7uns3iTqQDhc8Pj5uDmCABmNiYqK1tbXmlqgvXrxYY7SFhYWaq+RsbW1zcnIUCgWCgY3IeUoGXftmBDAABt4KSPuBf1pEoZA8wjV3z3LwWb9g2L/fMSEhESwuLv7cufNaI8mk0S5+PnEiSisY+LWlhHqproo6N0kLDHCKRCIBDFBTz83NYwADeFKthgthpaWlq3hKtGBYqTGDgdnIiTO0YNi37wDxvm7dioMmEe3jWlr8nGw0L2EoMICbhvYB7aSjnTt33rt3b3V7B0ItA3yZrsmsJvmg21rAIJVKDxpdLi4umzdvNvTaN+OMMaQ+G3gofKmJCk6BIaGh792wTOODgY25u3tSm+9QKsFJaVX5JyenFpc2KKXuSwGVa606LLVnfGxsvKSklHbLJrFYrAsMUKe0tbWnntXQ8NT8wMDGAgODjDnaahAwdHd3u7m5MU8/9fLyWtFiDXgogJNlp7eePXuWurciZ8EwNja2wdQy0No3k2yixykwvHEoZWZe+W4oF8Hg7x9Iu4a2r6+fMj/yGFmHu3LlKsO2E7rAMDQ0BDHQTjwlzk1NTaWCAS5v716aRV7Pnj1fh2AID48wcoe5nsEA1YpLly6xX7Pm4+OTm5vLMG4DLcrW1laoU7Bf8bBnz57a2loEA3swBAYGIhj0bltC7ytUaq6BwdPTW9ei5aXx3mOUGvq369Go01iJmiwzGPr7+xeXVlHQdpoDAB48eEgFw9zcHG2PCnV9nHmDwdf3y6qqauN/m0GfYFAoFEFBQavb6wL8fkRERGxsbEFBATw7yF6XL18OCAj4/PPPVxeh0TYjXAsYJBKJt9Hl6Oio2ZUUHBzM364kLoPhXU6CITr6gi4vQ63XgyvX/HoubW/S0gj2xLJgWNSxiXdl5ZPCwiIqGCAt2s2aVjcthxYMLi5uvr4Hqebt7bsKMOzbd8DR0VmXkd0YKwUDNKpM8sUefYLh/PnzllxSfX09Dj5TtW3bNrK5EBUVxd/BZwSDLjDY2+87deoMVP9pe2MKCopooxoeHtaq1B8+HATZQ3Mq59Wr16gRZmZmsgED7f5L0IKpqamhnZUElWW6Dy0k6QsMutYxyGQy2n2imMGwlumqtrb2xPuinSbb0iLkMRjAC1tyTNbW1gyLJNchGJRK5e9+9zuyrQBU4PV0VQTD4nLTVdva2qg+bv/+A7S1gZMnBdTxYTs7B02jncoZFBTCBgyLdCuTiYmetGCg3a8JDjI/ELFYDKVeoVBozlvlOBjI6aotLS3UpJ2dXY3/SRX9gAFegJOTkyX3xLCtynoDAzRmP/30U3JcITg4mO8L3PgAhoW/j3jIJvBbAWniOYXewQCKj4+nBsjKekSNirZ5wcagnkv2oTODYWxsnFop9vcPpAVDcnIK+13/SGnusQoIhEchkUj4AgbQV18FcKHRoB8wfP3115aclI2NjaF76HgBBqDCrl27yLaCIUabEQxa9jdH7gEY3O49ZRP4kyslq7vlZcEwNjZGdXMuLm5a8YyOjjLvs81s5PbdzGAA0S6EpgXD06dPaT+GLJPNMjwQKnimpqZ4BAaRSERNHWhh5G9t6QcMV65cseSqoDW9zsEA7VCyrbBx48bw8HBjZqx1CwawkZk5YINTer2FH1Ow398om5lXGAgMoFOnzlC/tKM1invs2Im1zNgBz8USDGKx2Nrahg0YwEHT9lwxbD397NlzaniJRMojMICcnWlG6YVCIf/A4OjoyFkw3L59e52DgRxXACoYdBsMHoHhJ0fuNwxO9k5K9WW57cObDqVQP6UAYFAv7QI7Lp2nNdGsfGENjVo2YGhubqbdyU5zs4A1TuUkV6stC4alwYNTbMCwqON7DLa29rQ7fqvVauqn3JydXVWqBX6BgXaDdHd3TyOMmOoTDJAhLDmsgICAdQsGyOLkHCQLCwtoK5jlh3pWAYairlG9p74roZKa0D9EZu1KeGKbXEuaQ0qtaFZv27ewAQMAwN3dg25Ng1d3dw9kib4+7e2MnJxccnJyc3PzaC00NJxubtIDlmCAKryuXR+0wNDR0anr89GtrW3fjVNC2ztP9HEZAQzl5RXt7R3MNj4+zgYMCwsLDg77aJeMDA0NwfvS3JuWu2Dg4HwkTVlZWa1PMACwd+7cSVLB0IDkFxiahvX/0aeQ3CaWK6KHxXPGBAOourpG19eb9+61o/bLP36cvdJqb0BAIEswgBISEtmAARoB0dEXdI14e3l5Hz0aeezY8YMH/Wg7neDuiB07jAAGdiMx6Sx3V01KSmZ4X8w7CXIFDMnJyZbcFmB2HYLB3d2d7EEKCgoycupcB8PI+gKDXC6nXRagy169esWQ6Pz8PLVKa2NjOz09zRIMcD0M7pUEA1G/8fT0Xp0jJjf35h0YoFmgtWnVd1eiFPAADLp2teOOysvL1yEYRkdHf/SjH8G1nTx50shTGhAMXAPD4uv1ZV1ffMFq3pHW8AOtTp8+Qz0xJSWNJRhAmZkP2IBhcWnlnZub+0q98M2bt1QqFU/BQDTLNKfern0nQWODwdPTk+NgiI2NXZ9jDC9fvoyOjjbJhuQIBq6BQa1WV1VVs5mTymZ754qKStp02YMBvDZ1gw1aMIDGx8dPnoxiv64iJydHszLERzAs9cs9ol0L/eJFNw/AsGPHDo6DwaBfOTYtGEK/kUQi4RSTEAzGAkMv9Tsz5ORR2nbD8eMnyD2RwANST6ed86OlmZkZe3sHrRPt7BwAKloHBwYGdL6vykra7+RUV1dTA4Ojr69viIw8putDOktzkFzi4xOpX7M5ejSSmkppaRntVc3OzsLzoYYnAzg7u+r6wg+zZWTce/q0kXr84EE/XY+osbExNDSMbDrA+3JycpmamuI6GEZGRiw5L1dXV3MFA7nrEbwIBMM6BAO0A5QUkV0oujQ7Ozc4ONTb2ws+FBqUWqezTBpSoU1a6wjzClMlnRhOgZ+mp6fr6uqh9n39+o2YmEuXLl1JTLydl5fX3d2t68ZpL5UhFdqrYo6NjVSqhVW8LzhFKpUODAz29fUBEpZ9uZwAAwCN+2CANo3hOtkRDAgGE4IBheIiGHJzcy35IMP5TQQDd8BQ1TfBEgzNBgBDZJGQJRhezSAYUGYNhsTERF6AwXBf/UQwcAcMo5K5d4IylnXNfxf+YHpO/wPy/SLp2wHpy6b+qwuFanQ8KPMGw9mzZ3kBhpycHASD2YMBNCmTx9f33qzr1mV3G/tlckMt/345PRtX38OQ+r3mQblqAf0OyszBsOpPthlZ8fHxCIb1AAYUCmV6MLi6uvICDAKBAMGAYEChUMYAg5WVFS/A4Ofnh2BAMKBQKIODQSqVWvJENjY2CAYEAwqFMjgYBgYGLPmj+fl5QzxBBAOCAYVCMHyr58+f8wgMLL+kgWBAMKBQCIbVg6G0tJRHYDDQUgYEA4IBhUIwfKvMzEwegSE3NxfBYDQJ8pshYzndeYJlDIXinaDkQvk9VdC8AZ8FgkGPSqh5ARnrFyezMIegULzThyceQvm9XfsCwYBg0KeahqYgY33PLXYtX7pHoVDGF5RZKLlQfl+XYnwcCAb9aovfXchbrSMizCQoFI9E1Op+4nf3tYfBx7EWMFhYWPzUFOIyGIIePoXsZRtfjpkEheKRrK4XQ8mF8otgWCsYTC4OgkEkk//QJxFy2J26bswnKBQvFFfdBWX2HZ/E6Vk5gmH1+vnPf/4uB8Tmc4zG18XSNshkb3vGY4cSCsV9tQyLoLRCmb1U1kYcQTCgDKL/jckn2HChpBWfBgrFTanVi9ElwreWqPDZ5ULyOIIBZRCJZPJfnMyC3Ab28ZnsgSkpPhMUilOCUvmR4BFRSP9T8IjoRPoLGLZu3arVbV1dXU2NQqlU1tfXKxR6+wDW3Nzcz372s2fPnmke9PPz07wSf39/rZ2O4Kz33ntvamqKZSqxsbERERHsryotLW337t2G+1L0upJcueCQUEFku02usf8YlLotOs87reZIViMaGpqpzD25Gkri+8FpFq63iOJpn1ChXPjO/PIN4J3j4uLa2tqalgSemtbtAhLAU4vFYj2C4f333wfYaB7ct2+fr69vb29vV1fXkydP4NqCg4O1+FRWViaXy1mmAlG1tq6gKyM1NfXXv/61SqVCt64vNQ5M/PFiAYCByIJoaGgcMSiVn10ubBqicfgbwDu3tLRoHT1z5kxAQAD4R7VaHRkZCZVua2trAMMvf/lLkUgkk8mgLg//3bZtG3Hu4OAghE9KStqyZUtzc7OPj09CQgIEgP8SfhniuXbtGtEOOHLkCLQDdIEBgpH/TU9PBzZAchBhdnY2hAdahIeHSyQSSJGaCgiugUjl4sWLcP2lpaX379+H5CAw8G/LkiASInBxcTHECYGtrKxevnxJgOHjjz/GFoPeNS6ZiyltxcoaGhpHDMojlEpdBfZ1iwF8cWNjY82S6urqwJ9ChR3cZU5OTkVFBfzR2dlZXl7+3nvvPXr0CGrrn3zyyfbt26GRERUVtXnz5pGREQhAOGhw5UKhEP6GAOD0Dxw4ABVw8LP5+flwEDwygGTr1q3go3WBQSAQAEXAlY+OjoKPhhYD0ekEp1++fHlgYIDoSiJS1EoFGAAHS0pKgAfwB7Qtbt++DRdJxADJtbe3x8TEwE89PT3Dw8PwB4Ckr6/P29t79+7dkC6CAYVCobTHGMC5E11JiYmJxBFwnURX0gcffCAWiwmPDA6a6Nj56KOPHj58CAeBEMTUSeLvsbEx+BsAQ0TY29tL7HIKlX07OzvwzrRg8PDw0LqYFy9eEG4dvDzRAQWXQYBBK5XJyUmo+F+/fp2ICq4fMAZgOHXqFJFWR0cH0XYBsMEFwL0UFBQAAwBCcBbRg4RgQKFQqNctBi3vrDk4DF6YGHDW9Mhag9XgVeEgSRT4G2BD+Fby+ODg4K5du8hTdIEBWgyBgYETExNDQ0P9/f1k0mRIzcvQSgWSgGBao9kkGAiqEQcdHR2jo6OBB2FhYeQlffrppxAbggGFQqFejzF8/fXX1B/ARRIeMyMjg/TI4Fvb2trAC4+MjMhkMjhYXV0N1fZlwQC+2MHBASr1cDA8PBz8si4wADOoiGIDBriMDz/8sKioiDgrPz+f6EoiwUAOqu/evTsuLi4tLQ2ihaYMHKmsrCQ6oxAMKBQK9brFAFX+lpaWxm8ETh9q34AEcLL379/fvHnz8PCwVCoFN/r8+XNwr+CFk5OT4eSGhgYIJhQKlwUDePygoCC1Wt3U1ASnnD59Wu9ggIMnTpyAX0UiUXd3N6RSWlpKgoGY4AThgQHwU0dHB/wEgeEngijQYlAqlcSsJAQDCoVa12CgrmO4cOHCzp07oYK/sKTPPvsM/LVCodi+fTtAAvwv4VsJJSYmkq55ZmaG+Jv0rcRxaGeUlJSQwwa+vr7wR0VFBXUdAzQsrl69StupRYTUBAM1FWjEwEUSCfn5+YGjv3v3LgkG8poBS4AoouuJOBIaGgr/QjsGmhFwvwgGFAq1rsGwotDkcjO5XD46OgoOl/254LUnJibUS9v0Q/vDcLcE2JBIJFS0ADngp+npafK4SqWC5gJxU7OzswASzBAoFAq1LrbEAA5Bg4AY4UChUCgUs/4ft5wRAGjjoOIAAAAASUVORK5CYII=" width="520" height="84" class="img_ev3q"></p></li><li><p>Because the external principal and the local principal share an ID, no unique object for the external principal displays on the Users page.</p><p><img loading="lazy" alt="Sign In External Principal" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAhEAAADzCAYAAAA4jUSyAAAblElEQVR42u3df0zUd57H8ebu/8sll7tkc9m/bi+3l/pHs2tTtya7uT8ku+sml2yTvZrUre5209ZW17jqJq170nXrrdrdFrVWLFa0lk6LjiAnFBSxh3REhVEBsTAMzBQYfoxMB+YrzDD4vu/n+/3OL4bhh6Id4flIXgFmPt+BmX7L98X38/mOjz322GN39QghhBBCyByi+sNjAgAAMBdWkaBEAAAASgQAAKBEAAAASgQAAKBEAAAAUCIAAAAlAgAAUCIAAAAlAgAAUCLmIDTgE5/XJ6HIDAMj2uzGAQCAxVAiNCl+5nlZ+pPn5fh1bZpx41K96ZezGAcAABZNiah42SwHxc3atONKZjUOAABQIu5pHAAAoERQIgAAoEQ8kBIx7JPqwgPy0jMvGLcv/ckLsnbNa7J7f7l4htO3d5YVyUtrYmOfl5Vq7KGz4hkYTx067JaS/QfkA1uT8eVQxy2ptp+Sw3sKpd5rjg15m6T4zVxZaa3nWKr/DGtfzpUP7E4Jsa8AAJDFJSLilh1WGYgdxFcmff1B8uJLzS15zySP/a1eNhJlQqUk6XuHm4vjpWTrptRx6nHDHVUpt618JnnMC+LkRAkAANlbIuIH+p8fEM9w4kxCWAuK6/MqcXpjjzUu1X/4pTU2L+l29ZA+qd7zmnXwf02c1tmLcNuplJKwdluRXLzqFl+PX8IREVehuc3aPTUSmrAeS/8YHvZJfVmN+LgEFQCAbC4R5oH+yU3lEp7u4XvqrDMUueLKcHCv/oN5JmF3pS+tROwu86aN99jMErH1pJu9AgCAR61EiLcmcbZgzR4pOd8kvoH07WNlY+WbdRKeGJfQsJaScGRcfJ8XGmNeOnIrpUQ8+fOiKdc3+Crzks5SFEr11VsypI2zhwAA8EiUCHUwd5yStcnrIoz1DrlS8nniDMHkqYnpsjZ/Uol4+VSGsxzj4rTlpW+/6YDUtwXZUwAAeFglomSObzZV0aalHNB9zU1ScehASqGYfFZh5aZCqSgrlwp7htiKpfpq6nTGk8+fmn6qJBIU19U6Ob4nN6VMcAkqAAAPpUSIOA/9Nj7lkEniiojXxJXxGD0unsoDKVMR4Y5yqxAUT18Ikr/XbEtEsolgfJHm2v1N7C0AADyMEhE70BuLFQ9dTvsHtkJtdbLVuv/JbTXGgT3c0yTVX3jTD/LDTmsh5R7xGI8TlOPW5Z1r99clrqaYVD5CSWsaZioRvqs14uxIn7YIOQqtxZ5nZ18+AACgRMzP2Yj4+zNsy5WXNuXK1jXJ6w5eE2fAOtA3F1m3/VZ27ymSirIqqThSKC/FykbSgTzcUZP0HhIvyI79xVKtjy85UiSH9+wxpkF+Zq2HmE2JcB2y3hdiTa7kHTplPFbx/j3x77G1zMfeAgDAwyoRxl/4jlPxEjA5L+0pF1/yNMawW45ve23KsStfPiA3A5MePOCW4jdfy7iockfSpZyxqZNMCyvVmZEdk96sKvFznpWhCXYWAAAeaomIH6R7fOJp84qnQ8UnoenWKU5oxnhfhzl+KDDDokYtGB/r07cL6ePD93rQ1zTjMWb1cwIAQIl4jFcCAABQIgAAACUCAABQIgAAACUCAABQIigRAACAEgEAACgRAACAEgEAACgRAAAAlAgAAECJAAAAlAgAAECJAAAAlAgAAABKBAAAoEQAAABKBAAAoEQAAABKBAAAACUCAABQIgAAwAIsEf6vg4QQQghZ4KFEEEIIISR7SgQAAGA6AwAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAABAiQAAAJQIAABAiQAAAJQIAABAiQAAAKBEAAAASgQAAKBEAAAASgQAAKBEAAAAZFGJ2FLaIH+zxUbuM+p1BABgUZUICsD8BQAASgShRAAAKBGUCEoEAIASQYmgRAAAQImgRAAAQIkglAgAACViceXv/tsu2yuuyft1bfLHyuvyD7l2SgQAgBIx7yUir1Gq3X6pc/dLg1d99Im9tkmWzfVgW+CRMYlK0eFvvkTs/79bcveuyOh41PhYWO+iRAAAKBHzXiJs6uAvMhaOSHBUz3jsESJiL6uac4mw22Z7cK4Ru15e7FU181Ic/lDulA8c7UZiJn+u8mbVjXksERFpOvuRvPXhJf2zKQw0yr73M9wHAMAjXyJiB/+85GJxS9rD5kHyg8MPqETkuY3y4r0yPyWirqNftPD4jHF+dXt+SsRotxSvXyE5OTmSs75iyqIQcRVLzopi0dQXE/2Sv3WfdI+y8wMAFlqJsGU4yN9sjN+2ssoj7VpUPyDqd4xHpd3tkZXTPM5Op1+C4+b4sfCo1F1rsu5zSN1I1Pg5x0Yj4u3zJR5HnaHwBmVMfQ+13Uhw1mcr/uV/yjKuf/j77Xb51z//77xNZxgFYes56W4rlZznSqcuEV79vhXWfRPdsipnvXRG2fkBAAu9RGypkjr1V/Ntj/H1siqfedAfGRL7FbfYXUGjZMjt7ikfZ2dryBg/4OuXoi/cUtdnHmaNUpLXJHU+8/6xQFAaXLEyUiXVAXVrVJr12z64okqL+XV52czPRU3HHK13yb/vPiP/9MYp+Y8D54zysOStcnm75qb5umz9ZF7XRKQUhUz3Rbol3zprseq5VbKvqtu4P+Sqld+pMxlW9p1psh4nIrXvviUfnSmN37/+/XNy6Wy+/vkq4+vcT5uYJgEASkS2lgib2Aej8RJR1Kd/rvWnjjnvNw7wxrYpj+OQ9gmRoKsxZfzbXnVWIii/STrT0Z48nVFgrs+om1QY6tTUyqBn1iXir3ph+K+jtXKzLyA/OXTeuErjGy0R6vOBRlmlF4DGPk0iqpx93WgUglqvZg7WX1s1PZJ7odsoERWqdKzYJ53DYkyd5Ksy8W6taBH1WJeMbb9kagQAKBHZWSKuGEVgrM9tHshHrAe2pidkwvqoSysReTdlwBo+phZqWtMfpqBsSCoM7deuxL/nsvP98Z8/Np0hsYWetx/tEiGRTlmfs16+tAb2X8iVnPXF8qWrU5qam4yPjZ+ut8ZHpHT1Cil2xR5VLxX616Xe2NeafLT6d9JEiQAASkRWlIhJCyi3Xg8aj9Nw3rxCw35bnYnwy86yJnn7/E0rTbJTz8q0MmIWkKDXLVuTx1fpn1ddMS8ftcVKhCPtSpGGK02ytepmfLud+uc77TULo0RYB/5uVSKe2yfnLpyTijMVRs6dPSe1lzqTSoQWLxFpX6+nRAAAJSIrSoRI3Rf6gbusUd6u9UhzwFr0ONgdH7fhurmGoeHazfh7SKzUC8JOe9WUZzSM0jExKvYqR3yNxQa9EGywrgL52y3m2Qrvraakn6fRKB8yopcVm/W4eQ6jqMzmfSuyrkS4ku4b/dKYzmiK9YCBWv0+vQgEkraMRDKXhpSvNUoEAFAisqdEpBhPvpIikQ/cobTvE5vuSJ8WuSJ1t9MvRWi/kigV5YOx+5O2s7vFOz55q/QzJVlVIjJenVGRdF9Eat+KXRJaalz22X+9NL6oMpZzxpSFuSYiuURUUCIAAFlXIuaavBrZYL8iv7E55DeHZ34zqmUFDn28wxi/Mi/9/pX6Y6n7l011u83cbrbvnqlKxCeNncYVGZNz8OKXD6REzFVkWBNtNLlyRERTt2kRiUzwPwYAYCGXiCyOesOp6agzE7ztNQCAEkGJSMs/vnFKflfSILkV19Py+9ON8s9/KqVEAAAoEZQI/ilwAAAlghJBiQAAgBJBiQAAgBJBKBEAAEoEoUQAACgRlAhKBACAEkGJoEQAAJB1JWJLaQMFYB6iXkcAABZViQAAAJQIAAAASgQAAKBEAAAASgQAAKBEAAAASgQAAAAlAgAAUCIAAAAlAgAAUCIAAAAlAgAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAACQ5SViYOSuHKibkP88GpXH86KyJEPUfWqMGqu2AQAAi7xEqFLwxL6oLHsvKk/nR2V5hqj71Bg1Vm3zKInepfTg0cd+DCDrSoQ6u6DKwfJpCsRT744Z+cF7EWOs2ua+hAdly8E2+fSWZn7p9spS/euU5LfL4apu8QXv73sFR6NytVszPmKB0/erP+r7zotlvhn3uUdNbzAizl5NwlGKBIAsKhFqmuLpGQrEkcuj0tI3bnyuxqpt7u+X/YCsSS4RbR6jOJRc8onzupnqCne8UFS77+0XvyoOl72aODwh4yNFYqGXiAF50dpnSiaXhVDqPveoFQi1D6tQJABkVYlQ6x0yFQh15uFXn4SMcSevDhklQt2+5IGUiHZxhSeNC/nlcIE6KHSIJ3zvBeJaL0VisZSILfGzWW7xRDPvc49agbhkFYhYkYhQJABkc4lQBeJHB+9Ia19Y/CMRefLPbuO2B1oiQlOM7e8xDgq7HYHZF4ixRIFw3x4T9etWfTSKxFeacT8W7pmI4xe8xsefnvBNUyKi4qzqlDX5iSm0Ncc75WZ/oq36LnXJlhNecTq65KexMR91iafXL+UnOuLbbTnVLam7ribOC53G94uN2V3WLb45FuHkAjEYGpfxibvS1HeHIgEg+0qEKgg/zE+sfVAf99eav3BfOOKW770zEi8YD7VE6L+QSw7rB4Syvlk9tBaeMIpCrEAkSy4SahwWXolQ+1WJOyw+hzkd9mmzlqFEaFL+Ubscru4RZ/OAXhS81lmMxFkvT1W7VQLazam2i4kysbSgU+r17WorOiaV3KjUf2KO+WNFt9y8NSD11Z3WNl0yNMun0j8yHi8QA3qBiEkuEuoMW3SCIgFQIrKgRKjS0OGPSlnzmHw/LyS/ODZi/IIqafDLv73Zl3KW4psoEWsqBmb10Op3amv/aFqBSC4S6n5+9y7cEmHuV/p+U5hUCjJNZ4Q1CYf0GH/6m2e9jlvFwywR7eLsT+zv9SfUot/OpDKgyaeH9JIb2z+93WZ5mfx9hnxT357BWPSuOHu0lAIxuUh8FQjz3xygRGRPiXj/c/MX4f7akNS6RuW2/gts+Z7O+DTGN1UijF/SszwTESsSd2e4Hwu9RJgHbuPMgTGt4TemOOL3hYfk0+OTrggqaEs50BslosAjyYdq47b85NtSS25skfA7F3zivOSTeitOh8f4WbZU++ewH9+9p/sAUCIeeolQReE7b3jE3pD4JbehqEueeHs4bb3EQy0R1l9271wKsLdgbiVC57toTWs4ulMu8fRdMKchPr00KKGgJkPegfg6h5QSkT/XEuGNT4G8WNAua5LyYmG77L4wyH8nAAunRCRf4rnsQFiW7HDLZfeInHbelu/+qXfKN516/GFdnREcvKerM9R6h0yXwanbWQ+xeEqEsfahMHG2IXbpp6vCLAMpoqnb31uJMM9EVPfe/9MJ3IlmPGs2PBY1pjUAUCKy6s2mnto/Kt/6fZt8+3V32jTGcutdK+//zaYyv0/EzeY+uXndJ+WnEqvfy+dwWZ4WmZCrX2nGfPLkIhG25pnV/WocFkOJEGNaI3alRLwgVJv7V0mjX0IhTYbcPnnnUGrRuJcSEftaleLyRvMsRyg4LD798asv+GS2XXgwFDUWVd4aSF+/8/VoVOq9mtzw3eFdLAFKxCJ82+vwYMr8dOIUcHLa5Z2qHvGF5vbQajFoc+wyuKQiESsQ6nZ1P6vaF2aJUPtVSVt66fQ5OlPfhCqavibixY860ktEgTe9RBRMUSKqkhb+hoek/JP29H260DvrEnFHL7kN3eb+mlwkYgVC3d45xMJKgBLBP8A178YnFQl16je5QHAaGPHjvXWmIBR8AAfk0LBxJkJ9j3B47o8/uUgM3aFAAMiyErFQJReJWCgQeNSoInHVKhKxUCAAUCIecpGgQOBRpSUVCQoEAErEQy4S6hcvBQKPepHw8uZSACgRAACAEgEAACgRAACAEgEAACgRAAAAlAgAAECJAAAAC7JEpP87FIQQQghZaKFEEEIIIYQSQQghhJBHvER8HY4QQgghZIGHEkEIIYQQSgQhhBBCKBGEEEIIoUQQQgghhBJBiSCEEEIIJYIQQgghlAhCCCGEUCIIIYQQQokghBBCCCWCEkEIIYQQSgQhhBBCKBGEEEIIoUQQQgghhBLBC0sIIYRQIigRhBBCCMnOEtExFJG/1o7Lzwqj8nheVJZkiLpPjVFj1Tbz8eR7W3vlaGmnFJzxStcddgayMOJpqZHTjs5F/jpo0lBdJrVdAfYJQhZyiVCl4Il9UVn2XlSezo/K8gxR96kxaqza5n6f+OCXHll6sE2W5rfL6gKXOAPsDOQ+E+qU13NyxHbrmz1w3TixSnJW2MQ3zQG2Mlcfo/+sKXluu9hnLB8BqSx8T063DMzfz+xvkw/3HhNH//yWCNvqFZJT1MJ+SchCLhHq7IIqB8unKRBPvTtm5AfvRYyxapv7feItn7XrJcIlLZyBIPNWItpkXRaUiNbSV/VCUCaD0xxgT76iH2B3lYmjxSkOpx5HjRRYxWKvo2fG5/jsPB6cBztOGt/3w3l93cznuO5EG/slIQu5RKhpiqdnKBBHLo9KS9+48bkaq7a57xJxVi8RBR52ArJoS8S60q6020/n6uXilem2Vc9TewCv3fxPZ1AiCFkEJUKtd8hUINSZh199EjIe8+TVIaNEqNuX3GeJaPuiU36spjIOtsvGD9tl1/l+877+Pvm42GVOc6gUuOTjur7U7e8MyfnPOmV1bIz+GLs+65FezmiQ2ZQIf6ecPLg9MYXwyhRTCHcCUlt6zHgsc9wqeX2vXVqtKTePs1I2vpI0HfHKbqls6Zl7iZjiAGtuaxefPsZRtFsO1+n7dle97M3dJDuLnMa2tfrte2vMn3mwp1525h6TWmed7N2c+Jl2nqhPnU4xnvdueTb2M694Vf4SGxPqkQ9zt0tll2Y8vvl926TVcTIx/rlX5XCFM+U5OUrfk3WrE9Mx6/Sfo6Ffo0QQQokwC8SPDt6R1r6w+Eci8uSf3cZt81Eiuhq9suOIWQJ2nemUsit+vUD45NdWKTj6ea84r/XKUVu7MebXZ3zWtkPysbXdtjNeudzsk7IzHWaZONIlvexQlIjpSoS/RTZaB1BbjVNutDjFtvdV4wC48URLfM3Byc0rzANxUY04WlrE4ag01lrYO8wDZGtFnrxeWCkOZ4s06Afv2DTE6S7t/s5E9DuN75Nz0CwLsZ9D5dlc/cBeqg7i+u2rV8iz1sF5sKMsPub1whppuNUilXoJML4+Z5Ujv9N83noZ+vBcvTGmutpmvA4OVYyCya9b8vddJYfVeP11Onlwk3nb3jrreWlyetcmvVjU6a9RmzjqzNcoZ8VuaQ1RIghZdCVCFYQf5ifWPqiP+2s14/FeOOKW770zEi8YSx7AdMZFu1kgLvpTx10+YxaJi/0R6b3SaXx+9FrqQaL3mnn7u42sBKdEZC4RjqNqweMm88CZdHvDiU3GAdOh73u9V4+Z6wOcMy1c1GQwqMc4YPbIX9Rf4tY6hVmVCHWg1v+637h5k5F18TMbq+JnBE6rMfqBvrZHy3gWI1Yi1BmLlGmRzYlpkfjz9s/mdYt93/TxrdV5Zlnq0FKmVozXQX3eU2e+di0BSgQhi61EqNLQ4Y9KWfOYfD8vJL84NiLRibtS0uCXf3uzL+UsxbyUCLWwMr/L+kU7LB8fapMfl/rSxwZ8xtRFQXNQnGfMbdLPOATlqNr+jI+dihKRoURYf8FPtSAx2GJspxYW3jgRm07IXAAcJ3ZPurJilXHaf6N1wJxNiTAP1NvFVlomthN2sRXZ5XSNU1zB1LKQ/vNOUSL0A35rKNO6jGmed4YSMfX3TYw7fHXAmAKxTb7CxCpCyY9DiSBkEZWI9z8fMLbfXxuSWteo3A6Ny/I9nfFpjAdaIgraZPVnfeljR/qMaQ5VIoxtCrqm+OWs/8I6TImgRMxQIqZczGheGrrRKhGtqkRMt7DRW2NOFZyoF5c/IL7+HqmtODbnEpHxZ5lx3cRUJeJVuRGcpkTM9L2mKBHrTkwxPug0nufOmh5xVZtFyuboFF8gIB5vm5y21ppQIghZpNMZ33nDI/YGf/xxNhR1yRNvD6etl5j/EqFJ2Ydtxtddk9+QyprCKHNr0nbeZU55TL6evb/XWKi57XM/OxUlQmwd2tTvzfCGmkKwiWfyPmZNYVR6NfPgqNYKZDj1P3jrpHF/653090RYN9cSMe0Bdv5KRKbnnbFEGFMtx8SVdilopVUSNOuMTdmkBalTlRFKBCGL5hLPZQfCsmSHWy67R+S087Z890+9U77p1OPzXiLUuoYuc4Hk8S5p6QnK4EhQWr7oTF006Y8tvnTJ+dYhfcywdLX2yDZrQeZlPzvUYi8R6ozCzgq1GLDFfP+FWFp6pLfFWoS4yy6t/QEZDAWMKxCM2zaXmVMYgdjiy+1SfavHmO/3+XukttQm1XrJGOwyD6Q7S53iCej39XdK5UFrcWbpwysRz86qRJjTMr0t1nPMtcuNnoDxnDw9bWIvtJvTINbrlrImwnhNbNLgVeP118lZaV6tskIvF3fU4lLzrIP9aqf49Ps9XU7Za12pYadEELJ432zqqf2j8q3ft8m3X3enTWMst961cl7ebOps+tRE25WupEs3zay2dUnbSNJfQ55e2VGQOmZpQYdc9GjsUJQI8wqBqWIdUF1Xy5Iu3bQuTdxbJq6kNQWDPU75yysr0tY9qBJhronYnnrf5u3GYyZKxKYZ3utBP1AbUwzTl4jT05SI2JUXsTUR6SVC/xk218R/hqmed85z75nP2yoRldbzM98Iyy62vZPWPGw+Jjdii1LvqDURqa/Rxl3bU0rEaUoEIQu/RHxTb3udOaPS2z8kXT1D0hsYzfwue35rjH+YHYnMOT6//tdzf0D/KzrzmEE1198/YIxNXx9g3ufxBx7N5x3QZrVeY9B6npnGq9fIF5ju8QghC7pEfJP/ABchJNvCNAQhlAheWELIPZYIm5qe4B/OIoQSQQghc81gf4+4/ExPEEKJIIQQQgglghJBCCGEEEoEIYQQQigRhBBCCKFEEEIIIYQSwQtLCCGEUCIoEYQQQgihRBBCCCGEEkEIIYQQSgQhhBBCKBGUCEIIIYQSQYkghBBCCCWCEEIIIZQIQgghhFAiCCGEEEKJoEQQQgghlAgAAIAZUSIAAAAlAgAAUCIAAAAlAgAAUCIAAAAoEQAAgBIBAAAoEQAAgBIBAAAoEQAAAJQIAABAiQAAAJQIAABAiQAAAJQIAAAASgQAAKBEAAAASgQAAKBEAAAASgQAAAAlAgAAUCIAAAAlAgAAUCIAAAAlAgAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAABAiQAAAJQIAABAiQAAAJQIAABAiaBEAAAASgQAAKBEAAAASgQAAKBEAAAAUCIAAAAlAgAAUCIAAAAlAgAAUCIAAAAoEQAAgBIBAAAoEQAAgBIBAAAoEQAAAJQIAABAiQAAAFlQIu5anxBCCCGEzDZ3/x+LK7AwiC/i9wAAAABJRU5ErkJggg==" width="529" height="243" class="img_ev3q"></p></li><li><p>The external principal and the local principal share the same access rights.</p></li></ol></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/about-authentication.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_eYIM" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vbeJ"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2022-09-10T07:31:45.000Z">9/10/2022</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages navigation"><a class="pagination-nav__link pagination-nav__link--prev" href="/pages-for-subheaders/authentication-permissions-and-global-configuration"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Authentication, Permissions and Global Configuration</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/pages-for-subheaders/authentication-config"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Authentication Config</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#external-vs-local-authentication" class="table-of-contents__link toc-highlight">External vs. Local Authentication</a></li><li><a href="#users-and-groups" class="table-of-contents__link toc-highlight">Users and Groups</a></li><li><a href="#scope-of-rancher-authorization" class="table-of-contents__link toc-highlight">Scope of Rancher Authorization</a></li><li><a href="#external-authentication-configuration-and-principal-users" class="table-of-contents__link toc-highlight">External Authentication Configuration and Principal Users</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 SUSE Rancher. All Rights Reserved.</div></div></div></footer></div>
|
||
<script src="/assets/js/runtime~main.d2604d48.js"></script>
|
||
<script src="/assets/js/main.aa78001f.js"></script>
|
||
</body>
|
||
</html> |