Files
rancher-docs/pages-for-subheaders/authentication-config.html
T

31 lines
83 KiB
HTML
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<!doctype html>
<html lang="en" dir="ltr" class="docs-wrapper docs-doc-page docs-version-current plugin-docs plugin-id-default docs-doc-id-pages-for-subheaders/authentication-config" data-has-hydrated="false">
<head>
<meta charset="UTF-8">
<meta name="generator" content="Docusaurus v2.4.3">
<title data-rh="true">Configuring Authentication | Rancher</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://ranchermanager.docs.rancher.com/pages-for-subheaders/authentication-config"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Configuring Authentication | Rancher"><meta data-rh="true" name="description" content="One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters."><meta data-rh="true" property="og:description" content="One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters."><link data-rh="true" rel="icon" href="/img/favicon.png"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/pages-for-subheaders/authentication-config" hreflang="en"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/zh/pages-for-subheaders/authentication-config" hreflang="zh"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/pages-for-subheaders/authentication-config" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://30NEY6C9UY-dsn.algolia.net" crossorigin="anonymous"><link data-rh="true" rel="canonical" href="https://ranchermanager.docs.rancher.com/pages-for-subheaders/authentication-config"><link rel="preconnect" href="https://www.googletagmanager.com">
<script>window.dataLayer=window.dataLayer||[]</script>
<script>!function(e,t,a,n,g){e[n]=e[n]||[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gtm.js?id=GTM-57KS2MW",m.parentNode.insertBefore(r,m)}(window,document,"script","dataLayer")</script>
<link rel="search" type="application/opensearchdescription+xml" title="Rancher" href="/opensearch.xml">
<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" charset="UTF-8" data-domain-script="0f98beb0-fc4c-417d-a42e-564e2cae42d2" async></script>
<script src="/scripts/optanonwrapper.js" async></script><link rel="stylesheet" href="/assets/css/styles.d66e0677.css">
<link rel="preload" href="/assets/js/runtime~main.e4bf29b6.js" as="script">
<link rel="preload" href="/assets/js/main.1393e267.js" as="script">
</head>
<body class="navigation-with-keyboard">
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-57KS2MW" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<script>!function(){function t(t){document.documentElement.setAttribute("data-theme",t)}var e=function(){var t=null;try{t=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(t){}return t}()||function(){var t=null;try{t=localStorage.getItem("theme")}catch(t){}return t}();t(null!==e?e:"light")}()</script><div id="__docusaurus">
<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a><div class="navbar__item dropdown dropdown--hoverable"><a aria-current="page" class="navbar__link active" aria-haspopup="true" aria-expanded="false" role="button" href="/">Latest</a><ul class="dropdown__menu"><li><a aria-current="page" class="dropdown__link dropdown__link--active" href="/pages-for-subheaders/authentication-config">Latest</a></li><li><a class="dropdown__link" href="/v2.8/pages-for-subheaders/authentication-config">v2.8</a></li><li><a class="dropdown__link" href="/v2.7/pages-for-subheaders/authentication-config">v2.7</a></li><li><a class="dropdown__link" href="/v2.6/pages-for-subheaders/authentication-config">v2.6</a></li><li><a class="dropdown__link" href="/v2.5/pages-for-subheaders/authentication-config">v2.5</a></li><li><a class="dropdown__link" href="/v2.0-v2.4/pages-for-subheaders/authentication-config">v2.0-v2.4</a></li><li><a class="dropdown__link" href="/versions">All versions</a></li></ul></div><div class="navbar__item dropdown dropdown--hoverable"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/pages-for-subheaders/authentication-config" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/pages-for-subheaders/authentication-config" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li></ul></div><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div></div><div class="navbar__items navbar__items--right"><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link">Quick Links</a><ul class="dropdown__menu"><li><a href="https://github.com/rancher/rancher" target="_blank" rel="noopener noreferrer" class="dropdown__link">GitHub<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><a href="https://github.com/rancher/rancher-docs" target="_blank" rel="noopener noreferrer" class="dropdown__link">Docs GitHub<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li></ul></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link">More from SUSE</a><ul class="dropdown__menu"><li><a href="https://www.rancher.com" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__rancher">Rancher<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><hr style="margin: 0.3rem 0;"></li><li><a href="https://elemental.docs.rancher.com/" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__elemental">Elemental<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><a href="https://epinio.io/" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__epinio">Epinio<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><a href="https://fleet.rancher.io/" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__fleet">Fleet<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><a href="https://harvesterhci.io" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__harvester">Harvester<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li><li><hr style="margin: 0.3rem 0;"></li><li><a href="https://opensource.suse.com" target="_blank" rel="noopener noreferrer" class="dropdown__link navbar__icon navbar__suse">More Projects...<svg width="12" height="12" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a></li></ul></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">What is Rancher?</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/getting-started/overview">Getting Started</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret menu__link--active" aria-expanded="true" href="/pages-for-subheaders/new-user-guides">How-to Guides</a></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" tabindex="0" href="/pages-for-subheaders/new-user-guides">New User Guides</a><button aria-label="Toggle the collapsible sidebar category &#x27;New User Guides&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" tabindex="0" href="/pages-for-subheaders/authentication-permissions-and-global-configuration">Authentication, Permissions, and Global Configuration</a><button aria-label="Toggle the collapsible sidebar category &#x27;Authentication, Permissions, and Global Configuration&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" tabindex="0" href="/pages-for-subheaders/authentication-config">Configuring Authentication</a><button aria-label="Toggle the collapsible sidebar category &#x27;Configuring Authentication&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups">Users and Groups</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/create-local-users">Local Authentication</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-google-oauth">Configure Google OAuth</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-active-directory">Configure Active Directory (AD)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-freeipa">Configure FreeIPA</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad">Configure Azure AD</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-github">Configure GitHub</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc">Configure Keycloak (OIDC)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-saml">Configure Keycloak (SAML)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-pingidentity">Configure PingIdentity (SAML)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-okta-saml">Configure Okta (SAML)</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/configure-openldap">Configuring OpenLDAP</a><button aria-label="Toggle the collapsible sidebar category &#x27;Configuring OpenLDAP&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/configure-microsoft-ad-federation-service-saml">Configuring Microsoft AD Federation Service (SAML)</a><button aria-label="Toggle the collapsible sidebar category &#x27;Configuring Microsoft AD Federation Service (SAML)&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/configure-shibboleth-saml">Configuring Shibboleth (SAML)</a><button aria-label="Toggle the collapsible sidebar category &#x27;Configuring Shibboleth (SAML)&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/manage-role-based-access-control-rbac">Managing Role-Based Access Control (RBAC)</a><button aria-label="Toggle the collapsible sidebar category &#x27;Managing Role-Based Access Control (RBAC)&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/about-provisioning-drivers">About Provisioning Drivers</a><button aria-label="Toggle the collapsible sidebar category &#x27;About Provisioning Drivers&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/about-rke1-templates">About RKE1 Templates</a><button aria-label="Toggle the collapsible sidebar category &#x27;About RKE1 Templates&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies">Creating Pod Security Policies</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards">Pod Security Standards (PSS) &amp; Pod Security Admission (PSA)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates">Pod Security Admission (PSA) Configuration Templates</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry">Configuring a Global Default Private Registry</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/custom-branding">Custom Branding</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/manage-clusters">Cluster Administration</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Administration&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/kubernetes-cluster-setup">Kubernetes Cluster Setup</a><button aria-label="Toggle the collapsible sidebar category &#x27;Kubernetes Cluster Setup&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/infrastructure-setup">Infrastructure Setup</a><button aria-label="Toggle the collapsible sidebar category &#x27;Infrastructure Setup&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/kubernetes-clusters-in-rancher-setup">Kubernetes Clusters in Rancher Setup</a><button aria-label="Toggle the collapsible sidebar category &#x27;Kubernetes Clusters in Rancher Setup&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/launch-kubernetes-with-rancher">Launching Kubernetes with Rancher</a><button aria-label="Toggle the collapsible sidebar category &#x27;Launching Kubernetes with Rancher&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/kubernetes-resources-setup">Kubernetes Resources Setup</a><button aria-label="Toggle the collapsible sidebar category &#x27;Kubernetes Resources Setup&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/helm-charts-in-rancher">Helm Charts in Rancher</a><button aria-label="Toggle the collapsible sidebar category &#x27;Helm Charts in Rancher&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/deploy-apps-across-clusters">Deploying Apps Across Clusters</a><button aria-label="Toggle the collapsible sidebar category &#x27;Deploying Apps Across Clusters&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/backup-restore-and-disaster-recovery">Backup, Restore, and Disaster Recovery</a><button aria-label="Toggle the collapsible sidebar category &#x27;Backup, Restore, and Disaster Recovery&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-3 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/add-users-to-projects">Adding Users to Projects</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-3 menu__list-item"><a class="menu__link" tabindex="0" href="/how-to-guides/new-user-guides/manage-namespaces">Namespaces</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/pages-for-subheaders/advanced-user-guides">Advanced User Guides</a><button aria-label="Toggle the collapsible sidebar category &#x27;Advanced User Guides&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/pages-for-subheaders/best-practices">Reference Guides</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/integrations-in-rancher">Integrations in Rancher</a><button aria-label="Toggle the collapsible sidebar category &#x27;Integrations in Rancher&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/faq/general-faq">FAQ</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/troubleshooting/general-troubleshooting">Troubleshooting</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/api/quickstart">Rancher Kubernetes API</a></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/contribute-to-rancher">Contributing to Rancher</a></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li class="breadcrumbs__item"><span class="breadcrumbs__link">How-to Guides</span><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/pages-for-subheaders/new-user-guides"><span itemprop="name">New User Guides</span></a><meta itemprop="position" content="2"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/pages-for-subheaders/authentication-permissions-and-global-configuration"><span itemprop="name">Authentication, Permissions, and Global Configuration</span></a><meta itemprop="position" content="3"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Configuring Authentication</span><meta itemprop="position" content="4"></li></ul></nav><span class="theme-doc-version-badge badge badge--secondary">Version: Latest</span><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Configuring Authentication</h1></header><p>One of the key features that Rancher adds to Kubernetes is centralized user authentication. This feature allows your users to use one set of credentials to authenticate with any of your Kubernetes clusters.</p><p>This centralized user authentication is accomplished using the Rancher authentication proxy, which is installed along with the rest of Rancher. This proxy authenticates your users and forwards their requests to your Kubernetes clusters using a service account.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="external-vs-local-authentication">External vs. Local Authentication<a href="#external-vs-local-authentication" class="hash-link" aria-label="Direct link to External vs. Local Authentication" title="Direct link to External vs. Local Authentication">​</a></h2><p>The Rancher authentication proxy integrates with the following external authentication services.</p><table><thead><tr><th>Auth Service</th></tr></thead><tbody><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-active-directory">Microsoft Active Directory</a></td></tr><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-github">GitHub</a></td></tr><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad">Microsoft Azure AD</a></td></tr><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-freeipa">FreeIPA</a></td></tr><tr><td><a href="/pages-for-subheaders/configure-openldap">OpenLDAP</a></td></tr><tr><td><a href="/pages-for-subheaders/configure-microsoft-ad-federation-service-saml">Microsoft AD FS</a></td></tr><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-pingidentity">PingIdentity</a></td></tr><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc">Keycloak (OIDC)</a></td></tr><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-saml">Keycloak (SAML)</a></td></tr><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-okta-saml">Okta</a></td></tr><tr><td><a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-google-oauth">Google OAuth</a></td></tr><tr><td><a href="/pages-for-subheaders/configure-shibboleth-saml">Shibboleth</a></td></tr></tbody></table><p>However, Rancher also provides <a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/create-local-users">local authentication</a>.</p><p>In most cases, you should use an external authentication service over local authentication, as external authentication allows user management from a central location. However, you may want a few local authentication users for managing Rancher under rare circumstances, such as if your external authentication provider is unavailable or undergoing maintenance.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="users-and-groups">Users and Groups<a href="#users-and-groups" class="hash-link" aria-label="Direct link to Users and Groups" title="Direct link to Users and Groups">​</a></h2><p>Rancher relies on users and groups to determine who is allowed to log in to Rancher and which resources they can access. When authenticating with an external provider, groups are provided from the external provider based on the user. These users and groups are given specific roles to resources like clusters, projects, multi-cluster apps, and global DNS providers and entries. When you give access to a group, all users who are a member of that group in the authentication provider will be able to access the resource with the permissions that you&#x27;ve specified. For more information on roles and permissions, see <a href="/pages-for-subheaders/manage-role-based-access-control-rbac">Role Based Access Control</a>.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Local authentication does not support creating or managing groups.</p></div></div><p>For more information, see <a href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups">Users and Groups</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="scope-of-rancher-authorization">Scope of Rancher Authorization<a href="#scope-of-rancher-authorization" class="hash-link" aria-label="Direct link to Scope of Rancher Authorization" title="Direct link to Scope of Rancher Authorization">​</a></h2><p>After you configure Rancher to allow sign on using an external authentication service, you should configure who should be allowed to log in and use Rancher. The following options are available:</p><table><thead><tr><th>Access Level</th><th>Description</th></tr></thead><tbody><tr><td>Allow any valid Users</td><td><em>Any</em> user in the authorization service can access Rancher. We generally discourage use of this setting!</td></tr><tr><td>Allow members of Clusters, Projects, plus Authorized Users and Organizations</td><td>Any user in the authorization service and any group added as a <strong>Cluster Member</strong> or <strong>Project Member</strong> can log in to Rancher. Additionally, any user in the authentication service or group you add to the <strong>Authorized Users and Organizations</strong> list may log in to Rancher.</td></tr><tr><td>Restrict access to only Authorized Users and Organizations</td><td>Only users in the authentication service or groups added to the Authorized Users and Organizations can log in to Rancher.</td></tr></tbody></table><p>To set the Rancher access level for users in the authorization service, follow these steps:</p><ol><li>In the upper left corner, click <strong>☰ &gt; Users &amp; Authentication</strong>.</li><li>In the left navigation bar, click <strong>Auth Provider</strong>.</li><li>After setting up the configuration details for an auth provider, use the <strong>Site Access</strong> options to configure the scope of user authorization. The table above explains the access level for each option.</li><li>Optional: If you choose an option other than <strong>Allow any valid Users,</strong> you can add users to the list of authorized users and organizations by searching for them in the text field that appears.</li><li>Click <strong>Save</strong>.</li></ol><p><strong>Result:</strong> The Rancher access configuration settings are applied.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>SAML Provider Caveats:</div><div class="admonitionContent_S0QG"><ul><li>SAML Protocol does not support search or lookup for users or groups. Therefore, there is no validation on users or groups when adding them to Rancher.</li><li>When adding users, the exact user IDs (i.e. <code>UID Field</code>) must be entered correctly. As you type the user ID, there will be no search for other user IDs that may match.</li><li>When adding groups, you must select the group from the drop-down that is next to the text box. Rancher assumes that any input from the text box is a user.</li><li>The group drop-down shows only the groups that you are a member of. You will not be able to add groups that you are not a member of.</li></ul></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="external-authentication-configuration-and-principal-users">External Authentication Configuration and Principal Users<a href="#external-authentication-configuration-and-principal-users" class="hash-link" aria-label="Direct link to External Authentication Configuration and Principal Users" title="Direct link to External Authentication Configuration and Principal Users">​</a></h2><p>Configuration of external authentication requires:</p><ul><li>A local user assigned the administrator role, called hereafter the <em>local principal</em>.</li><li>An external user that can authenticate with your external authentication service, called hereafter the <em>external principal</em>.</li></ul><p>Configuration of external authentication affects how principal users are managed within Rancher. Follow the list below to better understand these effects.</p><ol><li><p>Sign into Rancher as the local principal and complete configuration of external authentication.</p><p><img loading="lazy" alt="Sign In" src="/assets/images/sign-in-f314d4617d171cee6ff47132b18c7be9.png" width="503" height="150" class="img_ev3q"></p></li><li><p>Rancher associates the external principal with the local principal. These two users share the local principal&#x27;s user ID.</p><p><img loading="lazy" alt="Principal ID Sharing" src="data:image/png;base64,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" width="272" height="171" class="img_ev3q"></p></li><li><p>After you complete configuration, Rancher automatically signs out the local principal.</p><p><img loading="lazy" alt="Sign Out Local Principal" src="data:image/png;base64,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" width="513" height="84" class="img_ev3q"></p></li><li><p>Then, Rancher automatically signs you back in as the external principal.</p><p><img loading="lazy" alt="Sign In External Principal" src="data:image/png;base64,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" width="520" height="84" class="img_ev3q"></p></li><li><p>Because the external principal and the local principal share an ID, no unique object for the external principal displays on the Users page.</p><p><img loading="lazy" alt="Sign In External Principal" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAhEAAADzCAYAAAA4jUSyAAAblElEQVR42u3df0zUd57H8ebu/8sll7tkc9m/bi+3l/pHs2tTtya7uT8ku+sml2yTvZrUre5209ZW17jqJq170nXrrdrdFrVWLFa0lk6LjiAnFBSxh3REhVEBsTAMzBQYfoxMB+YrzDD4vu/n+/3OL4bhh6Id4flIXgFmPt+BmX7L98X38/mOjz322GN39QghhBBCyByi+sNjAgAAMBdWkaBEAAAASgQAAKBEAAAASgQAAKBEAAAAUCIAAAAlAgAAUCIAAAAlAgAAUCLmIDTgE5/XJ6HIDAMj2uzGAQCAxVAiNCl+5nlZ+pPn5fh1bZpx41K96ZezGAcAABZNiah42SwHxc3atONKZjUOAABQIu5pHAAAoERQIgAAoEQ8kBIx7JPqwgPy0jMvGLcv/ckLsnbNa7J7f7l4htO3d5YVyUtrYmOfl5Vq7KGz4hkYTx067JaS/QfkA1uT8eVQxy2ptp+Sw3sKpd5rjg15m6T4zVxZaa3nWKr/DGtfzpUP7E4Jsa8AAJDFJSLilh1WGYgdxFcmff1B8uJLzS15zySP/a1eNhJlQqUk6XuHm4vjpWTrptRx6nHDHVUpt618JnnMC+LkRAkAANlbIuIH+p8fEM9w4kxCWAuK6/MqcXpjjzUu1X/4pTU2L+l29ZA+qd7zmnXwf02c1tmLcNuplJKwdluRXLzqFl+PX8IREVehuc3aPTUSmrAeS/8YHvZJfVmN+LgEFQCAbC4R5oH+yU3lEp7u4XvqrDMUueLKcHCv/oN5JmF3pS+tROwu86aN99jMErH1pJu9AgCAR61EiLcmcbZgzR4pOd8kvoH07WNlY+WbdRKeGJfQsJaScGRcfJ8XGmNeOnIrpUQ8+fOiKdc3+Crzks5SFEr11VsypI2zhwAA8EiUCHUwd5yStcnrIoz1DrlS8nniDMHkqYnpsjZ/Uol4+VSGsxzj4rTlpW+/6YDUtwXZUwAAeFglomSObzZV0aalHNB9zU1ScehASqGYfFZh5aZCqSgrlwp7htiKpfpq6nTGk8+fmn6qJBIU19U6Ob4nN6VMcAkqAAAPpUSIOA/9Nj7lkEniiojXxJXxGD0unsoDKVMR4Y5yqxAUT18Ikr/XbEtEsolgfJHm2v1N7C0AADyMEhE70BuLFQ9dTvsHtkJtdbLVuv/JbTXGgT3c0yTVX3jTD/LDTmsh5R7xGI8TlOPW5Z1r99clrqaYVD5CSWsaZioRvqs14uxIn7YIOQqtxZ5nZ18+AACgRMzP2Yj4+zNsy5WXNuXK1jXJ6w5eE2fAOtA3F1m3/VZ27ymSirIqqThSKC/FykbSgTzcUZP0HhIvyI79xVKtjy85UiSH9+wxpkF+Zq2HmE2JcB2y3hdiTa7kHTplPFbx/j3x77G1zMfeAgDAwyoRxl/4jlPxEjA5L+0pF1/yNMawW45ve23KsStfPiA3A5MePOCW4jdfy7iockfSpZyxqZNMCyvVmZEdk96sKvFznpWhCXYWAAAeaomIH6R7fOJp84qnQ8UnoenWKU5oxnhfhzl+KDDDokYtGB/r07cL6ePD93rQ1zTjMWb1cwIAQIl4jFcCAABQIgAAACUCAABQIgAAACUCAABQIigRAACAEgEAACgRAACAEgEAACgRAAAAlAgAAECJAAAAlAgAAECJAAAAlAgAAABKBAAAoEQAAABKBAAAoEQAAABKBAAAACUCAABQIgAAwAIsEf6vg4QQQghZ4KFEEEIIISR7SgQAAGA6AwAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAABAiQAAAJQIAABAiQAAAJQIAABAiQAAAKBEAAAASgQAAKBEAAAASgQAAKBEAAAAZFGJ2FLaIH+zxUbuM+p1BABgUZUICsD8BQAASgShRAAAKBGUCEoEAIASQYmgRAAAQImgRAAAQIkglAgAACViceXv/tsu2yuuyft1bfLHyuvyD7l2SgQAgBIx7yUir1Gq3X6pc/dLg1d99Im9tkmWzfVgW+CRMYlK0eFvvkTs/79bcveuyOh41PhYWO+iRAAAKBHzXiJs6uAvMhaOSHBUz3jsESJiL6uac4mw22Z7cK4Ru15e7FU181Ic/lDulA8c7UZiJn+u8mbVjXksERFpOvuRvPXhJf2zKQw0yr73M9wHAMAjXyJiB/+85GJxS9rD5kHyg8MPqETkuY3y4r0yPyWirqNftPD4jHF+dXt+SsRotxSvXyE5OTmSs75iyqIQcRVLzopi0dQXE/2Sv3WfdI+y8wMAFlqJsGU4yN9sjN+2ssoj7VpUPyDqd4xHpd3tkZXTPM5Op1+C4+b4sfCo1F1rsu5zSN1I1Pg5x0Yj4u3zJR5HnaHwBmVMfQ+13Uhw1mcr/uV/yjKuf/j77Xb51z//77xNZxgFYes56W4rlZznSqcuEV79vhXWfRPdsipnvXRG2fkBAAu9RGypkjr1V/Ntj/H1siqfedAfGRL7FbfYXUGjZMjt7ikfZ2dryBg/4OuXoi/cUtdnHmaNUpLXJHU+8/6xQFAaXLEyUiXVAXVrVJr12z64okqL+XV52czPRU3HHK13yb/vPiP/9MYp+Y8D54zysOStcnm75qb5umz9ZF7XRKQUhUz3Rbol3zprseq5VbKvqtu4P+Sqld+pMxlW9p1psh4nIrXvviUfnSmN37/+/XNy6Wy+/vkq4+vcT5uYJgEASkS2lgib2Aej8RJR1Kd/rvWnjjnvNw7wxrYpj+OQ9gmRoKsxZfzbXnVWIii/STrT0Z48nVFgrs+om1QY6tTUyqBn1iXir3ph+K+jtXKzLyA/OXTeuErjGy0R6vOBRlmlF4DGPk0iqpx93WgUglqvZg7WX1s1PZJ7odsoERWqdKzYJ53DYkyd5Ksy8W6taBH1WJeMbb9kagQAKBHZWSKuGEVgrM9tHshHrAe2pidkwvqoSysReTdlwBo+phZqWtMfpqBsSCoM7deuxL/nsvP98Z8/Np0hsYWetx/tEiGRTlmfs16+tAb2X8iVnPXF8qWrU5qam4yPjZ+ut8ZHpHT1Cil2xR5VLxX616Xe2NeafLT6d9JEiQAASkRWlIhJCyi3Xg8aj9Nw3rxCw35bnYnwy86yJnn7/E0rTbJTz8q0MmIWkKDXLVuTx1fpn1ddMS8ftcVKhCPtSpGGK02ytepmfLud+uc77TULo0RYB/5uVSKe2yfnLpyTijMVRs6dPSe1lzqTSoQWLxFpX6+nRAAAJSIrSoRI3Rf6gbusUd6u9UhzwFr0ONgdH7fhurmGoeHazfh7SKzUC8JOe9WUZzSM0jExKvYqR3yNxQa9EGywrgL52y3m2Qrvraakn6fRKB8yopcVm/W4eQ6jqMzmfSuyrkS4ku4b/dKYzmiK9YCBWv0+vQgEkraMRDKXhpSvNUoEAFAisqdEpBhPvpIikQ/cobTvE5vuSJ8WuSJ1t9MvRWi/kigV5YOx+5O2s7vFOz55q/QzJVlVIjJenVGRdF9Eat+KXRJaalz22X+9NL6oMpZzxpSFuSYiuURUUCIAAFlXIuaavBrZYL8iv7E55DeHZ34zqmUFDn28wxi/Mi/9/pX6Y6n7l011u83cbrbvnqlKxCeNncYVGZNz8OKXD6REzFVkWBNtNLlyRERTt2kRiUzwPwYAYCGXiCyOesOp6agzE7ztNQCAEkGJSMs/vnFKflfSILkV19Py+9ON8s9/KqVEAAAoEZQI/ilwAAAlghJBiQAAgBJBiQAAgBJBKBEAAEoEoUQAACgRlAhKBACAEkGJoEQAAJB1JWJLaQMFYB6iXkcAABZViQAAAJQIAAAASgQAAKBEAAAASgQAAKBEAAAASgQAAAAlAgAAUCIAAAAlAgAAUCIAAAAlAgAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAACQ5SViYOSuHKibkP88GpXH86KyJEPUfWqMGqu2AQAAi7xEqFLwxL6oLHsvKk/nR2V5hqj71Bg1Vm3zKInepfTg0cd+DCDrSoQ6u6DKwfJpCsRT744Z+cF7EWOs2ua+hAdly8E2+fSWZn7p9spS/euU5LfL4apu8QXv73sFR6NytVszPmKB0/erP+r7zotlvhn3uUdNbzAizl5NwlGKBIAsKhFqmuLpGQrEkcuj0tI3bnyuxqpt7u+X/YCsSS4RbR6jOJRc8onzupnqCne8UFS77+0XvyoOl72aODwh4yNFYqGXiAF50dpnSiaXhVDqPveoFQi1D6tQJABkVYlQ6x0yFQh15uFXn4SMcSevDhklQt2+5IGUiHZxhSeNC/nlcIE6KHSIJ3zvBeJaL0VisZSILfGzWW7xRDPvc49agbhkFYhYkYhQJABkc4lQBeJHB+9Ia19Y/CMRefLPbuO2B1oiQlOM7e8xDgq7HYHZF4ixRIFw3x4T9etWfTSKxFeacT8W7pmI4xe8xsefnvBNUyKi4qzqlDX5iSm0Ncc75WZ/oq36LnXJlhNecTq65KexMR91iafXL+UnOuLbbTnVLam7ribOC53G94uN2V3WLb45FuHkAjEYGpfxibvS1HeHIgEg+0qEKgg/zE+sfVAf99eav3BfOOKW770zEi8YD7VE6L+QSw7rB4Syvlk9tBaeMIpCrEAkSy4SahwWXolQ+1WJOyw+hzkd9mmzlqFEaFL+Ubscru4RZ/OAXhS81lmMxFkvT1W7VQLazam2i4kysbSgU+r17WorOiaV3KjUf2KO+WNFt9y8NSD11Z3WNl0yNMun0j8yHi8QA3qBiEkuEuoMW3SCIgFQIrKgRKjS0OGPSlnzmHw/LyS/ODZi/IIqafDLv73Zl3KW4psoEWsqBmb10Op3amv/aFqBSC4S6n5+9y7cEmHuV/p+U5hUCjJNZ4Q1CYf0GH/6m2e9jlvFwywR7eLsT+zv9SfUot/OpDKgyaeH9JIb2z+93WZ5mfx9hnxT357BWPSuOHu0lAIxuUh8FQjz3xygRGRPiXj/c/MX4f7akNS6RuW2/gts+Z7O+DTGN1UijF/SszwTESsSd2e4Hwu9RJgHbuPMgTGt4TemOOL3hYfk0+OTrggqaEs50BslosAjyYdq47b85NtSS25skfA7F3zivOSTeitOh8f4WbZU++ewH9+9p/sAUCIeeolQReE7b3jE3pD4JbehqEueeHs4bb3EQy0R1l9271wKsLdgbiVC57toTWs4ulMu8fRdMKchPr00KKGgJkPegfg6h5QSkT/XEuGNT4G8WNAua5LyYmG77L4wyH8nAAunRCRf4rnsQFiW7HDLZfeInHbelu/+qXfKN516/GFdnREcvKerM9R6h0yXwanbWQ+xeEqEsfahMHG2IXbpp6vCLAMpoqnb31uJMM9EVPfe/9MJ3IlmPGs2PBY1pjUAUCKy6s2mnto/Kt/6fZt8+3V32jTGcutdK+//zaYyv0/EzeY+uXndJ+WnEqvfy+dwWZ4WmZCrX2nGfPLkIhG25pnV/WocFkOJEGNaI3alRLwgVJv7V0mjX0IhTYbcPnnnUGrRuJcSEftaleLyRvMsRyg4LD798asv+GS2XXgwFDUWVd4aSF+/8/VoVOq9mtzw3eFdLAFKxCJ82+vwYMr8dOIUcHLa5Z2qHvGF5vbQajFoc+wyuKQiESsQ6nZ1P6vaF2aJUPtVSVt66fQ5OlPfhCqavibixY860ktEgTe9RBRMUSKqkhb+hoek/JP29H260DvrEnFHL7kN3eb+mlwkYgVC3d45xMJKgBLBP8A178YnFQl16je5QHAaGPHjvXWmIBR8AAfk0LBxJkJ9j3B47o8/uUgM3aFAAMiyErFQJReJWCgQeNSoInHVKhKxUCAAUCIecpGgQOBRpSUVCQoEAErEQy4S6hcvBQKPepHw8uZSACgRAACAEgEAACgRAACAEgEAACgRAAAAlAgAAECJAAAAC7JEpP87FIQQQghZaKFEEEIIIYQSQQghhJBHvER8HY4QQgghZIGHEkEIIYQQSgQhhBBCKBGEEEIIoUQQQgghhBJBiSCEEEIIJYIQQgghlAhCCCGEUCIIIYQQQokghBBCCCWCEkEIIYQQSgQhhBBCKBGEEEIIoUQQQgghhBLBC0sIIYRQIigRhBBCCMnOEtExFJG/1o7Lzwqj8nheVJZkiLpPjVFj1Tbz8eR7W3vlaGmnFJzxStcddgayMOJpqZHTjs5F/jpo0lBdJrVdAfYJQhZyiVCl4Il9UVn2XlSezo/K8gxR96kxaqza5n6f+OCXHll6sE2W5rfL6gKXOAPsDOQ+E+qU13NyxHbrmz1w3TixSnJW2MQ3zQG2Mlcfo/+sKXluu9hnLB8BqSx8T063DMzfz+xvkw/3HhNH//yWCNvqFZJT1MJ+SchCLhHq7IIqB8unKRBPvTtm5AfvRYyxapv7feItn7XrJcIlLZyBIPNWItpkXRaUiNbSV/VCUCaD0xxgT76iH2B3lYmjxSkOpx5HjRRYxWKvo2fG5/jsPB6cBztOGt/3w3l93cznuO5EG/slIQu5RKhpiqdnKBBHLo9KS9+48bkaq7a57xJxVi8RBR52ArJoS8S60q6020/n6uXilem2Vc9TewCv3fxPZ1AiCFkEJUKtd8hUINSZh199EjIe8+TVIaNEqNuX3GeJaPuiU36spjIOtsvGD9tl1/l+877+Pvm42GVOc6gUuOTjur7U7e8MyfnPOmV1bIz+GLs+65FezmiQ2ZQIf6ecPLg9MYXwyhRTCHcCUlt6zHgsc9wqeX2vXVqtKTePs1I2vpI0HfHKbqls6Zl7iZjiAGtuaxefPsZRtFsO1+n7dle97M3dJDuLnMa2tfrte2vMn3mwp1525h6TWmed7N2c+Jl2nqhPnU4xnvdueTb2M694Vf4SGxPqkQ9zt0tll2Y8vvl926TVcTIx/rlX5XCFM+U5OUrfk3WrE9Mx6/Sfo6Ffo0QQQokwC8SPDt6R1r6w+Eci8uSf3cZt81Eiuhq9suOIWQJ2nemUsit+vUD45NdWKTj6ea84r/XKUVu7MebXZ3zWtkPysbXdtjNeudzsk7IzHWaZONIlvexQlIjpSoS/RTZaB1BbjVNutDjFtvdV4wC48URLfM3Byc0rzANxUY04WlrE4ag01lrYO8wDZGtFnrxeWCkOZ4s06Afv2DTE6S7t/s5E9DuN75Nz0CwLsZ9D5dlc/cBeqg7i+u2rV8iz1sF5sKMsPub1whppuNUilXoJML4+Z5Ujv9N83noZ+vBcvTGmutpmvA4OVYyCya9b8vddJYfVeP11Onlwk3nb3jrreWlyetcmvVjU6a9RmzjqzNcoZ8VuaQ1RIghZdCVCFYQf5ifWPqiP+2s14/FeOOKW770zEi8YSx7AdMZFu1kgLvpTx10+YxaJi/0R6b3SaXx+9FrqQaL3mnn7u42sBKdEZC4RjqNqweMm88CZdHvDiU3GAdOh73u9V4+Z6wOcMy1c1GQwqMc4YPbIX9Rf4tY6hVmVCHWg1v+637h5k5F18TMbq+JnBE6rMfqBvrZHy3gWI1Yi1BmLlGmRzYlpkfjz9s/mdYt93/TxrdV5Zlnq0FKmVozXQX3eU2e+di0BSgQhi61EqNLQ4Y9KWfOYfD8vJL84NiLRibtS0uCXf3uzL+UsxbyUCLWwMr/L+kU7LB8fapMfl/rSxwZ8xtRFQXNQnGfMbdLPOATlqNr+jI+dihKRoURYf8FPtSAx2GJspxYW3jgRm07IXAAcJ3ZPurJilXHaf6N1wJxNiTAP1NvFVlomthN2sRXZ5XSNU1zB1LKQ/vNOUSL0A35rKNO6jGmed4YSMfX3TYw7fHXAmAKxTb7CxCpCyY9DiSBkEZWI9z8fMLbfXxuSWteo3A6Ny/I9nfFpjAdaIgraZPVnfeljR/qMaQ5VIoxtCrqm+OWs/8I6TImgRMxQIqZczGheGrrRKhGtqkRMt7DRW2NOFZyoF5c/IL7+HqmtODbnEpHxZ5lx3cRUJeJVuRGcpkTM9L2mKBHrTkwxPug0nufOmh5xVZtFyuboFF8gIB5vm5y21ppQIghZpNMZ33nDI/YGf/xxNhR1yRNvD6etl5j/EqFJ2Ydtxtddk9+QyprCKHNr0nbeZU55TL6evb/XWKi57XM/OxUlQmwd2tTvzfCGmkKwiWfyPmZNYVR6NfPgqNYKZDj1P3jrpHF/653090RYN9cSMe0Bdv5KRKbnnbFEGFMtx8SVdilopVUSNOuMTdmkBalTlRFKBCGL5hLPZQfCsmSHWy67R+S087Z890+9U77p1OPzXiLUuoYuc4Hk8S5p6QnK4EhQWr7oTF006Y8tvnTJ+dYhfcywdLX2yDZrQeZlPzvUYi8R6ozCzgq1GLDFfP+FWFp6pLfFWoS4yy6t/QEZDAWMKxCM2zaXmVMYgdjiy+1SfavHmO/3+XukttQm1XrJGOwyD6Q7S53iCej39XdK5UFrcWbpwysRz86qRJjTMr0t1nPMtcuNnoDxnDw9bWIvtJvTINbrlrImwnhNbNLgVeP118lZaV6tskIvF3fU4lLzrIP9aqf49Ps9XU7Za12pYadEELJ432zqqf2j8q3ft8m3X3enTWMst961cl7ebOps+tRE25WupEs3zay2dUnbSNJfQ55e2VGQOmZpQYdc9GjsUJQI8wqBqWIdUF1Xy5Iu3bQuTdxbJq6kNQWDPU75yysr0tY9qBJhronYnnrf5u3GYyZKxKYZ3utBP1AbUwzTl4jT05SI2JUXsTUR6SVC/xk218R/hqmed85z75nP2yoRldbzM98Iyy62vZPWPGw+Jjdii1LvqDURqa/Rxl3bU0rEaUoEIQu/RHxTb3udOaPS2z8kXT1D0hsYzfwue35rjH+YHYnMOT6//tdzf0D/KzrzmEE1198/YIxNXx9g3ufxBx7N5x3QZrVeY9B6npnGq9fIF5ju8QghC7pEfJP/ABchJNvCNAQhlAheWELIPZYIm5qe4B/OIoQSQQghc81gf4+4/ExPEEKJIIQQQgglghJBCCGEEEoEIYQQQigRhBBCCKFEEEIIIYQSwQtLCCGEUCIoEYQQQgihRBBCCCGEEkEIIYQQSgQhhBBCKBGUCEIIIYQSQYkghBBCCCWCEEIIIZQIQgghhFAiCCGEEEKJoEQQQgghlAgAAIAZUSIAAAAlAgAAUCIAAAAlAgAAUCIAAAAoEQAAgBIBAAAoEQAAgBIBAAAoEQAAAJQIAABAiQAAAJQIAABAiQAAAJQIAAAASgQAAKBEAAAASgQAAKBEAAAASgQAAAAlAgAAUCIAAAAlAgAAUCIAAAAlAgAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAABAiQAAAJQIAABAiQAAAJQIAABAiaBEAAAASgQAAKBEAAAASgQAAKBEAAAAUCIAAAAlAgAAUCIAAAAlAgAAUCIAAAAoEQAAgBIBAAAoEQAAgBIBAAAoEQAAAJQIAABAiQAAAFlQIu5anxBCCCGEzDZ3/x+LK7AwiC/i9wAAAABJRU5ErkJggg==" width="529" height="243" class="img_ev3q"></p></li><li><p>The external principal and the local principal share the same access rights.</p></li></ol><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>Reconfiguring a previously set up auth provider</div><div class="admonitionContent_S0QG"><p>If you need to reconfigure or disable then re-enable a provider that had been previously set up, ensure that the user who attempts to do so
is logged in to Rancher as an external user, not the local admin.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="disabling-an-auth-provider">Disabling An Auth Provider<a href="#disabling-an-auth-provider" class="hash-link" aria-label="Direct link to Disabling An Auth Provider" title="Direct link to Disabling An Auth Provider">​</a></h2><p>When you disable an auth provider, Rancher deletes all resources associated with it, such as:</p><ul><li>Secrets.</li><li>Global role bindings.</li><li>Cluster role template bindings.</li><li>Project role template bindings.</li><li>External users associated with the provider, but who never logged in as local users to Rancher.</li></ul><p>As this operation may lead to a loss of many resources, you may want to add a safeguard on the provider. To ensure that this cleanup process doesn&#x27;t run when the auth provider is disabled, add a special annotation to the corresponding auth config.</p><p>For example, to add a safeguard to the Azure AD provider, annotate the <code>azuread</code> authconfig object:</p><p><code>kubectl annotate --overwrite authconfig azuread management.cattle.io/auth-provider-cleanup=&#x27;user-locked&#x27;</code></p><p>Rancher won&#x27;t perform cleanup until you set the annotation to <code>unlocked</code>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="running-resource-cleanup-manually">Running Resource Cleanup Manually<a href="#running-resource-cleanup-manually" class="hash-link" aria-label="Direct link to Running Resource Cleanup Manually" title="Direct link to Running Resource Cleanup Manually">​</a></h3><p>Rancher might retain resources from a previously disabled auth provider configuration in the local cluster, even after you configure another auth provider. For example, if you used Provider A, then disabled it and started using Provider B, when you upgrade to a new version of Rancher, you can manually trigger cleanup on resources configured by Provider A.</p><p>To manually trigger cleanup for a disabled auth provider, add the <code>management.cattle.io/auth-provider-cleanup</code> annotation with the <code>unlocked</code> value to its auth config.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/authentication-config.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2024-01-11T17:49:32.000Z">Jan 11, 2024</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/pages-for-subheaders/authentication-permissions-and-global-configuration"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Authentication, Permissions and Global Settings</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Users and Groups</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#external-vs-local-authentication" class="table-of-contents__link toc-highlight">External vs. Local Authentication</a></li><li><a href="#users-and-groups" class="table-of-contents__link toc-highlight">Users and Groups</a></li><li><a href="#scope-of-rancher-authorization" class="table-of-contents__link toc-highlight">Scope of Rancher Authorization</a></li><li><a href="#external-authentication-configuration-and-principal-users" class="table-of-contents__link toc-highlight">External Authentication Configuration and Principal Users</a></li><li><a href="#disabling-an-auth-provider" class="table-of-contents__link toc-highlight">Disabling An Auth Provider</a><ul><li><a href="#running-resource-cleanup-manually" class="table-of-contents__link toc-highlight">Running Resource Cleanup Manually</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2024 SUSE Rancher. All Rights Reserved.</div></div></div></footer></div>
<script src="/assets/js/runtime~main.e4bf29b6.js"></script>
<script src="/assets/js/main.1393e267.js"></script>
</body>
</html>