An identity provider stores, secures, and authenticates the digital identities of users. You can use multiple identity providers, and associate each identity provider with one or more realms. A realm can only be associated to one identity provider. Examples of identity providers include Microsoft Entra ID (formerly known as Azure Active Directory), Okta, and Ping.
- To add or configure an identity provider, sign in to VantageCloud Lake Console.
- Go to Manage access then Identity providers.
- Select Add identity provider and fill out the information for OpenID Connect or SAML.
VantageCloud Lake supports these identity provider types:
- OpenID Connect
- SAML
OpenID Connect
To use OpenID Connection, copy the following information from your corporate identity provider portal:
- The provider URL to which authentication requests are sent
- The authorization type:
- Your client ID and client secret
- Your private key
- The authorization scheme
- The scopes (groups of claims) your identity provider requires
VantageCloud Lake single sign-on requires the openid scope. Your corporate identity provider might require others.
You need the claims from your corporate identity provider to map to these VantageCloud Lake claims:
- Groups
- Given name
- Display name
- Family name
- User name
Important: Once you enter the provider URL, a redirect URI appears. You must add this redirect URI to your identity provider configuration in the identity provider portal.
SAML 2.0
Get the metadata file from your SAML identity provider portal. Do this by creating an application in your identity provider portal. Use these two values:
- Entity ID - This is your VantageCloud Lake base URL, such as the following:
https://.innovationlabs.teradata.com
- Assertion Consumer Service (ACS) URL - This is your VantageCloud Lake base URL + /auth/sp/ACS.saml2, such as the following:
https://yourcompany.innovationlabs.teradata.com/auth/sp/ACS.saml2
You also need the claims from your identity provider to map to these VantageCloud Lake claims:
- Groups
- Given name
- Display name
- Family name
- User name
For more information, see Knowledge Article KB0056626, available at https://support.teradata.com. You may need to sign on before searching for it.