Identity federations
Written by
Updated at July 9, 2025
Using Yandex Identity Hub, you can configure Single Sign-On authentication in Yandex Cloud through your Identity Provider, such as Active Directory or Google Workspace.
This authentication approach is called an identity federation: company employees use their corporate or local accounts from a user pool and get authenticated only in the corporate authentication system. To access resources in Yandex Cloud, they don't need Yandex ID accounts.
For operations within an identity federation, the Identity Provider must support the SAML 2.0 standard.
What's next
- Learn how to add a user from an identity federation.
- Learn about setting up an identity federation in the Yandex Identity Hub documentation.