Yandex Identity Hub

Yandex Identity Hub is a cloud service for managing user accounts and access to corporate apps in a centralized way over SAML and OpenID Connect (identity provider) protocols.

The Yandex Cloud infrastructure is protected pursuant to the Russian Federal Law No. 152-FZ on Personal Data.

This service is subject to a service level agreement. The service level is set out in the document titled Yandex Identity Hub Service Level.

Getting started

Create your first organization

Step-by-step guides

Follow our guides for routine operations

Organization

Study the key terms and concepts.

API reference

Use HTTP API methods to manage an organization

Release notes

Releases and updates

Synchronization with Active Directory

Syncing users and groups with Microsoft Active Directory

Managing organization users

Getting started

Invite a new user and assign a role

User pools

Centralized user and access permission management

Identity federation

Allow your employees to access services via their work accounts

Single sign-on (SSO)

SAML apps

Configure SAML single sign-on

OIDC apps

Configure OpenID Connect (OIDC) single sign-on

SSO setup tutorials

Configure single sign-on for applications

Sessions

User’s Yandex Identity Hub session data

Authentication

MFA

Set up multi-factor authentication in Yandex Identity Hub

Authentication policies

Set up user access to Yandex Identity Hub applications:

OS Login

Managing access to virtual machines