Domains

In Yandex Identity Hub, you can associate your domains with user pools or identity federations. The domain identifies the user container, e.g., a pool or federation, and the users within it. Such users have names in <username>@<domain> format.

You can only associate each domain with one user pool or federation.

To use a domain in a user pool or federation, domain ownership must be verified via a DNS record.

Login DiscoveryLogin Discovery

Login Discovery finds the required container and the user in it. The available options for authentication by username and domain (<username>@<domain>) are as follows:

• If the domain and username are both associated with the pool, the user will get authenticated as a local user.
• If the username and domain match a federated account, the user will get authenticated as a federated user.
• If the username and domain match a Yandex account, the user will be redirected to Yandex ID.
• Where one domain is used both for a Yandex account and for a federated or local account, the system will prompt the user to select the preferred authentication option.

The domain a user specifies must match the domain registered in the user pool, federation, or Yandex ID at all levels.

See alsoSee also

• Managing domains in a user pool
• Setting up a domain in an identity federation