How to work with Yandex Identity Hub
Written by
Updated at July 8, 2026
- Notification settings
- Managing organizations
- Managing users
- Managing user groups
- Managing identity federations
- Managing user pools
- Managing domains
- Managing SAML applications
- Managing OIDC applications
- Managing MFA policies
- Authorization and authentication
- Managing authentication policies
- Working with OS Login
- Access management
- Syncing users and groups with external sources
- Yandex Identity Hub billing management
Notification settings
Managing organizations
- Creating an organization
- Getting organization ID
- Editing organization data
- Managing multiple organizations
- Organization access policy management
- Blocking users from viewing information about organization members
- Deleting an organization
- Creating a controlled organization
- Configuring branding
Managing users
- Adding a user
- Getting user info
- Updating user data
- Updating a local user password
- Assigning a role to a user
- Viewing user groups
- Deactivating a user
- Activating a user
- Viewing user logs
- Managing user sessions
- Deleting a user account
- Leaving an organization
Managing user groups
- Creating a group
- Getting group ID
- Adding members
- Editing a group
- Configuring group management access
- Assigning a role for an entire organization
- Viewing user groups
- Deleting members
- Deleting a group
Managing identity federations
- Configuring an identity federation
- Configuring a federated user group mapping
- Updating a Yandex Cloud SAML certificate in an identity federation
- Setting up a domain in an identity federation
- Deleting an identity federation
Managing user pools
- Creating a user pool
- Editing a user pool
- Managing domains in a user pool
- Setting up access for pool users
- Setting up a password policy
- Getting a list of user pools
- Getting information about a user pool
- Deleting a user pool
- Getting a list of users in a pool
Managing domains
- Associating a domain
- Verifying a domain
- Getting a list of domains
- Viewing information about a domain
- Deleting a domain
Managing SAML applications
- Creating a SAML application in Yandex Identity Hub
- Updating a SAML app in Yandex Identity Hub
- Setting up access to an SAML app in Yandex Identity Hub
- Getting information about a SAML app in Yandex Identity Hub
- Deactivating and deleting a SAML application in Yandex Identity Hub
Managing OIDC applications
- Creating an OIDC application in Yandex Identity Hub
- Updating an OIDC application in Yandex Identity Hub
- Setting up access to an OIDC app in Yandex Identity Hub
- Getting a list of OIDC apps in Yandex Identity Hub
- Getting information about an OIDC app in Yandex Identity Hub
- Deactivating and deleting an OIDC application in Yandex Identity Hub
Managing MFA policies
- Creating an MFA policy
- Applying an MFA policy to users
- Managing exceptions to MFA policies
- Updating an MFA policy
- Activating or deactivating an MFA policy
- Deleting an MFA policy
- Removing an MFA factor and resetting the verification date
Authorization and authentication
- Adding an SSH key
- Deleting an SSH key
- Enabling the use of refresh tokens in the Yandex Cloud CLI
- Enabling the two-factor authentication requirement
Managing authentication policies
- Creating an authentication policy
- Activating/deactivating an authentication policy
- Editing an authentication policy
- Deleting an authentication policy
Working with OS Login
Access management
- Assigning a user as an organization administrator
- Assigning a role to a user
- Assigning a role to a user group
- Viewing roles assigned in an organization
- Revoking a user's role
- Viewing a list of a subject's accesses