Yandex Cloud Organization

An identity federation is a technology that helps you implement Single Sign-On (SSO) and use your corporate accounts for logging in to Yandex Cloud Organization.

Your existing federations will remain in Yandex Cloud folders. If an organization connects to the cloud with a previously configured IAM Identity Federation, the federation will move to the organization level. You can use Yandex Cloud Organization to create new federations. If you have used the public IAM identity federation API in your folders, you’ll need to switch to a similar API in Yandex Cloud Organization.
CLI commands will have a different format:
yc iam federation XXX changes to yc organization-manager federation saml XXX
yc iam certificate XXX changes to yc organization-manager federation saml certificate XXX

When logging in, select Log in via SSO.

Yes, you can use the service API.

In the documentation, we provide examples of mapping attributes between different identity providers:

• Active Directory
• Google Workspace
• Azure Active Directory
• Keycloak
• SAML-compatible federations

Create an organization in Yandex Cloud Organization and use the management console to select the organization that you want to link your cloud to. This will create a request to technical support including the cloud and organization IDs that you want to link together. When you create a cloud, you will be asked to select an existing organization or create a new one.

Create an organization in Yandex Cloud Organization and then make a request to technical support specifying the organization and cloud IDs.