Create SSO users

Create SSO users when SSO login is enabled and automatic SSO user join is not enabled. The SSO username must match the corresponding user in your identity provider (IdP).

User types

NineData provides two types of users: General and SSO.

• General: Users registered with a phone number or email address can sign in with regular credentials or SSO. This account type supports all modes (Personal modeAfter registering a NineData account, users are usually in personal mode by default. This mode is suitable for individual developers who back up, restore, synchronize, and compare their own databases or use SQL Console for daily development., Organization modeOrganization mode lets administrators assign roles and resource permissions to users in an organization. It supports team collaboration while helping maintain data security.,SSO organization modeSSO organization mode is the same as organization mode except for the sign-in method.). Users are responsible for their own account security.
• SSO: Users created by system administrators in SSO organizations can sign in only through SSO. After sign-in, they enter the corresponding SSO organization directly and cannot enter personal mode or non-SSO organization mode. SSO user account information is managed by the IdP.

caution

If the administrator later disables SSO login, SSO users in the organization can no longer sign in to the organization, while General users are not affected.

User type comparison

Operation	General	SSO
Regular login method	✔️	❌
SSO login method	❌	✔️
Personal mode	✔️	❌
Organization mode	✔️	❌
SSO organization mode	❌	✔️
Switch organization	✔️	❌
Modify username and password	✔️	❌
One-click login	❌	✔️

Before you begin

• You have already created or joined an organization, and the organization has subscribed to DevOps Enterprise. Please ensure that your annual or monthly subscription is still active. For more information, please refer to Manage Organizations.
• Your current account has been switched to the target organization. For more information, please refer to Switching to an Organization.

• SSO login has been enabled for the current organization. For details, see Enable SSO login.
• Your role is Administrator. For details, see Roles.
• The matching user account already exists in the IdP application. Otherwise, the user cannot sign in. This account usually matches the SSO username you create in NineData.
• Allow SSO Account Auto-join is not enabled in the SSO organization. If this option is enabled, NineData adds the user during SSO sign-in and no manual user creation is required.

Procedure

1. Sign in to the NineData Console.

2. Open Account > User.

   tip

   If Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.

3. Click Add SSO User. In the Add SSO User dialog, enter Username and select the corresponding Role.

   tip

   The role is optional.

4. Click OK to complete the creation of the SSO user.

5. Open Account > organization management, and share the Org Login URL and Organization domain with the corresponding user.

Result

The SSO user is created in the current organization. The user can sign in through the configured identity provider by using the SSO organization URL or domain.