Setting up Workspaces

Setting up a new workspace entails completing the following steps:

1. Signup for workspaces
2. Set up OIDC for organization, if relevant
3. Adding users to workspace and adding users to organization

Signup for workspaces

1. Go to SSO signup
2. Sign up with one of the given SSO providers: Google, GitHub, or Microsoft
3. After authentication, you will be able to create your first workspace

Logging in

1. Go to SSO login, where you should see a view like the one shown in the image below
   

   

2. Log in:
   1. To log in with Google, GitHub, or Microsoft, simply click the relevant button.
   2. If you have OIDC set up for the workspace, click the Log in with SSO button instead and enter your email on the following page.

Set up OIDC for the organization

Pre-requisites: Create an OIDC application and client with your Identity Provider (IdP).

Go to the organization authentication page

1. Click the dropdown in the top left corner, just below the UpCloud logo.
2. Clicking the dropdown opens a view of your organizations and workspaces. Please hover over the organization you want to set up OIDC for, and click the Settings button.
   

   

3. Navigate to the Authentication page from the top menu.
   

   

Set up the OIDC

1. On the organization authentication page, first press the Set up OIDC button.
2. Fill issuer URL, client ID, and client secret according to the details from your OIDC app/client in your IdP
3. Type in allowed email domains (e.g., “mycompany.com”)
4. Press Create OIDC provider. Afterward, you should see a page similar to the following image, but with your own client ID and callback URL:
   

   

5. Copy the callback URL and set it up on your Identity Provider OIDC app/client.
6. Contact UpCloud to verify your domain. After your domain has been verified, you can start using it for authentication (read more in Logging in).

Please note that existing users must add the new OIDC provider to their user profiles to use it for login.

Log in using additional SSO providers

You can add SSO providers to your user profile to enable login via multiple methods.

1. Log in using one of your existing SSO providers
2. Click the profile icon in the upper right corner and select My profile from the dropdown, or go directly to the profile overview
3. You should see a listing similar to the one shown in the image below. If your organization has set up a custom OIDC (how to set up OIDC), it will appear in the list in place of “UpCloud”.

   

4. To set up additional authentication methods for your user, simply click the Set up button next to the desired authentication method. After authenticating, you should be able to log in using the new method.
5. Optionally, remove any unwanted authentication methods by clicking the trash can icon next to the method.