1210 - How to set up an Identity Management System (IMS) for accessing the Redstor Storage Platform

The Redstor Storage Platform allows your organisation to replace internal single-factor authentication (i.e. username and password) with an Identity Management System (IMS) where users authenticate through single sign-on (SSO). This system can also be set to require multifactor authentication. An IMS is implemented at organisational level, and associated with the customer’s collection structure on the Redstor Storage Platform.

Users from a customer organisation that makes use of an IMS are called tenant users. 

Implementation

To implement SSO, some configuration steps are required by both the customer and by Redstor (on the Platform back-end).

As part of SSO configuration, the customer's existing (“classic") users are converted to SSO-based tenant users. Each of these tenant users must have an email address associated with their Redstor Platform Access User account, as this email will be used by the IMS to identify them.

If you would like to implement SSO, please open a ticket with Redstor Support so that we can assist you in the steps below. Note that this setup can only be performed by tenant owners.

How to set up an identity provider

Redstor currently offers SSO through Microsoft Azure Active Directory, Google, and Keycloak. To set up one of these identity providers for user authentication, follow the steps below.

1. Click on your preferred identity provider from the list below. You will be taken to a guide that will help you with the setup process. 

• Microsoft Azure Active Directory
• Google Cloud Identity
• Keycloak

2. Once you have set up your identity provider, open your SP Console and go to the User Access Management view. Select all the users that will be making use of SSO and click Switch to Tenant.

Note:

• If a user subsequently has trouble logging in, click here for help.
• Users with a UPN which does not match their email address may have difficulties with email delivery restores.