Skip to navigationSkip to main contentSkip to footerScaleway DocsAsk our AI
Ask our AI
Log inSign up

How to set up SSO with Authentik

Scaleway supports Identity Federation to provide your teams with secure access to their accounts via SAML Single Sign-On.

Note

SSO with SAML does not apply to an Organization's Owner. Owners can log in with SSO with OAuth2.

Follow the steps below to set up Identity Federation for your Organization through SAML at Scaleway.

Before you start

To complete the actions presented below, you must have:

  • A Scaleway account logged into the console
  • Owner status or IAM permissions allowing you to perform actions in the intended Organization
  • Authentik instance and user allowing you to perform admin actions.

Create a new Identity Provider

On Scaleway console

  1. Go to your security settings.
  2. Scroll to the Configure Identity Federation section.
  3. Click Set up SAML SSO. A pop-up appears.
  4. Click Start
  5. Open another tab to start IdP configuration on Authentik.

On Authentik

  1. Look for Applications in your sidebar and click to open Providers section.
  2. Click Create. A pop-up appears.
  3. Choose SAML provider type.
  4. Click Next.
  5. Fill the configuration form.
    • Name: "Scaleway IDP"
    • ACS URL: Assertion consumer service (ACS) URL (from Scaleway tab)
    • Issuer: Scaleway Entity ID (from Scaleway tab)
    • Service Provider Binding: Select Post
    • Advanced protocol settings
      • Signing Certificate: Select authentik Self-signed Certificate
      • Toggle Sign assertions and Sign responses on
      • NameID Property Mapping: Select authentik default SAML Mapping: Username
  6. Click Finish
  7. Click on your newly created Provider in the list.
  8. Click the Create button below Assigned to application. A pop-up appears.
  9. Fill the configuration form.
    • Name: "Scaleway"
    • Provider: Select Scaleway IDP
  10. Click Create
  11. Click to download the metadata file in the Related objects section
  12. Go back to the Scaleway Console tab.

On Scaleway console

  1. Upload the metadata file using the Download metadata button.
  2. Click Submit. A pop-up appears.
  3. If you are sure that you don't use OAuth2 SSO, click Confirm

Once setup is complete, members can log in via SAML.

Important
  • In order to log in via SAML, members need to be created manually in your Scaleway organization.
  • If you delete a user in the IdP, the corresponding Member is not automatically deleted in your Scaleway Organization. The deletion must happen manually.
See Also
How to how to set up identity federationHow to create an application
Still need help?

Create a support ticket
No Results